last executing test programs: 8.497320744s ago: executing program 1 (id=1659): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) (async) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYRES64=0x0, @ANYRES64=r0, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc8b0}, 0x90) socket$inet6(0xa, 0x2, 0x0) (async) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) (async) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/83, 0x53}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r2, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mm_page_alloc\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) write$cgroup_devices(r1, &(0x7f0000000240)={'b', ' *:* ', 'wm\x00'}, 0x9) (async) write$cgroup_devices(r1, &(0x7f0000000240)={'b', ' *:* ', 'wm\x00'}, 0x9) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) 7.878156694s ago: executing program 2 (id=1662): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000300)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401e04012810000000000109022400010000000009040000020300000009210000000122050009058103"], 0x0) r5 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000010850000006d00000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000240)='kfree\x00', r6}, 0x10) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000b00)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "efb9ce47"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r7}, 0x0, &(0x7f0000000040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r8 = dup3(r3, r2, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r9, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f00000002c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x90, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 6.374349287s ago: executing program 3 (id=1669): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00220f0000000b574e69620bf85edacab3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x1, 0x1, "92"}, 0x0}) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000000)=0x3) read$hiddev(r1, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000700)={0x2c, &(0x7f0000000140)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x10000000, 0x3, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000040)={0x0, 0x24, 0x5f, {0x5f, 0x22, "2a5c42d08e09fc3d3545719950451876546cdce7d7db1b7939ac72c59e747baee805ab12cdf65cd2fdefbad471581dc336f8540c868491ea7752da1d007f500922b522ce78e0380b766f9dd28471f172227ccd12cd6ce011de5ed764c7"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000280)={0x1c, &(0x7f00000001c0)={0x0, 0x10, 0x7, "d77bbeacc0733f"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x5}}) syz_usb_connect(0x0, 0x1b, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 6.019143806s ago: executing program 2 (id=1675): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xb, &(0x7f0000000740)=ANY=[@ANYRES64=r0, @ANYRES16=r0, @ANYRES16=r0, @ANYRES8=r0, @ANYRES8=r0, @ANYRESDEC=r0, @ANYRES16=r0, @ANYRES32=r0, @ANYRES16=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000240)='sched_switch\x00', r1}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090f00000000000000000000850000000e000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0xfff, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/14, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r9 = getpid() sched_setaffinity(0x0, 0xfffffffffffffd74, &(0x7f00000002c0)=0x2) sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@file={0x0, '.\x00'}, 0x6e) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 5.557734634s ago: executing program 1 (id=1676): syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0xc051, &(0x7f0000000180), 0x1, 0x4d8, &(0x7f0000000340)="$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") (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f00000020c0), 0x1, 0x514, &(0x7f0000006ec0)="$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") r0 = socket$inet_udplite(0x2, 0x2, 0x88) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0c00990000000200000000000800a00094090000080026009409000008002700000000000800a1"], 0x48}}, 0x0) (async, rerun: 32) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 32) write$evdev(0xffffffffffffffff, 0x0, 0x0) (async) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc01090589"], 0x0) (async) personality(0x0) (async) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x4a0a00, 0x0) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x10d942, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006311faff0000000085100000e4000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) (async) io_setup(0xff, &(0x7f00000000c0)=0x0) io_submit(r8, 0x1, &(0x7f0000000000)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x8, 0x0, r7, &(0x7f0000000080)='\x00\x00', 0x2}]) (async) getsockname$packet(r6, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000003c0)=0x14) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000009c0)={r7, 0x4559, {0x0, 0x0, 0x0, 0x2, 0xfffffffeffffffff, 0x0, 0x6, 0xfffffffe, 0xc, "bdaab75a7b9113327c1409d65773300100e5dad4d29e23f818105874953aab4fe3c7d541717e5855ae62efd2318b06e045f19bc72fdce12b82013d571eb693df", "0ab9b9942f3bb8e258357ae26dd7fd6f3b7d1f7b52be9c16c1825a98aa76fc031b6c4683dd704656a5fffff8da312c9712ce2bc9fe14886c7940decee3fed1ee", "19da0d47fb909898fb9720509a0488a558bc00000000000001000000000800", [0x8, 0x81]}}) syz_usb_control_io$hid(r5, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0xb, 0x8, 0x1, {0x22, 0xb71}}}}, &(0x7f0000000640)={0x2c, &(0x7f0000000380)=ANY=[@ANYBLOB="2008020000002a8e"], &(0x7f0000000480)={0x0, 0xa, 0x1, 0xfb}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000600)={0x20, 0x3, 0x1}}) (async) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000012002505a8a4f0"], 0x0) (async) syz_usb_control_io(r5, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'veth0_to_team\x00', &(0x7f0000000980)=@ethtool_cmd={0x26, 0xfffffffe, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x1}}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfecc) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) 5.513436637s ago: executing program 1 (id=1677): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x100010e, &(0x7f0000000300)={[{@nodelalloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@resgid}, {@nobarrier}, {@init_itable}, {@errors_remount}, {@init_itable_val={'init_itable', 0x3d, 0x8}}, {@journal_dev={'journal_dev', 0x3d, 0x7ffffffe}}, {@sb={'sb', 0x3d, 0x6}}]}, 0x1, 0x467, &(0x7f0000001080)="$eJzs3MtvG0UcAODfbpqGvkgo5dEHECiIiEfSpAV6gAMIJA4gIXEpx5CkVanboCYIWlUQECpHVIl7xbESfwEnuCDghMQV7qhShXqhcDJaezd2HDu1Q2Kn+PukbWZ2Z3dmMjv2zE43AfSt0eyfJGJ3RPwWEcPV6MoEo9Uft25emvn75qWZJMrlt/9MKun+unlppkhanLcrj4ylEennSRxsku/ChYtnpkulufN5fGLx7PsTCxcuPnv67PSpuVNz56aOHz92dPKF56ee25B63pOV9cDH84f2v/7OlTdnTlx596dvkqL+DfVYw0AHWY6udfCJcrmDS219e+rCybYeFoSOZDd01lyDlf4/HANRa7zheO2zliemXSogsGnKuRaHl8rA/1gSvS4B0BvFF302/61u17o3+NgCbrxcnQBldb+Vb7EUlZ3FFGewYX67kUYj4sTSP1ezLdp/DgEAsG7fZeOfZ+rHf8X4I43769Ldna8NjeRrKXsj4t7yUOyLiPsiKmkfiIgHO8y/cZFk9fgnvb6uirUpG/+9mK9tLY//qvkWSUYG8tieSv0Hk5OnS3NH8t/JWAwOZfHJNfL4/tVfv2x1rH78l21Z/sVYMC/H9W1DK8+ZnV6c/i91rnfj04gD25rVP1leCUgiYn9EHFhnHqefunao1bHm9R+62taFN2Cdqfx1xJPV9l+KhvoXkrXXJyfuitLckYnirljt518uv9Uq/9u3/+bK2n9n0/t/uf4jSf167ULneVz+/YuWc5rx9u7/l+r71+x0rUNsz39+NL24eH4yYnvyRrXQ9funaucW8SJ9Vv+xw837/96o/SYORkR2Ez8UEQ9HxCN52z0aEY9FxOE16v/jK4+/1+rYVmj/2Yb2H1mZpKH9a4Ht0bineWDgzA/frrxiLdje59+xSmgs39PO51875Vrf3QwAAAB3njQidkeSji+H03R8vPp/+PfFzrQ0v7D49Mn5D87NVt8RGInBtHjSNVz3PHQyn9YX8amG+NH8ufFXAzsq8fGZ+dJsrysPfW5Xi/6f+aOTt12AO5P3taB/Ne//H3a9HED3+f6H/qX/Q/9q0v939KIcQPc1+/7/pAflALqvof9b9oM+Yv4P/Uv/h/5V3/+THpYD6KqFHXH7l+QFBFYFIt0SxdiYQLLJvWD3Zly5PND+37loEdjV+lCvP5kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2xr8BAAD//0Nd6Kc=") open(&(0x7f00000007c0)='./file2\x00', 0x5dcc82, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921"], 0x0) r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x57b36833, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x12, r1, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{}, &(0x7f0000000380), &(0x7f00000003c0)='%pB \x00'}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000580)='./file2\x00', &(0x7f0000000000), 0x0, 0x0) 5.169810696s ago: executing program 2 (id=1678): syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3810744, &(0x7f0000000700)={[{@noauto_da_alloc}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@jqfmt_vfsv0}, {@delalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400000}}, {@noauto_da_alloc}, {@test_dummy_encryption}]}, 0x1, 0x451, &(0x7f0000000d00)="$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") (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xb}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async) renameat2(r1, &(0x7f0000000380)='./file2\x00', r4, &(0x7f0000000040)='./file0\x00', 0x1) renameat(r0, &(0x7f0000000200)='./file2/../file0\x00', r0, &(0x7f00000003c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 5.108501271s ago: executing program 2 (id=1679): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000000000040de2842110000000000010902240001000000000904000001030000000921000000012205000905810300000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x90) socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)={0x0, 0xc, 0x9a, {0x9a, 0x10, "9decb1577d2c30c970a0412098ff38f2bb5317d984444951ea014fc9c3eba8b3a7de081d4da096b230236d411e0761b872b3a321bf9cc032b6e68ed5e888cb056bc99f6a824bd64c8c3b3475df89f2bbe28e74e5d14ad9c4095901f6a37b27b9b36c3dcf6610679fbe21dc52c824eb311af85ab2e937f558c8643ef19de6d952bc4f9a755c2d722703631e27726cce9d1b2e6dc272265f77"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1001}}, &(0x7f0000000080)={0x0, 0x22, 0x7, {[@main=@item_012={0x1, 0x0, 0xa, "af"}, @global=@item_4={0x3, 0x1, 0x9, "48b878fe"}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0xec, 0x1, {0x22, 0xdee}}}}, &(0x7f0000000500)={0x2c, &(0x7f0000000380)={0x0, 0x17, 