last executing test programs: 14.596631001s ago: executing program 0 (id=271): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(0x0, &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x297880, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000002100)='./file0/file0\x00', 0x0, 0x2187017, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0/file0\x00', &(0x7f00000001c0), 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) 14.079055003s ago: executing program 0 (id=273): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_clone(0x80, &(0x7f0000000000)="b2acc68c3ff28bb10bdd093288c9a1e6deb2ba921ce3537282d4cad30b7272b7f57a0aebd1543d34a1e540e7d4b9bcd760b311a8351d868032e1b77346beddf6531bb540b17f8153295da7bfe083b6af9cadccdaf1e0791bbdba2ead529ae6b913cde71bd07cd315425dbdad48843b8cd3b20423ca85cd2e22f00ac463556f008b8dd76e110f854edc87e8fa4636ee73d0796e00c7b0f133a33369c55ab5a7a2dc3d7849c62cd32cd553941d0cd405cc84ba9552a88085", 0xb7, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000340)="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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x24000044, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r2}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c000703000000000000000007000000", @ANYRES32=r6, @ANYBLOB="4000cc000a000200aaaaaaaaaa0c"], 0x28}}, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7e12ddc5a89047bf00"}) r9 = syz_open_pts(r8, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000200)=0x2) dup2(r9, r8) 13.776033398s ago: executing program 0 (id=275): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) dup(0xffffffffffffffff) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) 12.957930915s ago: executing program 0 (id=285): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) 12.899950909s ago: executing program 0 (id=278): ptrace(0x10, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000003cc0)=ANY=[@ANYBLOB="121500003d55b810"], 0x0) 8.051950184s ago: executing program 2 (id=287): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) dup(0xffffffffffffffff) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) 7.016038428s ago: executing program 2 (id=292): pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r2, r1, 0x9, 0x0) write$P9_RVERSION(r3, 0x0, 0x13) vmsplice(r0, &(0x7f00000015c0)=[{&(0x7f00000000c0)="98", 0x1}], 0x1, 0x2) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x2, 0xc}, 0x73) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES32], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r6, &(0x7f0000000500)={0x2c, &(0x7f00000003c0)={0x20, 0x5, 0x69, {0x69, 0x22, "b658fb148ae3debd436c376ea3977ebaccb37eaa79ff9ed2b5ec8b664a36a4f07489790d9e0c196eff316620039e7a5e9ef1550976d2a1993c7f1c1806ba937dc0f4b1717bd73208dc27eb7beb277351df04115e89dfd09c6fd34e141da3a12cb6d276589c5c66"}}, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x80a}}, &(0x7f0000000440)={0x0, 0xf, 0x20, {0x5, 0xf, 0x20, 0x2, [@ptm_cap={0x3}, @ssp_cap={0x18, 0x10, 0xa, 0x3, 0x3, 0x2, 0xf01e, 0x1ff, [0x0, 0x1bff0, 0xff000f]}]}}, &(0x7f0000000480)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x10, 0xdd, 0x3, "ecfe1807", "9fd3e356"}}, &(0x7f00000004c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x1, 0x40, 0x2e, 0x7f, 0x49, 0x1000}}}, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0xf, 0xeb, "408b5d7f5e93c2057e7178512e694e64c6dc9d0134b52e55ab627d85f0879382ab0337f46e5a5864bdd8d8f79c0b97308ac2049358eecfd0df2c8c275f6931cb974f91122cf83e49ec473830ddb2d36aff15d94c0d2bedcc1f3b0e4144b7ceffb29cd71be76d044057f335dd7c4a43f3db5c522b05ca731c76058190464525e2f1bcf43be574cf1564888032bf596c3721c66b5278792901a7fc1e020a11431852e66aae217d44a71095111019a4571fc44c97684ca2ffc53a76322a74014629af96314de6c8bbe7c913e070a930b4f5c5ff47eaf3b406b468cbe54c06bf87e053ebec052999f442706929"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xa}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000000740)={0x20, 0x0, 0x8, {0xe0, 0x4, [0xff0]}}, &(0x7f0000000780)={0x40, 0x7, 0x2, 0x6c1}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000800)={0x40, 0xb, 0x2, "1b7f"}, &(0x7f0000000840)={0x40, 0xf, 0x2}, &(0x7f0000000880)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000900)={0x40, 0x19, 0x2, "d09e"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0xdb0c}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000a40)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000a80)={0x40, 0x21, 0x1, 0x4}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='sched_switch\x00', r9}, 0x10) r10 = userfaultfd(0x801) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r10, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r10, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f000076e000/0x4000)=nil, 0x400000, 0x0, 0x2}) syz_usb_control_io(r4, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@delnexthop={0x38, 0x69, 0x1, 0x0, 0x0, {}, [{0xd}, {0xfffffffffffffe13}, {0x8}, {0x8}]}, 0x38}}, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000312"], 0x0, 0x0}, 0x0) 6.407866858s ago: executing program 1 (id=293): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX, @ANYRES32=r1, @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000067b5e957a9343c416cc2399c2ec2d9dd", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rxrpc_tx_ack\x00', r3}, 0x10) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000340)='./file0/file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000de00000000000000ea04850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) 5.5216307s ago: executing program 1 (id=296): creat(&(0x7f0000000280)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b70300000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x3, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x20000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000e80)='free_extent_state\x00', r4}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@name={0x1e, 0x2, 0x2, {{0x42, 0x2}, 0x4}}, 0x10) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) sendmmsg$inet(r0, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x6a, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffff12abaaaaaaaa0086dd602e5cea00343c00fc000000000000000000000000000000ff0200000000000000000000000000010003"], 0x0) 4.438377998s ago: executing program 2 (id=297): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000680), &(0x7f00000006c0)='%+9llu \x00'}, 0x20) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) close(r2) 4.361467564s ago: executing program 2 (id=299): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = memfd_create(&(0x7f0000000000)='#}\x00', 0x0) ftruncate(r5, 0x8001) setsockopt$sock_int(r4, 0x1, 0x10, &(0x7f0000000100)=0x4, 0x4) sendfile(r4, r5, 0x0, 0x100000000002) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0x5) sendfile(r4, r5, &(0x7f0000000040), 0x20) 4.284773341s ago: executing program 1 (id=300): socket$inet6(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000002c0)={0x1, r4}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) 4.227902875s ago: executing program 4 (id=301): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/249, 0xf9}], 0x1}, 0x0) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) 3.455194288s ago: executing program 2 (id=304): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x8a, &(0x7f0000000300)={[{@jqfmt_vfsold}, {@usrjquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@noload}, {@nombcache}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@noacl}, {@data_err_abort}]}, 0xfe, 0x451, &(0x7f00000016c0)="$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") memfd_create(&(0x7f00000004c0)='\xf3e\t\x05\x00\vty\x01sen\x01C\x1f\xc6\xcf\x12\xd3A\xbbZ%\xb2\xc8<\xf8\xff\xff\xff\xe2\x8e\x9a:\x1c\xec\x87\x87\xcf\x83\xcf\x14\xb0\xfcK\xb9\x1a\xa9\xec{\xb7bn`\xbb\x0e_\bm\x1f\xb1x\x05;,\xf1h\x8cwR-\x81^T\xa8\x90\x17\x03B\x99\x85\x93scH\xe4\xfb\xda\xe7\xaa\x93ZY\xe4\xa0\x040\x8cw#\xfd\x12\xddi \xf62\xee\xe5\x92u\xd8\x06H\xbb*xN\x8c\xe1a\xe8\xcf\x99\x8f\xbe\xbe\aaC\xb0\x9d\x19*3_\xc4\xf9\xecEunE\xfa\xe82\x9f\x8d\xd4\x1d\xfeD\xba*\xef\xdb\xa4U\xfd4v\x8ei\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa7L\xbf\x9c\xe6\x89\xe1Vij\xd1yy\xefg\x8cn\xb2N\xc8Sc\x9cbF[\xecM\x15Z\xbe\xdf\x00+\x89\xcc/.\x95\x11\x97\xade\x9eZvM\x1c\xd0\xc2\x89j\x1e\xe1\xee\xf7J\x17.\xfdl\x99\x82\xf1\x05\xd9C\x1b\xceK\r\xcc', 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r0, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000100)=',*\xf3!\x00'}, 0x30) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r3, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e26, 0x80000, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000b00)=[@dstopts_2292={{0x18}}, @dstopts_2292={{0x18}}], 0x30}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f0000000140)={0x0, 0x0}) r7 = syz_open_procfs(r6, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r7, 0xc020660b, &(0x7f0000000180)={@desc={0x1, 0x0, @auto="e2c3cb017721575b"}}) 3.4307008s ago: executing program 4 (id=311): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r2, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3e, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}]}, 0x78) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 3.414198431s ago: executing program 1 (id=305): gettid() setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1], 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x61, 0x9b, 0x3b, 0x40, 0x763, 0x2001, 0x9caf, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x66, 0x64, 0x84}}]}}]}}, 0x0) 3.403896853s ago: executing program 4 (id=306): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX, @ANYRES32=r1, @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000067b5e957a9343c416cc2399c2ec2d9dd", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rxrpc_tx_ack\x00', r3}, 0x10) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000340)='./file0/file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000de00000000000000ea04850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) 2.57313575s ago: executing program 3 (id=308): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x0, 0x5}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x297880, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000002100)='./file0/file0\x00', 0x0, 0x2187017, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0/file0\x00', &(0x7f00000001c0), 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) 2.558509461s ago: executing program 2 (id=309): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 2.529205243s ago: executing program 4 (id=310): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000067dfb4a518110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 2.428675172s ago: executing program 4 (id=312): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/249, 0xf9}], 0x1}, 0x0) close(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x1}], 0x1}, 0x0) 2.192217691s ago: executing program 4 (id=313): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x2, 0xc}, 0x73) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@delnexthop={0x38, 0x69, 0x1, 0x0, 0x0, {}, [{0xd}, {0xfffffffffffffe13}, {0x8}, {0x8}]}, 0x38}}, 0x0) syz_usb_control_io(r0, &(0x7f0000001780)={0x2c, 0x0, &(0x7f00000014c0)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000312"], 0x0, 0x0}, 0x0) 1.862437968s ago: executing program 0 (id=307): pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r2, r1, 0x9, 0x0) write$P9_RVERSION(r3, 0x0, 0x13) vmsplice(r0, &(0x7f00000015c0)=[{&(0x7f00000000c0)="98", 0x1}], 0x1, 0x2) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x2, 0xc}, 0x73) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES32], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r6, &(0x7f0000000500)={0x2c, &(0x7f00000003c0)={0x20, 0x5, 0x69, {0x69, 0x22, "b658fb148ae3debd436c376ea3977ebaccb37eaa79ff9ed2b5ec8b664a36a4f07489790d9e0c196eff316620039e7a5e9ef1550976d2a1993c7f1c1806ba937dc0f4b1717bd73208dc27eb7beb277351df04115e89dfd09c6fd34e141da3a12cb6d276589c5c66"}}, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x80a}}, &(0x7f0000000440)={0x0, 0xf, 0x20, {0x5, 0xf, 0x20, 0x2, [@ptm_cap={0x3}, @ssp_cap={0x18, 0x10, 0xa, 0x3, 0x3, 0x2, 0xf01e, 0x1ff, [0x0, 0x1bff0, 0xff000f]}]}}, &(0x7f0000000480)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x10, 0xdd, 0x3, "ecfe1807", "9fd3e356"}}, &(0x7f00000004c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x1, 0x40, 0x2e, 0x7f, 0x49, 0x1000}}}, &(0x7f0000000ac0)={0x84, &(0x7f0000000580)={0x0, 0xf, 0xeb, "408b5d7f5e93c2057e7178512e694e64c6dc9d0134b52e55ab627d85f0879382ab0337f46e5a5864bdd8d8f79c0b97308ac2049358eecfd0df2c8c275f6931cb974f91122cf83e49ec473830ddb2d36aff15d94c0d2bedcc1f3b0e4144b7ceffb29cd71be76d044057f335dd7c4a43f3db5c522b05ca731c76058190464525e2f1bcf43be574cf1564888032bf596c3721c66b5278792901a7fc1e020a11431852e66aae217d44a71095111019a4571fc44c97684ca2ffc53a76322a74014629af96314de6c8bbe7c913e070a930b4f5c5ff47eaf3b406b468cbe54c06bf87e053ebec052999f442706929"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xa}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000000740)={0x20, 0x0, 0x8, {0xe0, 0x4, [0xff0]}}, &(0x7f0000000780)={0x40, 0x7, 0x2, 0x6c1}, &(0x7f00000007c0)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000800)={0x40, 0xb, 0x2, "1b7f"}, &(0x7f0000000840)={0x40, 0xf, 0x2}, &(0x7f0000000880)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000900)={0x40, 0x19, 0x2, "d09e"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0xdb0c}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000a40)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000a80)={0x40, 0x21, 0x1, 0x4}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='sched_switch\x00', r9}, 0x10) r10 = userfaultfd(0x801) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r10, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r10, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f000076e000/0x4000)=nil, 0x400000, 0x0, 0x2}) syz_usb_control_io(r4, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@delnexthop={0x38, 0x69, 0x1, 0x0, 0x0, {}, [{0xd}, {0xfffffffffffffe13}, {0x8}, {0x8}]}, 0x38}}, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000312"], 0x0, 0x0}, 0x0) 1.678369743s ago: executing program 3 (id=314): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = memfd_create(&(0x7f0000000000)='#}\x00', 0x0) ftruncate(r5, 0x8001) setsockopt$sock_int(r4, 0x1, 0x10, &(0x7f0000000100)=0x4, 0x4) sendfile(r4, r5, 0x0, 0x100000000002) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0x5) sendfile(r4, r5, &(0x7f0000000040), 0x20) 1.446787812s ago: executing program 3 (id=315): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x8a, &(0x7f0000000300)={[{@jqfmt_vfsold}, {@usrjquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@noload}, {@nombcache}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@noacl}, {@data_err_abort}]}, 0xfe, 0x451, &(0x7f00000016c0)="$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") memfd_create(&(0x7f00000004c0)='\xf3e\t\x05\x00\vty\x01sen\x01C\x1f\xc6\xcf\x12\xd3A\xbbZ%\xb2\xc8<\xf8\xff\xff\xff\xe2\x8e\x9a:\x1c\xec\x87\x87\xcf\x83\xcf\x14\xb0\xfcK\xb9\x1a\xa9\xec{\xb7bn`\xbb\x0e_\bm\x1f\xb1x\x05;,\xf1h\x8cwR-\x81^T\xa8\x90\x17\x03B\x99\x85\x93scH\xe4\xfb\xda\xe7\xaa\x93ZY\xe4\xa0\x040\x8cw#\xfd\x12\xddi \xf62\xee\xe5\x92u\xd8\x06H\xbb*xN\x8c\xe1a\xe8\xcf\x99\x8f\xbe\xbe\aaC\xb0\x9d\x19*3_\xc4\xf9\xecEunE\xfa\xe82\x9f\x8d\xd4\x1d\xfeD\xba*\xef\xdb\xa4U\xfd4v\x8ei\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa7L\xbf\x9c\xe6\x89\xe1Vij\xd1yy\xefg\x8cn\xb2N\xc8Sc\x9cbF[\xecM\x15Z\xbe\xdf\x00+\x89\xcc/.\x95\x11\x97\xade\x9eZvM\x1c\xd0\xc2\x89j\x1e\xe1\xee\xf7J\x17.\xfdl\x99\x82\xf1\x05\xd9C\x1b\xceK\r\xcc', 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r0, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000100)=',*\xf3!