last executing test programs: 21m39.453355178s ago: executing program 1 (id=6458): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES64, @ANYRES64=0x0], 0x0, 0x23e, &(0x7f0000000bc0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 21m39.278921533s ago: executing program 1 (id=6460): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000080), 0x1, 0x513, &(0x7f00000010c0)="$eJzs3d9rY1kdAPDvvW1mOzNdk1WRdcF1cVc6i07Sbt3dIqLriz4tqOt7rW1aSpOmNOk6LYt28T8QQcEnn3wR/AOEZR78A2RgQF/EB1FRRGf0QVDnSpIbp5Mmbd1pm07z+cBpzrn35n7PuSEn98fpvQGMrRci4o2ImIiIlyOimE9P87TYLux3l7t/753ldkoiy976axJJPq23rnZ5MiKud98SUxHxtS9HfDM5HLe5u7exVKtVt/NypVXfqjR3926u15fWqmvVzfn5udcWXl94dWE2yz1WO0u9zE++9Pn3Pv2t3y3++ca329X63EeiEH3tOE3dphc626KnvY22zyLYCEzk7SmMuiIAAJxIex//gxHxic7+fzEmOntzfSZGUTMAAADgtGRfmI5/JxEZAAAAcGmlETEdSVrOxwJMR5peyc8NfDiupbVGs/Wp1cbO5kp7XkQpCunqeq06m48VLkUhaZfn8jG2vfIrfeX5iHgmIr5fvNopl5cbtZURn/sAAACAcXG97/j/H8W0kz/egP8TAAAAAC6u0tACAAAAcFk45AcAAIDLr//4/70R1QMAAAA4E1958812ynrPv155e3dno/H2zZVqc6Nc31kuLze2t8prjcZa55599ePWV2s0tj4Tmzu3Kq1qs1Vp7u4t1hs7m63F9UcegQ0AAACco2c+fvvXSUTsf/ZqJ0V+H0CAR/xh1BUATtPEqCsAjIy7eMP4Koy6AsDIJcfMN3gHAACefDMfPXz9v/f8f+cG4HIz1gcAxo/r/zC+CkYAwlhLI+ID3exTw5YZev3/lyeNkmURd4oHpzi/CAAA52u6k5K0nB8HTEealssRT0ekpSgkq+u16mx+fPCrYuGpdnmu887k2DHDAAAAAAAAAAAAAAAAAAAAAAAAAEBXliWRAQAAAJdaRPqnpHM3/4iZ4kvT/ecHriT/LMYf88KP3vrBraVWa3uuPf1vnWd5XYmI1g/z6a8MfXwYAAAAcNqS/aGzusfp+evcudYKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDFw/947y710nnH/8sWIKA2KPxlTndepKETEtb8nMXngfUlETJxC/P13I+LZQfGTeJBlWSmvxaD4V884fqmzaQbHTyPi+inEh3F2u93/vDHo+5fGC53Xwd+/yTw9ruH9X5pHfrbTzw3qf54+tLb6wBjP3f1ZZWj8dyOemxzc//T632RI/BcPre1fWZYdjvGNr+/tDYuf/ThiZuDvT/JIrEqrvlVp7u7dXK8vrVXXqpvz83OvLby+8OrCbGV1vVbN/w6M8b2P/fzBUe2/NiD+b3/T7X+Pav9Lw1ba5z93b937UDdbGBT/xosDf3+nYkj8NP/t+2Seb8+f6eX3u/mDnv/pneePav/KkO1/3Od/44Ttf/mr3/39CRcFAM5Bc3dvY6lWq24fkZk6wTJPYuYXUxeiGv9nJvtO95O7KPV5v5n23urDKb1WXYCKHchk5xZrIi5Ik/+XGWm3BAAAnIGHO/2jrgkAAAAAAAAAAAAAAAAAAACMr/O4nVh/zP3RNBUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Ej/DQAA///M/t/r") 21m38.989677437s ago: executing program 1 (id=6465): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000107d1ece3100000000000109022400010000000009040000020300000009210000000122"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00220b0000002b0f2bb50a28"], 0x0}, 0x0) 21m35.080717236s ago: executing program 1 (id=6486): mount$fuse(0x0, 0x0, 0x0, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="2840d2ee36f040a6c4b1"]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000200000000009a1f3cd91dfa631dbadeeb3981c21b6d6536425ce4cee7ae6ce9e201c874f87741e2b9e8bf08e2c52340981b96849feb0d8ed84f7a9d8cd79366b14b02aae76f9e1f39b7953c7acf1196db27cbaa0a2e57515864068c3b7f8a54c70e0ff00bab0816550c32ebbbe327af58690bf7ec7b30964d7cbdc1a391dca35bf55b90fc799df8c98db613482013fba748f4f9a92021944958584ca5a8906fe239288"], &(0x7f0000000340)='syzkaller\x00', 0x1, 0xc5, &(0x7f0000000180)=""/197, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={0x0, r5}, 0x10) 21m34.220442378s ago: executing program 1 (id=6490): socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$vcsu(&(0x7f0000000080), 0x2, 0x103) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) 21m33.320803534s ago: executing program 1 (id=6495): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) 18.784292842s ago: executing program 0 (id=10367): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x319c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="05010000000000107d1e222e0000000000010902240001"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x5, 0x400, 0x0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r3, &(0x7f0000000080)=@file={0x1}, 0x6e) ptrace(0x10, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x3f}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x0, 0x0, 0x7, {0x7, 0x0, "5a7da32917"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x1, 0x3, 'aBT'}, 0x0}) 15.683592839s ago: executing program 3 (id=10374): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r0 = socket$inet(0x2, 0x801, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000001000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xffffff01) shutdown(r0, 0x1) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r4, 0x0, 0x7ffff000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)=[0x0], &(0x7f0000000080), 0x0, 0x6b, &(0x7f0000000180), 0x0, 0x0, 0x0, &(0x7f0000000200), 0x8, 0xe9, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) 14.656899724s ago: executing program 3 (id=10376): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x319c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="05010000000000107d1e222e0000000000010902240001"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x5, 0x400, 0x0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r3, &(0x7f0000000080)=@file={0x1}, 0x6e) ptrace(0x10, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x3f}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x0, 0x0, 0x7, {0x7, 0x0, "5a7da32917"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x1, 0x3, 'aBT'}, 0x0}) 8.712785428s ago: executing program 2 (id=10389): mkdir(&(0x7f0000000080)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40000000000011a, 0x44000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r7}, 0x10) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES64], 0x0) syz_usb_control_io(r8, &(0x7f0000000b00)={0x2c, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) 8.104943897s ago: executing program 0 (id=10388): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001d000b41000000000000000000000001", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\n'], 0x28}}, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x21, 0x4b9, &(0x7f0000000540)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sysinfo(&(0x7f00000003c0)=""/67) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000001180)=[{0x0}, {0x0}, {&(0x7f0000000dc0)=""/69, 0x45}], 0x3}}], 0x1, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmmsg(r1, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) writev(r1, &(0x7f00000000c0), 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x145842, 0x0) fallocate(r2, 0x10, 0x3, 0xceec) 7.965102589s ago: executing program 0 (id=10390): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00'/24], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bind$packet(0xffffffffffffffff, &(0x7f0000000700)={0x11, 0x19, 0x0, 0x1, 0x51, 0x6, @multicast}, 0x14) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1, 0x17d, &(0x7f00000004c0)="$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") ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 7.156707847s ago: executing program 0 (id=10391): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r0 = socket$inet(0x2, 0x801, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000001000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xffffff01) shutdown(r0, 0x1) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r6, 0x0, 0x7ffff000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)=[0x0], &(0x7f0000000080), 0x0, 0x6b, &(0x7f0000000180), 0x0, 0x0, 0x0, &(0x7f0000000200), 0x8, 0xe9, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) 6.843305512s ago: executing program 4 (id=10392): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r0 = socket$inet(0x2, 0x801, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000001000000000000000000018110000", @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xffffff01) shutdown(r0, 0x1) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r5, 0x0, 0x7ffff000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)=[0x0], &(0x7f0000000080), 0x0, 0x6b, &(0x7f0000000180), 0x0, 0x0, 0x0, &(0x7f0000000200), 0x8, 0xe9, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) 6.300873297s ago: executing program 0 (id=10393): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61103400000000006113380000000000bfa00000000000000700000008ffffffd50301001874004095000600000000006916000000000000bf67000000000000360607000fff07201706000020190000160300000ee60060bf050000000000007b650000000000006507f9ff01000000070700004ddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d786046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c747664e9f7478f8200000000000000ff44b0a4577fa8e6084e9c47687f2330203a0a3edca9d4ffc012df1006a70ed9b841cfdedac17240dfe4171bcf94e05bc14f0063ce9e3f18e133ff27db7fc3fa53cc587cc58ece5f86f7a6520eeea8b3e885090acabaebf8bc1dea67de28f23b1756977a30534fc2f6abbe72b68bcd88bbf0749c72fcf19229ac72c24260838d89babf1ecf13e5908d286f71ae0c66b8c2413ae3a7a225132acfa8c3e0a9ab5f094a50786bf4fef8f096446fdeea118294957b97d958ecb028be46dd1434eb1a439218b39f"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x0, 0x10e, 0x0, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_usb_control_io(r5, 0x0, &(0x7f0000000b00)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) readv(0xffffffffffffffff, 0x0, 0x0) 5.979247774s ago: executing program 4 (id=10394): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bind$packet(0xffffffffffffffff, &(0x7f0000000700)={0x11, 0x19, 0x0, 0x1, 0x51, 0x6, @multicast}, 0x14) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r5, 0x5501) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$vsock_stream(0x28, 0x1, 0x0) 5.678626019s ago: executing program 2 (id=10395): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, 0x0, &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 5.124474395s ago: executing program 4 (id=10396): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bind$packet(0xffffffffffffffff, &(0x7f0000000700)={0x11, 0x19, 0x0, 0x1, 0x51, 0x6, @multicast}, 0x14) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="00ea2eb34e7ea51c9446c55a2d1e0be39af9faf44ad59cb6ad1c94490d970e811439edddc71c9b18946b559ce53bee0a1abe562fc3f3898e5826eda1962cf6e3c4c0ade52151923a70b46eacfc1aaaebcf156e549e884bcabc1333f344f31cd30cd93cb2814e0dbc24a7a107e295e86e09283c825fe177c89c6385f68f2c843cffffffff15539bab6142ceed9265ba989d1a283fc4ffc83f3a7a6c746823e656ad78f3b5a336cdbd83dad59e0debb36b4ea5e658e253f01637cc03f704a08019f95b92fffffffff8dd21552d6967ab1b01e5d52a5793eb179deee4572770a5197127b090287bca2a4eaa1705b42c16968d0201d3ba3cc8000000657ea095f152b1b6a1e6ad8d24ad17f649ccc23d4ecbcdb5620cc48f95f563c2230f859d196e6c4f00b8e3a7b01fcb1d79dcc09b7a854ec8c31dd27ff9b4a2864e1dcaf719d20b56769d51228ecc1915fb8c8b598c11b3c296b05f9c5355fc6f19a7b28f5ae9a0d0804ccc5716cfac0246ddffa2f12077a02a959aa1b74373c38b2bcc90743b80666eae25dea73e127263b8fdbc64fe862b994ca8473d0000000000000000"], 0x1, 0x17d, &(0x7f00000004c0)="$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") 4.82139472s ago: executing program 2 (id=10397): mkdir(&(0x7f0000000080)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40000000000011a, 0x44000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff01"], 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) 4.258358777s ago: executing program 4 (id=10399): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) unshare(0x62040200) 4.147329166s ago: executing program 3 (id=10398): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, 0x0, &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = creat(0x0, 0xecf86c37d53049cc) write$binfmt_script(r4, &(0x7f0000000080)={'#! ', './file0'}, 0xb) close(r4) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x62040200) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000280)={[{@nodiscard}, {@age_extent_cache}, {@alloc_mode_def}, {@six_active_logs}, {@flush_merge}, {@fault_injection={'fault_injection', 0x3d, 0x4ee}}, {@acl}, {@alloc_mode_def}, {@compress_cache}, {@fault_injection={'fault_injection', 0x3d, 0x80000000}}, {@noextent_cache}, {@compress_cache}, {@fault_type={'fault_type', 0x3d, 0x4}}]}, 0x1, 0x5505, &(0x7f0000002480)="$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") 3.951463622s ago: executing program 2 (id=10400): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r0 = socket$inet(0x2, 0x801, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xffffff01) shutdown(r0, 0x1) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r5, 0x0, 0x7ffff000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)=[0x0], &(0x7f0000000080), 0x0, 0x6b, &(0x7f0000000180), 0x0, 0x0, 0x0, &(0x7f0000000200), 0x8, 0xe9, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) 3.232948822s ago: executing program 0 (id=10401): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x319c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="05010000000000107d1e222e0000000000010902240001"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x5, 0x400, 0x0, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r2, &(0x7f0000000080)=@file={0x1}, 0x6e) ptrace(0x10, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x3f}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x0, 0x0, 0x7, {0x7, 0x0, "5a7da32917"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x1, 0x3, 'aBT'}, 0x0}) 3.191723135s ago: executing program 4 (id=10402): mkdir(&(0x7f0000000080)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40000000000011a, 0x44000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, 0x0, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r7}, 0x10) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES64], 0x0) syz_usb_control_io(r8, &(0x7f0000000b00)={0x2c, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) 3.087787754s ago: executing program 2 (id=10403): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000c8, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4ba6bb84, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB='\t\x00'/12, @ANYRES32, @ANYRESDEC=r1, @ANYRES64=r0, @ANYRES8=r1], 0x20) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1c00000000000000ff0700000500000000000000", @ANYRES32, @ANYBLOB="0000f3ffffffffffffff000000000000000000000d2bd4534629b0a86b491220661a40271235b14e13588d8e57d53941a3ef90baa7737387022fa0d2018ebc9d8edccc9005656396e7021aba6e81b5ed960d775c8b07e7c0f9967e5c65ee11d7472a7e47888d99fa2f95bb4eb152bf2b1292dd425b683e71cfa6b13a2fcff358e710d183df095980809796fcaf87d985415e618dfd7d9441fe5cd22a00894da795b2daf01e6c", @ANYRESDEC=r0, @ANYRES32, @ANYRESHEX=0x0], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) syz_usb_connect$hid(0x0, 0x6c, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) syz_clone(0x200400, 0x0, 0xfffffffffffffd32, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) writev(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="1801000000050000000000000000ea0485000000d000000095"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000080)='./file0\x00', 0x800090, &(0x7f00000000c0)=ANY=[@ANYBLOB='shortname=winnt,uni_xlate=1,shortname=win95,nonumtail=0,iocharset=euc-jp,utf8=0,uni_xlate=1,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c646f733178666c6f7070792c756e695f786c6174653d312c73686f72746e616d653d77696e39352c696f636861727365743d63703835352c636f6465706167653d3835352c757466383d302c757466383d312c666d61736b3d30303030303030303030303030303030303030303030332c756e695f786c6174653d302c756e695f786c6174653d302c696f636861727365743d69736f383835392d362c73686f72746e616d653d6c6f7765722c6e6e6f6e756d7461696c3d312c75746638fe74ca87b4e913f5a51d60b52f3d312c726f6469722c757466383d302c6e6e6f6e756d7461696c3d312c6e6e6f6e756d7461696c3d312c73686f72746e616d653d6d697865642c757466383d312c61707072616973652c7063723d303030303030303030"], 0x6, 0x2d3, &(0x7f0000000a40)="$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") 2.273459151s ago: executing program 3 (id=10404): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(0xffffffffffffffff) dup(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r5, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) read$FUSE(r6, 0x0, 0x0) 1.358079987s ago: executing program 3 (id=10405): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x1, 0x5004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r3}, &(0x7f0000000400), &(0x7f00000004c0)=r4}, 0x20) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x19f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000080)="08a8699cca08eec82cbab38baee7", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 494.568759ms ago: executing program 3 (id=10406): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000c8, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4ba6bb84, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB='\t\x00'/12, @ANYRES32, @ANYRESDEC=r1, @ANYRES64=r0, @ANYRES8=r1], 0x20) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1c00000000000000ff0700000500000000000000", @ANYRES32, @ANYBLOB="0000f3ffffffffffffff000000000000000000000d2bd4534629b0a86b491220661a40271235b14e13588d8e57d53941a3ef90baa7737387022fa0d2018ebc9d8edccc9005656396e7021aba6e81b5ed960d775c8b07e7c0f9967e5c65ee11d7472a7e47888d99fa2f95bb4eb152bf2b1292dd425b683e71cfa6b13a2fcff358e710d183df095980809796fcaf87d985415e61", @ANYRESDEC=r0, @ANYRES32, @ANYRESHEX=0x0], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) syz_usb_connect$hid(0x0, 0x6c, 0x0, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) syz_clone(0x200400, 0x0, 