0xae, "ab9552e146fbe59ad53101d053a1a6e45c8749e31c7e21ff5e0aa4b97adde8fea2faa8b5c0edab9a2d44b7ce841cba8a367b8662242592fad57b6e2ee87c5a5f7966f1cfefc72832873e52859380e63473b59374dffb85353b96ae3f193d024bcf50048064f69e49a9daa7dd7c91207cdd15090f6e9961369c0f77740057c4773e116c4b0b007c2981a8eed504db733ac92802e0b6fcec66a197f0ecd90010c420dd40854c9aa7fab4c18f5c0fcc"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x85}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000005c0)={0x20, 0x1, 0xb0, "19f67e88181f09fbd254ef016fcaef47cc7729b9f472ede5be7a2120b32c83e520df53ed99d6b20b2a4e2d483a6a49e701101665fa5dea11a403f81a184956ef3af580e7cb3bd0313ff50fec0f65464d572b194d76aaea3859836b6b09db344fd54772a7420b8dfd9d3d622eab46dd8797d42f1e00e3fda6841dbca41fc6875b8e53e48a8ae6a88a25bdf5bc97d8252fbc9aa20d4140c05bb08951c8affd5f1a5418492210806fe8351d2dd49786ad4a"}, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x24}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) mkdir(0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="000005000000058e65e98f"], 0x0, 0x0, 0x0, 0x0}, 0x0) 4.13744931s ago: executing program 0 (id=1684): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000040)='bpf_lsm_msg_msg_alloc_security\x00') bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x20, &(0x7f0000000240)={&(0x7f0000000340)=""/209, 0xd1, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16=r1], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xb, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket(0x0, 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000140)={&(0x7f0000000000), 0x12, &(0x7f0000000080)={0x0, 0x2}, 0x8}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x28}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0xa0179e1d}) socket$igmp6(0xa, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096}, 0x90) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) 3.936062807s ago: executing program 0 (id=1685): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xa, &(0x7f0000000140)={0xcc, 0x5}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1d, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0xc, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)) 3.695667797s ago: executing program 1 (id=1686): syz_usb_connect(0x3, 0x48, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000a6ff0540cdabeecdb9050000000109023600020000000009049c00030103510009050a00000000000009050313000000000009010000000000000009"], 0x0) 3.553367278s ago: executing program 4 (id=1688): mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x300000d) openat$random(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x4101, 0x16) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000000)=ANY=[@ANYRESHEX]) 3.477606725s ago: executing program 3 (id=1689): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}, @IFLA_MTU={0x8, 0x4, 0x500}]}, 0x4c}}, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) setxattr$incfs_id(&(0x7f00000001c0)='./file1\x00', &(0x7f0000004240), 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0xa) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0xfffffff7, 0xb3eb, 0x40, 0x100, 0x1, 0xd, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x1}, 0x48) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) fspick(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0) r7 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x693, @empty}, 0x1c) write$binfmt_misc(r7, &(0x7f00000000c0)=ANY=[@ANYRES32=r7], 0xfff7) write$binfmt_misc(r7, &(0x7f0000001b40)=ANY=[@ANYBLOB="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"], 0xfff7) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000001640)=@raw={'raw\x00', 0x3c1, 0x3, 0x468, 0x170, 0x1170, 0x1170, 0x170, 0x1170, 0x398, 0x1398, 0x1398, 0x398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x84, 0x0, 0x0, 0x10}, 0x0, 0x128, 0x170, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e20]}}, @common=@unspec=@connmark={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @local, @remote, @remote, @private2, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @local}, @mcast1, @empty, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c8) socket(0x10, 0x3, 0x0) 3.475570655s ago: executing program 4 (id=1690): syz_usb_connect$hid(0x0, 0x3b, &(0x7f0000000640)=ANY=[@ANYBLOB="1201a1fc0d548cc7de3c79ef80e250db845c00000000004043552205000000daca8fa4d404e6e60000de5c5897f8542400010000fe000904008001030000"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000700)=ANY=[@ANYRES16], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xff0e) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000e27b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket(0x11, 0x4, 0x6) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000800000095000000000000009500a5050000000077d8f3b423cdac8d8000000000000020e16ad10a48b243ccc42606d25dfd73a01568a7d06d10bfe150a7487535f7866907dc6751dfb265a0e3ccae669e173a649c1cfd6587d452d46b7c57d77578f4c35235138d5521f9453559c3421eed73d5661cfeecf9c66c54c3b3ffe1b4ce25d7c983c044c03bf3ff03fe3e26e7a23129d6606fd28a7f9105f82317874b33d96b39fa4e045469989d552af6200000003a00000000000000abecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd5234712596b696418f1623ed38ae89d24e14b40234756ddcebfba2f87925bfacba83109753f543ad027edd68149ee99eebc6f7d6dd4aed4afe1f44ccb19e810879b70a70900000000000000000000d7900a820b6327944e9a217b9800e02a92895614cd50cbf83a1ed25268816b004519c9c5cff097d8000000000009d27d753a30a147b24a48435bd8a568669596e9e08679b3ce48e90defb6670c3d6209000000c773713a66b223fa8b148871c8d31d24000025449f106b99893ed20fa7a050fbbef90327e827e513e9606800000000e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e69ee52b59d13182e1f24ed208ada12f7a1525320e71666f472a972d5eb1affb87ba55b2d72078e9f40b4ae7dc3b2aeb0d11cd22c35d32940f19dff00ffffffff080000ff003853e59de7621e348955735264f34b1046a1813668297a7edad187ef106ae7fcbb25090f17d0baadeb8ae190a1fb5a315f8347fb0379659500000000000000000000000000000000000000002fdf0193ec79c90ed210ebc2fbed6d4216770c1b0dec886b388d138c2b69c6aacb714e7264093061c660a5100b7cc165889eb94c8d7c77b6fa06f1a4f8e4a6b6cb37e319c5c22f276b03cae853f42b07ca0b03b1eb32a6b1a81cd511fd0b59d57a11c6a3ebf9731464ad21f07f618efc31023ac60007426162b57e803519954d7c956fda392fa84be38e937d36af1c35138e05a9e8d6dc0272de72c41500000000304402e22af23437126f330f8eb4075daaeae3134ece35cd86d95bd9836bd186c4b6565e967a4e3e86f299b7400994ba136b4eccf3b0f001a266c0d160b3ce1182001d64b52a5ce7f506295d59eea6903b84ffbabf5a5b91c1d6ecce8728a224aec66c610e3becd60a35e848c224f8251947eed20e2b612cb099bfe8924d33ba7f0691fed04a43e9c64b7a1e3165e86cdb9871c678a6bbb14821f441c6c14d1bd78d8ffdfea12c19ea04264335d60b6b7a7da6fb83f33101db32f6ab137d943dd3c1e8db9f3e1263573dc721ae82fe0bc63598751a5092c9f7dbfc39d564834e3703492c2a651643d8ce5c36d97a4812cf73fc8ea0d68d7489cfcb0176"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0xb) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0xc7f37000) ioctl$ASHMEM_SET_NAME(r4, 0x40087708, &(0x7f0000002600)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80`4/\xe9\x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\x16\\n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x04;\xc5[\nja\xb9\'\xc9#\xfcx\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00B\x05\xd4\xea\xea\x7f=\xc6:\\N\xc3\xb7Vw\xc6\x9c\x96s\xaaHL\x96\xc72\n\x18Ynj\xceTS\xfbl\x0f\x9f8M\f\x89\xa1\xd2Hs`\x8bp\x8a\xc4%\xf8\x1d3\nV\x9a\xaf\x1f\xf96^\x93\xc1\xaf)\rg\x86\xd6\xea\xa9\x0f\x9a\xf1V\x1b\xbf\x8b\'-\xab\x8e\t7\xd3\xf7\xa9v\xfbY\xe6\x9b^d\x8c\xb1\xdd') r5 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x206002, 0x4) r6 = openat$cgroup_ro(r5, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x28811, r6, 0x0) ftruncate(r0, 0x6) ioctl$ASHMEM_SET_NAME(r4, 0x40087707, &(0x7f0000000300)='\x00\x00\x00\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), r2) r9 = socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r10, 0x8933, &(0x7f0000000100)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB='4Qvh', @ANYRES16=r8, @ANYBLOB="010000000000000000000d0000000c00018008000100", @ANYRES32=r11, @ANYBLOB="6baf8ef3d9e1e4f0ab163ca580278c6753b374579dd08b4f96bd87854873e7ff6d6113d583b17d01646e67b77c012384660ed665076df4584ab5dd95358c870471be4fc601123f48b46e8ed6544dbf5acb793c124bd3913af997357406c067d7ffc08b7d3d4bba1df0f60d8cbf"], 0x20}}, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x2000000000000090, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000002000000008000000018110000", @ANYRES32=r12], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pipe2$9p(&(0x7f0000000280), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r13}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 3.094623836s ago: executing program 0 (id=1691): memfd_create(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0xdc) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000200850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) r6 = open(0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x48180) sendmsg$AUDIT_USER_AVC(r6, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)={0x9c, 0x453, 0x504, 0x70bd27, 0x25dfdbff, "a07966641b8412809c1c8d9ffc2a1f87b1148854169d8d4e507832db551c00d09feaee3149badcf04ed1d7fd5b6152854079f561dae179339c3bbbdd6fa4a611fe5140c1454e2ce925096ca0b7dca965d0c9e8314b69d3e082aece78812643bad71d0b258964376160dfca1a540b8510dc46894aa22e88ba2ed463a84751e2d1efb7d2bba3864d730a5d22", [""]}, 0x9c}, 0x1, 0x0, 0x0, 0x24000084}, 0x2048000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, &(0x7f0000000340)=""/142, 0x52, 0x8e, 0x1}, 0x20) 2.659296142s ago: executing program 3 (id=1692): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000080)={0xfffffffd, 0x80000801}, 0x8) bind$bt_sco(r4, &(0x7f0000000400), 0x8) listen(r4, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x89, 0xa, 0x400, 0x0, r3, 0x25d, '\x00', 0x0, r3, 0x0, 0x0, 0x0, 0xe}, 0x48) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x76, &(0x7f0000000a00)=ANY=[@ANYBLOB="12011003020000202505a1a4400000000101090264000101000000090400001202060000052406000005240000000d240f01040000000000ff0700053deafd8f0724140800030008241c04800309000c241b0700fe0f00078100020905810300020104cf0905820200027f00000905030200040004049993567641f5ef23dbcc63332242a143d683ad1bb23d701d19a2740200d3dcebf116bc77f96a40d982689e80d1d2662319ec19c37212173849357ce5dbc8a18fdb7e8c5afe078c0baf6b59e941615746ac1d588461c815b50d24a6bbb130ad16402bcb29492b12129fcba5bf4e2b3247ab47592cec"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x810}}]}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) 