\x00'}, 0x30) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f0000000140)={0x0, 0x0}) r7 = syz_open_procfs(r6, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r7, 0xc020660b, &(0x7f0000000180)={@desc={0x1, 0x0, @auto="e2c3cb017721575b"}}) 962.240391ms ago: executing program 3 (id=316): socket$inet6(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000002c0)={0x1, r4}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) 367.405469ms ago: executing program 1 (id=317): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r2, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3e, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38, 0x2}, [{}]}, 0x78) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 355.388091ms ago: executing program 1 (id=318): socket$inet6(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0, 0x5000}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000002c0)={0x1, r4}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) 117.21236ms ago: executing program 3 (id=319): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000002ec0)=ANY=[@ANYRES32=0x0], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) lseek(r1, 0x100000000, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f00000003c0)=ANY=[@ANYBLOB="600000006800980029bd7000fedbdf250200000000000008000016000000000004000b003c800200000000007000000001000003ff000000010000008100000000000000010000070100000000000001000000"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x24040881) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={r2, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x8, &(0x7f0000000100)=[{}, {}], 0x10, 0x10, &(0x7f00000001c0), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a00)={r0, 0xe0, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000006c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000000c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x40) getsockname$packet(r7, &(0x7f0000001b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000050423eeffffffffffff02000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newqdisc={0x50, 0x24, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0x10}, {0x0, 0xa}}, [@TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x3, 0x3ff, 0x1, 0x2, 0x8, 0x4, 0x3}}, {0xa, 0x2, [0xfff7, 0x8000, 0x1e2]}}]}]}, 0x50}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r10}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) clock_adjtime(0x0, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x10, 0x7ffffffd, 0x2, 0x202, r2, 0x0, '\x00', r3, r4, 0x4, 0x3, 0x4, 0x6}, 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000500)={0x0, &(0x7f0000000040)=""/12, &(0x7f00000003c0), 0x0, 0x801, r11, 0x0, 0x21bf000000000000}, 0x38) 0s ago: executing program 3 (id=320): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(0x0, &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x297880, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000002100)='./file0/file0\x00', 0x0, 0x2187017, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0/file0\x00', &(0x7f00000001c0), 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) kernel console output (not intermixed with test programs): 24.736036][ T318] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 24.746364][ T318] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 24.817557][ T60] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 24.836796][ T60] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.844855][ T60] usb 3-1: Product: syz [ 24.848880][ T60] usb 3-1: Manufacturer: syz [ 24.853255][ T60] usb 3-1: SerialNumber: syz [ 24.860094][ T60] usb 3-1: config 0 descriptor?? [ 24.908197][ T60] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 24.915825][ T60] usb 3-1: Detected FT232RL [ 24.920411][ T318] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 24.929432][ T318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.937235][ T318] usb 2-1: Product: syz [ 24.941659][ T318] usb 2-1: Manufacturer: syz [ 24.946155][ T318] usb 2-1: SerialNumber: syz [ 25.107536][ T60] ftdi_sio ttyUSB0: Unable to read latency timer: -5 [ 25.259428][ T352] loop0: detected capacity change from 0 to 512 [ 25.308526][ T322] process 'syz.2.3' launched './file1' with NULL argv: empty string added [ 25.319028][ T318] usb 2-1: 0:2 : does not exist [ 25.325362][ T318] usb 2-1: USB disconnect, device number 2 [ 25.331141][ T60] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 25.342432][ T352] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 25.351399][ T347] udevd[347]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 25.357535][ T352] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 25.371410][ T60] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 25.388973][ T60] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 25.400150][ T60] usb 3-1: USB disconnect, device number 2 [ 25.411068][ T60] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 25.421324][ T60] ftdi_sio 3-1:0.0: device disconnected [ 25.556213][ T352] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 25.638759][ T352] EXT4-fs (loop0): 1 truncate cleaned up [ 25.675379][ T352] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,noquota,nombcache,quota,,errors=continue. Quota mode: writeback. [ 25.717500][ T26] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 25.742725][ T352] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: writeback. [ 26.027494][ T313] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 26.047569][ T60] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 26.087585][ T26] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 26.096651][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.105662][ T26] usb 4-1: config 0 descriptor?? [ 26.127480][ T311] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 26.313666][ T375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19'. [ 26.457776][ T60] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.507531][ T311] usb 2-1: Using ep0 maxpacket: 32 [ 26.537672][ T313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.548429][ T313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.558136][ T313] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 26.567012][ T313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.576029][ T313] usb 5-1: config 0 descriptor?? [ 26.627611][ T60] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 26.636551][ T60] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.644335][ T60] usb 1-1: Product: syz [ 26.648432][ T60] usb 1-1: Manufacturer: syz [ 26.652793][ T60] usb 1-1: SerialNumber: syz [ 26.677544][ T311] usb 2-1: unable to get BOS descriptor or descriptor too short [ 26.757570][ T311] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 26.766229][ T311] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 26.776233][ T311] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 26.947573][ T311] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 26.956520][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.964298][ T311] usb 2-1: Product: syz [ 26.968296][ T311] usb 2-1: Manufacturer: syz [ 26.972669][ T311] usb 2-1: SerialNumber: syz [ 27.031203][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 27.031255][ T30] audit: type=1400 audit(1720636756.679:140): avc: denied { create } for pid=377 comm="syz.2.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 27.057114][ T30] audit: type=1400 audit(1720636756.689:141): avc: denied { read } for pid=377 comm="syz.2.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 27.089975][ T30] audit: type=1400 audit(1720636756.739:142): avc: denied { write } for pid=377 comm="syz.2.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 27.090082][ T379] netlink: 224 bytes leftover after parsing attributes in process `syz.2.20'. [ 27.110047][ T30] audit: type=1400 audit(1720636756.739:143): avc: denied { nlmsg_read } for pid=377 comm="syz.2.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 27.147806][ T381] loop2: detected capacity change from 0 to 256 [ 27.203508][ T381] FAT-fs (loop2): Directory bread(block 64) failed [ 27.210052][ T381] FAT-fs (loop2): Directory bread(block 65) failed [ 27.216429][ T381] FAT-fs (loop2): Directory bread(block 66) failed [ 27.222914][ T381] FAT-fs (loop2): Directory bread(block 67) failed [ 27.229646][ T381] FAT-fs (loop2): Directory bread(block 68) failed [ 27.235988][ T381] FAT-fs (loop2): Directory bread(block 69) failed [ 27.242578][ T381] FAT-fs (loop2): Directory bread(block 70) failed [ 27.248983][ T381] FAT-fs (loop2): Directory bread(block 71) failed [ 27.255388][ T381] FAT-fs (loop2): Directory bread(block 72) failed [ 27.261942][ T381] FAT-fs (loop2): Directory bread(block 73) failed [ 27.297598][ T311] usb 2-1: 0:2 : does not exist [ 27.304192][ T311] usb 2-1: USB disconnect, device number 3 [ 27.311320][ T347] udevd[347]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 27.367563][ T313] usbhid 5-1:0.0: can't add hid device: -32 [ 27.373534][ T313] usbhid: probe of 5-1:0.0 failed with error -32 [ 27.797586][ T60] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 27.797854][ T387] netlink: 224 bytes leftover after parsing attributes in process `syz.1.22'. [ 27.803993][ T60] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 27.820200][ T60] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 28.017502][ T60] cdc_ncm 1-1:1.0: setting tx_max = 184 [ 28.026438][ T60] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 28.047230][ T60] usb 1-1: USB disconnect, device number 2 [ 28.053644][ T60] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM [ 28.077811][ T30] audit: type=1400 audit(1720636757.729:144): avc: denied { read } for pid=138 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 28.377815][ T30] audit: type=1400 audit(1720636757.919:145): avc: denied { create } for pid=392 comm="syz.2.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 28.505270][ T26] usb 4-1: USB disconnect, device number 2 [ 28.750994][ T311] usb 5-1: USB disconnect, device number 2 [ 28.780637][ T410] mmap: syz.4.31 (410) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 28.785784][ T30] audit: type=1400 audit(1720636758.429:146): avc: denied { create } for pid=409 comm="syz.4.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 28.811614][ T30] audit: type=1400 audit(1720636758.429:147): avc: denied { create } for pid=409 comm="syz.4.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 28.830550][ T30] audit: type=1400 audit(1720636758.429:148): avc: denied { write } for pid=409 comm="syz.4.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 29.267169][ T412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.30'. [ 29.604783][ T26] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 31.376936][ T30] audit: type=1400 audit(1720636761.019:149): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 31.437525][ T26] usb 4-1: Using ep0 maxpacket: 16 [ 31.557515][ T26] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 31.597446][ T311] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 31.617558][ T26] usb 4-1: string descriptor 0 read error: -71 [ 31.634326][ T26] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 31.660359][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.682242][ T26] usb 4-1: config 0 descriptor?? [ 31.707516][ T26] usb 4-1: can't set config #0, error -71 [ 31.716736][ T26] usb 4-1: USB disconnect, device number 3 [ 31.737484][ T39] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 32.017298][ T311] usb 5-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 32.026208][ T311] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.034763][ T311] usb 5-1: config 0 descriptor?? [ 33.042213][ T459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.44'. [ 33.087766][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.123653][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.238004][ T39] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 33.247007][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.256055][ T39] usb 3-1: config 0 descriptor?? [ 33.480226][ T30] audit: type=1400 audit(1720636763.129:150): avc: denied { create } for pid=464 comm="syz.1.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.500333][ T30] audit: type=1400 audit(1720636763.129:151): avc: denied { bind } for pid=464 comm="syz.1.46" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.520359][ T311] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 33.527761][ T30] audit: type=1400 audit(1720636763.129:152): avc: denied { node_bind } for pid=464 comm="syz.1.46" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 33.549112][ T30] audit: type=1400 audit(1720636763.129:153): avc: denied { connect } for pid=464 comm="syz.1.46" laddr=172.20.20.170 lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.571230][ T30] audit: type=1400 audit(1720636763.129:154): avc: denied { write } for pid=464 comm="syz.1.46" laddr=172.20.20.170 lport=255 faddr=224.0.0.1 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.917570][ T311] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.037518][ T39] usbhid 3-1:0.0: can't add hid device: -32 [ 34.043605][ T39] usbhid: probe of 3-1:0.0 failed with error -32 [ 34.128019][ T311] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 34.130578][ T39] usb 5-1: USB disconnect, device number 3 [ 34.166133][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.175081][ T311] usb 4-1: Product: syz [ 34.184131][ T311] usb 4-1: Manufacturer: syz [ 34.188860][ T311] usb 4-1: SerialNumber: syz [ 34.271010][ T479] loop0: detected capacity change from 0 to 512 [ 34.322000][ T479] EXT4-fs (loop0): Mount option "noacl" will be removed by 3.5 [ 34.322000][ T479] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 34.322000][ T479] [ 34.375537][ T479] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 34.384752][ T479] EXT4-fs (loop0): 1 truncate cleaned up [ 34.390273][ T479] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 34.604271][ T30] audit: type=1400 audit(1720636764.249:155): avc: denied { mounton } for pid=478 comm="syz.0.51" path="/proc/30/task" dev="proc" ino=13285 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 34.665383][ T30] audit: type=1400 audit(1720636764.249:156): avc: denied { mount } for pid=478 comm="syz.0.51" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 35.040436][ T20] usb 3-1: USB disconnect, device number 3 [ 35.322894][ T30] audit: type=1400 audit(1720636764.969:157): avc: denied { read write } for pid=494 comm="syz.0.54" name="ppp" dev="devtmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 35.347542][ T311] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 35.353797][ T311] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 35.371346][ T311] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 35.385931][ T30] audit: type=1400 audit(1720636764.999:158): avc: denied { open } for pid=494 comm="syz.0.54" path="/dev/ppp" dev="devtmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 35.516666][ T501] 9pnet: Insufficient options for proto=fd [ 35.567573][ T311] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 35.886796][ T504] netlink: 8 bytes leftover after parsing attributes in process `syz.4.56'. [ 35.895461][ T311] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM, 42:42:42:42:42:42 [ 35.907530][ T311] usb 4-1: USB disconnect, device number 4 [ 35.917319][ T311] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM [ 35.947517][ T6] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 36.197916][ T30] audit: type=1400 audit(1720636765.829:159): avc: denied { read } for pid=538 comm="syz.3.61" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 36.236726][ T460] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 36.454039][ T548] loop4: detected capacity change from 0 to 512 [ 36.467615][ T6] usb 1-1: Using ep0 maxpacket: 32 [ 36.527993][ T548] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 36.527993][ T548] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 36.527993][ T548] [ 36.546573][ T548] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 36.555088][ T548] EXT4-fs (loop4): 1 truncate cleaned up [ 36.560635][ T548] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 36.637520][ T6] usb 1-1: unable to get BOS descriptor or descriptor too short [ 36.717523][ T6] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 36.726266][ T6] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 36.736337][ T6] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 36.777507][ T293] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 36.827597][ T460] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.838753][ T460] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.848466][ T460] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 36.857432][ T460] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.867889][ T460] usb 3-1: config 0 descriptor?? [ 36.907608][ T6] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 36.951917][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.960550][ T6] usb 1-1: Product: syz [ 36.964654][ T6] usb 1-1: Manufacturer: syz [ 36.969100][ T6] usb 1-1: SerialNumber: syz [ 37.207564][ T293] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.218402][ T293] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.228204][ T293] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 37.237171][ T293] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.247626][ T293] usb 2-1: config 0 descriptor?? [ 37.318346][ T508] UDC core: couldn't find an available UDC or it's busy: -16 [ 37.325652][ T508] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 37.333022][ T318] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 37.367791][ T460] hid (null): bogus close delimiter [ 37.399483][ T6] usb 1-1: 0:2 : does not exist [ 37.405665][ T6] usb 1-1: USB disconnect, device number 3 [ 37.757622][ T318] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 37.768893][ T318] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 37.779707][ T318] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 37.791085][ T318] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.800882][ T318] usb 4-1: config 0 descriptor?? [ 37.817586][ T460] usb 3-1: string descriptor 0 read error: -71 [ 37.837527][ T460] uclogic 0003:256C:006D.0001: failed retrieving string descriptor #200: -71 [ 37.847356][ T460] uclogic 0003:256C:006D.0001: failed retrieving pen parameters: -71 [ 37.855644][ T460] uclogic 0003:256C:006D.0001: failed probing pen v2 parameters: -71 [ 37.863648][ T460] uclogic 0003:256C:006D.0001: failed probing parameters: -71 [ 37.871248][ T460] uclogic: probe of 0003:256C:006D.0001 failed with error -71 [ 37.879781][ T460] usb 3-1: USB disconnect, device number 4 [ 38.117626][ T293] usbhid 2-1:0.0: can't add hid device: -32 [ 38.123999][ T293] usbhid: probe of 2-1:0.0 failed with error -32 [ 38.277668][ T318] hid (null): bogus close delimiter [ 38.390687][ T560] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 38.487610][ T318] usb 4-1: language id specifier not provided by device, defaulting to English [ 38.504684][ T579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.72'. [ 38.697344][ T553] UDC core: couldn't find an available UDC or it's busy: -16 [ 38.704598][ T553] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 38.777554][ T560] usb 1-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 38.786469][ T560] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.795180][ T560] usb 1-1: config 0 descriptor?? [ 39.137519][ T318] uclogic 0003:256C:006D.0002: failed retrieving string descriptor #100: -71 [ 39.146196][ T318] uclogic 0003:256C:006D.0002: failed retrieving pen parameters: -71 [ 39.154081][ T318] uclogic 0003:256C:006D.0002: failed probing pen v1 parameters: -71 [ 39.162058][ T318] uclogic 0003:256C:006D.0002: failed probing parameters: -71 [ 39.169461][ T318] uclogic: probe of 0003:256C:006D.0002 failed with error -71 [ 39.236009][ T318] usb 4-1: USB disconnect, device number 5 [ 39.517703][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 39.517727][ T30] audit: type=1400 audit(1720636769.159:170): avc: denied { remount } for pid=584 comm="syz.2.75" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 39.586307][ T560] usb 2-1: USB disconnect, device number 4 [ 39.602892][ T591] loop1: detected capacity change from 0 to 512 [ 39.677998][ T591] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 39.677998][ T591] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 39.677998][ T591] [ 39.696940][ T591] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 39.705548][ T591] EXT4-fs (loop1): 1 truncate cleaned up [ 39.711087][ T591] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 39.905703][ T597] fuse: Unknown parameter '0x0000000000000004' [ 40.391839][ T601] ======================================================= [ 40.391839][ T601] WARNING: The mand mount option has been deprecated and [ 40.391839][ T601] and is ignored by this kernel. Remove the mand [ 40.391839][ T601] option from the mount to silence this warning. [ 40.391839][ T601] ======================================================= [ 40.995986][ T6] usb 1-1: USB disconnect, device number 4 [ 41.031820][ T612] netlink: 12 bytes leftover after parsing attributes in process `syz.0.82'. [ 41.047468][ T30] audit: type=1326 audit(1720636770.689:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=611 comm="syz.0.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfa3158bd9 code=0x7ffc0000 [ 41.103912][ T30] audit: type=1326 audit(1720636770.749:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=611 comm="syz.0.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7fbfa3158bd9 code=0x7ffc0000 [ 41.127242][ T30] audit: type=1326 audit(1720636770.749:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=611 comm="syz.0.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfa3158bd9 code=0x7ffc0000 [ 41.150621][ T30] audit: type=1326 audit(1720636770.749:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=611 comm="syz.0.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fbfa3158bd9 code=0x7ffc0000 [ 41.186318][ T30] audit: type=1326 audit(1720636770.749:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=611 comm="syz.0.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfa3158bd9 code=0x7ffc0000 [ 41.214505][ T30] audit: type=1326 audit(1720636770.749:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=611 comm="syz.0.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbfa3158bd9 code=0x7ffc0000 [ 41.238116][ T30] audit: type=1326 audit(1720636770.749:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=611 comm="syz.0.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfa3158bd9 code=0x7ffc0000 [ 41.261368][ T30] audit: type=1326 audit(1720636770.749:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=611 comm="syz.0.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbfa3158bd9 code=0x7ffc0000 [ 41.304651][ T30] audit: type=1326 audit(1720636770.749:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=611 comm="syz.0.82" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfa3158bd9 code=0x7ffc0000 [ 41.858588][ T6] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 41.911463][ T635] fuse: Unknown parameter '0x0000000000000004' [ 41.928200][ T637] loop4: detected capacity change from 0 to 512 [ 41.988067][ T637] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 41.988067][ T637] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 41.988067][ T637] [ 42.006599][ T637] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 42.007658][ T302] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 42.015729][ T637] EXT4-fs (loop4): 1 truncate cleaned up [ 42.027291][ T637] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 42.127491][ T6] usb 1-1: Using ep0 maxpacket: 16 [ 42.414167][ T302] usb 4-1: Using ep0 maxpacket: 16 [ 43.303116][ T647] 9pnet: Insufficient options for proto=fd [ 43.317541][ T6] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 43.327031][ T302] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 43.347047][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.365596][ T6] usb 1-1: Product: syz [ 43.375633][ T6] usb 1-1: Manufacturer: syz [ 43.380250][ T6] usb 1-1: SerialNumber: syz [ 43.390725][ T650] netlink: 12 bytes leftover after parsing attributes in process `syz.2.93'. [ 43.427033][ T6] r8152-cfgselector 1-1: config 0 descriptor?? [ 43.711972][ T618] loop0: detected capacity change from 0 to 512 [ 43.797515][ T460] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 43.835920][ T618] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 43.842903][ T302] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 43.853681][ T618] EXT4-fs error (device loop0): __ext4_iget:4892: inode #11: block 1: comm syz.0.83: invalid block [ 43.857452][ T302] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.864980][ T618] EXT4-fs (loop0): Remounting filesystem read-only [ 43.878672][ T618] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.83: couldn't read orphan inode 11 (err -117) [ 43.883685][ T302] usb 4-1: Product: syz [ 43.890368][ T618] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,errors=continue,max_dir_size_kb=0x0000000000000009,data_err=abort,errors=remount-ro,noinit_itable,mblk_io_submit,i_version,acl,. Quota mode: none. [ 43.897033][ T302] usb 4-1: Manufacturer: syz [ 43.922842][ T302] usb 4-1: SerialNumber: syz [ 43.941670][ T302] usb 4-1: config 0 descriptor?? [ 43.978283][ T302] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 44.000455][ T663] loop2: detected capacity change from 0 to 512 [ 44.008602][ T302] usb 4-1: Detected FT232RL [ 44.069750][ T663] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 44.069750][ T663] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 44.069750][ T663] [ 44.092648][ T663] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 44.101825][ T663] EXT4-fs (loop2): 1 truncate cleaned up [ 44.107336][ T663] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 44.187507][ T302] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 44.259385][ T302] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 44.277543][ T302] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 44.285249][ T302] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 44.303394][ T302] usb 4-1: USB disconnect, device number 6 [ 44.319214][ T302] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 44.340704][ T302] ftdi_sio 4-1:0.0: device disconnected [ 44.457435][ T460] usb 5-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 44.487429][ T460] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.490408][ T671] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 44.721691][ T460] usb 5-1: config 0 descriptor?? [ 45.105719][ T679] fuse: Unknown parameter '0x0000000000000004' [ 45.111874][ T6] r8152-cfgselector 1-1: Unknown version 0x0000 [ 45.147568][ T6] r8152-cfgselector 1-1: Unknown version 0x0000 [ 45.151637][ T683] loop2: detected capacity change from 0 to 512 [ 45.170344][ T6] r8152-cfgselector 1-1: bad CDC descriptors [ 45.197502][ T6] r8152-cfgselector 1-1: Unknown version 0x0000 [ 45.209322][ T6] r8152-cfgselector 1-1: USB disconnect, device number 5 [ 45.236007][ T683] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 45.236007][ T683] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 45.236007][ T683] [ 45.256724][ T683] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 45.268111][ T683] EXT4-fs (loop2): 1 truncate cleaned up [ 45.273706][ T683] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 46.397488][ T703] loop0: detected capacity change from 0 to 512 [ 46.418528][ T460] usb 5-1: USB disconnect, device number 4 [ 46.425064][ T700] netlink: 12 bytes leftover after parsing attributes in process `syz.1.104'. [ 46.612824][ T703] EXT4-fs (loop0): 1 orphan inode deleted [ 46.649223][ T703] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 46.721404][ T703] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038 (0x7fffffff) [ 46.738321][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 46.738337][ T30] audit: type=1326 audit(1720636776.389:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=696 comm="syz.1.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bf8ccbbd9 code=0x7ffc0000 [ 46.773038][ T30] audit: type=1326 audit(1720636776.389:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=696 comm="syz.1.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bf8ccbbd9 code=0x7ffc0000 [ 46.798594][ T30] audit: type=1326 audit(1720636776.389:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=696 comm="syz.1.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f7bf8ccbbd9 code=0x7ffc0000 [ 46.835752][ T716] loop4: detected capacity change from 0 to 2048 [ 46.842223][ T30] audit: type=1326 audit(1720636776.389:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=696 comm="syz.1.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bf8ccbbd9 code=0x7ffc0000 [ 46.866229][ T30] audit: type=1326 audit(1720636776.389:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=696 comm="syz.1.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bf8ccbbd9 code=0x7ffc0000 [ 46.889497][ T30] audit: type=1326 audit(1720636776.389:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=696 comm="syz.1.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f7bf8ccbbd9 code=0x7ffc0000 [ 46.912594][ T30] audit: type=1326 audit(1720636776.389:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=696 comm="syz.1.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bf8ccbbd9 code=0x7ffc0000 [ 46.936316][ T30] audit: type=1326 audit(1720636776.389:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=696 comm="syz.1.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bf8ccbbd9 code=0x7ffc0000 [ 46.959528][ T30] audit: type=1326 audit(1720636776.389:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=696 comm="syz.1.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7bf8ccbbd9 code=0x7ffc0000 [ 46.983749][ T30] audit: type=1326 audit(1720636776.389:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=696 comm="syz.1.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bf8ccbbd9 code=0x7ffc0000 [ 46.987945][ T716] Alternate GPT is invalid, using primary GPT. [ 47.012977][ T716] loop4: p1 p2 p3 [ 47.083528][ T721] loop3: detected capacity change from 0 to 512 [ 47.144949][ T721] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 47.144949][ T721] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 47.144949][ T721] [ 47.175913][ T316] udevd[316]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 47.176081][ T347] udevd[347]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 47.190649][ T348] udevd[348]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 47.203718][ T721] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 47.221368][ T721] EXT4-fs (loop3): 1 truncate cleaned up [ 47.226849][ T721] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 47.277751][ T460] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 47.308066][ T729] loop2: detected capacity change from 0 to 512 [ 47.551389][ T729] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 47.551389][ T729] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 47.551389][ T729] [ 47.602056][ T460] usb 2-1: Using ep0 maxpacket: 16 [ 47.605224][ T729] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 47.615732][ T729] EXT4-fs (loop2): 1 truncate cleaned up [ 47.621260][ T729] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 47.719970][ T739] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 47.737503][ T460] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 47.947727][ T460] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 47.957556][ T460] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.965567][ T460] usb 2-1: Product: syz [ 47.970061][ T460] usb 2-1: Manufacturer: syz [ 47.974728][ T460] usb 2-1: SerialNumber: syz [ 47.985076][ T460] usb 2-1: config 0 descriptor?? [ 48.169777][ T460] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 48.182574][ T460] usb 2-1: Detected FT232RL [ 48.389348][ T460] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 48.407508][ T460] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 48.427506][ T460] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 48.434604][ T460] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 48.506527][ T26] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 48.608253][ T460] usb 2-1: USB disconnect, device number 5 [ 48.740176][ T460] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 48.789994][ T460] ftdi_sio 2-1:0.0: device disconnected [ 48.927568][ T26] usb 5-1: Using ep0 maxpacket: 32 [ 49.087484][ T26] usb 5-1: unable to get BOS descriptor or descriptor too short [ 49.177554][ T26] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 49.192197][ T26] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 49.214529][ T26] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 49.757563][ T26] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 49.766690][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.775363][ T26] usb 5-1: Product: syz [ 49.780116][ T26] usb 5-1: Manufacturer: syz [ 49.784637][ T26] usb 5-1: SerialNumber: syz [ 50.084582][ T302] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 50.197897][ T26] usb 5-1: 0:2 : does not exist [ 50.236659][ T26] usb 5-1: USB disconnect, device number 5 [ 50.790313][ T302] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.930674][ T302] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.998856][ T302] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 51.007775][ T302] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.017473][ T302] usb 3-1: config 0 descriptor?? [ 51.587794][ T302] usbhid 3-1:0.0: can't add hid device: -71 [ 51.594052][ T302] usbhid: probe of 3-1:0.0 failed with error -71 [ 51.607473][ T292] syz-executor (292) used greatest stack depth: 20608 bytes left [ 51.619385][ T302] usb 3-1: USB disconnect, device number 5 [ 51.668531][ T337] device bridge_slave_1 left promiscuous mode [ 51.682057][ T337] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.702455][ T337] device bridge_slave_0 left promiscuous mode [ 51.713900][ T337] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.798222][ T337] device veth1_macvtap left promiscuous mode [ 51.809395][ T337] device veth0_vlan left promiscuous mode [ 52.243611][ T817] loop2: detected capacity change from 0 to 512 [ 52.329133][ T817] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 52.422016][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 52.422065][ T30] audit: type=1400 audit(1720636782.059:227): avc: denied { read } for pid=819 comm="syz.4.140" name="rtc0" dev="devtmpfs" ino=167 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 52.712576][ T817] EXT4-fs (loop2): 1 truncate cleaned up [ 52.718375][ T30] audit: type=1400 audit(1720636782.059:228): avc: denied { open } for pid=819 comm="syz.4.140" path="/dev/rtc0" dev="devtmpfs" ino=167 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 52.737473][ T817] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,noquota,nombcache,quota,,errors=continue. Quota mode: writeback. [ 52.751961][ T30] audit: type=1400 audit(1720636782.059:229): avc: denied { ioctl } for pid=819 comm="syz.4.140" path="/dev/rtc0" dev="devtmpfs" ino=167 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 52.761391][ T460] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 52.866229][ T817] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback. [ 52.875086][ T30] audit: type=1400 audit(1720636782.449:230): avc: denied { setopt } for pid=826 comm="syz.3.