0xfffffffffffffd32, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) writev(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="1801000000050000000000000000ea0485000000d000000095"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000080)='./file0\x00', 0x800090, &(0x7f00000000c0)=ANY=[@ANYBLOB='shortname=winnt,uni_xlate=1,shortname=win95,nonumtail=0,iocharset=euc-jp,utf8=0,uni_xlate=1,uid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x6, 0x2d3, &(0x7f0000000a40)="$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") 91.508573ms ago: executing program 4 (id=10407): mkdir(&(0x7f0000000080)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40000000000011a, 0x44000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e08003950"], 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r7}, 0x10) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES64], 0x0) syz_usb_control_io(r8, &(0x7f0000000b00)={0x2c, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 2 (id=10408): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bind$packet(0xffffffffffffffff, &(0x7f0000000700)={0x11, 0x19, 0x0, 0x1, 0x51, 0x6, @multicast}, 0x14) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1, 0x17d, &(0x7f00000004c0)="$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") kernel console output (not intermixed with test programs): ONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2886.109388][T31964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2886.118432][ T8539] device veth1_macvtap entered promiscuous mode [ 2886.131270][T31964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2886.139865][T31964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2886.155343][T13052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2886.166350][T31964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2886.352668][ T8549] input: syz0 as /devices/virtual/input/input264 [ 2886.474049][ T7082] isku 0003:1E7D:319C.010B: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.3-1/input0 [ 2886.516250][ T7082] isku 0003:1E7D:319C.010B: couldn't init struct isku_device [ 2886.523475][ T7082] isku 0003:1E7D:319C.010B: couldn't install keyboard [ 2886.530627][ T7082] isku: probe of 0003:1E7D:319C.010B failed with error -71 [ 2886.539173][ T7082] usb 4-1: USB disconnect, device number 16 [ 2888.166062][ T60] usbhid 3-1:0.0: can't add hid device: -71 [ 2888.177498][ T60] usbhid: probe of 3-1:0.0 failed with error -71 [ 2888.217628][ T60] usb 3-1: USB disconnect, device number 11 [ 2888.636009][ T60] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 2888.971767][ T8569] netlink: 'syz.4.10166': attribute type 4 has an invalid length. [ 2889.066054][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2889.077920][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2889.088008][ T60] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 2889.096982][ T60] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2889.105341][ T60] usb 3-1: config 0 descriptor?? [ 2889.235676][ T8571] bridge0: port 1(bridge_slave_0) entered blocking state [ 2889.242605][ T8571] bridge0: port 1(bridge_slave_0) entered disabled state [ 2889.250133][ T8571] device bridge_slave_0 entered promiscuous mode [ 2889.256998][ T8571] bridge0: port 2(bridge_slave_1) entered blocking state [ 2889.264194][ T8571] bridge0: port 2(bridge_slave_1) entered disabled state [ 2889.271706][ T8571] device bridge_slave_1 entered promiscuous mode [ 2889.312142][ T8571] bridge0: port 2(bridge_slave_1) entered blocking state [ 2889.319169][ T8571] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2889.326278][ T8571] bridge0: port 1(bridge_slave_0) entered blocking state [ 2889.333048][ T8571] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2889.350716][ T8562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2889.359047][ T8562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2889.361157][T32018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2889.374244][T32018] bridge0: port 1(bridge_slave_0) entered disabled state [ 2889.381997][T32018] bridge0: port 2(bridge_slave_1) entered disabled state [ 2889.391302][ T7082] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2889.399342][ T7082] bridge0: port 1(bridge_slave_0) entered blocking state [ 2889.406181][ T7082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2889.414845][T32018] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2889.422892][T32018] bridge0: port 2(bridge_slave_1) entered blocking state [ 2889.429737][T32018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2889.441890][T32018] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2889.456293][ T7082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2889.464715][ T7082] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2889.474167][ T8571] device veth0_vlan entered promiscuous mode [ 2889.480334][ T7082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2889.489074][ T7082] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2889.496342][ T7082] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2889.508859][ T8571] device veth1_macvtap entered promiscuous mode [ 2889.516532][T13052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2889.526603][T32018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2889.535684][T13052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2890.199319][ T8580] netlink: 'syz.0.10167': attribute type 4 has an invalid length. [ 2892.266570][ T7888] device bridge_slave_1 left promiscuous mode [ 2892.272641][ T7888] bridge0: port 2(bridge_slave_1) entered disabled state [ 2892.280475][ T7888] device bridge_slave_0 left promiscuous mode [ 2892.286504][ T7888] bridge0: port 1(bridge_slave_0) entered disabled state [ 2892.294479][ T7888] device veth1_macvtap left promiscuous mode [ 2892.300721][ T7888] device veth0_vlan left promiscuous mode [ 2892.355959][ T4714] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 2892.595892][ T4714] usb 5-1: Using ep0 maxpacket: 16 [ 2892.876080][ T4714] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2892.884987][ T4714] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2892.892795][ T4714] usb 5-1: Product: syz [ 2892.896759][ T4714] usb 5-1: Manufacturer: syz [ 2892.901160][ T4714] usb 5-1: SerialNumber: syz [ 2892.906528][ T4714] r8152-cfgselector 5-1: config 0 descriptor?? [ 2893.166655][ T4714] r8152-cfgselector 5-1: Unknown version 0x0000 [ 2893.282448][ T8608] loop0: detected capacity change from 0 to 16 [ 2893.291688][ T8608] erofs: (device loop0): mounted with root inode @ nid 36. [ 2893.845919][ T60] usbhid 3-1:0.0: can't add hid device: -71 [ 2893.851818][ T60] usbhid: probe of 3-1:0.0 failed with error -71 [ 2893.858661][ T60] usb 3-1: USB disconnect, device number 12 [ 2894.265890][T32018] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 2894.388870][ T4714] r8152-cfgselector 5-1: Unknown version 0x0000 [ 2894.395252][ T4714] r8152-cfgselector 5-1: bad CDC descriptors [ 2894.415945][ T4714] r8152-cfgselector 5-1: Unknown version 0x0000 [ 2894.422528][ T4714] r8152-cfgselector 5-1: USB disconnect, device number 124 [ 2894.895939][T32018] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2894.906620][T32018] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2894.916186][T32018] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 2894.925004][T32018] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2894.933585][T32018] usb 1-1: config 0 descriptor?? [ 2895.177448][ T8611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2895.196602][ T8611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2895.247757][ T8620] bridge0: port 1(bridge_slave_0) entered blocking state [ 2895.254629][ T8620] bridge0: port 1(bridge_slave_0) entered disabled state [ 2895.262127][ T8620] device bridge_slave_0 entered promiscuous mode [ 2895.270139][ T8620] bridge0: port 2(bridge_slave_1) entered blocking state [ 2895.277324][ T8620] bridge0: port 2(bridge_slave_1) entered disabled state [ 2895.284407][ T8620] device bridge_slave_1 entered promiscuous mode [ 2895.325726][ T8620] bridge0: port 2(bridge_slave_1) entered blocking state [ 2895.332589][ T8620] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2895.339727][ T8620] bridge0: port 1(bridge_slave_0) entered blocking state [ 2895.346573][ T8620] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2895.364813][ T4714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2895.372252][ T4714] bridge0: port 1(bridge_slave_0) entered disabled state [ 2895.380194][ T4714] bridge0: port 2(bridge_slave_1) entered disabled state [ 2895.390166][ T9460] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2895.398129][ T9460] bridge0: port 1(bridge_slave_0) entered blocking state [ 2895.404952][ T9460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2895.413819][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2895.421833][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 2895.428685][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2895.446723][T31964] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2895.454427][T31964] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2895.464270][ T9460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2895.474522][ T8620] device veth0_vlan entered promiscuous mode [ 2895.482496][T31964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2895.490224][T31964] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2895.497641][T31964] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2895.509479][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2895.519683][ T8620] device veth1_macvtap entered promiscuous mode [ 2895.530940][ T9460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2895.539073][ T9460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2895.595973][T32018] usbhid 1-1:0.0: can't add hid device: -71 [ 2895.601824][T32018] usbhid: probe of 1-1:0.0 failed with error -71 [ 2895.614026][T32018] usb 1-1: USB disconnect, device number 18 [ 2895.798537][ T7888] device bridge_slave_1 left promiscuous mode [ 2895.805231][ T7888] bridge0: port 2(bridge_slave_1) entered disabled state [ 2895.814320][ T7888] device bridge_slave_0 left promiscuous mode [ 2895.821183][ T7888] bridge0: port 1(bridge_slave_0) entered disabled state [ 2895.832745][ T7888] device veth1_macvtap left promiscuous mode [ 2895.838945][ T7888] device veth0_vlan left promiscuous mode [ 2895.915517][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 2895.915562][ T28] audit: type=1326 audit(1729050476.044:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8626 comm="syz.3.10178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e83d7dff9 code=0x7ffc0000 [ 2895.945590][ T28] audit: type=1326 audit(1729050476.044:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8626 comm="syz.3.10178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e83d7dff9 code=0x7ffc0000 [ 2895.969030][ T28] audit: type=1326 audit(1729050476.044:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8626 comm="syz.3.10178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f5e83d7dff9 code=0x7ffc0000 [ 2895.992852][ T28] audit: type=1326 audit(1729050476.044:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8626 comm="syz.3.10178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e83d7dff9 code=0x7ffc0000 [ 2896.016499][ T28] audit: type=1326 audit(1729050476.044:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8626 comm="syz.3.10178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e83d7dff9 code=0x7ffc0000 [ 2896.040211][ T28] audit: type=1326 audit(1729050476.054:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8626 comm="syz.3.10178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5e83d7dff9 code=0x7ffc0000 [ 2896.063832][ T28] audit: type=1326 audit(1729050476.054:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8626 comm="syz.3.10178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e83d7dff9 code=0x7ffc0000 [ 2896.087586][ T28] audit: type=1326 audit(1729050476.054:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8626 comm="syz.3.10178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e83d7dff9 code=0x7ffc0000 [ 2896.110916][ T28] audit: type=1326 audit(1729050476.054:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8626 comm="syz.3.10178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f5e83d7c897 code=0x7ffc0000 [ 2896.134363][ T28] audit: type=1326 audit(1729050476.054:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8626 comm="syz.3.10178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e83d7dff9 code=0x7ffc0000 [ 2898.339378][ T8647] bridge0: port 1(bridge_slave_0) entered blocking state [ 2898.346253][ T8647] bridge0: port 1(bridge_slave_0) entered disabled state [ 2898.355187][ T8647] device bridge_slave_0 entered promiscuous mode [ 2898.364974][ T8647] bridge0: port 2(bridge_slave_1) entered blocking state [ 2898.371866][ T8647] bridge0: port 2(bridge_slave_1) entered disabled state [ 2898.381051][ T8647] device bridge_slave_1 entered promiscuous mode [ 2898.596429][ T8647] bridge0: port 2(bridge_slave_1) entered blocking state [ 2898.603264][ T8647] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2898.610390][ T8647] bridge0: port 1(bridge_slave_0) entered blocking state [ 2898.617168][ T8647] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2898.637248][ T9460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2898.644657][ T9460] bridge0: port 1(bridge_slave_0) entered disabled state [ 2898.651950][ T9460] bridge0: port 2(bridge_slave_1) entered disabled state [ 2898.660646][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2898.669064][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 2898.675925][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2898.685728][ T6687] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2898.693786][ T6687] bridge0: port 2(bridge_slave_1) entered blocking state [ 2898.700645][ T6687] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2898.716781][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2898.724486][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2898.734718][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2898.746001][ T8647] device veth0_vlan entered promiscuous mode [ 2898.756003][ T9460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2898.763693][ T9460] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2898.770970][ T9460] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2898.778206][ T9460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2898.789112][ T8647] device veth1_macvtap entered promiscuous mode [ 2898.797905][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2898.808571][ T9460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2899.295879][ T60] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 2899.369253][ T7888] device bridge_slave_1 left promiscuous mode [ 2899.375615][ T7888] bridge0: port 2(bridge_slave_1) entered disabled state [ 2899.386763][ T7888] device bridge_slave_0 left promiscuous mode [ 2899.393134][ T7888] bridge0: port 1(bridge_slave_0) entered disabled state [ 2899.405557][ T7888] device veth1_macvtap left promiscuous mode [ 2899.411571][ T7888] device veth0_vlan left promiscuous mode [ 2899.706306][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 2899.717275][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 2899.728210][ T60] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2899.740883][ T60] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2899.749920][ T60] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2899.758937][ T60] usb 3-1: config 0 descriptor?? [ 2899.775924][ T8656] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2900.065999][ T4517] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2900.066037][T30822] Bluetooth: hci0: command 0x1003 tx timeout [ 2900.193487][ T8667] futex_wake_op: syz.3.10185 tries to shift op by -1; fix this program [ 2900.766086][ T1760] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 2900.989087][ T8672] futex_wake_op: syz.3.10187 tries to shift op by -1; fix this program [ 2901.045887][ T1760] usb 5-1: Using ep0 maxpacket: 16 [ 2901.375919][ T1760] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2901.384819][ T1760] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2901.392624][ T1760] usb 5-1: Product: syz [ 2901.396631][ T1760] usb 5-1: Manufacturer: syz [ 2901.401000][ T1760] usb 5-1: SerialNumber: syz [ 2901.407930][ T1760] r8152-cfgselector 5-1: config 0 descriptor?? [ 2901.676129][ T1760] r8152-cfgselector 5-1: Unknown version 0x0000 [ 2902.866011][ T60] usbhid 3-1:0.0: can't add hid device: -71 [ 2902.871799][ T60] usbhid: probe of 3-1:0.0 failed with error -71 [ 2902.878601][ T60] usb 3-1: USB disconnect, device number 13 [ 2902.997817][ T8683] futex_wake_op: syz.2.10189 tries to shift op by -1; fix this program [ 2903.166336][ T1760] r8152-cfgselector 5-1: Unknown version 0x0000 [ 2903.173719][ T1760] r8152-cfgselector 5-1: bad CDC descriptors [ 2903.195955][ T1760] r8152-cfgselector 5-1: Unknown version 0x0000 [ 2903.208359][ T1760] r8152-cfgselector 5-1: USB disconnect, device number 125 [ 2904.425552][ T8701] loop2: detected capacity change from 0 to 16 [ 2904.492793][ T8702] futex_wake_op: syz.3.10194 tries to shift op by -1; fix this program [ 2904.509744][ T8701] erofs: (device loop2): mounted with root inode @ nid 36. [ 2904.771994][ T8707] 9pnet_fd: Insufficient options for proto=fd [ 2905.220464][ T8713] loop2: detected capacity change from 0 to 40427 [ 2905.256311][ T8703] bridge0: port 1(bridge_slave_0) entered blocking state [ 2905.263362][ T8703] bridge0: port 1(bridge_slave_0) entered disabled state [ 2905.270912][ T8703] device bridge_slave_0 entered promiscuous mode [ 2905.277644][ T8713] F2FS-fs (loop2): fault_injection options not supported [ 2905.284525][ T8713] F2FS-fs (loop2): Image doesn't support compression [ 2905.291084][ T8713] F2FS-fs (loop2): Unrecognized mount option "fault_injection=00000000002147483648" or missing value [ 2905.292985][ T8703] bridge0: port 2(bridge_slave_1) entered blocking state [ 2905.308960][ T8703] bridge0: port 2(bridge_slave_1) entered disabled state [ 2905.316401][ T8703] device bridge_slave_1 entered promiscuous mode [ 2905.336382][ T6899] I/O error, dev loop2, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2906.003631][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2906.011215][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2906.029218][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2906.274591][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2906.282654][ T1760] bridge0: port 1(bridge_slave_0) entered blocking state [ 2906.289528][ T1760] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2906.305146][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2906.314357][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2906.322355][ T1760] bridge0: port 2(bridge_slave_1) entered blocking state [ 2906.329192][ T1760] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2906.339638][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2907.097547][ T1760] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 2908.123152][ T7082] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2908.131707][ T7082] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2908.157428][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2908.165586][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2908.177127][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2908.184799][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2908.193115][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2908.200655][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2908.210425][ T8703] device veth0_vlan entered promiscuous mode [ 2908.215903][ T1760] usb 4-1: Using ep0 maxpacket: 16 [ 2908.222087][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2908.230020][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2908.239033][ T8703] device veth1_macvtap entered promiscuous mode [ 2908.248515][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2908.282406][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2908.285917][ T7082] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 2908.291288][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2908.306199][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2908.314287][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2908.648800][ T8744] loop0: detected capacity change from 0 to 16 [ 2908.656276][ T8744] erofs: (device loop0): mounted with root inode @ nid 36. [ 2908.798254][T11657] device bridge_slave_1 left promiscuous mode [ 2908.804810][T11657] bridge0: port 2(bridge_slave_1) entered disabled state [ 2908.820308][T11657] device bridge_slave_0 left promiscuous mode [ 2908.827244][T11657] bridge0: port 1(bridge_slave_0) entered disabled state [ 2908.827282][ T1760] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2908.846671][ T1760] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2908.847300][T11657] device veth1_macvtap left promiscuous mode [ 2908.860989][ T1760] usb 4-1: Product: syz [ 2908.864940][ T1760] usb 4-1: Manufacturer: syz [ 2908.868677][ T7082] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 2908.869437][ T1760] usb 4-1: SerialNumber: syz [ 2908.881000][T11657] device veth0_vlan left promiscuous mode [ 2908.890391][ T7082] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 2908.911328][ T1760] r8152-cfgselector 4-1: config 0 descriptor?? [ 2908.920190][ T7082] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2908.979558][ T7082] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2908.988588][ T7082] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2909.000454][ T7082] usb 3-1: config 0 descriptor?? [ 2909.015913][ T7082] usb 3-1: can't set config #0, error -71 [ 2909.022250][ T7082] usb 3-1: USB disconnect, device number 14 [ 2909.525968][ T1760] r8152-cfgselector 4-1: Unknown version 0x0000 [ 2909.703123][ T8758] loop0: detected capacity change from 0 to 16 [ 2910.133926][ T8758] erofs: (device loop0): mounted with root inode @ nid 36. [ 2910.274620][ T8762] netlink: 'syz.4.10206': attribute type 4 has an invalid length. [ 2910.603187][ T1760] r8152-cfgselector 4-1: Unknown version 0x0000 [ 2910.630561][ T1760] r8152-cfgselector 4-1: bad CDC descriptors [ 2910.675949][ T1760] r8152-cfgselector 4-1: Unknown version 0x0000 [ 2910.711034][ T1760] r8152-cfgselector 4-1: USB disconnect, device number 17 [ 2910.726326][ T8775] 9pnet_fd: Insufficient options for proto=fd [ 2910.827276][ T8777] loop0: detected capacity change from 0 to 16 [ 2910.856427][ T8777] erofs: (device loop0): mounted with root inode @ nid 36. [ 2914.115901][ T6687] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 2914.456197][ T7944] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 2914.550260][ T6687] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 2914.574744][ T6687] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 2914.601716][ T6687] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2914.634251][ T6687] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2914.658288][ T6687] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2914.679952][ T6687] usb 4-1: config 0 descriptor?? [ 2914.695918][ T8804] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2914.735868][ T7944] usb 3-1: Using ep0 maxpacket: 16 [ 2915.265504][ T8816] loop0: detected capacity change from 0 to 40427 [ 2915.273314][ T8816] F2FS-fs (loop0): fault_injection options not supported [ 2915.280233][ T8816] F2FS-fs (loop0): Image doesn't support compression [ 2915.286732][ T8816] F2FS-fs (loop0): Unrecognized mount option "fault_injection=00000000002147483648" or missing value [ 2915.355981][ T7944] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2915.377851][ T7944] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2915.385785][ T7944] usb 3-1: Product: syz [ 2915.389793][ T7944] usb 3-1: Manufacturer: syz [ 2915.394182][ T7944] usb 3-1: SerialNumber: syz [ 2915.399110][ T7944] r8152-cfgselector 3-1: config 0 descriptor?? [ 2915.655912][ T7944] r8152-cfgselector 3-1: Unknown version 0x0000 [ 2915.857799][ T8822] loop0: detected capacity change from 0 to 16 [ 2915.867078][ T8822] erofs: (device loop0): mounted with root inode @ nid 36. [ 2916.285915][ T6687] usbhid 4-1:0.0: can't add hid device: -71 [ 2916.291813][ T6687] usbhid: probe of 4-1:0.0 failed with error -71 [ 2916.300881][ T6687] usb 4-1: USB disconnect, device number 18 [ 2916.743737][ T8835] loop0: detected capacity change from 0 to 16 [ 2916.760111][ T8835] erofs: (device loop0): mounted with root inode @ nid 36. [ 2916.777342][ T8835] input: syz0 as /devices/virtual/input/input271 [ 2917.095898][ T7944] r8152-cfgselector 3-1: Unknown version 0x0000 [ 2917.103108][ T7944] r8152-cfgselector 3-1: bad CDC descriptors [ 2917.135916][ T7944] r8152-cfgselector 3-1: Unknown version 0x0000 [ 2917.147588][ T7944] r8152-cfgselector 3-1: USB disconnect, device number 15 [ 2917.293206][ T8846] loop2: detected capacity change from 0 to 16 [ 2917.302952][ T8846] erofs: (device loop2): mounted with root inode @ nid 36. [ 2917.495861][T32018] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 2917.875949][T32018] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2917.886703][T32018] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2917.896487][T32018] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 2917.905357][T32018] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2917.913696][T32018] usb 4-1: config 0 descriptor?? [ 2918.398507][ T8859] futex_wake_op: syz.2.10229 tries to shift op by -1; fix this program [ 2918.533672][ T8839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2918.587864][ T8839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2919.114674][ T8866] netlink: 'syz.0.10230': attribute type 4 has an invalid length. [ 2919.265920][T32018] usbhid 4-1:0.0: can't add hid device: -71 [ 2919.271718][T32018] usbhid: probe of 4-1:0.0 failed with error -71 [ 2919.278917][T32018] usb 4-1: USB disconnect, device number 19 [ 2919.352991][ T8873] netlink: 'syz.2.10232': attribute type 4 has an invalid length. [ 2919.523250][ T8875] futex_wake_op: syz.4.10231 tries to shift op by -1; fix this program [ 2919.751936][ T8879] loop0: detected capacity change from 0 to 16 [ 2919.876949][ T8879] erofs: (device loop0): mounted with root inode @ nid 36. [ 2920.080797][ T8883] futex_wake_op: syz.4.10234 tries to shift op by -1; fix this program [ 2921.275932][ T6687] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 2921.306405][ T8893] loop0: detected capacity change from 0 to 40427 [ 2921.313753][ T8893] F2FS-fs (loop0): fault_injection options not supported [ 2921.320721][ T8893] F2FS-fs (loop0): Image doesn't support compression [ 2921.327168][ T8893] F2FS-fs (loop0): Unrecognized mount option "fault_injection=00000000002147483648" or missing value [ 2921.515870][ T6687] usb 3-1: Using ep0 maxpacket: 16 [ 2921.845932][ T6687] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2921.854828][ T6687] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2921.862733][ T6687] usb 3-1: Product: syz [ 2921.866771][ T6687] usb 3-1: Manufacturer: syz [ 2921.871154][ T6687] usb 3-1: SerialNumber: syz [ 2921.876422][ T6687] r8152-cfgselector 3-1: config 0 descriptor?? [ 2922.135919][ T6687] r8152-cfgselector 3-1: Unknown version 0x0000 [ 2922.582832][ T8908] loop0: detected capacity change from 0 to 40427 [ 2922.590064][ T8908] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 2922.597762][ T8908] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 2922.606486][ T8908] F2FS-fs (loop0): invalid crc value [ 2922.612866][ T8908] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 2922.633616][ T8908] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 2922.640613][ T8908] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 2923.109091][ T8919] netlink: 'syz.4.10241': attribute type 4 has an invalid length. [ 2923.318256][ T6687] r8152-cfgselector 3-1: Unknown version 0x0000 [ 2923.324721][ T6687] r8152-cfgselector 3-1: bad CDC descriptors [ 2923.355954][ T6687] r8152-cfgselector 3-1: Unknown version 0x0000 [ 2923.362967][ T6687] r8152-cfgselector 3-1: USB disconnect, device number 16 [ 2923.779586][ T8928] futex_wake_op: syz.0.10243 tries to shift op by -1; fix this program [ 2924.815079][ T8941] loop2: detected capacity change from 0 to 16 [ 2924.851948][ T8941] erofs: (device loop2): mounted with root inode @ nid 36. [ 2925.135944][ T60] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 2925.165872][T31964] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 2925.509843][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 2925.521043][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 2925.696071][ T60] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2925.708823][ T60] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2925.717617][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2925.726114][ T60] usb 1-1: config 0 descriptor?? [ 2925.745957][ T8938] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2925.803327][ T8946] loop2: detected capacity change from 0 to 40427 [ 2925.810386][ T8946] F2FS-fs (loop2): fault_injection options not supported [ 2925.817310][ T8946] F2FS-fs (loop2): Image doesn't support compression [ 2925.823748][ T8946] F2FS-fs (loop2): Unrecognized mount option "fault_injection=00000000002147483648" or missing value [ 2925.835012][T31964] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2925.845706][T31964] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2925.855276][T31964] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 2925.864097][T31964] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2925.897356][T31964] usb 5-1: config 0 descriptor?? [ 2926.137251][ T8943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2926.145563][ T8943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2926.249117][ T8951] loop2: detected capacity change from 0 to 512 [ 2926.265957][ T60] usbhid 1-1:0.0: can't add hid device: -71 [ 2926.267868][ T8951] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #3: comm syz.2.10249: corrupted inode contents [ 2926.271905][ T60] usbhid: probe of 1-1:0.0 failed with error -71 [ 2926.283700][ T8951] EXT4-fs error (device loop2): ext4_dirty_inode:6074: inode #3: comm syz.2.10249: mark_inode_dirty error [ 2926.295886][ T60] usb 1-1: USB disconnect, device number 19 [ 2926.305955][ T8951] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #3: comm syz.2.10249: corrupted inode contents [ 2926.318464][ T8951] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #3: comm syz.2.10249: mark_inode_dirty error [ 2926.329933][ T8951] __quota_error: 25 callbacks suppressed [ 2926.329944][ T8951] Quota error (device loop2): write_blk: dquota write failed [ 2926.342743][ T8951] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 2926.352475][ T8951] EXT4-fs error (device loop2): ext4_acquire_dquot:6764: comm syz.2.10249: Failed to acquire dquot type 0 [ 2926.364146][ T8951] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #16: comm syz.2.10249: corrupted inode contents [ 2926.376068][ T8951] EXT4-fs error (device loop2): ext4_dirty_inode:6074: inode #16: comm syz.2.10249: mark_inode_dirty error [ 2926.387485][ T8951] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #16: comm syz.2.10249: corrupted inode contents [ 2926.399419][ T8951] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.10249: mark_inode_dirty error [ 2926.410746][ T8951] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #16: comm syz.2.10249: corrupted inode contents [ 2926.422692][ T8951] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 2926.424194][T31964] isku 0003:1E7D:319C.010C: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.4-1/input0 [ 2926.431765][ T8951] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #16: comm syz.2.10249: corrupted inode contents [ 2926.453747][ T8951] EXT4-fs error (device loop2): ext4_truncate:4302: inode #16: comm syz.2.10249: mark_inode_dirty error [ 2926.464829][T31964] isku 0003:1E7D:319C.010C: couldn't init struct isku_device [ 2926.464956][ T8951] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 2926.472077][T31964] isku 0003:1E7D:319C.010C: couldn't install keyboard [ 2926.481486][ T8951] EXT4-fs (loop2): 1 truncate cleaned up [ 2926.488118][T31964] isku: probe of 0003:1E7D:319C.010C failed with error -71 [ 2926.493105][ T8951] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 2926.509839][ T8951] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038 (0x7fffffff) [ 2926.512200][T31964] usb 5-1: USB disconnect, device number 126 [ 2926.687949][ T8956] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 2927.205165][ T8647] EXT4-fs (loop2): unmounting filesystem. [ 2927.275618][ T8960] loop0: detected capacity change from 0 to 40427 [ 2927.282508][ T8960] F2FS-fs (loop0): fault_injection options not supported [ 2927.289444][ T8960] F2FS-fs (loop0): Image doesn't support compression [ 2927.295914][ T8960] F2FS-fs (loop0): Unrecognized mount option "fault_injection=00000000002147483648" or missing value [ 2927.324585][ T8963] bridge0: port 1(bridge_slave_0) entered blocking state [ 2927.331654][ T8963] bridge0: port 1(bridge_slave_0) entered disabled state [ 2927.338987][ T8963] device bridge_slave_0 entered promiscuous mode [ 2927.345598][ T8963] bridge0: port 2(bridge_slave_1) entered blocking state [ 2927.352846][ T8963] bridge0: port 2(bridge_slave_1) entered disabled state [ 2927.360338][ T8963] device bridge_slave_1 entered promiscuous mode [ 2927.743179][ T8963] bridge0: port 2(bridge_slave_1) entered blocking state [ 2927.750071][ T8963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2927.757130][ T8963] bridge0: port 1(bridge_slave_0) entered blocking state [ 2927.763906][ T8963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2927.783692][ T1760] bridge0: port 1(bridge_slave_0) entered