2.227150837s ago: executing program 2 (id=1693): r0 = syz_usb_connect(0x0, 0x4d, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000735aca105e042107c4900102030109023b00010000000009040000000e010000052406000105240300000d240f0100000000000000000006"], 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000200)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 2.223567347s ago: executing program 0 (id=1694): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1020, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x8, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='kfree\x00', r3}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, &(0x7f0000000380)=ANY=[@ANYBLOB="00008400000084"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.997635166s ago: executing program 1 (id=1695): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000040)='bpf_lsm_msg_msg_alloc_security\x00') bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x20, &(0x7f0000000240)={&(0x7f0000000340)=""/209, 0xd1, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16=r1], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xb, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket(0x0, 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000140)={&(0x7f0000000000), 0x12, &(0x7f0000000080)={0x0, 0x2}, 0x8}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x28}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0xa0179e1d}) socket$igmp6(0xa, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096}, 0x90) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r8, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) 1.986659416s ago: executing program 1 (id=1696): r0 = syz_usb_connect$hid(0x0, 0x84, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x317, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x11, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000100)=0x80000001, 0x8) syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000d00)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x54c, 0x9cc, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x70, 0x5, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x1, 0x3, 0x40, {0x9, 0x21, 0x7, 0x4, 0x1, {0x22, 0xb02}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0x0, 0xc}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0xf6, 0x2, 0x5}}]}}}]}}]}}, &(0x7f0000000f40)={0xa, &(0x7f0000000d40)={0xa, 0x6, 0x250, 0x10, 0x3, 0x7, 0x10, 0x6}, 0x5d, &(0x7f0000000d80)={0x5, 0xf, 0x5d, 0x6, [@ssp_cap={0xc, 0x10, 0xa, 0x6, 0x0, 0x9, 0xf, 0x9}, @ssp_cap={0x14, 0x10, 0xa, 0x3, 0x2, 0x600, 0xf00, 0x7fff, [0xf, 0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x3, 0x9, 0x9}, @ssp_cap={0x20, 0x10, 0xa, 0x5, 0x5, 0x2, 0xf00f, 0x1000, [0xc0, 0x0, 0x3ff0, 0x3f00, 0xff0000]}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x45, 0x4, 0x6f, 0x8, 0x40}]}, 0x5, [{0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x801}}, {0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x41d}}, {0x4, &(0x7f0000000e80)=@lang_id={0x4, 0x3, 0x3437}}, {0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x81a}}, {0x4, &(0x7f0000000f00)=@lang_id={0x4, 0x3, 0xf8ff}}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x16, 0x0, 0x0, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000cc0)={'batadv_slave_1\x00'}) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_int(r4, 0x28, 0x6, 0x0, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000700), 0x1, 0x0) connect$vsock_stream(r5, &(0x7f00000003c0)={0x28, 0x0, 0x0, @local}, 0x10) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000a00)={0x24, 0x0, 0x0, &(0x7f0000000940)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x0, "2c98d613"}]}}, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000380)={[{@dioread_lock}, {@noblock_validity}, {@abort}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x1}}, {@grpjquota, 0x2e}, {@nouid32}, {@errors_remount}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4aa, &(0x7f0000000740)="$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") syz_usb_connect$printer(0x3, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12010102000000102505a8a4400001020301090224000107b2800509040047010701020809050102400007010909058202080004067f4b"], &(0x7f0000000c00)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x1f, 0x5, 0x8, 0xff, 0x91}, 0x37, &(0x7f0000000100)={0x5, 0xf, 0x37, 0x3, [@wireless={0xb, 0x10, 0x1, 0x2, 0xb1, 0x40, 0x80, 0x88, 0x7}, @ptm_cap={0x3}, @generic={0x24, 0x10, 0x1, "e8fed0a39ad231a2ee0b91d00ec61fbd1d5d3564c5afd096e24ff9b42a9910bd6c"}]}, 0x9, [{0xb0, &(0x7f0000000200)=@string={0xb0, 0x3, "d953486a0dfa84542f0f9f5b6a80982b076723bf03c70c0cbabfc2ff99ad155a1c55078c7599be8bb30b4d5544450537f01b6b11de77d517f00a96148c833ef8f60eb23305287925f220f006b73465c5a4d377fc16eaa85dbe9ce5c8e38de2f8cf869ec9cc9e088b2026800ed22040a9d7559c57cef8b22c18941b920f4268416e639cd5ea99f3839d4a277c01bae5ff19dad6eaa4f787bf5d5938d3c54c63ec855531691dc2ae6d10a51a9ac336"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x1409}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x1401}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x40f}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x440a}}, {0x79, &(0x7f0000000480)=@string={0x79, 0x3, "3b558ef4a92f18bcfb47deae228abdc3d70f68c906f68c4f37cba45de98e5339547073fa17d2bb1a561a10e6bde26b26bfcf910769666c7ada433cc333488641983e00fd67c528d28e51a5134113fc269fad63edd704f3e128b59bc20689aeb21040bdacffaab76aeaf1f4bd40d0a11f43b842a907a0ad"}}, {0xb1, &(0x7f0000000500)=@string={0xb1, 0x3, "5bba327dd6fceb86186cc8983e5b8caa9ce271c7be9c05c3a8e1d955414d70fa7bc594b3047a023d5eac2e604f69add8365d097d12caa615ac17f81f027a0fa0ebbab2eefff48edb188427fea2ae4c86496201ff03d96f9bd70f00b461dec3d5e2be719a31083bedb4c2151da87c8a2ba647f128817389eb4837d5ea4a59fc2d484a806a8c19be990740d82558983a24dd576cf854f0ab2afcad3e1b14a97a1b467484054598f502580dfa8d74ef0a"}}, {0xab, &(0x7f00000005c0)=@string={0xab, 0x3, "5f9ba93e4e1b4d93a40a3f2b546a25df350fa5b591d86f64f4168762b5ce2328ae665b09c2c792a9a5035a8865e618cc26169562bd7a9ec513caa4a754d79875d1cd5e1ae26370663b80d343b6f4fb3b300024fdfe5c01dd4a51ee8c44f6d2d35a3d8ce55f6bb432a539e0e0daac81cc313f3531ca1004995909597db53b88934cb1905c59b3b4bad6e927398b41ab5fc257d0de05c78309fe7a502691f550c67a823286d127375a03"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x2401}}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) 782.204525ms ago: executing program 3 (id=1697): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000500000095"], 0x0, 0x0, 0xffffffffffffffca, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYRES16=r0, @ANYRES64=r0], 0x0, 0x3, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYRES16=r0, @ANYRES64=r0], 0x0, 0x3, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) io_setup(0x8, &(0x7f00000002c0)=0x0) r3 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x401, 0x0}, 0xfffffffffffffc1f) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={r4}, 0xc) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={r4}, 0xc) setsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f0000000280)={@dev={0xac, 0x14, 0x14, 0xb}, @broadcast}, 0x8) syz_usb_connect$uac1(0x6, 0x11f, &(0x7f0000000500)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x10d, 0x3, 0x1, 0x29, 0x10, 0xd8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x62}, [@extension_unit={0x8, 0x24, 0x8, 0x4, 0x4, 0x1f, "d1"}, @feature_unit={0xd, 0x24, 0x6, 0x6, 0x2, 0x3, [0xa, 0xa, 0xdc61ee919de3dda4], 0x8}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x201, 0x4, 0x1, 0x9, 0x2, 0xb}, @selector_unit={0x6, 0x24, 0x5, 0x4, 0x10, ' '}, @processing_unit={0xc, 0x24, 0x7, 0x5, 0x0, 0x9, "faf0421bd3"}, @selector_unit={0x6, 0x24, 0x5, 0x5, 0x0, "ce"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x5, 0x3, 0x9, 0x6, "98c61efb76024c"}, @as_header={0x7, 0x24, 0x1, 0x51, 0x90, 0x4}, @as_header={0x7, 0x24, 0x1, 0x4, 0xf7}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x3, 0x7, 0x7, "63a0843f604b77"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x4, 0x3, 0x3, 0x5}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0x9, 0x3, {0x7, 0x25, 0x1, 0x0, 0x9, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x6, 0xf10, 0x3, "9fd8627b36fe"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0xc, 0x4, 0x8, 0x42, "847aec59778794"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0xfffd, 0x3, 0x2, "342d24427af3d1adb3"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x0, 0x2, 0x0, 0x1}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x5, 0x1, 0x40, 0xfc}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xfd, 0xfc, 0x10, {0x7, 0x25, 0x1, 0x83, 0x0, 0x80}}}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x250, 0x93, 0x93, 0xad, 0xff, 0x6}, 0x3f, &(0x7f0000000400)=ANY=[@ANYBLOB="050f05000603100b14100480f5ea7c12fffc381eedc20393b5af109b30a3c3209d2b8a3d19e40310010c900002043cd7050a100300020002f0000007100204"], 0x2, [{0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x1001}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x80a}}]}) io_submit(r2, 0x1, &(0x7f00000004c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x6, 0x0, r3, 0x0}]) (async) io_submit(r2, 0x1, &(0x7f00000004c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x6, 0x0, r3, 0x0}]) 597.955541ms ago: executing program 4 (id=1698): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r2, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) (async) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r2, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x8, 0x100, 0x2, 0x2af32b7b}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40880}, 0x41000) (async) unshare(0x2040400) (async) getdents(0xffffffffffffffff, 0x0, 0x0) 595.407541ms ago: executing program 4 (id=1699): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) (async) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) recvmmsg(r0, &(0x7f0000008080)=[{{&(0x7f0000000080)=@l2tp={0x2, 