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 52.914964][ T806] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.933696][ T806] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.939882][ T30] audit: type=1400 audit(1720636782.449:231): avc: denied { ioctl } for pid=826 comm="syz.3.141" path="socket:[15847]" dev="sockfs" ino=15847 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 52.978092][ T806] device bridge_slave_0 entered promiscuous mode [ 53.127515][ T460] usb 5-1: Using ep0 maxpacket: 32 [ 53.138411][ T806] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.145411][ T806] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.170683][ T806] device bridge_slave_1 entered promiscuous mode [ 53.457799][ T460] usb 5-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 53.525219][ T460] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.617469][ T460] usb 5-1: Product: syz [ 53.631801][ T460] usb 5-1: Manufacturer: syz [ 53.639492][ T460] usb 5-1: SerialNumber: syz [ 53.655552][ T460] usb 5-1: config 0 descriptor?? [ 53.728363][ T806] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.735247][ T806] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.742372][ T806] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.749145][ T806] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.780924][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.798216][ T302] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.805914][ T302] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.813351][ T30] audit: type=1400 audit(1720636783.459:232): avc: denied { rename } for pid=845 comm="syz.0.145" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 53.848254][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.884076][ T302] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.890974][ T302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.930333][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.946727][ T302] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.953702][ T302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.976733][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.985214][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.994713][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.072610][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.089774][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.098185][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.108915][ T806] device veth0_vlan entered promiscuous mode [ 54.118083][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.125838][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.142525][ T806] device veth1_macvtap entered promiscuous mode [ 54.152761][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.162272][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.170248][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.178808][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.187835][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.206970][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.215669][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.224014][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.232733][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.240796][ T302] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 54.254034][ T30] audit: type=1400 audit(1720636783.899:233): avc: denied { mounton } for pid=806 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=362 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 54.777610][ T302] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.789036][ T302] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.799149][ T302] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 54.808227][ T302] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.820155][ T302] usb 3-1: config 0 descriptor?? [ 55.177458][ T26] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 55.297777][ T302] hid (null): bogus close delimiter [ 55.427580][ T26] usb 2-1: Using ep0 maxpacket: 16 [ 55.517892][ T302] usb 3-1: language id specifier not provided by device, defaulting to English [ 55.719544][ T852] UDC core: couldn't find an available UDC or it's busy: -16 [ 55.737060][ T852] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 55.769277][ T885] loop3: detected capacity change from 0 to 512 [ 55.828020][ T885] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 55.828020][ T885] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 55.828020][ T885] [ 55.846812][ T885] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 55.855570][ T885] EXT4-fs (loop3): 1 truncate cleaned up [ 55.861364][ T885] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 55.967537][ T26] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 55.976507][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.984267][ T26] usb 2-1: Product: syz [ 55.988303][ T26] usb 2-1: Manufacturer: syz [ 55.992706][ T26] usb 2-1: SerialNumber: syz [ 55.998143][ T26] r8152-cfgselector 2-1: config 0 descriptor?? [ 56.053665][ T889] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 56.197456][ T302] uclogic 0003:256C:006D.0003: failed retrieving string descriptor #100: -71 [ 56.206108][ T302] uclogic 0003:256C:006D.0003: failed retrieving pen parameters: -71 [ 56.257736][ T302] uclogic 0003:256C:006D.0003: failed probing pen v1 parameters: -71 [ 56.271857][ T892] loop0: detected capacity change from 0 to 512 [ 56.272018][ T871] loop1: detected capacity change from 0 to 512 [ 56.284035][ T302] uclogic 0003:256C:006D.0003: failed probing parameters: -71 [ 56.291842][ T302] uclogic: probe of 0003:256C:006D.0003 failed with error -71 [ 56.300761][ T302] usb 3-1: USB disconnect, device number 6 [ 56.348063][ T871] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 56.356978][ T892] EXT4-fs (loop0): Mount option "noacl" will be removed by 3.5 [ 56.356978][ T892] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 56.356978][ T892] [ 56.376120][ T892] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 56.376219][ T871] EXT4-fs error (device loop1): __ext4_iget:4892: inode #11: block 1: comm syz.1.152: invalid block [ 56.386842][ T892] EXT4-fs (loop0): 1 truncate cleaned up [ 56.395658][ T871] EXT4-fs (loop1): Remounting filesystem read-only [ 56.400648][ T892] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 56.406463][ T871] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.152: couldn't read orphan inode 11 (err -117) [ 56.441200][ T871] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,errors=continue,max_dir_size_kb=0x0000000000000009,data_err=abort,errors=remount-ro,noinit_itable,mblk_io_submit,i_version,acl,. Quota mode: none. [ 56.607503][ T26] r8152-cfgselector 2-1: Unknown version 0x0000 [ 56.637495][ T26] r8152-cfgselector 2-1: Unknown version 0x0000 [ 56.644701][ T26] r8152-cfgselector 2-1: bad CDC descriptors [ 56.667464][ T26] r8152-cfgselector 2-1: Unknown version 0x0000 [ 56.682077][ T26] r8152-cfgselector 2-1: USB disconnect, device number 6 [ 57.147483][ T293] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 57.216829][ T910] loop0: detected capacity change from 0 to 512 [ 57.223645][ T910] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 57.237176][ T910] EXT4-fs (loop0): 1 truncate cleaned up [ 57.242708][ T910] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,noquota,nombcache,quota,,errors=continue. Quota mode: writeback. [ 57.272737][ T910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.161'. [ 57.282418][ T910] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: writeback. [ 57.490694][ T916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.163'. [ 57.557678][ T293] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 57.567303][ T293] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.577609][ T460] rtl8150 5-1:0.0: couldn't reset the device [ 57.584213][ T460] rtl8150: probe of 5-1:0.0 failed with error -5 [ 57.644174][ T293] usb 3-1: config 0 descriptor?? [ 57.649114][ T302] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 57.667987][ T460] usb 5-1: USB disconnect, device number 6 [ 58.027450][ T460] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 58.067863][ T302] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.078734][ T302] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.088280][ T302] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 58.097082][ T302] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.105656][ T302] usb 2-1: config 0 descriptor?? [ 58.419383][ T927] loop4: detected capacity change from 0 to 2048 [ 58.457547][ T460] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 58.458453][ T927] Alternate GPT is invalid, using primary GPT. [ 58.465104][ T460] usb 5-1: can't read configurations, error -71 [ 58.471170][ T927] loop4: p1 p2 p3 [ 58.549386][ T347] udevd[347]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 58.549536][ T348] udevd[348]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 58.560015][ T894] udevd[894]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 58.578878][ T911] UDC core: couldn't find an available UDC or it's busy: -16 [ 58.586075][ T911] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 58.599055][ T933] loop4: detected capacity change from 0 to 512 [ 58.605895][ T933] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 58.653011][ T933] EXT4-fs (loop4): 1 truncate cleaned up [ 58.658764][ T933] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,noquota,nombcache,quota,,errors=continue. Quota mode: writeback. [ 58.667762][ T302] hid (null): bogus close delimiter [ 58.699155][ T933] netlink: 20 bytes leftover after parsing attributes in process `syz.4.169'. [ 58.709131][ T933] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback. [ 59.075425][ T940] loop0: detected capacity change from 0 to 512 [ 59.127503][ T302] usb 2-1: string descriptor 0 read error: -71 [ 59.138023][ T940] EXT4-fs (loop0): Mount option "noacl" will be removed by 3.5 [ 59.138023][ T940] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 59.138023][ T940] [ 59.156561][ T940] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 59.164648][ T302] uclogic 0003:256C:006D.0004: failed retrieving string descriptor #200: -71 [ 59.166761][ T940] EXT4-fs (loop0): 1 truncate cleaned up [ 59.173391][ T302] uclogic 0003:256C:006D.0004: failed retrieving pen parameters: -71 [ 59.179013][ T940] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 59.187314][ T302] uclogic 0003:256C:006D.0004: failed probing pen v2 parameters: -71 [ 59.217575][ T302] uclogic 0003:256C:006D.0004: failed probing parameters: -71 [ 59.230284][ T302] uclogic: probe of 0003:256C:006D.0004 failed with error -71 [ 59.243461][ T302] usb 2-1: USB disconnect, device number 7 [ 59.465799][ T460] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 59.697423][ T6] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 59.734772][ T26] usb 3-1: USB disconnect, device number 7 [ 59.867560][ T460] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.883469][ T460] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.897744][ T460] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 59.906762][ T460] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.923587][ T460] usb 5-1: config 0 descriptor?? [ 59.939630][ T959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.175'. [ 60.241509][ T962] loop2: detected capacity change from 0 to 2048 [ 60.286572][ T30] audit: type=1400 audit(1720636789.929:234): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 60.286841][ T962] Alternate GPT is invalid, using primary GPT. [ 60.313240][ T962] loop2: p1 p2 p3 [ 60.317606][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.348078][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.356291][ T100] Alternate GPT is invalid, using primary GPT. [ 60.357816][ T6] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 60.364399][ T100] loop2: p1 p2 p3 [ 60.372875][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.435647][ T6] usb 4-1: config 0 descriptor?? [ 60.445374][ T30] audit: type=1400 audit(1720636790.089:235): avc: denied { mounton } for pid=961 comm="syz.2.177" path="/dev/loop2p1" dev="devtmpfs" ino=492 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 60.487668][ T460] hid (null): bogus close delimiter [ 60.533577][ T348] udevd[348]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 60.533602][ T894] udevd[894]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 60.555089][ T347] udevd[347]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 60.697481][ T460] usb 5-1: language id specifier not provided by device, defaulting to English [ 60.897463][ T554] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 60.897856][ T938] UDC core: couldn't find an available UDC or it's busy: -16 [ 60.912028][ T938] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 61.120559][ T30] audit: type=1400 audit(1720636790.769:236): avc: denied { remove_name } for pid=82 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.142943][ T30] audit: type=1400 audit(1720636790.769:237): avc: denied { rename } for pid=82 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 61.164800][ T30] audit: type=1400 audit(1720636790.769:238): avc: denied { create } for pid=82 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 61.185025][ T554] usb 2-1: Using ep0 maxpacket: 16 [ 61.287506][ T6] usbhid 4-1:0.0: can't add hid device: -32 [ 61.293371][ T6] usbhid: probe of 4-1:0.0 failed with error -32 [ 61.422922][ T460] uclogic 0003:256C:006D.0005: failed retrieving string descriptor #100: -71 [ 61.431572][ T460] uclogic 0003:256C:006D.0005: failed retrieving pen parameters: -71 [ 61.439458][ T460] uclogic 0003:256C:006D.0005: failed probing pen v1 parameters: -71 [ 61.447328][ T460] uclogic 0003:256C:006D.0005: failed probing parameters: -71 [ 61.454876][ T460] uclogic: probe of 0003:256C:006D.0005 failed with error -71 [ 61.463266][ T460] usb 5-1: USB disconnect, device number 8 [ 61.594290][ T554] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 61.603361][ T554] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.611247][ T554] usb 2-1: Product: syz [ 61.615392][ T554] usb 2-1: Manufacturer: syz [ 61.619840][ T554] usb 2-1: SerialNumber: syz [ 61.624941][ T554] r8152-cfgselector 2-1: config 0 descriptor?? [ 61.961859][ T970] loop1: detected capacity change from 0 to 512 [ 62.309231][ T970] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 62.319883][ T970] EXT4-fs error (device loop1): __ext4_iget:4892: inode #11: block 1: comm syz.1.180: invalid block [ 62.331051][ T970] EXT4-fs (loop1): Remounting filesystem read-only [ 62.337583][ T970] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.180: couldn't read orphan inode 11 (err -117) [ 62.349969][ T970] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,errors=continue,max_dir_size_kb=0x0000000000000009,data_err=abort,errors=remount-ro,noinit_itable,mblk_io_submit,i_version,acl,. Quota mode: none. [ 62.524888][ T560] usb 4-1: USB disconnect, device number 7 [ 62.561565][ T30] audit: type=1400 audit(1720636792.209:239): avc: denied { create } for pid=996 comm="syz.2.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.667576][ T460] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 62.696955][ T30] audit: type=1400 audit(1720636792.339:240): avc: denied { ioctl } for pid=996 comm="syz.2.187" path="socket:[16481]" dev="sockfs" ino=16481 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.989231][ T30] audit: type=1400 audit(1720636792.339:241): avc: denied { setopt } for pid=996 comm="syz.2.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 63.017333][ T1006] Bluetooth: hci0: sending frame failed (-49) [ 63.030382][ T30] audit: type=1400 audit(1720636792.439:242): avc: denied { bind } for pid=996 comm="syz.2.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 63.049988][ T460] usb 5-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 63.059355][ T30] audit: type=1400 audit(1720636792.449:243): avc: denied { nlmsg_write } for pid=996 comm="syz.2.