disabled state [ 2927.790878][ T1760] bridge0: port 2(bridge_slave_1) entered disabled state [ 2927.798979][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2927.806322][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2927.828654][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2927.838081][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 2927.844918][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2927.852211][ T4714] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 2927.860524][ T8975] loop0: detected capacity change from 0 to 16 [ 2927.871908][T32001] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2927.880063][T32001] bridge0: port 2(bridge_slave_1) entered blocking state [ 2927.881527][ T8975] erofs: (device loop0): mounted with root inode @ nid 36. [ 2927.886924][T32001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2927.887108][T32001] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2927.918008][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2927.920870][ T8975] input: syz0 as /devices/virtual/input/input274 [ 2927.934675][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2927.949606][T32001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2927.959289][T32001] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2927.967596][T32001] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2927.979212][ T8963] device veth0_vlan entered promiscuous mode [ 2928.010607][T32001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2928.026170][ T8963] device veth1_macvtap entered promiscuous mode [ 2928.035199][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2928.046479][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2928.135914][ T4714] usb 3-1: Using ep0 maxpacket: 16 [ 2928.146825][ T982] device bridge_slave_1 left promiscuous mode [ 2928.152764][ T982] bridge0: port 2(bridge_slave_1) entered disabled state [ 2928.160151][ T982] device bridge_slave_0 left promiscuous mode [ 2928.166151][ T982] bridge0: port 1(bridge_slave_0) entered disabled state [ 2928.178785][ T982] device veth1_macvtap left promiscuous mode [ 2928.184998][ T982] device veth0_vlan left promiscuous mode [ 2928.476015][ T4714] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2928.484931][ T4714] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2928.492744][ T4714] usb 3-1: Product: syz [ 2928.496878][ T4714] usb 3-1: Manufacturer: syz [ 2928.501208][ T4714] usb 3-1: SerialNumber: syz [ 2928.506922][ T4714] r8152-cfgselector 3-1: config 0 descriptor?? [ 2929.124522][ T28] audit: type=1400 audit(1729050509.314:1476): avc: denied { unmount } for pid=8963 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 2929.144634][ T4714] r8152-cfgselector 3-1: Unknown version 0x0000 [ 2929.236205][ T8984] loop0: detected capacity change from 0 to 40427 [ 2929.243522][ T8984] F2FS-fs (loop0): fault_injection options not supported [ 2929.250490][ T8984] F2FS-fs (loop0): Image doesn't support compression [ 2929.257044][ T8984] F2FS-fs (loop0): Unrecognized mount option "fault_injection=00000000002147483648" or missing value [ 2929.864219][ T8994] futex_wake_op: syz.0.10256 tries to shift op by -1; fix this program [ 2930.325899][ T4714] r8152-cfgselector 3-1: Unknown version 0x0000 [ 2930.332094][ T4714] r8152-cfgselector 3-1: bad CDC descriptors [ 2930.365921][ T4714] r8152-cfgselector 3-1: Unknown version 0x0000 [ 2930.373076][ T4714] r8152-cfgselector 3-1: USB disconnect, device number 17 [ 2930.441847][ T8997] loop2: detected capacity change from 0 to 40427 [ 2930.448642][ T8997] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 2930.456595][ T8997] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 2930.466559][ T8997] F2FS-fs (loop2): Found nat_bits in checkpoint [ 2930.490311][ T8997] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 2930.497233][ T8997] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 2931.282826][ T28] audit: type=1326 audit(1729050511.214:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8996 comm="syz.2.10257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d897dff9 code=0x7ffc0000 [ 2931.311963][ T28] audit: type=1326 audit(1729050511.214:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8996 comm="syz.2.10257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d897dff9 code=0x7ffc0000 [ 2931.335743][ T28] audit: type=1326 audit(1729050511.314:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8996 comm="syz.2.10257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f39d897dff9 code=0x7ffc0000 [ 2931.359312][ T28] audit: type=1326 audit(1729050511.314:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8996 comm="syz.2.10257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d897dff9 code=0x7ffc0000 [ 2931.382729][ T28] audit: type=1326 audit(1729050511.314:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8996 comm="syz.2.10257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d897dff9 code=0x7ffc0000 [ 2931.406078][ T28] audit: type=1326 audit(1729050511.414:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8996 comm="syz.2.10257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f39d897dff9 code=0x7ffc0000 [ 2931.443821][ T28] audit: type=1326 audit(1729050511.414:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8996 comm="syz.2.10257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d897dff9 code=0x7ffc0000 [ 2931.467311][ T28] audit: type=1326 audit(1729050511.414:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8996 comm="syz.2.10257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d897dff9 code=0x7ffc0000 [ 2931.519957][ T28] audit: type=1326 audit(1729050511.464:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8996 comm="syz.2.10257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f39d897c897 code=0x7ffc0000 [ 2931.544253][ T28] audit: type=1326 audit(1729050511.504:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8996 comm="syz.2.10257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d897dff9 code=0x7ffc0000 [ 2931.567813][ T28] audit: type=1326 audit(1729050511.504:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8996 comm="syz.2.10257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39d897dff9 code=0x7ffc0000 [ 2931.597012][ T9014] loop2: detected capacity change from 0 to 512 [ 2931.617681][ T9014] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #3: comm syz.2.10260: corrupted inode contents [ 2931.629655][ T9014] EXT4-fs error (device loop2): ext4_dirty_inode:6074: inode #3: comm syz.2.10260: mark_inode_dirty error [ 2931.641289][ T9014] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #3: comm syz.2.10260: corrupted inode contents [ 2931.653172][ T9014] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #3: comm syz.2.10260: mark_inode_dirty error [ 2931.664617][ T9014] Quota error (device loop2): write_blk: dquota write failed [ 2931.671893][ T9014] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 2931.681558][ T9014] EXT4-fs error (device loop2): ext4_acquire_dquot:6764: comm syz.2.10260: Failed to acquire dquot type 0 [ 2931.693135][ T9014] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #16: comm syz.2.10260: corrupted inode contents [ 2931.705227][ T9014] EXT4-fs error (device loop2): ext4_dirty_inode:6074: inode #16: comm syz.2.10260: mark_inode_dirty error [ 2931.716617][ T9014] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #16: comm syz.2.10260: corrupted inode contents [ 2931.728491][ T9014] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.10260: mark_inode_dirty error [ 2931.739917][ T9014] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #16: comm syz.2.10260: corrupted inode contents [ 2931.752067][ T9014] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 2931.760604][ T9014] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #16: comm syz.2.10260: corrupted inode contents [ 2931.772499][ T9014] EXT4-fs error (device loop2): ext4_truncate:4302: inode #16: comm syz.2.10260: mark_inode_dirty error [ 2931.783677][ T9014] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 2931.792813][ T9014] EXT4-fs (loop2): 1 truncate cleaned up [ 2931.798291][ T9014] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 2931.806980][ T9014] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038 (0x7fffffff) [ 2931.815876][T32001] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 2931.974787][ T9019] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 2932.180649][T32001] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2932.191476][T32001] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2932.201274][T32001] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 2932.210331][T32001] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2932.219194][T32001] usb 1-1: config 0 descriptor?? [ 2932.420660][ T9024] futex_wake_op: syz.3.10262 tries to shift op by -1; fix this program [ 2932.470230][ T9012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2932.484314][ T9012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2932.559790][ T8647] EXT4-fs (loop2): unmounting filesystem. [ 2932.714167][ T9029] loop2: detected capacity change from 0 to 16 [ 2932.741472][ T9029] erofs: (device loop2): mounted with root inode @ nid 36. [ 2932.763279][ T9029] input: syz0 as /devices/virtual/input/input275 [ 2932.856002][T32001] usbhid 1-1:0.0: can't add hid device: -71 [ 2932.861822][T32001] usbhid: probe of 1-1:0.0 failed with error -71 [ 2932.869113][T32001] usb 1-1: USB disconnect, device number 20 [ 2933.705894][T32018] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 2934.065925][T32018] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2934.076697][T32018] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2934.086465][T32018] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 2934.308416][T32018] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2934.317316][T32018] usb 3-1: config 0 descriptor?? [ 2934.577151][ T9036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2934.585500][ T9036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2934.848951][ T9044] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9044 comm=syz.3.10267 [ 2934.945899][T32018] usbhid 3-1:0.0: can't add hid device: -71 [ 2934.951632][T32018] usbhid: probe of 3-1:0.0 failed with error -71 [ 2934.959881][T32018] usb 3-1: USB disconnect, device number 18 [ 2935.145891][T31964] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 2935.525879][T31964] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2935.536611][T31964] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2935.546122][T31964] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 2935.554951][T31964] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2935.563502][T31964] usb 4-1: config 0 descriptor?? [ 2935.784345][ T9049] bridge0: port 1(bridge_slave_0) entered blocking state [ 2935.791247][ T9049] bridge0: port 1(bridge_slave_0) entered disabled state [ 2935.798379][ T9049] device bridge_slave_0 entered promiscuous mode [ 2935.805193][ T9049] bridge0: port 2(bridge_slave_1) entered blocking state [ 2935.807492][ T9046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2935.812208][ T9049] bridge0: port 2(bridge_slave_1) entered disabled state [ 2935.821787][ T9046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2935.827767][ T9049] device bridge_slave_1 entered promiscuous mode [ 2935.877706][ T9049] bridge0: port 2(bridge_slave_1) entered blocking state [ 2935.884635][ T9049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2935.891735][ T9049] bridge0: port 1(bridge_slave_0) entered blocking state [ 2935.898526][ T9049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2935.917383][T13052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2935.924758][T13052] bridge0: port 1(bridge_slave_0) entered disabled state [ 2935.931875][T13052] bridge0: port 2(bridge_slave_1) entered disabled state [ 2935.947115][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2935.955009][ T1760] bridge0: port 1(bridge_slave_0) entered blocking state [ 2935.961799][ T1760] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2935.968939][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2935.977363][ T1760] bridge0: port 2(bridge_slave_1) entered blocking state [ 2935.984184][ T1760] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2935.991486][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2935.999758][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2936.012682][T13052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2936.023007][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2936.030794][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2936.038040][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2936.046392][ T9049] device veth0_vlan entered promiscuous mode [ 2936.055686][T13052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2936.066409][ T9049] device veth1_macvtap entered promiscuous mode [ 2936.076622][T32001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2936.084726][T32001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2936.185953][T31964] usbhid 4-1:0.0: can't add hid device: -71 [ 2936.191823][T31964] usbhid: probe of 4-1:0.0 failed with error -71 [ 2936.349631][T31964] usb 4-1: USB disconnect, device number 20 [ 2936.396428][ T7888] device bridge_slave_1 left promiscuous mode [ 2936.402376][ T7888] bridge0: port 2(bridge_slave_1) entered disabled state [ 2936.409607][ T7888] device bridge_slave_0 left promiscuous mode [ 2936.415537][ T7888] bridge0: port 1(bridge_slave_0) entered disabled state [ 2936.423101][ T7888] device veth1_macvtap left promiscuous mode [ 2936.428985][ T7888] device veth0_vlan left promiscuous mode [ 2937.972051][ T9067] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 2939.675672][ T9076] futex_wake_op: syz.4.10273 tries to shift op by -1; fix this program [ 2940.535249][ T9081] input: syz0 as /devices/virtual/input/input276 [ 2941.595902][T13052] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 2941.799100][ T9090] bridge0: port 1(bridge_slave_0) entered blocking state [ 2941.806026][ T9090] bridge0: port 1(bridge_slave_0) entered disabled state [ 2941.813061][ T9090] device bridge_slave_0 entered promiscuous mode [ 2941.820524][ T9090] bridge0: port 2(bridge_slave_1) entered blocking state [ 2941.827767][ T9090] bridge0: port 2(bridge_slave_1) entered disabled state [ 2941.834996][ T9090] device bridge_slave_1 entered promiscuous mode [ 2941.872643][ T9090] bridge0: port 2(bridge_slave_1) entered blocking state [ 2941.879491][ T9090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2941.886592][ T9090] bridge0: port 1(bridge_slave_0) entered blocking state [ 2941.893365][ T9090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2941.914675][T32018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2941.922163][T32018] bridge0: port 1(bridge_slave_0) entered disabled state [ 2941.929649][T32018] bridge0: port 2(bridge_slave_1) entered disabled state [ 2941.940178][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2941.948164][ T1760] bridge0: port 1(bridge_slave_0) entered blocking state [ 2941.954988][ T1760] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2941.973211][ T9090] device veth0_vlan entered promiscuous mode [ 2941.975965][T13052] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 2941.990160][T13052] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 2942.001148][T13052] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2942.013813][T13052] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2942.022669][T13052] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2942.023260][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2942.031126][T13052] usb 5-1: config 0 descriptor?? [ 2942.039126][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2942.050980][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2942.055914][ T9086] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2942.058236][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2942.072429][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2942.080437][ T1760] bridge0: port 2(bridge_slave_1) entered blocking state [ 2942.087263][ T1760] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2942.094390][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2942.102135][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2942.115695][ T9090] device veth1_macvtap entered promiscuous mode [ 2942.122292][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2942.133051][T32018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2942.142738][T32001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2942.436348][ T7888] device bridge_slave_1 left promiscuous mode [ 2942.442266][ T7888] bridge0: port 2(bridge_slave_1) entered disabled state [ 2942.449580][ T7888] device bridge_slave_0 left promiscuous mode [ 2942.455476][ T7888] bridge0: port 1(bridge_slave_0) entered disabled state [ 2942.462555][ T1760] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 2942.470514][ T7888] device veth1_macvtap left promiscuous mode [ 2942.476422][ T7888] device veth0_vlan left promiscuous mode [ 2942.865988][ T1760] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2942.876739][ T1760] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2942.886248][ T1760] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 2942.895085][ T1760] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2942.903609][ T1760] usb 1-1: config 0 descriptor?? [ 2943.147145][ T9095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2943.155762][ T9095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2943.525927][ T1760] usbhid 1-1:0.0: can't add hid device: -71 [ 2943.531682][ T1760] usbhid: probe of 1-1:0.0 failed with error -71 [ 2943.538538][ T1760] usb 1-1: USB disconnect, device number 21 [ 2943.798105][ T9102] bridge0: port 1(bridge_slave_0) entered blocking state [ 2943.804964][ T9102] bridge0: port 1(bridge_slave_0) entered disabled state [ 2943.812281][ T9102] device bridge_slave_0 entered promiscuous mode [ 2943.822091][ T9102] bridge0: port 2(bridge_slave_1) entered blocking state [ 2943.829165][ T9102] bridge0: port 2(bridge_slave_1) entered disabled state [ 2943.836386][ T9102] device bridge_slave_1 entered promiscuous mode [ 2943.876635][ T9102] bridge0: port 2(bridge_slave_1) entered blocking state [ 2943.883471][ T9102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2943.890587][ T9102] bridge0: port 1(bridge_slave_0) entered blocking state [ 2943.897376][ T9102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2943.917896][T31673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2943.925204][T31673] bridge0: port 1(bridge_slave_0) entered disabled state [ 2943.932638][T31673] bridge0: port 2(bridge_slave_1) entered disabled state [ 2943.941236][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2943.949228][ T1760] bridge0: port 1(bridge_slave_0) entered blocking state [ 2943.956076][ T1760] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2943.965589][T32001] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2943.973633][T32001] bridge0: port 2(bridge_slave_1) entered blocking state [ 2943.980472][T32001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2943.991894][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2944.001108][T32001] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2944.013519][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2944.025171][T32001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2944.033159][T32001] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2944.040467][T32001] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2944.049951][ T9102] device veth0_vlan entered promiscuous mode [ 2944.059576][T32001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2944.068467][ T9102] device veth1_macvtap entered promiscuous mode [ 2944.077697][T32001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2944.088853][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2944.256476][ T7888] device bridge_slave_1 left promiscuous mode [ 2944.262493][ T7888] bridge0: port 2(bridge_slave_1) entered disabled state [ 2944.270142][ T7888] device bridge_slave_0 left promiscuous mode [ 2944.276338][ T7888] bridge0: port 1(bridge_slave_0) entered disabled state [ 2944.284335][ T7888] device veth1_macvtap left promiscuous mode [ 2944.290294][ T7888] device veth0_vlan left promiscuous mode [ 2944.366681][T13052] usbhid 5-1:0.0: can't add hid device: -71 [ 2944.372456][T13052] usbhid: probe of 5-1:0.0 failed with error -71 [ 2944.381778][T13052] usb 5-1: USB disconnect, device number 127 [ 2945.073518][ T9117] bridge0: port 1(bridge_slave_0) entered blocking state [ 2945.080866][ T9117] bridge0: port 1(bridge_slave_0) entered disabled state [ 2945.088556][ T9117] device bridge_slave_0 entered promiscuous mode [ 2945.096778][ T9117] bridge0: port 2(bridge_slave_1) entered blocking state [ 2945.103640][ T9117] bridge0: port 2(bridge_slave_1) entered disabled state [ 2945.111395][ T9117] device bridge_slave_1 entered promiscuous mode [ 2945.231392][ T9117] bridge0: port 2(bridge_slave_1) entered blocking state [ 2945.238263][ T9117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2945.245349][ T9117] bridge0: port 1(bridge_slave_0) entered blocking state [ 2945.252155][ T9117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2945.278751][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2945.287065][ T1760] bridge0: port 1(bridge_slave_0) entered disabled state [ 2945.294421][ T1760] bridge0: port 2(bridge_slave_1) entered disabled state [ 2945.316889][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2945.325086][ T1760] bridge0: port 1(bridge_slave_0) entered blocking state [ 2945.331943][ T1760] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2945.341132][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2945.349251][ T1760] bridge0: port 2(bridge_slave_1) entered blocking state [ 2945.356126][ T1760] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2945.363560][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2945.371704][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2945.387219][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2945.398884][ T9117] device veth0_vlan entered promiscuous mode [ 2945.406949][T31964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2945.414979][T31964] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2945.422681][T31964] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2945.435402][ T9117] device veth1_macvtap entered promiscuous mode [ 2945.445323][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2945.458507][T31964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2945.471552][T31964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2946.166427][T29059] device bridge_slave_1 left promiscuous mode [ 2946.172344][T29059] bridge0: port 2(bridge_slave_1) entered disabled state [ 2946.179632][T29059] device bridge_slave_0 left promiscuous mode [ 2946.185543][T29059] bridge0: port 1(bridge_slave_0) entered disabled state [ 2946.193102][T29059] device bridge_slave_1 left promiscuous mode [ 2946.199061][T29059] bridge0: port 2(bridge_slave_1) entered disabled state [ 2946.206237][T29059] device bridge_slave_0 left promiscuous mode [ 2946.212234][T29059] bridge0: port 1(bridge_slave_0) entered disabled state [ 2946.220000][T29059] device veth1_macvtap left promiscuous mode [ 2946.225992][T29059] device veth0_vlan left promiscuous mode [ 2946.231590][T29059] device veth1_macvtap left promiscuous mode [ 2946.237669][T29059] device veth0_vlan left promiscuous mode [ 2947.708864][ T9140] 9pnet_fd: Insufficient options for proto=fd [ 2948.318243][ T9134] bridge0: port 1(bridge_slave_0) entered blocking state [ 2948.325259][ T9134] bridge0: port 1(bridge_slave_0) entered disabled state [ 2948.332711][ T9134] device bridge_slave_0 entered promiscuous mode [ 2948.340387][ T9134] bridge0: port 2(bridge_slave_1) entered blocking state [ 2948.347860][ T9134] bridge0: port 2(bridge_slave_1) entered disabled state [ 2950.858300][ T9152] input: syz0 as /devices/virtual/input/input277 [ 2950.866857][ T9154] loop2: detected capacity change from 0 to 16 [ 2950.875552][ T9154] erofs: (device loop2): mounted with root inode @ nid 36. [ 2950.883736][ T9154] input: syz0 as /devices/virtual/input/input278 [ 2950.924680][ T9134] device bridge_slave_1 entered promiscuous mode [ 2952.460231][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2952.467759][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2952.495699][T32001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2952.505499][T32001] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2952.515405][T32001] bridge0: port 1(bridge_slave_0) entered blocking state [ 2952.522263][T32001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2952.565871][T31964] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 2952.576455][T31673] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2952.584753][T31673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2952.595091][T31673] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2952.604357][T31673] bridge0: port 2(bridge_slave_1) entered blocking state [ 2952.611214][T31673] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2952.635879][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2952.643992][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2952.659399][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2952.681857][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2952.698533][ T9176] netlink: 'syz.4.10289': attribute type 4 has an invalid length. [ 2952.727412][T32200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2952.737888][T32200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2952.761030][ T9134] device veth0_vlan entered promiscuous mode [ 2952.771422][ T9173] bridge0: port 1(bridge_slave_0) entered blocking state [ 2952.781634][ T9173] bridge0: port 1(bridge_slave_0) entered disabled state [ 2952.796562][ T9173] device bridge_slave_0 entered promiscuous mode [ 2952.811330][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2952.821633][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2952.837748][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2952.855893][ T9173] bridge0: port 2(bridge_slave_1) entered blocking state [ 2952.862737][ T9173] bridge0: port 2(bridge_slave_1) entered disabled state [ 2952.878936][ T9173] device bridge_slave_1 entered promiscuous mode [ 2952.896686][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2952.908130][ T9134] device veth1_macvtap entered promiscuous mode [ 2952.925966][T31964] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 2952.951146][T31964] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 2952.975856][T31964] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2953.004410][T31964] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2953.027444][T31964] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2953.051965][T31964] usb 3-1: config 0 descriptor?? [ 2953.060070][T32200] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2953.068768][T32200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2953.077211][T32200] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2953.085432][T32200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2953.093486][ T9168] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2953.156897][T32001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2953.166566][T32001] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2953.176484][T32001] bridge0: port 1(bridge_slave_0) entered blocking state [ 2953.183334][T32001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2953.215890][T31673] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2953.400600][T31673] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2953.414563][T31673] bridge0: port 2(bridge_slave_1) entered blocking state [ 2953.421469][T31673] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2953.456819][T32001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2953.465657][T32001] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2953.473530][T32001] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2953.485127][ T9173] device veth0_vlan entered promiscuous mode [ 2953.491530][ T6687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2953.499485][ T6687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2953.507755][ T6687] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2953.515003][ T6687] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2953.530402][ T7082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2953.538437][ T7082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2953.547936][ T9173] device veth1_macvtap entered promiscuous mode [ 2953.558594][ T7082] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2953.566395][ T7082] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2953.574441][ T7082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2953.590494][ T6687] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2953.598677][ T6687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2953.745906][T31673] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 2953.824293][ T9190] futex_wake_op: syz.0.10290 tries to shift op by -1; fix this program [ 2954.331991][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 2954.338690][ T28] audit: type=1326 audit(1729050534.064:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9185 comm="syz.3.10293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3feb7dff9 code=0x7ffc0000 [ 2954.421762][ T28] audit: type=1326 audit(1729050534.064:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9185 comm="syz.3.10293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3feb7dff9 code=0x7ffc0000 [ 2954.478824][ T28] audit: type=1326 audit(1729050534.084:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9185 comm="syz.3.10293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7fb3feb7dff9 code=0x7ffc0000 [ 2954.506086][ T28] audit: type=1326 audit(1729050534.094:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9185 comm="syz.3.10293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3feb7dff9 code=0x7ffc0000 [ 2954.539789][ T28] audit: type=1326 audit(1729050534.094:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9185 comm="syz.3.10293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3feb7dff9 code=0x7ffc0000 [ 2954.563759][ T28] audit: type=1326 audit(1729050534.104:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9185 comm="syz.3.10293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb3feb7dff9 code=0x7ffc0000 [ 2954.590379][ T28] audit: type=1326 audit(1729050534.114:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9185 comm="syz.3.10293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3feb7dff9 code=0x7ffc0000 [ 2954.613937][ T28] audit: type=1326 audit(1729050534.114:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9185 comm="syz.3.10293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3feb7dff9 code=0x7ffc0000 [ 2954.696509][ T9199] input: syz0 as /devices/virtual/input/input279 [ 2954.736270][T31673] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 2954.770003][ T28] audit: type=1326 audit(1729050534.134:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9185 comm="syz.3.10293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fb3feb7c897 code=0x7ffc0000 [ 2954.862963][T31673] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 2954.884722][ T28] audit: type=1326 audit(1729050534.144:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9185 comm="syz.3.10293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3feb7dff9 code=0x7ffc0000 [ 2954.935956][T31673] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2954.945890][T31964] usbhid 3-1:0.0: can't add hid device: -71 [ 2954.948927][T31673] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2954.954443][ T9203] 9pnet_fd: Insufficient options for proto=fd [ 2954.963833][T31673] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2954.970869][T31964] usbhid: probe of 3-1:0.0 failed with error -71 [ 2954.980161][T31673] usb 5-1: config 0 descriptor?? [ 2954.987212][T31964] usb 3-1: USB disconnect, device number 19 [ 2955.015913][ T9183] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2955.151395][ T7888] device bridge_slave_1 left promiscuous mode [ 2955.162415][ T7888] bridge0: port 2(bridge_slave_1) entered disabled state [ 2955.190040][ T7888] device bridge_slave_0 left promiscuous mode [ 2955.515239][ T7888] bridge0: port 1(bridge_slave_0) entered disabled state [ 2955.533605][ T7888] device veth1_macvtap left promiscuous mode [ 2955.546197][ T7888] device veth0_vlan left promiscuous mode [ 2955.560313][ T9208] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9208 comm=syz.3.10297 [ 2956.027071][ T9218] input: syz0 as /devices/virtual/input/input280 [ 2957.962834][ T9246] loop2: detected capacity change from 0 to 16 [ 2957.996036][T31673] usbhid 5-1:0.0: can't add hid device: -71 [ 2958.001948][T31673] usbhid: probe of 5-1:0.0 failed with error -71 [ 2958.273164][ T9246] erofs: (device loop2): mounted with root inode @ nid 36. [ 2958.290777][T31673] usb 5-1: USB disconnect, device number 2 [ 2958.417977][ T9250] loop0: detected capacity change from 0 to 256 [ 2958.563364][T32200] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 2959.055901][T31673] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 2959.086502][ T9253] loop2: detected capacity change from 0 to 40427 [ 2959.093673][ T9253] F2FS-fs (loop2): fault_injection options not supported [ 2959.100614][ T9253] F2FS-fs (loop2): Image doesn't support compression [ 2959.107153][ T9253] F2FS-fs (loop2): Unrecognized mount option "fault_injection=00000000002147483648" or missing value [ 2959.205942][T32200] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 2959.216980][T32200] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 