0x0, @multicast2}, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000180)=""/124}, {&(0x7f0000000200)=""/134}, {&(0x7f0000000340)=""/131}, {&(0x7f00000004c0)=""/232}, {&(0x7f00000005c0)=""/4096}], 0x25, &(0x7f0000001640)=""/245}, 0x60000000}, {{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000000000)=""/53}, {&(0x7f0000001740)=""/4096}, {&(0x7f0000002740)=""/197}, {&(0x7f0000002840)=""/127}, {&(0x7f00000028c0)=""/233}, {&(0x7f00000029c0)=""/164}], 0x0, &(0x7f0000002b00)=""/102}, 0x9}, {{&(0x7f0000002b80)=@pptp={0x18, 0x2, {0x0, @local}}, 0x0, &(0x7f0000003f00)}, 0x6}, {{&(0x7f0000003f80)=@vsock, 0x0, &(0x7f0000004100)=[{&(0x7f0000004000)=""/181}, {&(0x7f00000040c0)=""/55}], 0x0, &(0x7f0000004140)=""/202}, 0x40}, {{&(0x7f0000004240)=@vsock, 0x0, &(0x7f00000054c0)=[{&(0x7f00000042c0)=""/121}, {&(0x7f0000004340)=""/86}, {&(0x7f00000043c0)=""/10}, {&(0x7f0000004400)=""/38}, {&(0x7f0000004440)=""/4089}, {&(0x7f0000005440)=""/126}], 0x0, &(0x7f0000005540)=""/17}, 0x6}, {{&(0x7f0000005580)=@l2, 0x0, &(0x7f0000005880)=[{&(0x7f0000005600)=""/96}, {&(0x7f0000005680)=""/24}, {&(0x7f00000056c0)=""/66}, {&(0x7f0000005740)=""/130}, {&(0x7f0000005800)=""/46}, {&(0x7f0000005840)=""/55}]}, 0x3}, {{&(0x7f0000005900)=@l2, 0x0, &(0x7f0000006cc0)=[{&(0x7f0000005980)=""/228}, {&(0x7f0000005a80)=""/153}, {&(0x7f0000005b40)=""/4096}, {&(0x7f0000006b40)=""/245}, {&(0x7f0000006c40)=""/72}], 0x0, &(0x7f0000006d40)=""/4096}, 0x4}, {{0x0, 0x0, &(0x7f0000007e40)=[{&(0x7f0000007d40)=""/196}]}, 0x8d}, {{0x0, 0x0, &(0x7f0000008000)=[{&(0x7f0000007e80)=""/149}, {&(0x7f0000007f40)=""/168}], 0x0, &(0x7f00000082c0)=""/25}}], 0x4f, 0x20, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = syz_open_pts(r1, 0x0) r5 = dup3(r4, r1, 0x0) read(r5, &(0x7f00000000c0)=""/226, 0xe2) (async) read$watch_queue(r1, &(0x7f0000002e00)=""/4088, 0xff8) (async) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x0, 0xc, &(0x7f0000000100)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0}, 0x90) (async) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x1e79, 0x4) (async) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 516.997467ms ago: executing program 4 (id=1700): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000cc0)=[{0x0}, {&(0x7f0000000180)="c0f7a10f", 0x4}], 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) (async) writev(r0, &(0x7f0000000cc0)=[{0x0}, {&(0x7f0000000180)="c0f7a10f", 0x4}], 0x2) (async) 516.329307ms ago: executing program 4 (id=1701): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040d90455a000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_emit_ethernet(0x138, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f00000006c0)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xffffffff]}, 0x0, 0x8) r2 = gettid() tkill(r2, 0x11) rt_sigaction(0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000)) syz_usb_control_io$hid(r0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) syz_usb_control_io(r0, &(0x7f0000000ac0)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x5, {0x5, 0x0, "000200"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 347.753331ms ago: executing program 2 (id=1702): syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f00000000c0)='./file0\x00', 0x2008410, &(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x5543, &(0x7f0000003780)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x6, 0x5, 0x9f, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007"], 0x38}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x6, 0x6}) 256.993648ms ago: executing program 0 (id=1703): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x4010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = fsopen(&(0x7f0000000100)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000200000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) add_key(&(0x7f0000000080)='user\x00', &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000040)='9', 0x1, 0xfffffffffffffffc) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="17fffff60000000000000000160000fd1801f6ff776c6c25001a06000000000000b703000000fa387c0f4d00004f8ff9e1a095009500"/71], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x51) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 169.646566ms ago: executing program 3 (id=1704): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) (async) r4 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r4) (async) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) (async) syz_emit_ethernet(0x46, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60122d9200103a00fe8000000000000000000000000000bbff020000000000000000000000018600907800"/68], 0x0) write$binfmt_script(r6, &(0x7f0000000340), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r6, 0x0) r7 = dup(r5) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000280)="0f090fc75e40f30f70cfb1f466b8000000000f23c80f21f86635080030000f23f866b9800000c00f326635000800000f30ba200066b8c249000066ef3e3ef30faeeb0f72f0002e0fc769fc", 0x4b}], 0x1, 0x0, 0x0, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000080)={0x100, 0xf3f, 0x0, 0x3, 0x100}, 0x14) (async) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r6, 0x0, 0x0}, 0x10) (async) sendto$packet(0xffffffffffffffff, &(0x7f0000000240)="d0f0d0f512e0211c843d9231a58ed2ceffc2f38e", 0x14, 0x0, 0x0, 0x0) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r10 = getpid() sched_setaffinity(r10, 0x8, &(0x7f00000002c0)=0x9) sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 55.881915ms ago: executing program 3 (id=1705): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = inotify_init1(0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) r4 = syz_open_procfs(r3, &(0x7f0000000600)='fd/4\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40305829, &(0x7f0000000240)) write$UHID_CREATE2(r4, &(0x7f00000003c0)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0x64, 0x8001, 0xcb, 0x80000000, 0x4, 0xffffffff, "1ce8ab74f1f5a5e22f64e7dded79c7a4ca2cffc7e5a475f265cd7e5ccfd0457c330cab2494cccfcede1a89708abbd0ff7b777ee6447355410f79340931eab26a7259651fcea2e20bd371441d4695be83a401fd06f45734e08c254c1aff3c36c3d099b211"}}, 0x17c) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) (async) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') (async) fchdir(r1) (async) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) (async) inotify_init1(0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) fcntl$setown(r2, 0x8, 0xffffffffffffffff) (async) fcntl$getownex(r2, 0x10, &(0x7f0000000140)) (async) syz_open_procfs(r3, &(0x7f0000000600)='fd/4\x00') (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40305829, &(0x7f0000000240)) (async) write$UHID_CREATE2(r4, &(0x7f00000003c0)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0x64, 0x8001, 0xcb, 0x80000000, 0x4, 0xffffffff, "1ce8ab74f1f5a5e22f64e7dded79c7a4ca2cffc7e5a475f265cd7e5ccfd0457c330cab2494cccfcede1a89708abbd0ff7b777ee6447355410f79340931eab26a7259651fcea2e20bd371441d4695be83a401fd06f45734e08c254c1aff3c36c3d099b211"}}, 0x17c) (async) 0s ago: executing program 0 (id=1706): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000040)='bpf_lsm_msg_msg_alloc_security\x00') bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x20, &(0x7f0000000240)={&(0x7f0000000340)=""/209, 0xd1, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16=r1], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xb, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket(0x0, 0x0, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000140)={&(0x7f0000000000), 0x12, &(0x7f0000000080)={0x0, 0x2}, 0x8}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x28}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0xa0179e1d}) socket$igmp6(0xa, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, 0x0, &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096}, 0x90) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r8, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) kernel console output (not intermixed with test programs): t 2(bridge_slave_1) entered disabled state [ 321.252786][ T7600] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 321.260891][ T7600] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.267809][ T7600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.282087][ T7174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 321.290565][ T7174] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.297417][ T7174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.304881][ T7174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 321.317756][ T7600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 321.348123][ T7600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 321.359945][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 321.368210][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 321.375615][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 321.384654][ T7625] device veth0_vlan entered promiscuous mode [ 321.396650][ T7625] device veth1_macvtap entered promiscuous mode [ 321.403746][ T7179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 321.435383][ T7600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 321.458425][ T7000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 321.527585][ T7589] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.599212][ T7644] syz.0.1468[7644] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 321.599576][ T7644] syz.0.1468[7644] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 321.899010][ T9] device bridge_slave_1 left promiscuous mode [ 321.916898][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.924883][ T9] device bridge_slave_0 left promiscuous mode [ 321.931233][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.939593][ T9] device veth1_macvtap left promiscuous mode [ 321.945589][ T9] device veth0_vlan left promiscuous mode [ 322.022600][ T7642] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 322.030607][ T7642] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 322.040738][ T7642] F2FS-fs (loop1): invalid crc value [ 322.047358][ T7642] F2FS-fs (loop1): Found nat_bits