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 63.067984][ T460] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.091065][ T460] usb 5-1: config 0 descriptor?? [ 63.109003][ T1010] loop3: detected capacity change from 0 to 2048 [ 63.148415][ T1010] Alternate GPT is invalid, using primary GPT. [ 63.154443][ T1010] loop3: p1 p2 p3 [ 63.167428][ T311] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 63.265917][ T893] udevd[893]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 63.266162][ T347] udevd[347]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 63.281533][ T894] udevd[894]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 63.430346][ T311] usb 1-1: Using ep0 maxpacket: 32 [ 63.455895][ T1015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.190'. [ 63.797495][ T311] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 63.806586][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.814678][ T311] usb 1-1: Product: syz [ 63.818632][ T311] usb 1-1: Manufacturer: syz [ 63.823028][ T311] usb 1-1: SerialNumber: syz [ 63.828082][ T311] usb 1-1: config 0 descriptor?? [ 64.085477][ T554] r8152-cfgselector 2-1: Unknown version 0x0000 [ 64.107501][ T554] r8152-cfgselector 2-1: Unknown version 0x0000 [ 64.113701][ T554] r8152-cfgselector 2-1: bad CDC descriptors [ 64.147492][ T554] r8152-cfgselector 2-1: Unknown version 0x0000 [ 64.212773][ T554] r8152-cfgselector 2-1: USB disconnect, device number 8 [ 64.950478][ T318] usb 5-1: USB disconnect, device number 9 [ 65.097501][ T460] Bluetooth: hci0: command 0x1003 tx timeout [ 65.103541][ T1007] Bluetooth: hci0: sending frame failed (-49) [ 65.877459][ T318] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 66.107886][ T1049] loop1: detected capacity change from 0 to 512 [ 66.127532][ T26] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 66.137575][ T318] usb 5-1: Using ep0 maxpacket: 32 [ 66.143143][ T1049] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 66.143143][ T1049] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 66.143143][ T1049] [ 66.161959][ T1049] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 66.170628][ T1049] EXT4-fs (loop1): 1 truncate cleaned up [ 66.176072][ T1049] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 66.314786][ T1052] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 66.330075][ T30] audit: type=1400 audit(1720636795.979:244): avc: denied { mounton } for pid=1048 comm="syz.1.200" path="/10/file0" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 66.467553][ T318] usb 5-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 66.476581][ T318] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.484453][ T318] usb 5-1: Product: syz [ 66.488465][ T318] usb 5-1: Manufacturer: syz [ 66.492855][ T318] usb 5-1: SerialNumber: syz [ 66.498211][ T318] usb 5-1: config 0 descriptor?? [ 66.517551][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.528260][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.538359][ T26] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 66.547215][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.555672][ T26] usb 4-1: config 0 descriptor?? [ 66.967220][ T30] audit: type=1400 audit(1720636796.609:245): avc: denied { unmount } for pid=806 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 67.178670][ T1061] netlink: 8 bytes leftover after parsing attributes in process `syz.1.203'. [ 67.193595][ T460] Bluetooth: hci0: command 0x1001 tx timeout [ 67.199908][ T1007] Bluetooth: hci0: sending frame failed (-49) [ 67.347482][ T26] usbhid 4-1:0.0: can't add hid device: -32 [ 67.353340][ T26] usbhid: probe of 4-1:0.0 failed with error -32 [ 67.896445][ T30] audit: type=1326 audit(1720636797.539:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1063 comm="syz.1.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2228cd2bd9 code=0x7ffc0000 [ 67.921342][ T30] audit: type=1326 audit(1720636797.539:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1063 comm="syz.1.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2228cd2bd9 code=0x7ffc0000 [ 67.945052][ T30] audit: type=1326 audit(1720636797.549:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1063 comm="syz.1.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f2228cd2bd9 code=0x7ffc0000 [ 67.968590][ T30] audit: type=1326 audit(1720636797.549:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1063 comm="syz.1.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2228cd2bd9 code=0x7ffc0000 [ 67.998567][ T30] audit: type=1326 audit(1720636797.569:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1063 comm="syz.1.204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2228cd2bd9 code=0x7ffc0000 [ 68.237466][ T311] rtl8150 1-1:0.0: couldn't reset the device [ 68.243699][ T311] rtl8150: probe of 1-1:0.0 failed with error -5 [ 68.251978][ T311] usb 1-1: USB disconnect, device number 6 [ 68.627518][ T311] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 68.926145][ T560] usb 4-1: USB disconnect, device number 8 [ 69.147443][ T311] usb 1-1: Using ep0 maxpacket: 16 [ 69.197464][ T26] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 69.257489][ T460] Bluetooth: hci0: command 0x1009 tx timeout [ 69.347484][ T311] usb 1-1: unable to read config index 0 descriptor/all [ 69.354270][ T311] usb 1-1: can't read configurations, error -71 [ 69.647436][ T26] usb 2-1: Using ep0 maxpacket: 32 [ 69.667521][ T560] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 69.877511][ T318] rtl8150 5-1:0.0: couldn't reset the device [ 69.883389][ T318] rtl8150: probe of 5-1:0.0 failed with error -5 [ 69.925852][ T318] usb 5-1: USB disconnect, device number 10 [ 69.933667][ T1091] loop4: detected capacity change from 0 to 512 [ 69.957916][ T26] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 69.966924][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.974795][ T26] usb 2-1: Product: syz [ 69.978785][ T26] usb 2-1: Manufacturer: syz [ 69.983118][ T26] usb 2-1: SerialNumber: syz [ 69.988269][ T26] usb 2-1: config 0 descriptor?? [ 70.018032][ T1091] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 70.018032][ T1091] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 70.018032][ T1091] [ 70.036908][ T1091] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 70.045594][ T1091] EXT4-fs (loop4): 1 truncate cleaned up [ 70.051109][ T1091] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 70.067550][ T560] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.085190][ T560] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.094874][ T560] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 70.103854][ T560] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.174383][ T560] usb 4-1: config 0 descriptor?? [ 70.234228][ T1094] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 70.374774][ T1100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.214'. [ 70.639368][ T1080] UDC core: couldn't find an available UDC or it's busy: -16 [ 70.646622][ T1080] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 70.677678][ T560] hid (null): bogus close delimiter [ 70.815579][ T30] audit: type=1326 audit(1720636800.459:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1102 comm="syz.4.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404f2d4bd9 code=0x7ffc0000 [ 70.838837][ T30] audit: type=1326 audit(1720636800.459:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1102 comm="syz.4.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404f2d4bd9 code=0x7ffc0000 [ 70.862269][ T30] audit: type=1326 audit(1720636800.459:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1102 comm="syz.4.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f404f2d4bd9 code=0x7ffc0000 [ 71.737503][ T560] usb 4-1: string descriptor 0 read error: -71 [ 71.761305][ T560] uclogic 0003:256C:006D.0006: failed retrieving string descriptor #200: -71 [ 71.770140][ T560] uclogic 0003:256C:006D.0006: failed retrieving pen parameters: -71 [ 71.778277][ T560] uclogic 0003:256C:006D.0006: failed probing pen v2 parameters: -71 [ 71.786212][ T560] uclogic 0003:256C:006D.0006: failed probing parameters: -71 [ 71.793727][ T560] uclogic: probe of 0003:256C:006D.0006 failed with error -71 [ 71.809677][ T560] usb 4-1: USB disconnect, device number 9 [ 72.037472][ T302] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 72.477474][ T302] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.488235][ T302] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.497772][ T302] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 72.506591][ T302] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.515264][ T302] usb 5-1: config 0 descriptor?? [ 72.644698][ T1127] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.651810][ T1127] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.659153][ T1127] device bridge_slave_0 entered promiscuous mode [ 72.666051][ T1127] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.672935][ T1127] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.683003][ T1127] device bridge_slave_1 entered promiscuous mode [ 73.025991][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.033715][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.041889][ T289] syz-executor (289) used greatest stack depth: 20416 bytes left [ 73.051411][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.059635][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.067821][ T311] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.074670][ T311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.082545][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.100431][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.108934][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.116983][ T311] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.123878][ T311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.144866][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.153140][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.169407][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.180978][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.188944][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.196943][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.211182][ T1127] device veth0_vlan entered promiscuous mode [ 73.315467][ T293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.333200][ T1127] device veth1_macvtap entered promiscuous mode [ 73.469433][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.498691][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 73.498706][ T30] audit: type=1400 audit(1720636803.149:256): avc: denied { getopt } for pid=1139 comm="syz.2.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 73.524331][ T302] usbhid 5-1:0.0: can't add hid device: -32 [ 73.530442][ T302] usbhid: probe of 5-1:0.0 failed with error -32 [ 73.545991][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.555839][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.819448][ T1147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.227'. [ 73.853598][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.860906][ T1146] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.868635][ T1146] device bridge_slave_0 entered promiscuous mode [ 73.877258][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.884169][ T1146] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.891473][ T1146] device bridge_slave_1 entered promiscuous mode [ 73.899571][ T337] device bridge_slave_1 left promiscuous mode [ 73.905576][ T337] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.912977][ T337] device bridge_slave_0 left promiscuous mode [ 73.919025][ T337] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.926967][ T337] device veth1_macvtap left promiscuous mode [ 73.932952][ T337] device veth0_vlan left promiscuous mode [ 74.106663][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.113553][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.135520][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.143267][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.150703][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.161097][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.169472][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.177480][ T302] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.184422][ T302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.193364][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.201723][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.208594][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.244988][ T26] rtl8150 2-1:0.0: couldn't reset the device [ 74.250923][ T26] rtl8150: probe of 2-1:0.0 failed with error -5 [ 74.263659][ T26] usb 2-1: USB disconnect, device number 9 [ 74.270994][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.296923][ T1146] device veth0_vlan entered promiscuous mode [ 74.311665][ T1146] device veth1_macvtap entered promiscuous mode [ 74.387571][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.396229][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.409316][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.417832][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.425672][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.644079][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.651644][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.659917][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.677465][ T26] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 74.778635][ T6] usb 5-1: USB disconnect, device number 11 [ 75.176540][ T554] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 75.778074][ T26] usb 2-1: device not accepting address 10, error -71 [ 76.541177][ T337] device bridge_slave_1 left promiscuous mode [ 76.548949][ T337] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.556477][ T337] device bridge_slave_0 left promiscuous mode [ 76.569632][ T337] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.587057][ T337] device veth1_macvtap left promiscuous mode [ 76.593745][ T337] device veth0_vlan left promiscuous mode [ 76.607596][ T554] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.621850][ T554] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.638143][ T1198] netlink: 224 bytes leftover after parsing attributes in process `syz.3.243'. [ 76.686404][ T554] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 76.703657][ T554] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.746276][ T554] usb 1-1: config 0 descriptor?? [ 77.130039][ T1203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.242'. [ 77.227458][ T20] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 77.267514][ T26] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 77.377506][ T302] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 77.507430][ T26] usb 2-1: Using ep0 maxpacket: 32 [ 77.537950][ T1160] UDC core: couldn't find an available UDC or it's busy: -16 [ 77.545258][ T1160] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 77.578603][ T554] hid (null): bogus close delimiter [ 77.627528][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.638308][ T302] usb 5-1: Using ep0 maxpacket: 16 [ 77.643298][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.653509][ T20] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 77.662646][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.671554][ T20] usb 4-1: config 0 descriptor?? [ 77.787486][ T26] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 77.796354][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.804205][ T26] usb 2-1: Product: syz [ 77.808183][ T26] usb 2-1: Manufacturer: syz [ 77.812581][ T26] usb 2-1: SerialNumber: syz [ 77.821565][ T26] usb 2-1: config 0 descriptor?? [ 77.937518][ T302] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 77.946489][ T302] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.954475][ T302] usb 5-1: Product: syz [ 77.958678][ T302] usb 5-1: Manufacturer: syz [ 77.963113][ T302] usb 5-1: SerialNumber: syz [ 77.972060][ T302] r8152-cfgselector 5-1: config 0 descriptor?? [ 78.017568][ T554] usb 1-1: string descriptor 0 read error: -71 [ 78.037561][ T554] uclogic 0003:256C:006D.0007: failed retrieving string descriptor #200: -71 [ 78.046285][ T554] uclogic 0003:256C:006D.0007: failed retrieving pen parameters: -71 [ 78.054452][ T554] uclogic 0003:256C:006D.0007: failed probing pen v2 parameters: -71 [ 78.062820][ T554] uclogic 0003:256C:006D.0007: failed probing parameters: -71 [ 78.070334][ T554] uclogic: probe of 0003:256C:006D.0007 failed with error -71 [ 78.082801][ T554] usb 1-1: USB disconnect, device number 9 [ 78.227684][ T1206] loop4: detected capacity change from 0 to 512 [ 78.270832][ T1206] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 78.279501][ T1206] EXT4-fs error (device loop4): __ext4_iget:4892: inode #11: block 1: comm syz.4.245: invalid block [ 78.291701][ T1206] EXT4-fs (loop4): Remounting filesystem read-only [ 78.298261][ T1206] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.245: couldn't read orphan inode 11 (err -117) [ 78.310085][ T1206] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,errors=continue,max_dir_size_kb=0x0000000000000009,data_err=abort,errors=remount-ro,noinit_itable,mblk_io_submit,i_version,acl,. Quota mode: none. [ 79.343103][ T20] usb 4-1: language id specifier not provided by device, defaulting to English [ 79.597543][ T20] uclogic 0003:256C:006D.0008: failed retrieving Huion firmware version: -71 [ 79.610858][ T20] uclogic 0003:256C:006D.0008: failed probing parameters: -71 [ 79.691621][ T1220] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 79.741673][ T20] uclogic: probe of 0003:256C:006D.0008 failed with error -71 [ 80.298931][ T20] usb 4-1: USB disconnect, device number 10 [ 80.406624][ T302] r8152-cfgselector 5-1: Unknown version 0x0000 [ 80.427491][ T302] r8152-cfgselector 5-1: Unknown version 0x0000 [ 