2959.227890][T32200] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2959.240557][T32200] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2959.249391][T32200] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2959.257651][T32200] usb 4-1: config 0 descriptor?? [ 2959.276012][ T9233] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2959.435968][T31673] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 2959.456840][T31673] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 2959.468132][T31673] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2959.480934][T31673] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2959.490211][T31673] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2959.540029][T31673] usb 5-1: config 0 descriptor?? [ 2959.556287][ T9248] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2960.374970][ T9262] loop2: detected capacity change from 0 to 512 [ 2960.388022][ T9262] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 2960.396941][ T9262] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038 (0x7fffffff) [ 2960.796073][T32200] usbhid 4-1:0.0: can't add hid device: -71 [ 2960.801900][T32200] usbhid: probe of 4-1:0.0 failed with error -71 [ 2960.808700][T32200] usb 4-1: USB disconnect, device number 21 [ 2961.442830][ T9102] EXT4-fs (loop2): unmounting filesystem. [ 2961.837276][T31673] usbhid 5-1:0.0: can't add hid device: -71 [ 2961.901824][ T9280] input: syz0 as /devices/virtual/input/input281 [ 2962.091756][T31673] usbhid: probe of 5-1:0.0 failed with error -71 [ 2962.101873][T31673] usb 5-1: USB disconnect, device number 3 [ 2962.586973][ T9288] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9288 comm=syz.4.10314 [ 2962.619317][ T9292] loop0: detected capacity change from 0 to 512 [ 2962.669829][ T9292] EXT4-fs error (device loop0): ext4_do_update_inode:5212: inode #3: comm syz.0.10310: corrupted inode contents [ 2962.681863][ T9292] EXT4-fs error (device loop0): ext4_dirty_inode:6074: inode #3: comm syz.0.10310: mark_inode_dirty error [ 2962.693522][ T9292] EXT4-fs error (device loop0): ext4_do_update_inode:5212: inode #3: comm syz.0.10310: corrupted inode contents [ 2962.705514][ T9292] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #3: comm syz.0.10310: mark_inode_dirty error [ 2962.717024][ T9292] __quota_error: 25 callbacks suppressed [ 2962.717039][ T9292] Quota error (device loop0): write_blk: dquota write failed [ 2962.729893][ T9292] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 2962.739789][ T9292] EXT4-fs error (device loop0): ext4_acquire_dquot:6764: comm syz.0.10310: Failed to acquire dquot type 0 [ 2962.753945][ T9292] EXT4-fs error (device loop0): ext4_do_update_inode:5212: inode #16: comm syz.0.10310: corrupted inode contents [ 2962.767468][ T9292] EXT4-fs error (device loop0): ext4_dirty_inode:6074: inode #16: comm syz.0.10310: mark_inode_dirty error [ 2962.780849][ T9292] EXT4-fs error (device loop0): ext4_do_update_inode:5212: inode #16: comm syz.0.10310: corrupted inode contents [ 2962.808640][ T9298] loop2: detected capacity change from 0 to 16 [ 2962.821466][ T9298] erofs: (device loop2): mounted with root inode @ nid 36. [ 2962.844342][ T9298] input: syz0 as /devices/virtual/input/input282 [ 2962.911853][ T9292] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.10310: mark_inode_dirty error [ 2962.925216][ T9292] EXT4-fs error (device loop0): ext4_do_update_inode:5212: inode #16: comm syz.0.10310: corrupted inode contents [ 2962.925938][ T7082] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 2962.937394][ T9292] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 2962.953462][ T9292] EXT4-fs error (device loop0): ext4_do_update_inode:5212: inode #16: comm syz.0.10310: corrupted inode contents [ 2962.965419][ T9292] EXT4-fs error (device loop0): ext4_truncate:4302: inode #16: comm syz.0.10310: mark_inode_dirty error [ 2962.976721][ T9292] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 2962.986151][ T9292] EXT4-fs (loop0): 1 truncate cleaned up [ 2962.991607][ T9292] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 2963.000393][ T9292] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038 (0x7fffffff) [ 2963.105911][T31673] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 2963.167599][ T9300] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 2963.335941][ T7082] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 2963.346937][ T7082] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 2963.357857][ T7082] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2963.370552][ T7082] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2963.379341][ T7082] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2963.387629][ T7082] usb 4-1: config 0 descriptor?? [ 2963.405909][ T9285] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2963.478055][ T9173] EXT4-fs (loop0): unmounting filesystem. [ 2963.487838][T31673] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2963.498647][T31673] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2963.540187][T31673] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 2963.549087][T31673] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2963.563581][T31673] usb 5-1: config 0 descriptor?? [ 2963.777150][ T9305] loop2: detected capacity change from 0 to 40427 [ 2963.784790][ T9305] F2FS-fs (loop2): fault_injection options not supported [ 2963.791707][ T9305] F2FS-fs (loop2): Image doesn't support compression [ 2963.793239][ T9308] futex_wake_op: syz.0.10317 tries to shift op by -1; fix this program [ 2963.798165][ T9305] F2FS-fs (loop2): Unrecognized mount option "fault_injection=00000000002147483648" or missing value [ 2963.829668][ T9296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2963.843751][ T9296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2964.045879][T31673] usbhid 5-1:0.0: can't add hid device: -71 [ 2964.051639][T31673] usbhid: probe of 5-1:0.0 failed with error -71 [ 2964.060265][T31673] usb 5-1: USB disconnect, device number 4 [ 2964.430562][ T9314] loop0: detected capacity change from 0 to 512 [ 2964.452557][ T9314] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 2964.463334][ T9314] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038 (0x7fffffff) [ 2965.195881][ T7082] usbhid 4-1:0.0: can't add hid device: -71 [ 2965.201707][ T7082] usbhid: probe of 4-1:0.0 failed with error -71 [ 2965.214465][ T7082] usb 4-1: USB disconnect, device number 22 [ 2965.320476][ T9173] EXT4-fs (loop0): unmounting filesystem. [ 2965.361089][ T9327] futex_wake_op: syz.3.10321 tries to shift op by -1; fix this program [ 2965.490495][ T9331] loop2: detected capacity change from 0 to 16 [ 2965.557030][ T9331] erofs: (device loop2): mounted with root inode @ nid 36. [ 2966.186288][ T9340] netlink: 'syz.3.10324': attribute type 4 has an invalid length. [ 2966.259791][ T9342] input: syz0 as /devices/virtual/input/input283 [ 2966.976242][ T7082] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 2967.014986][ T9354] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 2967.251936][ T9356] loop2: detected capacity change from 0 to 16 [ 2967.258505][ T9356] erofs: (device loop2): mounted with root inode @ nid 36. [ 2967.266591][ T9356] input: syz0 as /devices/virtual/input/input284 [ 2967.415890][ T7082] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 2967.426868][ T7082] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 2967.437787][ T7082] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2967.450458][ T7082] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2967.459311][ T7082] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2967.467619][ T7082] usb 1-1: config 0 descriptor?? [ 2967.485891][ T9347] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2968.015979][T13052] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 2968.095867][T31673] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 2968.395950][T13052] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2968.406742][T13052] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2968.416210][T13052] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 2968.425026][T13052] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2968.433626][T13052] usb 4-1: config 0 descriptor?? [ 2968.485910][T31673] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2968.496680][T31673] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2968.506249][T31673] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 2968.515053][T31673] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2968.523627][T31673] usb 3-1: config 0 descriptor?? [ 2968.677386][ T9360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2968.685645][ T9360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2968.767062][ T9363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2968.775331][ T9363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2969.045874][T13052] usbhid 4-1:0.0: can't add hid device: -71 [ 2969.051617][T13052] usbhid: probe of 4-1:0.0 failed with error -71 [ 2969.058771][T13052] usb 4-1: USB disconnect, device number 23 [ 2969.125869][T31673] usbhid 3-1:0.0: can't add hid device: -71 [ 2969.131632][T31673] usbhid: probe of 3-1:0.0 failed with error -71 [ 2969.138492][T31673] usb 3-1: USB disconnect, device number 20 [ 2969.586091][ T7082] usbhid 1-1:0.0: can't add hid device: -71 [ 2969.591928][ T7082] usbhid: probe of 1-1:0.0 failed with error -71 [ 2969.598958][ T7082] usb 1-1: USB disconnect, device number 22 [ 2971.653006][ T9380] loop0: detected capacity change from 0 to 40427 [ 2971.660199][ T9380] F2FS-fs (loop0): fault_injection options not supported [ 2971.667110][ T9380] F2FS-fs (loop0): Image doesn't support compression [ 2971.673553][ T9380] F2FS-fs (loop0): Unrecognized mount option "fault_injection=00000000002147483648" or missing value [ 2972.555874][T13052] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 2972.832998][ T9389] bridge0: port 1(bridge_slave_0) entered blocking state [ 2972.839918][ T9389] bridge0: port 1(bridge_slave_0) entered disabled state [ 2972.847095][ T9389] device bridge_slave_0 entered promiscuous mode [ 2972.853966][ T9389] bridge0: port 2(bridge_slave_1) entered blocking state [ 2972.860881][ T9389] bridge0: port 2(bridge_slave_1) entered disabled state [ 2972.868236][ T9389] device bridge_slave_1 entered promiscuous mode [ 2972.905067][ T9389] bridge0: port 2(bridge_slave_1) entered blocking state [ 2972.911919][ T9389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2972.919026][ T9389] bridge0: port 1(bridge_slave_0) entered blocking state [ 2972.925829][ T9389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2972.943414][T31964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2972.950959][T31964] bridge0: port 1(bridge_slave_0) entered disabled state [ 2972.955949][T13052] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 2972.968937][T13052] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 2972.969020][T31964] bridge0: port 2(bridge_slave_1) entered disabled state [ 2972.980048][T13052] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2972.999558][T13052] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2973.008430][T13052] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2973.019425][T13052] usb 1-1: config 0 descriptor?? [ 2973.024856][T32200] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2973.032937][T32200] bridge0: port 1(bridge_slave_0) entered blocking state [ 2973.039808][T32200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2973.045902][ T9386] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2973.047028][T32200] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2973.062294][T32200] bridge0: port 2(bridge_slave_1) entered blocking state [ 2973.069162][T32200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2973.076317][T32200] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2973.093097][ T9389] device veth0_vlan entered promiscuous mode [ 2973.099437][ T7082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2973.107887][ T7082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2973.115616][ T7082] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2973.122950][ T7082] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2973.130129][ T7082] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2973.142152][ T9389] device veth1_macvtap entered promiscuous mode [ 2973.148869][T31673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2973.163649][ T7082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2973.171893][ T7082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2973.347144][ T9396] futex_wake_op: syz.4.10336 tries to shift op by -1; fix this program [ 2973.486351][ T982] device bridge_slave_1 left promiscuous mode [ 2973.492282][ T982] bridge0: port 2(bridge_slave_1) entered disabled state [ 2973.499626][ T982] device bridge_slave_0 left promiscuous mode [ 2973.505568][ T982] bridge0: port 1(bridge_slave_0) entered disabled state [ 2973.513158][ T982] device veth1_macvtap left promiscuous mode [ 2973.519023][ T982] device veth0_vlan left promiscuous mode [ 2974.195054][ T9401] input: syz0 as /devices/virtual/input/input285 [ 2975.325887][T13052] usbhid 1-1:0.0: can't add hid device: -71 [ 2975.331657][T13052] usbhid: probe of 1-1:0.0 failed with error -71 [ 2975.349502][T13052] usb 1-1: USB disconnect, device number 23 [ 2975.466634][ T9408] loop0: detected capacity change from 0 to 40427 [ 2975.473332][ T9408] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 2975.480981][ T9408] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 2975.490801][ T9408] F2FS-fs (loop0): Found nat_bits in checkpoint [ 2975.514290][ T9408] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 2975.521229][ T9408] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 2975.874928][ T28] audit: type=1326 audit(1729050555.884:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9407 comm="syz.0.10339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82fc77dff9 code=0x7ffc0000 [ 2975.901203][ T28] audit: type=1326 audit(1729050555.884:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9407 comm="syz.0.10339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82fc77dff9 code=0x7ffc0000 [ 2975.924703][ T28] audit: type=1326 audit(1729050555.894:1526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9407 comm="syz.0.10339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f82fc77dff9 code=0x7ffc0000 [ 2975.948110][ T28] audit: type=1326 audit(1729050555.894:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9407 comm="syz.0.10339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82fc77dff9 code=0x7ffc0000 [ 2975.971507][ T28] audit: type=1326 audit(1729050555.894:1528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9407 comm="syz.0.10339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82fc77dff9 code=0x7ffc0000 [ 2975.995365][ T28] audit: type=1326 audit(1729050555.894:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9407 comm="syz.0.10339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f82fc77dff9 code=0x7ffc0000 [ 2976.018891][ T28] audit: type=1326 audit(1729050555.894:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9407 comm="syz.0.10339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82fc77dff9 code=0x7ffc0000 [ 2976.042719][ T28] audit: type=1326 audit(1729050555.894:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9407 comm="syz.0.10339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82fc77dff9 code=0x7ffc0000 [ 2976.067650][ T28] audit: type=1326 audit(1729050555.904:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9407 comm="syz.0.10339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f82fc77c897 code=0x7ffc0000 [ 2976.091449][ T28] audit: type=1326 audit(1729050555.904:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9407 comm="syz.0.10339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82fc77dff9 code=0x7ffc0000 [ 2976.116628][ T9419] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 2976.770992][ T9425] 9pnet: Unknown protocol version 9p20\++} [ 2976.812142][ T9422] loop0: detected capacity change from 0 to 40427 [ 2976.819487][ T9422] F2FS-fs (loop0): fault_injection options not supported [ 2976.826415][ T9422] F2FS-fs (loop0): Image doesn't support compression [ 2976.832875][ T9422] F2FS-fs (loop0): Unrecognized mount option "fault_injection=00000000002147483648" or missing value [ 2977.095847][T32200] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 2977.541640][T32200] usb 5-1: device descriptor read/64, error -71 [ 2977.643374][ T9430] loop0: detected capacity change from 0 to 40427 [ 2977.650236][ T9430] F2FS-fs (loop0): fault_injection options not supported [ 2977.657151][ T9430] F2FS-fs (loop0): Image doesn't support compression [ 2977.663599][ T9430] F2FS-fs (loop0): Unrecognized mount option "fault_injection=00000000002147483648" or missing value [ 2977.842881][ T9433] bridge0: port 1(bridge_slave_0) entered