in checkpoint [ 322.081235][ T7642] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 322.088190][ T7642] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 322.148002][ T312] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 322.302092][ T2905] buffer_io_error: 141 callbacks suppressed [ 322.302104][ T2905] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 322.324744][ T2905] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 322.333812][ T2905] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 322.342167][ T7666] FAT-fs (loop0): Unrecognized mount option "uni_xlarset=koi8-r" or missing value [ 322.387540][ T2024] Buffer I/O error on dev loop0p4, logical block 1, async page read [ 322.397544][ T2905] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 322.411808][ T2905] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 322.425286][ T2905] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 322.433259][ T312] usb 5-1: device descriptor read/64, error -71 [ 322.439217][ T2905] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 322.448069][ T2905] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 322.465197][ T2024] Buffer I/O error on dev loop0p4, logical block 1, async page read [ 322.805095][ T7611] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 322.878533][ T7666] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 322.886190][ T7666] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 322.895533][ T7666] F2FS-fs (loop0): invalid crc value [ 322.904633][ T7666] F2FS-fs (loop0): Found nat_bits in checkpoint [ 322.938780][ T7666] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 322.945711][ T7666] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 322.948001][ T312] usb 5-1: device descriptor read/64, error -71 [ 323.208051][ T7611] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.228595][ T7611] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.238013][ T312] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 323.241338][ T7611] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 323.262708][ T7611] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 323.272282][ T7611] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.287169][ T7611] usb 2-1: config 0 descriptor?? [ 323.348094][ T6995] usbhid 4-1:0.0: can't add hid device: -71 [ 323.354202][ T6995] usbhid: probe of 4-1:0.0 failed with error -71 [ 323.361753][ T6995] usb 4-1: USB disconnect, device number 69 [ 323.397998][ T7685] EXT4-fs (loop3): Ignoring removed nobh option [ 323.449394][ T7685] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x00000000000001ff,nobh,,errors=continue [ 323.466546][ T7685] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038 (0x7fffffff) [ 323.484268][ T110] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 323.506199][ T110] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 323.515172][ T312] usb 5-1: device descriptor read/64, error -71 [ 323.538512][ T7659] udc-core: couldn't find an available UDC or it's busy [ 323.545289][ T7659] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 323.705125][ T7688] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 323.722857][ T7688] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 323.748917][ T7688] F2FS-fs (loop2): Found nat_bits in checkpoint [ 323.793261][ T7688] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 323.800220][ T7688] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 323.839209][ T7659] binder: BINDER_SET_CONTEXT_MGR already set [ 323.850829][ T7659] binder: 7658:7659 ioctl 4018620d 20000040 returned -16 [ 323.918058][ T312] usb 5-1: device descriptor read/64, error -71 [ 323.938007][ T7611] usbhid 2-1:0.0: can't add hid device: -71 [ 323.943869][ T7611] usbhid: probe of 2-1:0.0 failed with error -71 [ 323.961894][ T7611] usb 2-1: USB disconnect, device number 61 [ 323.999925][ T6995] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 324.040330][ T312] usb usb5-port1: attempt power cycle [ 324.077189][ T7702] EXT4-fs (loop2): 1 truncate cleaned up [ 324.083296][ T7702] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 324.184619][ T24] kauditd_printk_skb: 12 callbacks suppressed [ 324.184635][ T24] audit: type=1326 audit(1723961794.245:3167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7682 comm="syz.3.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f85bb1d0e79 code=0x7ffc0000 [ 324.214103][ T24] audit: type=1326 audit(1723961794.245:3168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7682 comm="syz.3.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85bb1d0e79 code=0x7ffc0000 [ 324.237809][ T24] audit: type=1326 audit(1723961794.245:3169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7682 comm="syz.3.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85bb1d0e79 code=0x7ffc0000 [ 324.261293][ T24] audit: type=1326 audit(1723961794.255:3170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7682 comm="syz.3.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f85bb1d0e79 code=0x7ffc0000 [ 324.273497][ T7551] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz-executor: bg 0: block 256: padding at end of block bitmap is not set [ 324.285161][ T24] audit: type=1326 audit(1723961794.255:3171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7682 comm="syz.3.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85bb1d0e79 code=0x7ffc0000 [ 324.322183][ T7551] Quota error (device loop3): write_blk: dquota write failed [ 324.329586][ T24] audit: type=1326 audit(1723961794.255:3172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7682 comm="syz.3.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85bb1d0e79 code=0x7ffc0000 [ 324.352815][ T7551] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 324.352880][ T7551] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 324.362106][ T24] audit: type=1326 audit(1723961794.255:3173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7682 comm="syz.3.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f85bb1d0e79 code=0x7ffc0000 [ 324.396963][ T7551] EXT4-fs error (device loop3): ext4_acquire_dquot:6219: comm syz-executor: Failed to acquire dquot type 1 [ 324.398229][ T7174] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 324.448277][ T6995] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.459149][ T6995] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 324.472397][ T6995] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 324.481653][ T312] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 324.481932][ T6995] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.501993][ T6995] usb 1-1: config 0 descriptor?? [ 324.603669][ T7710] syz.1.1482[7710] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 324.604023][ T7710] syz.1.1482[7710] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 324.668008][ T312] usb 5-1: device descriptor read/8, error -71 [ 324.688099][ T7174] usb 3-1: Using ep0 maxpacket: 32 [ 324.886762][ T7712] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.894052][ T7712] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.904605][ T7712] device bridge_slave_0 entered promiscuous mode [ 324.911928][ T7712] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.919652][ T7712] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.927129][ T7712] device bridge_slave_1 entered promiscuous mode [ 324.928114][ T312] usb 5-1: device descriptor read/8, error -71 [ 324.978057][ T7174] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 324.996381][ T7174] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.011879][ T7174] usb 3-1: Product: syz [ 325.013842][ T7712] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.016170][ T7174] usb 3-1: Manufacturer: syz [ 325.022747][ T7712] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.022858][ T7712] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.028146][ T7174] usb 3-1: SerialNumber: syz [ 325.034216][ T7712] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.048575][ T7174] usb 3-1: config 0 descriptor?? [ 325.074265][ T6988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 325.086302][ T6988] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.101309][ T6988] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.121554][ T7611] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 325.129562][ T7730] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 325.141074][ T6995] usbhid 1-1:0.0: can't add hid device: -71 [ 325.146872][ T6995] usbhid: probe of 1-1:0.0 failed with error -71 [ 325.159831][ T7611] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.166729][ T7611] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.181427][ T6995] usb 1-1: USB disconnect, device number 69 [ 325.187251][ T7730] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 325.199325][ T7611] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 325.207478][ T7611] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.214461][ T7611] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.222150][ T7730] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 325.239349][ T7730] EXT4-fs (loop0): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000000,delalloc,data=ordered,lazytime,dioread_nolock,jqfmt=vfsold,nomblk_io_submit,nojournal_checksum,,errors=continue [ 325.260364][ T6988] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 325.310878][ T6988] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 325.326743][ T7712] device veth0_vlan entered promiscuous mode [ 325.348348][ T7600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 325.356752][ T7600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 325.366262][ T7600] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 325.373953][ T7600] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 325.388620][ T7600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 325.419847][ T110] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.429113][ T110] device bridge_slave_0 left promiscuous mode [ 325.504950][ T110] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.513381][ T110] device veth1_macvtap