80.433731][ T302] r8152-cfgselector 5-1: bad CDC descriptors [ 80.442174][ T1220] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.456226][ T1220] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.466452][ T1220] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 80.475449][ T1220] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.500450][ T1220] usb 3-1: config 0 descriptor?? [ 80.816400][ T302] r8152-cfgselector 5-1: Unknown version 0x0000 [ 80.823050][ T302] r8152-cfgselector 5-1: USB disconnect, device number 12 [ 81.357520][ T1220] usbhid 3-1:0.0: can't add hid device: -32 [ 81.363444][ T1220] usbhid: probe of 3-1:0.0 failed with error -32 [ 81.470149][ T20] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 81.677452][ T302] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 82.076335][ T20] usb 4-1: device descriptor read/64, error -71 [ 82.207468][ T1220] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 82.217560][ T26] rtl8150 2-1:0.0: couldn't reset the device [ 82.223430][ T26] rtl8150: probe of 2-1:0.0 failed with error -5 [ 82.231035][ T26] usb 2-1: USB disconnect, device number 11 [ 82.456645][ T460] usb 3-1: USB disconnect, device number 8 [ 82.504212][ T302] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.520428][ T302] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.530204][ T302] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 82.539837][ T302] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.548567][ T302] usb 5-1: config 0 descriptor?? [ 82.617833][ T1220] usb 1-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 82.626758][ T1220] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.635346][ T1220] usb 1-1: config 0 descriptor?? [ 82.697467][ T20] usb 4-1: device descriptor read/64, error -71 [ 82.877524][ T460] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 82.977461][ T20] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 82.997949][ T1262] UDC core: couldn't find an available UDC or it's busy: -16 [ 83.005233][ T1262] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 83.047832][ T302] hid (null): bogus close delimiter [ 83.147484][ T460] usb 3-1: Using ep0 maxpacket: 16 [ 83.277473][ T20] usb 4-1: device descriptor read/64, error -71 [ 83.427657][ T460] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 83.436704][ T460] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.444824][ T460] usb 3-1: Product: syz [ 83.449003][ T460] usb 3-1: Manufacturer: syz [ 83.453522][ T460] usb 3-1: SerialNumber: syz [ 83.459371][ T460] r8152-cfgselector 3-1: config 0 descriptor?? [ 83.487548][ T302] usb 5-1: string descriptor 0 read error: -71 [ 83.507841][ T302] uclogic 0003:256C:006D.0009: failed retrieving string descriptor #200: -71 [ 83.516506][ T302] uclogic 0003:256C:006D.0009: failed retrieving pen parameters: -71 [ 83.524427][ T302] uclogic 0003:256C:006D.0009: failed probing pen v2 parameters: -71 [ 83.532663][ T302] uclogic 0003:256C:006D.0009: failed probing parameters: -71 [ 83.540384][ T302] uclogic: probe of 0003:256C:006D.0009 failed with error -71 [ 83.549451][ T302] usb 5-1: USB disconnect, device number 13 [ 83.687449][ T20] usb 4-1: device descriptor read/64, error -71 [ 83.701406][ T1278] loop2: detected capacity change from 0 to 512 [ 83.797954][ T1278] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 83.806508][ T1278] EXT4-fs error (device loop2): __ext4_iget:4892: inode #11: block 1: comm syz.2.263: invalid block [ 83.817888][ T20] usb usb4-port1: attempt power cycle [ 83.818363][ T1278] EXT4-fs (loop2): Remounting filesystem read-only [ 83.829855][ T1278] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.263: couldn't read orphan inode 11 (err -117) [ 83.841680][ T1278] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,errors=continue,max_dir_size_kb=0x0000000000000009,data_err=abort,errors=remount-ro,noinit_itable,mblk_io_submit,i_version,acl,. Quota mode: none. [ 83.958725][ T1288] loop1: detected capacity change from 0 to 512 [ 84.069470][ T1288] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 84.069470][ T1288] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 84.069470][ T1288] [ 84.196179][ T1288] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 84.212890][ T1288] EXT4-fs (loop1): 1 truncate cleaned up [ 84.220291][ T1288] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 84.247423][ T20] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 84.387581][ T1220] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 84.617642][ T20] usb 4-1: device descriptor read/8, error -71 [ 84.667497][ T1220] usb 5-1: device descriptor read/64, error -71 [ 84.787591][ T554] usb 1-1: USB disconnect, device number 10 [ 84.917588][ T20] usb 4-1: device descriptor read/8, error -71 [ 85.710762][ T460] r8152-cfgselector 3-1: Unknown version 0x0000 [ 85.785557][ T1307] fuse: Bad value for 'fd' [ 85.791966][ T460] r8152-cfgselector 3-1: Unknown version 0x0000 [ 85.927593][ T1220] usb 5-1: device descriptor read/64, error -71 [ 85.936728][ T460] r8152-cfgselector 3-1: bad CDC descriptors [ 86.407991][ T460] r8152-cfgselector 3-1: Unknown version 0x0000 [ 86.427615][ T1220] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 86.482932][ T460] r8152-cfgselector 3-1: USB disconnect, device number 9 [ 86.587484][ T20] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 86.600854][ T1319] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.607816][ T1319] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.614992][ T1319] device bridge_slave_0 entered promiscuous mode [ 86.622056][ T1319] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.629077][ T1319] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.636390][ T1319] device bridge_slave_1 entered promiscuous mode [ 86.707498][ T1220] usb 5-1: device descriptor read/64, error -71 [ 86.717655][ T20] usb 4-1: device descriptor read/8, error -71 [ 86.730723][ T1323] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.737612][ T1323] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.744821][ T1323] device bridge_slave_0 entered promiscuous mode [ 86.751782][ T1323] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.761374][ T1323] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.774295][ T1323] device bridge_slave_1 entered promiscuous mode [ 86.801099][ T1319] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.807984][ T1319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.815073][ T1319] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.821867][ T1319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.905415][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.913004][ T318] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.920696][ T318] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.935105][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.943167][ T318] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.950021][ T318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.957667][ T20] usb 4-1: device descriptor read/8, error -71 [ 86.966172][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.974249][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.981110][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.003451][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.014615][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.035848][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.053871][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.061320][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.069546][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.076762][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.083896][ T20] usb usb4-port1: unable to enumerate USB device [ 87.097496][ T1220] usb 5-1: device descriptor read/64, error -71 [ 87.105185][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.113212][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.117441][ T554] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 87.120089][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.135017][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.143026][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.149883][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.157490][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.165752][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.178007][ T1319] device veth0_vlan entered promiscuous mode [ 87.187564][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.201435][ T1319] device veth1_macvtap entered promiscuous mode [ 87.208852][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.217978][ T1220] usb usb5-port1: attempt power cycle [ 87.224333][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.232813][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.250623][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.267113][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.280680][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.289179][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.298078][ T1323] device veth0_vlan entered promiscuous mode [ 87.322727][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.332038][ T1323] device veth1_macvtap entered promiscuous mode [ 87.343487][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.362663][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.418988][ T337] device bridge_slave_1 left promiscuous mode [ 87.425005][ T337] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.432635][ T337] device bridge_slave_0 left promiscuous mode [ 87.438716][ T337] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.446821][ T337] device bridge_slave_1 left promiscuous mode [ 87.453178][ T337] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.462643][ T337] device bridge_slave_0 left promiscuous mode [ 87.468947][ T337] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.481625][ T337] device veth1_macvtap left promiscuous mode [ 87.487644][ T337] device veth0_vlan left promiscuous mode [ 87.493511][ T337] device veth1_macvtap left promiscuous mode [ 87.499613][ T337] device veth0_vlan left promiscuous mode [ 87.527517][ T554] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.538428][ T554] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.548327][ T554] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 87.557312][ T554] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.569991][ T554] usb 3-1: config 0 descriptor?? [ 87.627428][ T1220] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 87.678086][ T318] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 87.797567][ T1220] usb 5-1: device descriptor read/8, error -71 [ 87.947527][ T318] usb 1-1: device descriptor read/64, error -71 [ 88.027995][ T1329] UDC core: couldn't find an available UDC or it's busy: -16 [ 88.035285][ T1329] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 88.067494][ T1220] usb 5-1: device descriptor read/8, error -71 [ 88.067779][ T554] hid (null): bogus close delimiter [ 88.163926][ T1340] loop1: detected capacity change from 0 to 512 [ 88.258108][ T1340] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 88.258108][ T1340] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 88.258108][ T1340] [ 88.276930][ T1340] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 88.285640][ T1340] EXT4-fs (loop1): 1 truncate cleaned up [ 88.291222][ T1340] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 88.368555][ T1220] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 88.376162][ T318] usb 1-1: device descriptor read/64, error -71 [ 88.547856][ T1220] usb 5-1: device descriptor read/8, error -71 [ 88.647479][ T318] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 88.677601][ T554] usb 3-1: string descriptor 0 read error: -71 [ 88.707471][ T554] uclogic 0003:256C:006D.000A: failed retrieving string descriptor #200: -71 [ 88.716156][ T554] uclogic 0003:256C:006D.000A: failed retrieving pen parameters: -71 [ 88.724025][ T554] uclogic 0003:256C:006D.000A: failed probing pen v2 parameters: -71 [ 88.732129][ T554] uclogic 0003:256C:006D.000A: failed probing parameters: -71 [ 88.739397][ T554] uclogic: probe of 0003:256C:006D.000A failed with error -71 [ 88.749053][ T554] usb 3-1: USB disconnect, device number 10 [ 88.817531][ T1220] usb 5-1: device descriptor read/8, error -71 [ 88.917461][ T318] usb 1-1: device descriptor read/64, error -71 [ 88.938698][ T1220] usb usb5-port1: unable to enumerate USB device [ 89.537466][ T318] usb 1-1: device descriptor read/64, error -71 [ 89.547463][ T554] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 89.657826][ T318] usb usb1-port1: attempt power cycle [ 89.797442][ T554] usb 3-1: Using ep0 maxpacket: 16 [ 90.087422][ T318] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 90.120170][ T1358] fuse: Bad value for 'fd' [ 90.297552][ T318] usb 1-1: device descriptor read/8, error -71 [ 90.347539][ T554] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 90.356620][ T554] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.364533][ T554] usb 3-1: Product: syz [ 90.368500][ T554] usb 3-1: Manufacturer: syz [ 90.372895][ T554] usb 3-1: SerialNumber: syz [ 90.378379][ T554] r8152-cfgselector 3-1: config 0 descriptor?? [ 90.587489][ T318] usb 1-1: device descriptor read/8, error -71 [ 90.621272][ T1347] loop2: detected capacity change from 0 to 512 [ 90.678715][ T1347] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 90.688183][ T1347] EXT4-fs error (device loop2): __ext4_iget:4892: inode #11: block 1: comm syz.2.280: invalid block [ 90.699454][ T1347] EXT4-fs (loop2): Remounting filesystem read-only [ 90.705912][ T1347] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.280: couldn't read orphan inode 11 (err -117) [ 90.717893][ T1347] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,errors=continue,max_dir_size_kb=0x0000000000000009,data_err=abort,errors=remount-ro,noinit_itable,mblk_io_submit,i_version,acl,. Quota mode: none. [ 90.760514][ T1361] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.767605][ T1361] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.775064][ T1361] device bridge_slave_0 entered promiscuous mode [ 90.783777][ T1361] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.794587][ T1361] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.802162][ T1361] device bridge_slave_1 entered promiscuous mode [ 90.887025][ T1361] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.893902][ T1361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.901024][ T1361] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.907797][ T1361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.917799][ T318] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 91.160178][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 91.175730][ T1220] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.187649][ T318] usb 1-1: device descriptor read/8, error -71 [ 91.203749][ T1220] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.224211][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 91.232227][ T1191] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.239091][ T1191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.246422][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 91.254762][ T1191] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.261608][ T1191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.286196][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 91.298920][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 91.333224][ T1369] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.340185][ T1369] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.347338][ T1369] device bridge_slave_0 entered promiscuous mode [ 91.356606][ T1369] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.363602][ T1369] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.370891][ T1369] device bridge_slave_1 entered promiscuous mode [ 91.385619][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 91.394462][ T432] device bridge_slave_1 left promiscuous mode [ 91.400541][ T432] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.408069][ T432] device bridge_slave_0 left promiscuous mode [ 91.414049][ T432] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.421985][ T432] device veth1_macvtap left promiscuous mode [ 91.427894][ T432] device veth0_vlan left promiscuous mode [ 91.487473][ T318] usb 1-1: device descriptor read/8, error -71 [ 91.538710][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 91.546634][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 91.554103][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 91.565474][ T1361] device veth0_vlan entered promiscuous mode [ 91.590055][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 91.604929][ T1361] device veth1_macvtap entered promiscuous mode [ 91.617764][ T318] usb usb1-port1: unable to enumerate USB device [ 91.618916][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.641630][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.682338][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 91.698061][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 91.706594][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 91.714886][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.721776][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.729451][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 91.738444][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 91.747002][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.753875][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.761847][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 91.966100][ T1369] device veth0_vlan entered promiscuous mode [ 92.015772][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 92.024008][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 92.032356][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 92.040456][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 92.048578][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 92.056743][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 92.065141][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 92.073070][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 92.080894][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 92.088980][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.097137][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 92.104611][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 92.115265][ T1369] device veth1_macvtap entered promiscuous mode [ 92.124745][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 92.132309][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 92.140736][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 92.152658][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 92.160929][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.188822][ T30] audit: type=1400 audit(1720636821.839:257): avc: denied { read } for pid=1379 comm="syz.1.