blocking state [ 2977.850124][ T9433] bridge0: port 1(bridge_slave_0) entered disabled state [ 2977.857364][ T9433] device bridge_slave_0 entered promiscuous mode [ 2977.867506][ T9433] bridge0: port 2(bridge_slave_1) entered blocking state [ 2977.874384][ T9433] bridge0: port 2(bridge_slave_1) entered disabled state [ 2977.881556][ T9433] device bridge_slave_1 entered promiscuous mode [ 2977.920742][ T9433] bridge0: port 2(bridge_slave_1) entered blocking state [ 2977.927587][ T9433] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2977.934643][ T9433] bridge0: port 1(bridge_slave_0) entered blocking state [ 2977.941480][ T9433] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2977.959473][ T9460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2977.966579][T32200] usb 5-1: device descriptor read/64, error -71 [ 2977.972992][ T9460] bridge0: port 1(bridge_slave_0) entered disabled state [ 2977.980105][ T9460] bridge0: port 2(bridge_slave_1) entered disabled state [ 2977.989034][ T7082] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2977.997013][ T7082] bridge0: port 1(bridge_slave_0) entered blocking state [ 2978.003837][ T7082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2978.016579][ T9460] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2978.024504][ T9460] bridge0: port 2(bridge_slave_1) entered blocking state [ 2978.031341][ T9460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2978.038512][ T9460] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2978.051079][ T7082] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2978.065793][ T9433] device veth0_vlan entered promiscuous mode [ 2978.072515][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2978.081015][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2978.089882][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2978.097191][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2978.111223][ T9433] device veth1_macvtap entered promiscuous mode [ 2978.128607][ T9460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2978.165949][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2978.184522][ T7944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2978.245936][T32200] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 2978.279864][ T9443] bridge0: port 1(bridge_slave_0) entered blocking state [ 2978.286934][ T9443] bridge0: port 1(bridge_slave_0) entered disabled state [ 2978.294242][ T9443] device bridge_slave_0 entered promiscuous mode [ 2978.302518][ T9443] bridge0: port 2(bridge_slave_1) entered blocking state [ 2978.309596][ T9443] bridge0: port 2(bridge_slave_1) entered disabled state [ 2978.321071][ T9443] device bridge_slave_1 entered promiscuous mode [ 2978.429447][ T9443] bridge0: port 2(bridge_slave_1) entered blocking state [ 2978.436344][ T9443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2978.443405][ T9443] bridge0: port 1(bridge_slave_0) entered blocking state [ 2978.450216][ T9443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2978.497903][ T9443] device veth0_vlan entered promiscuous mode [ 2978.511417][ T9443] device veth1_macvtap entered promiscuous mode [ 2978.517763][ T9448] loop0: detected capacity change from 0 to 40427 [ 2978.524971][ T9448] F2FS-fs (loop0): fault_injection options not supported [ 2978.531912][ T9448] F2FS-fs (loop0): Image doesn't support compression [ 2978.538360][ T9448] F2FS-fs (loop0): Unrecognized mount option "fault_injection=00000000002147483648" or missing value [ 2978.552876][ T7082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2978.560257][ T7082] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2978.568624][ T7082] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2978.577128][ T7082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2978.585205][ T7082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2978.598818][ T7082] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2978.606839][ T7082] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2978.614660][ T7082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2978.644767][ T7082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2978.652599][ T7082] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2978.659802][ T7082] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2978.667104][ T7082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2978.691597][ T9450] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9450 comm=syz.2.10346 [ 2978.706084][T32200] usb 5-1: device descriptor read/64, error -71 [ 2978.712280][ T7944] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 2979.176421][ T9453] loop2: detected capacity change from 0 to 40427 [ 2979.183524][ T9453] F2FS-fs (loop2): fault_injection options not supported [ 2979.190626][ T9453] F2FS-fs (loop2): Image doesn't support compression [ 2979.197195][ T9453] F2FS-fs (loop2): Unrecognized mount option "fault_injection=00000000002147483648" or missing value [ 2979.267090][ T982] device bridge_slave_1 left promiscuous mode [ 2979.273151][ T982] bridge0: port 2(bridge_slave_1) entered disabled state [ 2979.280697][ T982] device bridge_slave_0 left promiscuous mode [ 2979.287034][ T982] bridge0: port 1(bridge_slave_0) entered disabled state [ 2979.294930][ T982] device veth1_macvtap left promiscuous mode [ 2979.302404][ T9457] futex_wake_op: syz.0.10348 tries to shift op by -1; fix this program [ 2979.308271][ T982] device veth0_vlan left promiscuous mode [ 2979.355917][ T7944] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2979.366747][ T7944] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2979.376472][T32200] usb 5-1: device descriptor read/64, error -71 [ 2979.382607][ T7944] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 2979.391472][ T7944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2979.400481][ T7944] usb 4-1: config 0 descriptor?? [ 2979.506018][T32200] usb usb5-port1: attempt power cycle [ 2979.648019][ T9442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2979.656527][ T9442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2979.690941][ T9461] futex_wake_op: syz.2.10349 tries to shift op by -1; fix this program [ 2980.005880][ T7944] usbhid 4-1:0.0: can't add hid device: -71 [ 2980.014142][ T7944] usbhid: probe of 4-1:0.0 failed with error -71 [ 2980.261161][ T7944] usb 4-1: USB disconnect, device number 24 [ 2980.284122][ T9469] loop0: detected capacity change from 0 to 512 [ 2980.297677][ T9469] EXT4-fs error (device loop0): ext4_do_update_inode:5212: inode #3: comm syz.0.10351: corrupted inode contents [ 2980.309881][ T9469] EXT4-fs error (device loop0): ext4_dirty_inode:6074: inode #3: comm syz.0.10351: mark_inode_dirty error [ 2980.321633][ T9469] EXT4-fs error (device loop0): ext4_do_update_inode:5212: inode #3: comm syz.0.10351: corrupted inode contents [ 2980.333610][ T9469] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #3: comm syz.0.10351: mark_inode_dirty error [ 2980.345254][ T9469] EXT4-fs error (device loop0): ext4_acquire_dquot:6764: comm syz.0.10351: Failed to acquire dquot type 0 [ 2980.356823][ T9469] EXT4-fs error (device loop0): ext4_do_update_inode:5212: inode #16: comm syz.0.10351: corrupted inode contents [ 2980.368904][ T9469] EXT4-fs error (device loop0): ext4_dirty_inode:6074: inode #16: comm syz.0.10351: mark_inode_dirty error [ 2980.380500][ T9469] EXT4-fs error (device loop0): ext4_do_update_inode:5212: inode #16: comm syz.0.10351: corrupted inode contents [ 2980.392489][ T9469] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.10351: mark_inode_dirty error [ 2980.403933][ T9469] EXT4-fs error (device loop0): ext4_do_update_inode:5212: inode #16: comm syz.0.10351: corrupted inode contents [ 2980.415993][ T9469] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 2980.424526][ T9469] EXT4-fs error (device loop0): ext4_do_update_inode:5212: inode #16: comm syz.0.10351: corrupted inode contents [ 2980.436829][ T9469] EXT4-fs error (device loop0): ext4_truncate:4302: inode #16: comm syz.0.10351: mark_inode_dirty error [ 2980.448316][ T982] device bridge_slave_1 left promiscuous mode [ 2980.454377][ T982] bridge0: port 2(bridge_slave_1) entered disabled state [ 2980.462036][ T982] device bridge_slave_0 left promiscuous mode [ 2980.468517][ T982] bridge0: port 1(bridge_slave_0) entered disabled state [ 2980.475991][ T9469] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 2980.485404][ T9469] EXT4-fs (loop0): 1 truncate cleaned up [ 2980.485782][ T982] device veth1_macvtap left promiscuous mode [ 2980.493087][ T9469] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 2980.497064][ T982] device veth0_vlan left promiscuous mode [ 2980.505777][ T9469] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038 (0x7fffffff) [ 2980.685890][ T9476] futex_wake_op: syz.2.10352 tries to shift op by -1; fix this program [ 2980.882871][ T9481] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 2981.271380][ T9173] EXT4-fs (loop0): unmounting filesystem. [ 2981.913816][ T9488] loop2: detected capacity change from 0 to 40427 [ 2981.922269][ T9491] netlink: 'syz.0.10354': attribute type 4 has an invalid length. [ 2981.937821][ T9488] F2FS-fs (loop2): fault_injection options not supported [ 2981.944682][ T9488] F2FS-fs (loop2): Image doesn't support compression [ 2981.951221][ T9488] F2FS-fs (loop2): Unrecognized mount option "fault_injection=00000000002147483648" or missing value [ 2982.261680][ T9495] input: syz0 as /devices/virtual/input/input286 [ 2982.683139][ T9505] netlink: 'syz.0.10358': attribute type 4 has an invalid length. [ 2982.861380][ T9507] 9pnet: Unknown protocol version 9p20\++} [ 2982.925870][ T7082] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 2983.185900][T32200] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 2983.285919][ T7082] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 2983.296927][ T7082] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 2983.308017][ T7082] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2983.320691][ T7082] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2983.329531][ T7082] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2983.346236][ T7082] usb 3-1: config 0 descriptor?? [ 2983.365892][ T9504] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2983.485856][T32200] usb 5-1: device descriptor read/64, error -71 [ 2983.566713][ T9515] loop0: detected capacity change from 0 to 256 [ 2984.045880][T32200] usb 5-1: device descriptor read/64, error -71 [ 2984.325864][T32200] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 2984.615848][T32200] usb 5-1: device descriptor read/64, error -71 [ 2985.065851][T32200] usb 5-1: device descriptor read/64, error -71 [ 2985.196083][T32200] usb usb5-port1: attempt power cycle [ 2985.565897][ T7082] usbhid 3-1:0.0: can't add hid device: -71 [ 2985.571705][ T7082] usbhid: probe of 3-1:0.0 failed with error -71 [ 2985.578489][ T7082] usb 3-1: USB disconnect, device number 21 [ 2985.629390][T32200] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 2985.636666][ T9521] input: syz0 as /devices/virtual/input/input287 [ 2985.885861][T32200] usb 5-1: device descriptor read/8, error -71 [ 2986.016184][ T9525] futex_wake_op: syz.4.10362 tries to shift op by -1; fix this program [ 2986.095851][T32200] usb 5-1: device descriptor read/8, error -71 [ 2986.782783][ T9535] loop0: detected capacity change from 0 to 16 [ 2986.801841][ T9535] erofs: (device loop0): mounted with root inode @ nid 36. [ 2986.863254][ T9529] loop2: detected capacity change from 0 to 40427 [ 2986.873934][ T9529] F2FS-fs (loop2): fault_injection options not supported [ 2986.880849][ T9529] F2FS-fs (loop2): Image doesn't support compression [ 2986.887313][ T9529] F2FS-fs (loop2): Unrecognized mount option "fault_injection=00000000002147483648" or missing value [ 2987.389234][ T28] kauditd_printk_skb: 44 callbacks suppressed [ 2987.389283][ T28] audit: type=1326 audit(1729050567.344:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9533 comm="syz.4.10365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f646957dff9 code=0x7ffc0000 [ 2987.418846][ T28] audit: type=1326 audit(1729050567.344:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9533 comm="syz.4.10365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f646957dff9 code=0x7ffc0000 [ 2987.442886][ T28] audit: type=1326 audit(1729050567.344:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9533 comm="syz.4.10365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f646957dff9 code=0x7ffc0000 [ 2987.472440][ T28] audit: type=1326 audit(1729050567.344:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9533 comm="syz.4.10365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f646957dff9 code=0x7ffc0000 [ 2987.496093][ T28] audit: type=1326 audit(1729050567.344:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9533 comm="syz.4.10365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f646957dff9 code=0x7ffc0000 [ 2987.585062][ T28] audit: type=1326 audit(1729050567.354:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9533 comm="syz.4.10365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f646957dff9 code=0x7ffc0000 [ 2987.687515][ T9545] loop2: detected capacity change from 0 to 256 [ 2987.871567][ T28] audit: type=1326 audit(1729050567.354:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9533 comm="syz.4.10365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f646957dff9 code=0x7ffc0000 [ 2987.915842][ T28] audit: type=1326 audit(1729050567.354:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9533 comm="syz.4.10365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f646957dff9 code=0x7ffc0000 [ 2987.949630][ T28] audit: type=1326 audit(1729050567.354:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9533 comm="syz.4.10365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f646957c897 code=0x7ffc0000 [ 2987.998741][ T28] audit: type=1326 audit(1729050567.354:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9533 comm="syz.4.10365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f646957dff9 code=0x7ffc0000 [ 2988.025855][ T1760] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 2988.513101][ T9552] bridge0: port 1(bridge_slave_0) entered blocking state [ 2988.520014][ T9552] bridge0: port 1(bridge_slave_0) entered disabled state [ 2988.527194][ T9552] device bridge_slave_0 entered promiscuous mode [ 2988.533865][ T9552] bridge0: port 2(bridge_slave_1) entered blocking state [ 2988.540790][ T9552] bridge0: port 2(bridge_slave_1) entered disabled state [ 2988.548142][ T9552] device bridge_slave_1 entered promiscuous mode [ 2988.589898][ T9552] bridge0: port 2(bridge_slave_1) entered blocking state [ 2988.596756][ T9552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2988.603836][ T9552] bridge0: port 1(bridge_slave_0) entered blocking state [ 2988.610639][ T9552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2988.631105][T32001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2988.638753][T32001] bridge0: port 1(bridge_slave_0) entered disabled state [ 2988.646149][T32001] bridge0: port 2(bridge_slave_1) entered disabled state [ 2988.656694][T32001] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2988.664851][T32001] bridge0: port 1(bridge_slave_0) entered blocking state [ 2988.671719][T32001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2988.681980][ T1760] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2988.697879][ T1760] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2988.707633][ T1760] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 2988.716699][ T1760] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2988.725164][ T1760] usb 1-1: config 0 descriptor?? [ 2988.742978][ T7082] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2988.751158][ T7082] bridge0: port 2(bridge_slave_1) entered blocking state [ 2988.758008][ T7082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2988.765265][ T7082] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2988.773026][ T7082] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2988.788611][ T7082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2988.798472][T32200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2988.806920][ T9460] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2988.814112][ T9460] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2988.828519][ T9552] device veth0_vlan entered promiscuous mode [ 2988.862377][ T7082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2988.887878][ T9552] device veth1_macvtap entered promiscuous mode [ 2988.907910][ T9460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2988.920050][T32200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2988.999889][ T9543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2989.009606][ T9543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2989.125042][ T9564] futex_wake_op: syz.3.10369 tries to shift op by -1; fix this program [ 2989.210898][T11657] device bridge_slave_1 left promiscuous