left promiscuous mode [ 325.519270][ T110] device veth0_vlan left promiscuous mode [ 325.631046][ T7712] device veth1_macvtap entered promiscuous mode [ 325.642043][ T7175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 325.654234][ T7175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 325.736672][ T7742] syz.3.1484[7742] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 325.736724][ T7742] syz.3.1484[7742] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 325.779585][ T7174] rtl8150 3-1:0.0: eth1: rtl8150 is detected [ 325.979124][ T6988] usb 3-1: USB disconnect, device number 72 [ 325.998080][ T132] net eth1: rx_urb submit failed: -19 [ 326.045129][ T2905] print_req_error: 73 callbacks suppressed [ 326.045145][ T2905] blk_update_request: I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 326.047887][ T385] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 326.052058][ T2905] blk_update_request: I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 326.062357][ T385] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 326.094675][ T385] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 326.105459][ T385] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 326.116473][ T385] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 326.128790][ T385] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 326.308015][ T7174] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 326.400062][ T7776] EXT4-fs (loop1): 1 orphan inode deleted [ 326.405615][ T7776] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 326.424806][ T7776] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038 (0x7fffffff) [ 326.602375][ T7174] usb 1-1: Using ep0 maxpacket: 8 [ 327.568394][ T7174] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.598095][ T7174] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.628474][ T7174] usb 1-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 327.656849][ T7174] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.681509][ T7174] usb 1-1: config 0 descriptor?? [ 327.729616][ T7793] tipc: Started in network mode [ 327.739745][ T7793] tipc: Own node identity 00000000000000000000000000000001, cluster identity 4711 [ 327.758752][ T7793] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 327.775598][ T7793] tipc: Enabled bearer , priority 10 [ 327.996786][ T7800] syz.1.1497[7800] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 327.997139][ T7800] syz.1.1497[7800] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 328.098752][ T7791] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 328.149821][ T7791] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 328.201326][ T7791] F2FS-fs (loop3): Found nat_bits in checkpoint [ 328.221294][ T7782] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 328.238022][ T7782] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 328.262197][ T7805] exfat: Deprecated parameter 'utf8' [ 328.285608][ T7805] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 328.291641][ T7791] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 328.304895][ T7791] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 328.309007][ T7782] F2FS-fs (loop2): Found nat_bits in checkpoint [ 328.419198][ T7782] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 328.426185][ T7782] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 328.538698][ T7762] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 328.548223][ T7762] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 328.573341][ T7762] F2FS-fs (loop0): invalid crc value [ 328.592069][ T7762] F2FS-fs (loop0): Found nat_bits in checkpoint [ 328.636767][ T7762] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 328.643831][ T7762] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 328.887979][ T7176] tipc: 32-bit node address hash set to 1000000 [ 329.019235][ T7174] logitech-djreceiver 0003:046D:C52F.0038: collection stack underflow [ 329.047566][ T7174] logitech-djreceiver 0003:046D:C52F.0038: item 0 1 0 12 parsing failed [ 329.056199][ T7174] logitech-djreceiver 0003:046D:C52F.0038: logi_dj_probe: parse failed [ 329.058089][ T6995] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 329.077192][ T7174] logitech-djreceiver: probe of 0003:046D:C52F.0038 failed with error -22 [ 329.149730][ T7832] syz.2.1502 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 329.212059][ T7832] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 329.230115][ T7174] usb 1-1: USB disconnect, device number 70 [ 329.247222][ T24] kauditd_printk_skb: 63 callbacks suppressed [ 329.247237][ T24] audit: type=1400 audit(1723961799.305:3237): avc: denied { setattr } for pid=7834 comm="syz.3.1503" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 329.279555][ T7832] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a800e01c, mo2=0002] [ 329.287330][ T7832] System zones: 1-12 [ 329.291724][ T7832] EXT4-fs (loop2): orphan cleanup on readonly fs [ 329.298873][ T7832] EXT4-fs error (device loop2): ext4_read_inode_bitmap:168: comm syz.2.1502: Inode bitmap for bg 0 marked uninitialized [ 329.311696][ T7832] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,,errors=continue [ 329.347999][ T6995] usb 5-1: Using ep0 maxpacket: 16 [ 329.353747][ T7828] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 329.354638][ T24] audit: type=1400 audit(1723961799.415:3238): avc: denied { write } for pid=7834 comm="syz.3.1503" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 329.372223][ T7828] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 329.401836][ T7828] F2FS-fs (loop1): Found nat_bits in checkpoint [ 329.440355][ T7828] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 329.447199][ T7828] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 329.478075][ T6995] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 329.493216][ T7844] EXT4-fs (loop3): 1 truncate cleaned up [ 329.498764][ T7844] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 329.658065][ T6995] usb 5-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 329.667075][ T7600] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 329.674439][ T6995] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.682232][ T6995] usb 5-1: Product: syz [ 329.686180][ T6995] usb 5-1: Manufacturer: syz [ 329.690707][ T6995] usb 5-1: SerialNumber: syz [ 329.695655][ T6995] usb 5-1: config 0 descriptor?? [ 329.734116][ T7279] F2FS-fs (loop0): access invalid blkaddr:2048 [ 329.740563][ T7279] CPU: 1 PID: 7279 Comm: syz-executor Tainted: G W 5.10.223-syzkaller-01561-g0890c03b8b7d #0 [ 329.751854][ T7279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 329.761717][ T7279] Call Trace: [ 329.764962][ T7279] dump_stack_lvl+0x1e2/0x24b [ 329.769475][ T7279] ? f2fs_get_next_page_offset+0x750/0x750 [ 329.775113][ T7279] ? bfq_pos_tree_add_move+0x43b/0x43b [ 329.780406][ T7279] dump_stack+0x15/0x17 [ 329.784415][ T7279] f2fs_is_valid_blkaddr+0xc87/0x1370 [ 329.789613][ T7279] f2fs_map_blocks+0x174c/0x3e50 [ 329.794387][ T7279] ? f2fs_do_map_lock+0x280/0x280 [ 329.799253][ T7279] ? bio_add_page+0x2cd/0x460 [ 329.803752][ T7279] ? xa_load+0x488/0x4a0 [ 329.807836][ T7279] f2fs_mpage_readpages+0xef9/0x24a0 [ 329.812958][ T7279] ? f2fs_verify_bio+0x440/0x440 [ 329.817735][ T7279] ? __this_cpu_preempt_check+0x13/0x20 [ 329.823106][ T7279] ? __mod_memcg_lruvec_state+0x131/0x310 [ 329.828659][ T7279] ? xas_nomem+0x19a/0x1d0 [ 329.832915][ T7279] ? __kasan_check_read+0x11/0x20 [ 329.837860][ T7279] f2fs_readahead+0xfd/0x250 [ 329.842288][ T7279] ? blk_start_plug+0x5a/0x170 [ 329.846889][ T7279] read_pages+0x17e/0xbf0 [ 329.851059][ T7279] ? page_cache_ra_unbounded+0x890/0x890 [ 329.856544][ T7279] ? add_to_page_cache_lru+0x221/0x2c0 [ 329.861824][ T7279] ? add_to_page_cache_locked+0x40/0x40 [ 329.867202][ T7279] ? xa_load+0x488/0x4a0 [ 329.871281][ T7279] page_cache_ra_unbounded+0x6be/0x890 [ 329.876776][ T7279] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 329.883096][ T7279] ? __irq_exit_rcu+0x40/0x150 [ 329.887703][ T7279] ? irq_exit_rcu+0x9/0x10 [ 329.891947][ T7279] ondemand_readahead+0x863/0xc60 [ 329.896808][ T7279] page_cache_sync_ra+0x26c/0x2c0 [ 329.901855][ T7279] f2fs_readdir+0x4e7/0xb70 [ 329.906195][ T7279] ? f2fs_fill_dentries+0xe10/0xe10 [ 329.911238][ T7279] ? security_file_permission+0x86/0xb0 [ 329.916605][ T7279] iterate_dir+0x265/0x580 [ 329.920858][ T7279] ? f2fs_fill_dentries+0xe10/0xe10 [ 329.925991][ T7279] __se_sys_getdents64+0x1c1/0x460 [ 329.930966][ T7279] ? __x64_sys_getdents64+0x90/0x90 [ 329.935981][ T7279] ? filldir+0x680/0x680 [ 329.940069][ T7279] ? debug_smp_processor_id+0x17/0x20 [ 329.945272][ T7279] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 329.951193][ T7279] ? __bpf_trace_sys_enter+0x62/0x70 [ 329.952341][ T7814] udc-core: couldn't find an available UDC or it's busy [ 329.956312][ T7279] __x64_sys_getdents64+0x7b/0x90 [ 329.963240][ T7814] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 329.967945][ T7279] do_syscall_64+0x34/0x70 [ 329.979494][ T7279] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 329.985197][ T7279] RIP: 0033:0x7f0ece442013 [ 329.989450][ T7279] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 52 43 f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 329.997986][ T7600] usb 3-1: Using ep0 maxpacket: 8 [ 330.008895][ T7279] RSP: 002b:00007ffc26cfa7a8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 330.008913][ T7279] RAX: ffffffffffffffda RBX: 0000555556bbd4e0 RCX: 00007f0ece442013 [ 330.008922][ T7279] RDX: 0000000000008000 RSI: 0000555556bbd4e0 RDI: 0000000000000005 [ 330.008930][ T7279] RBP: 0000555556bbd4b4 R08: 0000000000000000 R09: 0000000000000000 [ 330.008937][ T7279] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8 [ 330.008955][ T7279] R13: 0000000000000010 R14: 0000555556bbd4b0 R15: 00007ffc26cfca50 [ 330.068048][ T7174] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 330.068367][ T7279] handle_bad_sector: 121 callbacks suppressed [ 330.068383][ T7279] attempt to access beyond end of device [ 330.068383][ T7279] loop0: rw=524288, want=45072, limit=40427 [ 