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 92.251432][ T554] r8152-cfgselector 3-1: Unknown version 0x0000 [ 92.278799][ T554] r8152-cfgselector 3-1: Unknown version 0x0000 [ 92.284916][ T554] r8152-cfgselector 3-1: bad CDC descriptors [ 92.317448][ T554] r8152-cfgselector 3-1: Unknown version 0x0000 [ 92.327757][ T554] r8152-cfgselector 3-1: USB disconnect, device number 11 [ 92.648932][ T432] device bridge_slave_1 left promiscuous mode [ 92.655034][ T432] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.662975][ T432] device bridge_slave_0 left promiscuous mode [ 92.669020][ T432] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.676827][ T432] device veth1_macvtap left promiscuous mode [ 92.682723][ T432] device veth0_vlan left promiscuous mode [ 92.787553][ T1386] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.794465][ T1386] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.801976][ T1386] device bridge_slave_0 entered promiscuous mode [ 92.808947][ T1386] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.815885][ T1386] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.823203][ T1386] device bridge_slave_1 entered promiscuous mode [ 92.877022][ T1386] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.883896][ T1386] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.891041][ T1386] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.897914][ T1386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.919768][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.928568][ T554] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.935765][ T554] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.947054][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 92.955304][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.962173][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.978303][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 92.986269][ T460] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.993127][ T460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.000330][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 93.008372][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 93.024638][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 93.038898][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 93.046861][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 93.054439][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 93.062448][ T1386] device veth0_vlan entered promiscuous mode [ 93.076436][ T1386] device veth1_macvtap entered promiscuous mode [ 93.083817][ T460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 93.167612][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 93.175843][ T1220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 93.797494][ T20] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 93.804964][ T554] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 93.857974][ T432] device bridge_slave_1 left promiscuous mode [ 93.864060][ T432] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.871450][ T432] device bridge_slave_0 left promiscuous mode [ 93.877600][ T432] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.885709][ T432] device veth1_macvtap left promiscuous mode [ 93.891656][ T432] device veth0_vlan left promiscuous mode [ 94.167512][ T554] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.178666][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.192956][ T554] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.202964][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.214645][ T554] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 94.226856][ T20] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 94.236957][ T554] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.245233][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.257816][ T554] usb 4-1: config 0 descriptor?? [ 94.265987][ T20] usb 3-1: config 0 descriptor?? [ 94.316386][ T1403] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.323380][ T1403] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.330928][ T1403] device bridge_slave_0 entered promiscuous mode [ 94.347224][ T1403] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.354234][ T1403] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.361782][ T1403] device bridge_slave_1 entered promiscuous mode [ 94.456099][ T1403] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.463055][ T1403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.470125][ T1403] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.477150][ T1403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.510099][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.519530][ T1191] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.526889][ T1191] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.540044][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 94.548412][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.555263][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.568929][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 94.577094][ T318] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.584000][ T318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.598145][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 94.610682][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 94.627667][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 94.643490][ T1403] device veth0_vlan entered promiscuous mode [ 94.649816][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 94.657883][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 94.665560][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 94.682042][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 94.699729][ T1403] device veth1_macvtap entered promiscuous mode [ 94.716766][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 94.718095][ T1396] UDC core: couldn't find an available UDC or it's busy: -16 [ 94.734890][ T1396] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 94.742704][ T554] hid (null): bogus close delimiter [ 94.748812][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 94.764846][ T432] device bridge_slave_1 left promiscuous mode [ 94.771631][ T432] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.788185][ T432] device bridge_slave_0 left promiscuous mode [ 94.797772][ T20] hid (null): bogus close delimiter [ 94.804332][ T432] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.812405][ T432] device veth1_macvtap left promiscuous mode [ 94.818417][ T432] device veth0_vlan left promiscuous mode [ 94.951861][ T554] usb 4-1: language id specifier not provided by device, defaulting to English [ 95.195753][ T1415] fuse: Bad value for 'fd' [ 95.967493][ T20] usb 3-1: string descriptor 0 read error: -71 [ 95.987479][ T20] uclogic 0003:256C:006D.000C: failed retrieving string descriptor #200: -71 [ 95.999427][ T20] uclogic 0003:256C:006D.000C: failed retrieving pen parameters: -71 [ 96.007461][ T20] uclogic 0003:256C:006D.000C: failed probing pen v2 parameters: -71 [ 96.015467][ T20] uclogic 0003:256C:006D.000C: failed probing parameters: -71 [ 96.022834][ T20] uclogic: probe of 0003:256C:006D.000C failed with error -71 [ 96.035649][ T20] usb 3-1: USB disconnect, device number 12 [ 96.426481][ T1424] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.433867][ T1424] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.446371][ T1424] device bridge_slave_0 entered promiscuous mode [ 96.457120][ T554] uclogic 0003:256C:006D.000B: failed retrieving string descriptor #100: -71 [ 96.457291][ T1424] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.472658][ T554] uclogic 0003:256C:006D.000B: failed retrieving pen parameters: -71 [ 96.476785][ T1424] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.480518][ T554] uclogic 0003:256C:006D.000B: failed probing pen v1 parameters: -71 [ 96.480553][ T554] uclogic 0003:256C:006D.000B: failed probing parameters: -71 [ 96.488490][ T1424] device bridge_slave_1 entered promiscuous mode [ 96.495562][ T554] uclogic: probe of 0003:256C:006D.000B failed with error -71 [ 96.522388][ T554] usb 4-1: USB disconnect, device number 15 [ 96.579910][ T1424] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.586928][ T1424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.594208][ T1424] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.601071][ T1424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.623378][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.630877][ T302] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.638914][ T302] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.650408][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 96.659927][ T318] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.666796][ T318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.678294][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 96.686542][ T302] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.693439][ T302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.718257][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 96.726665][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 96.734884][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 96.742262][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 96.750596][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 96.758496][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 96.766443][ T1424] device veth0_vlan entered promiscuous mode [ 96.792742][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 96.804244][ T1424] device veth1_macvtap entered promiscuous mode [ 96.820121][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 96.835095][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 96.910777][ T1439] loop2: detected capacity change from 0 to 512 [ 96.956171][ T1439] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 96.956171][ T1439] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 96.956171][ T1439] [ 97.039123][ T1439] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 97.048236][ T1439] EXT4-fs (loop2): 1 truncate cleaned up [ 97.053727][ T1439] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 97.111039][ T45] device bridge_slave_1 left promiscuous mode [ 97.123645][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.296495][ T45] device bridge_slave_0 left promiscuous mode [ 97.302971][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.312400][ T45] device veth1_macvtap left promiscuous mode [ 97.318383][ T45] device veth0_vlan left promiscuous mode [ 97.405039][ T1452] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 97.457456][ T318] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 97.876770][ T1455] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.883742][ T1455] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.895555][ T1455] device bridge_slave_0 entered promiscuous mode [ 97.897549][ T318] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 97.904998][ T1455] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.948210][ T318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.971851][ T1469] fuse: Bad value for 'fd' [ 97.993248][ T1455] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.027660][ T30] audit: type=1400 audit(1720636827.659:258): avc: denied { write } for pid=1464 comm="syz.4.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 98.074812][ T318] usb 2-1: config 0 descriptor?? [ 98.106494][ T1455] device bridge_slave_1 entered promiscuous mode [ 98.228763][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 98.236203][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 98.257155][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 98.265419][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 98.273557][ T302] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.280421][ T302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.287717][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 98.295860][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 98.303790][ T20] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 98.313473][ T302] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.320343][ T302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.327694][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 98.335657][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 98.343845][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 98.358057][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 98.370588][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 98.399090][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 98.406468][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 98.417228][ T1455] device veth0_vlan entered promiscuous mode [ 98.429128][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 98.438236][ T1455] device veth1_macvtap entered promiscuous mode [ 98.448791][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 98.459880][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 98.497717][ T302] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 98.638549][ T432] device bridge_slave_1 left promiscuous mode [ 98.644704][ T432] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.652397][ T432] device bridge_slave_0 left promiscuous mode [ 98.658873][ T432] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.667197][ T432] device veth1_macvtap left promiscuous mode [ 98.673112][ T432] device veth0_vlan left promiscuous mode [ 98.687528][ T20] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.767727][ T6] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 98.857609][ T20] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 98.866583][ T20] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.874793][ T20] usb 3-1: Product: syz [ 98.879025][ T20] usb 3-1: Manufacturer: syz [ 98.883444][ T20] usb 3-1: SerialNumber: syz [ 98.888199][ T302] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.900557][ T302] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.913124][ T302] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 98.922308][ T302] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.933113][ T302] usb 5-1: config 0 descriptor?? [ 98.946841][ T1476] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.953967][ T1476] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.961323][ T1476] device bridge_slave_0 entered promiscuous mode [ 98.968279][ T1476] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.975174][ T1476] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.982859][ T1476] device bridge_slave_1 entered promiscuous mode [ 99.041148][ T1476] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.048302][ T1476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.055364][ T1476] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.062192][ T1476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.084406][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 99.092334][ T318] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.100107][ T318] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.110406][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 99.118656][ T554] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.125491][ T554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.137526][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.148670][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.158329][ T6] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 99.167205][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.180121][ T6] usb 1-1: config 0 descriptor?? [ 99.187121][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 99.195265][ T554] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.202117][ T554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.209430][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 99.217209][ T554] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 99.234360][ T1476] device veth0_vlan entered promiscuous mode [ 99.240688][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 99.248976][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 99.257090][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 99.264991][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 99.277095][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 99.284504][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 99.296600][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 99.305031][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 99.316770][ T1476] device veth1_macvtap entered promiscuous mode [ 99.326761][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 99.334364][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 99.343003][ T318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 99.353430][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 99.361785][ T1191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 99.487724][ T302] hid (null): bogus close delimiter [ 99.608394][ T432] device bridge_slave_1 left promiscuous mode [ 99.614410][ T432] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.621968][ T432] device bridge_slave_0 left promiscuous mode [ 99.628348][ T432] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.636335][ T432] device veth1_macvtap left promiscuous mode [ 99.642356][ T432] device veth0_vlan left promiscuous mode [ 99.648456][ T1473] UDC core: couldn't find an available UDC or it's busy: -16 [ 99.655865][ T1473] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 99.687791][ T6] hid (null): bogus close delimiter [ 99.707572][ T302] usb 5-1: language id specifier not provided by device, defaulting to English [ 99.974699][ T318] usb 2-1: USB disconnect, device number 12 [ 100.047528][ T20] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 100.053899][ T20] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 100.061533][ T20] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 100.147543][ T6] usb 1-1: string descriptor 0 read error: -71 [ 100.167517][ T6] uclogic 0003:256C:006D.000E: failed retrieving string descriptor #200: -71 [ 100.176354][ T6] uclogic 0003:256C:006D.000E: failed retrieving pen parameters: -71 [ 100.184530][ T6] uclogic 0003:256C:006D.000E: failed probing pen v2 parameters: -71 [ 100.192728][ T6] uclogic 0003:256C:006D.000E: failed probing parameters: -71 [ 100.200229][ T6] uclogic: probe of 0003:256C:006D.000E failed with error -71 [ 100.212456][ T6] usb 1-1: USB disconnect, device number 15 [ 100.257487][ T20] cdc_ncm 3-1:1.0: setting tx_max = 184 [ 100.265161][ T20] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 100.265773][ T1491] netlink: 12 bytes leftover after parsing attributes in process `syz.3.319'. [ 100.289186][ T20] usb 3-1: USB disconnect, device number 13 [ 100.295196][ T20] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM [ 100.314636][ T30] audit: type=1326 audit(1720636829.959:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1490 comm="syz.3.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53ad26bd9 code=0x7ffc0000 [ 100.357475][ T302] uclogic 0003:256C:006D.000D: failed retrieving string descriptor #100: -71 [ 100.366091][ T302] uclogic 0003:256C:006D.000D: failed retrieving pen parameters: -71 [ 100.387837][ T302] uclogic 0003:256C:006D.000D: failed probing pen v1 parameters: -71 [ 100.395768][ T302] uclogic 0003:256C:006D.000D: failed probing parameters: -71 [ 100.403543][ T302] uclogic: probe of 0003:256C:006D.000D failed with error -71 [ 100.414099][ T30] audit: type=1326 audit(1720636829.959:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1490 comm="syz.3.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7ff53ad26bd9 code=0x7ffc0000 [ 100.416662][ T302] usb 5-1: USB disconnect, device number 18 [ 100.462181][ T6] ================================================================== [ 100.470170][ T6] BUG: KASAN: use-after-free in worker_thread+0xaaa/0x12a0 [ 100.477192][ T6] Read of size 8 at addr ffff88810da6ec60 by task kworker/0:0/6 [ 100.477437][ T30] audit: type=1326 audit(1720636829.959:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1490 comm="syz.3.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53ad26bd9 code=0x7ffc0000 [ 100.484653][ T6] [ 100.484660][ T6] CPU: 0 PID: 6 Comm: kworker/0:0 Not tainted 5.15.151-syzkaller-00415-gdb06c48ab67e #0 [ 100.519385][ T6] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 100.529724][ T6] Workqueue: 0x0 (usb_hub_wq) [ 100.534364][ T6] Call Trace: [ 100.537475][ T6] [ 100.540222][ T6] dump_stack_lvl+0x151/0x1b7 [ 100.544727][ T6] ? io_uring_drop_tctx_refs+0x190/0x190 [ 100.550196][ T6] ? panic+0x751/0x751 [ 100.554098][ T6] ? __schedule+0xcd4/0x1590 [ 100.558525][ T6] print_address_description+0x87/0x3b0 [ 100.563913][ T6] kasan_report+0x179/0x1c0 [ 100.568245][ T6] ? _raw_spin_lock_irqsave+0x210/0x210 [ 100.573631][ T6] ? worker_thread+0xaaa/0x12a0 [ 100.578314][ T6] ? worker_thread+0xaaa/0x12a0 [ 100.583001][ T6] __asan_report_load8_noabort+0x14/0x20 [ 100.588468][ T6] worker_thread+0xaaa/0x12a0 [ 100.592986][ T6] kthread+0x421/0x510 [ 100.596887][ T6] ? worker_clr_flags+0x180/0x180 [ 100.601748][ T6] ? kthread_blkcg+0xd0/0xd0 [ 100.606174][ T6] ret_from_fork+0x1f/0x30 [ 100.610428][ T6] [ 100.613300][ T6] [ 100.615461][ T6] Allocated by task 20: [ 100.619461][ T6] ____kasan_kmalloc+0xdb/0x110 [ 100.624143][ T6] __kasan_kmalloc+0x9/0x10 [ 100.628479][ T6] __kmalloc+0x13a/0x270 [ 100.632561][ T6] kvmalloc_node+0x1f0/0x4d0 [ 100.636986][ T6] alloc_netdev_mqs+0x8c/0xc90 [ 100.641586][ T6] alloc_etherdev_mqs+0x33/0x40 [ 100.646352][ T6] usbnet_probe+0x1ff/0x2830 [ 100.651120][ T6] usb_probe_interface+0x5b6/0xa90 [ 100.656187][ T6] really_probe+0x28d/0x970 [ 100.660719][ T6] __driver_probe_device+0x1a0/0x310 [ 100.665792][ T6] driver_probe_device+0x54/0x3d0 [ 100.670646][ T6] __device_attach_driver+0x2c5/0x470 [ 100.675860][ T6] bus_for_each_drv+0x183/0x200 [ 100.680770][ T6] __device_attach+0x312/0x510 [ 100.685357][ T6] device_initial_probe+0x1a/0x20 [ 100.690227][ T6] bus_probe_device+0xbe/0x1e0 [ 100.694817][ T6] device_add+0xb60/0xf10 [ 100.698983][ T6] usb_set_configuration+0x190f/0x1e80 [ 100.704278][ T6] usb_generic_driver_probe+0x8b/0x150 [ 100.709692][ T6] usb_probe_device+0x144/0x260 [ 100.714347][ T6] really_probe+0x28d/0x970 [ 100.718683][ T6] __driver_probe_device+0x1a0/0x310 [ 100.723890][ T6] driver_probe_device+0x54/0x3d0 [ 100.728867][ T6] __device_attach_driver+0x2c5/0x470 [ 100.734076][ T6] bus_for_each_drv+0x183/0x200 [ 100.738762][ T6] __device_attach+0x312/0x510 [ 100.743364][ T6] device_initial_probe+0x1a/0x20 [ 100.748223][ T6] bus_probe_device+0xbe/0x1e0 [ 100.752822][ T6] device_add+0xb60/0xf10 [ 100.757103][ T6] usb_new_device+0x1038/0x1c00 [ 100.761867][ T6] hub_event+0x2def/0x4770 [ 100.766119][ T6] process_one_work+0x6bb/0xc10 [ 100.770805][ T6] worker_thread+0xad5/0x12a0 [ 100.775315][ T6] kthread+0x421/0x510 [ 100.779223][ T6] ret_from_fork+0x1f/0x30 [ 100.783476][ T6] [ 100.785650][ T6] Freed by task 20: [ 100.789302][ T6] kasan_set_track+0x4b/0x70 [ 100.793716][ T6] kasan_set_free_info+0x23/0x40 [ 100.798616][ T6] ____kasan_slab_free+0x126/0x160 [ 100.803570][ T6] __kasan_slab_free+0x11/0x20 [ 100.808149][ T6] slab_free_freelist_hook+0xbd/0x190 [ 100.813355][ T6] kfree+0xc8/0x220 [ 100.817001][ T6] kvfree+0x35/0x40 [ 100.820650][ T6] netdev_freemem+0x3f/0x60 [ 100.824985][ T6] netdev_release+0x7f/0xb0 [ 100.829416][ T6] device_release+0x95/0x1c0 [ 100.833966][ T6] kobject_put+0x178/0x260 [ 100.838191][ T6] put_device+0x1f/0x30 [ 100.842315][ T6] free_netdev+0x34f/0x440 [ 100.846567][ T6] usbnet_disconnect+0x245/0x390 [ 100.851691][ T6] usb_unbind_interface+0x1fa/0x8c0 [ 100.856724][ T6] device_release_driver_internal+0x50b/0x7d0 [ 100.862623][ T6] device_release_driver+0x19/0x20 [ 100.867579][ T6] bus_remove_device+0x2f8/0x360 [ 100.872431][ T6] device_del+0x663/0xe90 [ 100.876605][ T6] usb_disable_device+0x380/0x720 [ 100.881462][ T6] usb_disconnect+0x32a/0x890 [ 100.885982][ T6] hub_event+0x1d42/0x4770 [ 100.890227][ T6] process_one_work+0x6bb/0xc10 [ 100.894933][ T6] worker_thread+0xe02/0x12a0 [ 100.899424][ T6] kthread+0x421/0x510 [ 100.903331][ T6] ret_from_fork+0x1f/0x30 [ 100.907583][ T6] [ 100.909848][ T6] Last potentially related work creation: [ 100.915395][ T6] kasan_save_stack+0x3b/0x60 [ 100.919928][ T6] __kasan_record_aux_stack+0xd3/0xf0 [ 100.925115][ T6] kasan_record_aux_stack_noalloc+0xb/0x10 [ 100.930851][ T6] insert_work+0x56/0x320 [ 100.935018][ T6] __queue_work+0x92a/0xcd0 [ 100.939353][ T6] queue_work_on+0x105/0x170 [ 100.943891][ T6] usbnet_link_change+0xeb/0x100 [ 100.948662][ T6] usbnet_probe+0x1dd3/0x2830 [ 100.953439][ T6] usb_probe_interface+0x5b6/0xa90 [ 100.958377][ T6] really_probe+0x28d/0x970 [ 100.962718][ T6] __driver_probe_device+0x1a0/0x310 [ 100.967849][ T6] driver_probe_device+0x54/0x3d0 [ 100.972879][ T6] __device_attach_driver+0x2c5/0x470 [ 100.978079][ T6] bus_for_each_drv+0x183/0x200 [ 100.982766][ T6] __device_attach+0x312/0x510 [ 100.987365][ T6] device_initial_probe+0x1a/0x20 [ 100.992229][ T6] bus_probe_device+0xbe/0x1e0 [ 100.996828][ T6] device_add+0xb60/0xf10 [ 101.000994][ T6] usb_set_configuration+0x190f/0x1e80 [ 101.006287][ T6] usb_generic_driver_probe+0x8b/0x150 [ 101.011580][ T6] usb_probe_device+0x144/0x260 [ 101.016269][ T6] really_probe+0x28d/0x970 [ 101.020608][ T6] __driver_probe_device+0x1a0/0x310 [ 101.025750][ T6] driver_probe_device+0x54/0x3d0 [ 101.030627][ T6] __device_attach_driver+0x2c5/0x470 [ 101.035797][ T6] bus_for_each_drv+0x183/0x200 [ 101.040484][ T6] __device_attach+0x312/0x510 [ 101.045086][ T6] device_initial_probe+0x1a/0x20 [ 101.049944][ T6] bus_probe_device+0xbe/0x1e0 [ 101.054637][ T6] device_add+0xb60/0xf10 [ 101.058916][ T6] usb_new_device+0x1038/0x1c00 [ 101.063773][ T6] hub_event+0x2def/0x4770 [ 101.068021][ T6] process_one_work+0x6bb/0xc10 [ 101.072706][ T6] worker_thread+0xad5/0x12a0 [ 101.077217][ T6] kthread+0x421/0x510 [ 101.081139][ T6] ret_from_fork+0x1f/0x30 [ 101.085378][ T6] [ 101.087549][ T6] The buggy address belongs to the object at ffff88810da6e000 [ 101.087549][ T6] which belongs to the cache kmalloc-4k of size 4096 [ 101.101433][ T6] The buggy address is located 3168 bytes inside of [ 101.101433][ T6] 4096-byte region [ffff88810da6e000, ffff88810da6f000) [ 101.114835][ T6] The buggy address belongs to the page: [ 101.120313][ T6] page:ffffea0004369a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10da68 [ 101.130516][ T6] head:ffffea0004369a00 order:3 compound_mapcount:0 compound_pincount:0 [ 101.138615][ T6] flags: 0x4000000000010200(slab|head|zone=1) [ 101.144524][ T6] raw: 4000000000010200 0000000000000000 dead000000000122 ffff888100043380 [ 101.152949][ T6] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 101.161443][ T6] page dumped because: kasan: bad access detected [ 101.167701][ T6] page_owner tracks the page as allocated [ 101.173261][ T6] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 20, ts 98954331836, free_ts 98911991271 [ 101.195206][ T6] post_alloc_hook+0x1a3/0x1b0 [ 101.199814][ T6] prep_new_page+0x1b/0x110 [ 101.204233][ T6] get_page_from_freelist+0x3550/0x35d0 [ 101.209613][ T6] __alloc_pages+0x27e/0x8f0 [ 101.214037][ T6] new_slab+0x9a/0x4e0 [ 101.217949][ T6] ___slab_alloc+0x39e/0x830 [ 101.222376][ T6] __slab_alloc+0x4a/0x90 [ 101.226535][ T6] __kmalloc+0x16d/0x270 [ 101.230615][ T6] kvmalloc_node+0x1f0/0x4d0 [ 101.235039][ T6] alloc_netdev_mqs+0x8c/0xc90 [ 101.239638][ T6] alloc_etherdev_mqs+0x33/0x40 [ 101.244327][ T6] usbnet_probe+0x1ff/0x2830 [ 101.248755][ T6] usb_probe_interface+0x5b6/0xa90 [ 101.253723][ T6] really_probe+0x28d/0x970 [ 101.258047][ T6] __driver_probe_device+0x1a0/0x310 [ 101.263160][ T6] driver_probe_device+0x54/0x3d0 [ 101.268020][ T6] page last free stack trace: [ 101.272535][ T6] free_unref_page_prepare+0x7c8/0x7d0 [ 101.277829][ T6] free_unref_page+0xe8/0x750 [ 101.282343][ T6] __free_pages+0x61/0xf0 [ 101.286505][ T6] __free_slab+0xec/0x1d0 [ 101.290673][ T6] discard_slab+0x29/0x40 [ 101.294839][ T6] __slab_free+0x205/0x290 [ 101.299093][ T6] ___cache_free+0x109/0x120 [ 101.303518][ T6] qlink_free+0x4d/0x90 [ 101.307512][ T6] qlist_free_all+0x44/0xb0 [ 101.311850][ T6] kasan_quarantine_reduce+0x15a/0x180 [ 101.317148][ T6] __kasan_slab_alloc+0x2f/0xe0 [ 101.321834][ T6] slab_post_alloc_hook+0x53/0x2c0 [ 101.326786][ T6] kmem_cache_alloc+0xf5/0x200 [ 101.331382][ T6] getname_flags+0xba/0x520 [ 101.335842][ T6] user_path_at_empty+0x2d/0x1a0 [ 101.340614][ T6] vfs_statx+0xfd/0x720 [ 101.344633][ T6] [ 101.346784][ T6] Memory state around the buggy address: [ 101.352267][ T6] ffff88810da6eb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 101.360147][ T6] ffff88810da6eb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 101.368052][ T6] >ffff88810da6ec00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 101.375940][ T6] ^ [ 101.382974][ T6] ffff88810da6ec80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 101.390906][ T6] ffff88810da6ed00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 101.399037][ T6] ================================================================== [ 101.406927][ T6] Disabling lock debugging due to kernel taint SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 101.552795][ T30] audit: type=1326 audit(1720636829.959:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1490 comm="syz.3.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7ff53ad26bd9 code=0x7ffc0000 [ 101.605901][ T30] audit: type=1326 audit(1720636829.959:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1490 comm="syz.3.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53ad26bd9 code=0x7ffc0000 [ 101.630995][ T30] audit: type=1326 audit(1720636829.959:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1490 comm="syz.3.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff53ad26bd9 code=0x7ffc0000 [ 101.666346][ T30] audit: type=1326 audit(1720636829.959:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1490 comm="syz.3.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53ad26bd9 code=0x7ffc0000 [ 101.691192][ T30] audit: type=1326 audit(1720636829.959:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1490 comm="syz.3.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff53ad26bd9 code=0x7ffc0000 [ 101.714591][ T30] audit: type=1326 audit(1720636829.959:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1490 comm="syz.3.319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53ad26bd9 code=0x7ffc0000 [ 102.538475][ T45] device bridge_slave_1 left promiscuous mode [ 102.544420][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.551875][ T45] device bridge_slave_0 left promiscuous mode [ 102.557854][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.565907][ T45] device veth1_macvtap left promiscuous mode [ 102.572275][ T45] device veth0_vlan left promiscuous mode [ 103.898452][ T45] device bridge_slave_1 left promiscuous mode [ 103.904479][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.911891][ T45] device bridge_slave_0 left promiscuous mode [ 103.917919][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.925820][ T45] device bridge_slave_1 left promiscuous mode [ 103.931875][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.939342][ T45] device bridge_slave_0 left promiscuous mode [ 103.945261][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.953169][ T45] device bridge_slave_1 left promiscuous mode [ 103.959142][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.966355][ T45] device bridge_slave_0 left promiscuous mode [ 103.972414][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.980342][ T45] device bridge_slave_1 left promiscuous mode [ 103.986257][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.993702][ T45] device bridge_slave_0 left promiscuous mode [ 103.999701][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.008330][ T45] device veth1_macvtap left promiscuous mode [ 104.014237][ T45] device veth0_vlan left promiscuous mode [ 104.020168][ T45] device veth1_macvtap left promiscuous mode [ 104.025984][ T45] device veth0_vlan left promiscuous mode [ 104.031771][ T45] device veth1_macvtap left promiscuous mode [ 104.037621][ T45] device veth0_vlan left promiscuous mode [ 104.043290][ T45] device veth1_macvtap left promiscuous mode [ 104.049309][ T45] device veth0_vlan left promiscuous mode