mode [ 2989.218003][T11657] bridge0: port 2(bridge_slave_1) entered disabled state [ 2989.241135][T11657] device bridge_slave_0 left promiscuous mode [ 2989.247353][T11657] bridge0: port 1(bridge_slave_0) entered disabled state [ 2989.255314][T11657] device veth1_macvtap left promiscuous mode [ 2989.261337][T11657] device veth0_vlan left promiscuous mode [ 2989.345893][ T1760] usbhid 1-1:0.0: can't add hid device: -71 [ 2989.351697][ T1760] usbhid: probe of 1-1:0.0 failed with error -71 [ 2989.361792][ T1760] usb 1-1: USB disconnect, device number 24 [ 2989.544383][ T9567] 9pnet: Unknown protocol version 9p20\++} [ 2989.865847][T32001] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 2989.944750][ T9572] input: syz0 as /devices/virtual/input/input288 [ 2990.175867][T32001] usb 5-1: device descriptor read/64, error -71 [ 2990.565845][T32001] usb 5-1: device descriptor read/64, error -71 [ 2990.977185][ T9581] futex_wake_op: syz.3.10374 tries to shift op by -1; fix this program [ 2991.005899][T32001] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 2991.275847][T32001] usb 5-1: device descriptor read/64, error -71 [ 2991.687269][T32001] usb 5-1: device descriptor read/64, error -71 [ 2991.805884][T32001] usb usb5-port1: attempt power cycle [ 2991.965849][ T1760] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 2992.215852][T32001] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 2992.329618][ T9592] loop2: detected capacity change from 0 to 16 [ 2992.336355][ T9592] erofs: (device loop2): mounted with root inode @ nid 36. [ 2992.365919][ T1760] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2992.376661][ T1760] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2992.386020][T32001] usb 5-1: device descriptor read/8, error -71 [ 2992.386752][ T1760] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 2992.401005][ T1760] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2992.409308][ T1760] usb 4-1: config 0 descriptor?? [ 2992.615910][T32001] usb 5-1: device descriptor read/8, error -71 [ 2992.647008][ T9588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2992.655290][ T9588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2992.846002][ T1760] usbhid 4-1:0.0: can't add hid device: -71 [ 2992.851968][ T1760] usbhid: probe of 4-1:0.0 failed with error -71 [ 2992.869897][ T1760] usb 4-1: USB disconnect, device number 25 [ 2993.235850][T32001] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 2993.345921][T32001] usb 5-1: Using ep0 maxpacket: 16 [ 2993.625897][T32001] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 2993.634762][T32001] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2993.642581][T32001] usb 5-1: Product: syz [ 2993.646552][T32001] usb 5-1: Manufacturer: syz [ 2993.650967][T32001] usb 5-1: SerialNumber: syz [ 2993.656152][T32001] r8152-cfgselector 5-1: config 0 descriptor?? [ 2993.915906][T32001] r8152-cfgselector 5-1: Unknown version 0x0000 [ 2994.164348][ T9611] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 2995.023481][ T9616] loop2: detected capacity change from 0 to 16 [ 2995.106918][ T9616] erofs: (device loop2): mounted with root inode @ nid 36. [ 2995.132673][ T9616] input: syz0 as /devices/virtual/input/input289 [ 2995.653501][T32001] r8152-cfgselector 5-1: Unknown version 0x0000 [ 2995.659776][T32001] r8152-cfgselector 5-1: bad CDC descriptors [ 2995.685876][T32001] r8152-cfgselector 5-1: Unknown version 0x0000 [ 2995.692540][T32001] r8152-cfgselector 5-1: USB disconnect, device number 15 [ 2995.996120][ T9626] futex_wake_op: syz.2.10385 tries to shift op by -1; fix this program [ 2996.987430][ T9634] loop2: detected capacity change from 0 to 40427 [ 2996.994173][ T7082] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 2997.001649][ T9634] F2FS-fs (loop2): fault_injection options not supported [ 2997.008448][ T9634] F2FS-fs (loop2): Image doesn't support compression [ 2997.014907][ T9634] F2FS-fs (loop2): Unrecognized mount option "fault_injection=00000000002147483648" or missing value [ 2997.405889][ T7082] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 2997.416866][ T7082] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 2997.427791][ T7082] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2997.440478][ T7082] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2997.449308][ T7082] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2997.457648][ T7082] usb 5-1: config 0 descriptor?? [ 2997.475877][ T9631] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2997.751924][ T9639] bridge0: port 1(bridge_slave_0) entered blocking state [ 2997.758820][ T9639] bridge0: port 1(bridge_slave_0) entered disabled state [ 2997.768012][ T9639] device bridge_slave_0 entered promiscuous mode [ 2997.777135][ T9639] bridge0: port 2(bridge_slave_1) entered blocking state [ 2997.783991][ T9639] bridge0: port 2(bridge_slave_1) entered disabled state [ 2997.792975][ T9639] device bridge_slave_1 entered promiscuous mode [ 2998.014111][ T9639] bridge0: port 2(bridge_slave_1) entered blocking state [ 2998.021004][ T9639] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2998.028071][ T9639] bridge0: port 1(bridge_slave_0) entered blocking state [ 2998.035060][ T9639] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2998.054646][T32001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2998.061988][T32001] bridge0: port 1(bridge_slave_0) entered disabled state [ 2998.069369][T32001] bridge0: port 2(bridge_slave_1) entered disabled state [ 2998.079460][T13052] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2998.087472][T13052] bridge0: port 1(bridge_slave_0) entered blocking state [ 2998.094311][T13052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2998.103042][T13052] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2998.110893][T31673] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 2998.118393][T13052] bridge0: port 2(bridge_slave_1) entered blocking state [ 2998.125323][T13052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2998.140443][T13052] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2998.148223][T13052] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2998.159129][T13052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2998.169655][T13052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2998.177461][T13052] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2998.184648][T13052] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2998.192838][ T9639] device veth0_vlan entered promiscuous mode [ 2998.203222][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2998.211994][ T9639] device veth1_macvtap entered promiscuous mode [ 2998.222918][T32200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2998.231246][T32200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2998.254505][ T9647] loop0: detected capacity change from 0 to 512 [ 2998.267981][ T9647] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 2998.277120][ T9647] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038 (0x7fffffff) [ 2998.343991][ T9639] EXT4-fs (loop0): unmounting filesystem. [ 2998.411625][ T9653] loop0: detected capacity change from 0 to 16 [ 2998.418198][ T9653] erofs: (device loop0): mounted with root inode @ nid 36. [ 2998.485895][T31673] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 2998.496888][T31673] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 2998.507834][T31673] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2998.520516][T31673] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2998.529349][T31673] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2998.537678][T31673] usb 3-1: config 0 descriptor?? [ 2998.555910][ T9644] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2998.846392][ T982] device bridge_slave_1 left promiscuous mode [ 2998.852363][ T982] bridge0: port 2(bridge_slave_1) entered disabled state [ 2998.859644][ T982] device bridge_slave_0 left promiscuous mode [ 2998.865594][ T982] bridge0: port 1(bridge_slave_0) entered disabled state [ 2998.873551][ T982] device veth1_macvtap left promiscuous mode [ 2998.879487][ T982] device veth0_vlan left promiscuous mode [ 2999.297089][ T9656] futex_wake_op: syz.0.10391 tries to shift op by -1; fix this program [ 2999.575865][ T7082] usbhid 5-1:0.0: can't add hid device: -71 [ 2999.581623][ T7082] usbhid: probe of 5-1:0.0 failed with error -71 [ 2999.588451][ T7082] usb 5-1: USB disconnect, device number 16 [ 2999.681903][ T9660] futex_wake_op: syz.4.10392 tries to shift op by -1; fix this program [ 3000.445890][T32001] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 3000.517412][ T9669] input: syz0 as /devices/virtual/input/input290 [ 3000.685886][T32001] usb 1-1: Using ep0 maxpacket: 16 [ 3000.735869][T31673] usbhid 3-1:0.0: can't add hid device: -71 [ 3000.741651][T31673] usbhid: probe of 3-1:0.0 failed with error -71 [ 3000.748612][T31673] usb 3-1: USB disconnect, device number 22 [ 3000.965945][T32001] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 3000.974846][T32001] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3000.982731][T32001] usb 1-1: Product: syz [ 3000.986660][T32001] usb 1-1: Manufacturer: syz [ 3000.991037][T32001] usb 1-1: SerialNumber: syz [ 3000.996276][T32001] r8152-cfgselector 1-1: config 0 descriptor?? [ 3001.263864][T32001] r8152-cfgselector 1-1: Unknown version 0x0000 [ 3001.870653][ T9683] bridge0: port 1(bridge_slave_0) entered blocking state [ 3001.877603][ T9683] bridge0: port 1(bridge_slave_0) entered disabled state [ 3001.884655][ T9683] device bridge_slave_0 entered promiscuous mode [ 3001.891635][ T9683] bridge0: port 2(bridge_slave_1) entered blocking state [ 3001.898544][ T9683] bridge0: port 2(bridge_slave_1) entered disabled state [ 3001.905647][ T9683] device bridge_slave_1 entered promiscuous mode [ 3001.951211][ T9683] bridge0: port 2(bridge_slave_1) entered blocking state [ 3001.958078][ T9683] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3001.965150][ T9683] bridge0: port 1(bridge_slave_0) entered blocking state [ 3001.971957][ T9683] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3001.991345][ T9460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3001.999234][ T9460] bridge0: port 1(bridge_slave_0) entered disabled state [ 3002.006633][ T9460] bridge0: port 2(bridge_slave_1) entered disabled state [ 3002.016886][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3002.024870][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 3002.031829][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3002.040843][T31673] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3002.048790][T31673] bridge0: port 2(bridge_slave_1) entered blocking state [ 3002.055634][T31673] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3002.074496][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3002.082361][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3002.098040][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3002.115396][ T9683] device veth0_vlan entered promiscuous mode [ 3002.121719][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3002.130515][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3002.138126][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3002.154971][ T9683] device veth1_macvtap entered promiscuous mode [ 3002.162442][T32200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3002.175353][ T1760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3002.188859][T32200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3002.417095][T29059] device bridge_slave_1 left promiscuous mode [ 3002.423194][T29059] bridge0: port 2(bridge_slave_1) entered disabled state [ 3002.431203][T29059] device bridge_slave_0 left promiscuous mode [ 3002.443789][T29059] bridge0: port 1(bridge_slave_0) entered disabled state [ 3002.460892][T29059] device veth1_macvtap left promiscuous mode [ 3002.494552][T29059] device veth0_vlan left promiscuous mode [ 3002.593034][ T9700] futex_wake_op: syz.2.10400 tries to shift op by -1; fix this program [ 3003.076103][T32001] r8152-cfgselector 1-1: Unknown version 0x0000 [ 3003.089045][T32001] r8152-cfgselector 1-1: bad CDC descriptors [ 3003.115861][T32001] r8152-cfgselector 1-1: Unknown version 0x0000 [ 3003.126381][T32001] r8152-cfgselector 1-1: USB disconnect, device number 25 [ 3003.793422][ T9712] loop2: detected capacity change from 0 to 256 [ 3003.995947][T32001] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 3004.146372][T31673] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 3004.416368][T32001] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3004.448684][T32001] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3004.471694][T32001] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 3004.480816][T32001] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3004.489472][T32001] usb 1-1: config 0 descriptor?? [ 3004.535894][T31673] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 3004.546920][T31673] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 3004.557843][T31673] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3004.570502][T31673] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3004.579367][T31673] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3004.587988][T31673] usb 5-1: config 0 descriptor?? [ 3004.605892][ T9710] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 3004.730095][ T9702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3004.738454][ T9702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3005.027332][T32001] isku 0003:1E7D:319C.010D: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.0-1/input0 [ 3006.365930][T31673] usbhid 5-1:0.0: can't add hid device: -71 [ 3006.371846][T31673] usbhid: probe of 5-1:0.0 failed with error -71 [ 3006.401105][T31673] usb 5-1: USB disconnect, device number 17 [ 3006.808666][ T9739] loop2: detected capacity change from 0 to 16 [ 3006.824661][ T9739] erofs: (device loop2): mounted with root inode @ nid 36. [ 3006.866101][T31673] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 3007.225894][T31673] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 3007.236909][T31673] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 3007.247806][T31673] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3007.260472][T31673] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3007.269333][T31673] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3007.277814][T31673] usb 5-1: config 0 descriptor?? [ 3007.295888][ T9735] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 SYZFAIL: repeatedly failed to execute the program proc=1 req=6552 state=1 status=9 (errno 11: Resource temporarily unavailable) [ 3007.653803][T32001] usb 1-1: USB disconnect, device number 26 [ 3007.685865][T31673] usbhid 5-1:0.0: can't add hid device: -71 [ 3007.691626][T31673] usbhid: probe of 5-1:0.0 failed with error -71 [ 3007.705986][T31673] usb 5-1: USB disconnect, device number 18 [ 3008.176249][T11657] device bridge_slave_1 left promiscuous mode [ 3008.182156][T11657] bridge0: port 2(bridge_slave_1) entered disabled state [ 3008.189471][T11657] device bridge_slave_0 left promiscuous mode [ 3008.195369][T11657] bridge0: port 1(bridge_slave_0) entered disabled state [ 3008.202920][T11657] device veth1_macvtap left promiscuous mode [ 3008.208747][T11657] device veth0_vlan left promiscuous mode [ 3009.016670][T11657] device bridge_slave_1 left promiscuous mode [ 3009.022578][T11657] bridge0: port 2(bridge_slave_1) entered disabled state [ 3009.029936][T11657] device bridge_slave_0 left promiscuous mode [ 3009.035938][T11657] bridge0: port 1(bridge_slave_0) entered disabled state [ 3009.043327][T11657] device bridge_slave_1 left promiscuous mode [ 3009.049302][T11657] bridge0: port 2(bridge_slave_1) entered disabled state [ 3009.056629][T11657] device bridge_slave_0 left promiscuous mode [ 3009.062545][T11657] bridge0: port 1(bridge_slave_0) entered disabled state [ 3009.070186][T11657] device bridge_slave_1 left promiscuous mode [ 3009.076198][T11657] bridge0: port 2(bridge_slave_1) entered disabled state [ 3009.083343][T11657] device bridge_slave_0 left promiscuous mode [ 3009.089628][T11657] bridge0: port 1(bridge_slave_0) entered disabled state [ 3009.097256][T11657] device bridge_slave_1 left promiscuous mode [ 3009.103156][T11657] bridge0: port 2(bridge_slave_1) entered disabled state [ 3009.110692][T11657] device bridge_slave_0 left promiscuous mode [ 3009.116689][T11657] bridge0: port 1(bridge_slave_0) entered disabled state [ 3009.124510][T11657] device veth1_macvtap left promiscuous mode [ 3009.130357][T11657] device veth0_vlan left promiscuous mode [ 3009.136053][T11657] device veth1_macvtap left promiscuous mode [ 3009.141857][T11657] device veth0_vlan left promiscuous mode [ 3009.147747][T11657] device veth1_macvtap left promiscuous mode [ 3009.153550][T11657] device veth0_vlan left promiscuous mode [ 3009.159319][T11657] device veth1_macvtap left promiscuous mode [ 3009.165112][T11657] device veth0_vlan left promiscuous mode