330.113125][ T7279] attempt to access beyond end of device [ 330.113125][ T7279] loop0: rw=0, want=45072, limit=40427 [ 330.129647][ T7279] attempt to access beyond end of device [ 330.129647][ T7279] loop0: rw=2049, want=45104, limit=40427 [ 330.228065][ T7600] usb 3-1: config 1 interface 0 altsetting 5 endpoint 0x2 has invalid wMaxPacketSize 0 [ 330.241682][ T7600] usb 3-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 8 [ 330.267739][ T7600] usb 3-1: config 1 interface 0 has no altsetting 0 [ 330.277131][ T24] audit: type=1400 audit(1723961800.345:3239): avc: denied { map } for pid=7851 comm="syz.1.1506" path="socket:[44051]" dev="sockfs" ino=44051 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 330.324987][ T24] audit: type=1400 audit(1723961800.365:3240): avc: denied { read } for pid=7851 comm="syz.1.1506" path="socket:[44051]" dev="sockfs" ino=44051 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 330.348412][ T7174] usb 4-1: Using ep0 maxpacket: 32 [ 330.458081][ T7600] usb 3-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.40 [ 330.474224][ T7600] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.495001][ T7600] usb 3-1: Product: 《 [ 330.507358][ T7600] usb 3-1: Manufacturer: Ð’ [ 330.514633][ T7600] usb 3-1: SerialNumber: Ð [ 330.591244][ T7862] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.598635][ T7862] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.606032][ T7862] device bridge_slave_0 entered promiscuous mode [ 330.616774][ T7862] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.623795][ T7862] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.631300][ T7862] device bridge_slave_1 entered promiscuous mode [ 330.690714][ T7868] syz.1.1510[7868] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 330.691075][ T7868] syz.1.1510[7868] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 330.719294][ T7174] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 330.764321][ T7174] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.806114][ T7174] usb 4-1: Product: syz [ 330.826761][ T7174] usb 4-1: Manufacturer: syz [ 330.850215][ T7174] usb 4-1: SerialNumber: syz [ 330.898066][ T7174] usb 4-1: config 0 descriptor?? [ 330.973580][ T7862] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.978697][ T24] audit: type=1400 audit(1723961801.035:3241): avc: denied { execute } for pid=7831 comm="syz.2.1502" dev="tmpfs" ino=546 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 330.980453][ T7862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.002098][ T7832] EXT4-fs error (device loop2): ext4_map_blocks:600: inode #2: block 5: comm syz.2.1502: lblock 0 mapped to illegal pblock 5 (length 1) [ 331.008408][ T7862] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.022621][ T24] audit: type=1400 audit(1723961801.035:3242): avc: denied { execute_no_trans } for pid=7831 comm="syz.2.1502" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=546 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 331.028879][ T7862] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.050221][ T6988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 331.060455][ T7832] EXT4-fs warning (device loop2): dx_probe:795: inode #2: lblock 0: comm syz.2.1502: error -117 reading directory block [ 331.085394][ T6988] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.093091][ T6988] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.103787][ T110] bridge0: port 3(gretap0) entered disabled state [ 331.111161][ T110] device gretap0 left promiscuous mode [ 331.116486][ T110] bridge0: port 3(gretap0) entered disabled state [ 331.124439][ T7175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 331.132458][ T7175] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.139312][ T7175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.156264][ T6988] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 331.164390][ T6988] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.171240][ T6988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.183195][ T6995] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 331.191037][ T6995] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 331.206540][ T7175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 331.220982][ T7175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 331.229476][ T7175] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 331.236839][ T7175] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 331.245855][ T110] device bridge_slave_1 left promiscuous mode [ 331.252148][ T110] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.259575][ T110] device bridge_slave_0 left promiscuous mode [ 331.265526][ T110] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.273386][ T110] device veth1_macvtap left promiscuous mode [ 331.278024][ T7600] usbhid 3-1:1.0: can't add hid device: -71 [ 331.280060][ T110] device veth0_vlan left promiscuous mode [ 331.285044][ T7600] usbhid: probe of 3-1:1.0 failed with error -71 [ 331.302282][ T7600] usb 3-1: USB disconnect, device number 73 [ 331.421420][ T7862] device veth0_vlan entered promiscuous mode [ 331.433770][ T7175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 331.442132][ T7175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 331.452406][ T7862] device veth1_macvtap entered promiscuous mode [ 331.464890][ T7175] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 331.473079][ T7175] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 331.482049][ T7175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 331.498252][ T7175] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 331.506682][ T7175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 331.536850][ T2905] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 331.549661][ T2905] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 331.552477][ T2024] blk_update_request: I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 331.572157][ T2905] buffer_io_error: 35 callbacks suppressed [ 331.572167][ T2905] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 331.589325][ T2024] blk_update_request: I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 331.591556][ T2905] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 331.610510][ T2024] Buffer I/O error on dev loop0p4, logical block 1, async page read [ 331.620396][ T7174] rtl8150 4-1:0.0: eth1: rtl8150 is detected [ 331.623085][ T2905] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 331.635281][ T2905] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 331.646135][ T2905] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 331.654302][ T2905] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 331.665436][ T2905] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 331.673436][ T2905] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 331.684954][ T2905] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 331.730066][ T7870] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 331.737778][ T7870] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 331.763481][ T24] audit: type=1400 audit(1723961801.825:3243): avc: denied { setopt } for pid=7876 comm="syz.2.1512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 331.771635][ T7870] F2FS-fs (loop1): Found nat_bits in checkpoint [ 331.821885][ T7174] usb 4-1: USB disconnect, device number 70 [ 331.841464][ T7870] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 331.848573][ T7870] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 331.858133][ T7175] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 332.000066][ T7176] usb 5-1: USB disconnect, device number 75 [ 332.015233][ T24] audit: type=1400 audit(1723961802.075:3244): avc: denied { setopt } for pid=7913 comm="syz.2.1514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 332.037108][ T7914] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1514'. [ 332.124099][ T24] audit: type=1400 audit(1723961802.175:3245): avc: denied { write } for pid=7913 comm="syz.2.1514" path="socket:[44323]" dev="sockfs" ino=44323 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 332.164162][ T24] audit: type=1400 audit(1723961802.175:3246): avc: denied { nlmsg_read } for pid=7913 comm="syz.2.1514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 332.207994][ T7175] usb 1-1: Using ep0 maxpacket: 32 [ 332.378027][ T7175] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 332.378449][ T7914] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 332.398099][ T7175] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 332.407379][ T7914] EXT4-fs (loop2): warning: maximal mount count reached, running e2fsck is recommended [ 332.433720][ T7914] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.1514: iget: bad extended attribute block 19 [ 332.451422][ T7914] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1514: couldn't read orphan inode 15 (err -117) [ 332.463594][ T7176] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 332.471772][ T7914] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 332.546733][ T7914] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1514'. [ 332.555743][ T7926] EXT4-fs error (device loop1): ext4_fill_super:4955: inode #2: comm syz.1.1515: casefold flag without casefold feature [ 332.568133][ T7175] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 332.568155][ T7175] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.577722][ T7926] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 332.597952][ T7926] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 332.597973][ T7175] usb 1-1: Product: syz [ 332.621224][ T7175] usb 1-1: Manufacturer: syz [ 332.625647][ T7175] usb 1-1: SerialNumber: syz [ 332.843257][ T7946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1518'. [ 333.047990][ T7601] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 333.158153][ T7176] usb 5-1: config 0 has an invalid interface number: 206 but max is 0 [ 333.166215][ T7176] usb 5-1: config 0 has no interface number 0 [ 333.172217][ T7176] usb 5-1: config 0 interface 206 has no altsetting 0 [ 333.179093][ T7176] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 333.188238][ T7176] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.196761][ T7176] usb 5-1: config 0 descriptor?? [ 333.218290][ T7175] usb 1-1: 0:2 : does not exist [ 333.225185][ T7175] usb 1-1: USB disconnect, device number 71 [ 333.428838][ T385] udevd[385]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 333.448108][ T7601] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 333.458122][ T7601] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 333.480965][ T7916] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 333.510076][ T7916] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1047: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 333.524675][ T7916] EXT4-fs (loop4): 1 truncate cleaned up [ 333.530286][ T7916] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,block_validity,sysvgroups,,errors=continue [ 333.548083][ T7601] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 333.558164][ T7601] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 333.583724][ T7601] usb 3-1: SerialNumber: syz [ 333.671346][ T385] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 333.684355][ T2024] blk_update_request: I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 333.704839][ T385] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 333.713121][ T2024] Buffer I/O error on dev loop0p4, logical block 1, async page read [ 333.723008][ T385] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 333.741114][ T385] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 333.849839][ T7601] usb 3-1: 0:2 : does not exist [ 333.962080][ T7177] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 334.149697][ T7969] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 334.157338][ T7969] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 334.176394][ T7969] F2FS-fs (loop1): Found nat_bits in checkpoint [ 334.208889][ T7969] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 334.215830][ T7969] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 334.231217][ T7969] 9pnet: Insufficient options for proto=fd [ 334.262448][ T7600] usb 3-1: USB disconnect, device number 74 [ 334.328066][ T7177] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 334.453425][ T7979] FAULT_INJECTION: forcing a failure. [ 334.453425][ T7979] name failslab, interval 1, probability 0, space 0, times 0 [ 334.466047][ T7979] CPU: 0 PID: 7979 Comm: syz.1.1527 Tainted: G W 5.10.223-syzkaller-01561-g0890c03b8b7d #0 [ 334.477142][ T7979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 334.487030][ T7979] Call Trace: [ 334.490168][ T7979] dump_stack_lvl+0x1e2/0x24b [ 334.494674][ T7979] ? bfq_pos_tree_add_move+0x43b/0x43b [ 334.499974][ T7979] dump_stack+0x15/0x17 [ 334.503959][ T7979] should_fail+0x3c6/0x510 [ 334.508312][ T7979] ? p9_client_prepare_req+0x313/0xb50 [ 334.513705][ T7979] __should_failslab+0xa4/0xe0 [ 334.518096][ T7177] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 334.518308][ T7979] should_failslab+0x9/0x20 [ 334.528172][ T7177] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.531493][ T7979] kmem_cache_alloc+0x3d/0x2e0 [ 334.540419][ T7177] usb 4-1: Product: syz [ 334.543989][ T7979] ? p9_client_prepare_req+0x150/0xb50 [ 334.548321][ T7177] usb 4-1: Manufacturer: syz [ 334.553356][ T7979] p9_client_prepare_req+0x313/0xb50 [ 334.553381][ T7979] p9_client_rpc+0x159/0x1390 [ 334.557819][ T7177] usb 4-1: SerialNumber: syz [ 334.563001][ T7979] ? __kasan_check_write+0x14/0x20 [ 334.563014][ T7979] ? node_tag_clear+0x200/0x2b0 [ 334.563029][ T7979] ? p9_fid_create+0x230/0x230 [ 334.563040][ T7979] ? idr_alloc_u32+0x20b/0x320 [ 334.563055][ T7979] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 334.563078][ T7979] ? debug_smp_processor_id+0x17/0x20 [ 334.601162][ T7979] ? __radix_tree_preload+0x351/0x3d0 [ 334.606348][ T7979] p9_client_walk+0x1fe/0x7b0 [ 334.610863][ T7979] ? p9_client_rpc+0x1390/0x1390 [ 334.615637][ T7979] ? v9fs_fid_lookup+0x118/0x160 [ 334.620496][ T7979] v9fs_vfs_lookup+0x198/0x3c0 [ 334.625182][ T7979] ? __d_alloc+0x4ec/0x6c0 [ 334.629435][ T7979] ? v9fs_inode_from_fid+0x2f0/0x2f0 [ 334.634554][ T7979] ? _raw_spin_unlock+0x4d/0x70 [ 334.639240][ T7979] ? d_alloc+0x199/0x1d0 [ 334.643318][ T7979] __lookup_hash+0x143/0x290 [ 334.647746][ T7979] filename_create+0x202/0x750 [ 334.652346][ T7979] ? __check_object_size+0x2e6/0x3c0 [ 334.657470][ T7979] ? kern_path_create+0x40/0x40 [ 334.662173][ T7979] do_symlinkat+0x104/0x400 [ 334.666491][ T7979] ? fput+0x1a/0x20 [ 334.670150][ T7979] ? do_mkdirat+0x2c0/0x2c0 [ 334.674569][ T7979] ? debug_smp_processor_id+0x17/0x20 [ 334.679861][ T7979] __x64_sys_symlinkat+0x7b/0x90 [ 334.684719][ T7979] do_syscall_64+0x34/0x70 [ 334.689005][ T7979] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 334.694701][ T7979] RIP: 0033:0x7f25fca4ce79 [ 334.698955][ T7979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.718395][ T7979] RSP: 002b:00007f25fb6ca038 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 334.726639][ T7979] RAX: ffffffffffffffda RBX: 00007f25fcbe8f80 RCX: 00007f25fca4ce79 [ 334.734448][ T7979] RDX: 0000000020000080 RSI: 0000000000000009 RDI: 0000000020000040 [ 334.742324][ T7979] RBP: 00007f25fb6ca090 R08: 0000000000000000 R09: 0000000000000000 [ 334.750170][ T7979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 334.757973][ T7979] R13: 0000000000000000 R14: 00007f25fcbe8f80 R15: 00007ffc91cbbf88 [ 334.798381][ T7989] EXT4-fs (loop0): Ignoring removed oldalloc option [ 334.815511][ T7989] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 334.828773][ T7989] EXT4-fs (loop0): 1 truncate cleaned up [ 334.834290][ T7989] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,minixdf,jqfmt=vfsv1,,errors=continue [ 334.898988][ T7996] FAT-fs (loop1): Unrecognized mount option "uni_xlarset=koi8-r" or missing value [ 334.967298][ T24] kauditd_printk_skb: 2 callbacks suppressed [ 334.967313][ T24] audit: type=1400 audit(1723961805.025:3249): avc: denied { unlink } for pid=7862 comm="syz-executor" name="file2" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 334.998915][ T7862] EXT4-fs error (device loop0): mb_free_blocks:1524: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 335.014950][ T24] audit: type=1400 audit(1723961805.065:3250): avc: denied { unlink } for pid=7862 comm="syz-executor" name="file1" dev="loop0" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 335.109225][ T7996] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 335.116932][ T7996] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 335.126215][ T7996] F2FS-fs (loop1): invalid crc value [ 335.134347][ T7996] F2FS-fs (loop1): Found nat_bits in checkpoint [ 335.185450][ T8005] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 335.194000][ T7996] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 335.201388][ T8005] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038 (0x7fffffff) [ 335.204091][ T7996] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 335.238378][ T8004] EXT4-fs error (device loop2) in ext4_do_update_inode:5275: error 27 [ 335.248403][ T8004] EXT4-fs error (device loop2): ext4_dirty_inode:6079: inode #2: comm syz.2.1533: mark_inode_dirty error [ 335.259636][ T7176] usb 5-1: Cannot read MAC address [ 335.264667][ T7176] MOSCHIP usb-ethernet driver: probe of 5-1:0.206 failed with error -71 [ 335.275262][ T7176] usb 5-1: USB disconnect, device number 76 [ 335.283177][ T8004] EXT4-fs error (device loop2) in ext4_do_update_inode:5275: error 27 [ 335.298230][ T8004] EXT4-fs error (device loop2): __ext4_ext_dirty:182: inode #2: comm syz.2.1533: mark_inode_dirty error [ 335.310560][ T8019] syz.4.1535[8019] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 335.310629][ T8019] syz.4.1535[8019] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 335.323354][ T24] audit: type=1400 audit(1723961805.385:3251): avc: denied { create } for pid=8018 comm="syz.4.1535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 335.468027][ T7177] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 335.473968][ T7177] cdc_ncm 4-1:1.0: bind() failure [ 335.480164][ T7177] cdc_ncm 4-1:1.1: bind() failure [ 335.509715][ T8038] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 335.518687][ T8038] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038 (0x7fffffff) [ 335.530879][ T8038] EXT4-fs error (device loop2) in ext4_do_update_inode:5275: error 27 [ 335.539267][ T8038] EXT4-fs error (device loop2): ext4_dirty_inode:6079: inode #2: comm syz.2.1540: mark_inode_dirty error [ 335.551052][ T8038] EXT4-fs error (device loop2) in ext4_do_update_inode:5275: error 27 [ 335.559316][ T8038] EXT4-fs error (device loop2): __ext4_ext_dirty:182: inode #2: comm syz.2.1540: mark_inode_dirty error [ 335.654734][ T7177] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 335.915381][ T673] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 335.917976][ T7177] usb 1-1: Using ep0 maxpacket: 32 [ 335.937959][ T673] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 335.978377][ T7177] usb 1-1: too many configurations: 48, using maximum allowed: 8 [ 336.118097][ T7177] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 336.130159][ T7177] usb 1-1: can't read configurations, error -61 [ 336.215101][ T7601] usb 4-1: USB disconnect, device number 71 [ 336.298185][ T7177] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 336.365096][ T24] audit: type=1400 audit(1723961806.425:3252): avc: denied { ioctl } for pid=8058 comm="syz.1.1543" path="socket:[44569]" dev="sockfs" ino=44569 ioctlcmd=0x9426 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 336.537969][ T7177] usb 1-1: Using ep0 maxpacket: 32 [ 336.553864][ T24] audit: type=1400 audit(1723961806.615:3253): avc: denied { name_bind } for pid=8073 comm="syz.3.1548" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 336.588413][ T7177] usb 1-1: too many configurations: 48, using maximum allowed: 8 [ 336.709587][ T8077] EXT4-fs (loop3): dax option not supported [ 336.751938][ T8068] F2FS-fs (loop1): Unrecognized mount option "nl802154" or missing value [ 336.760351][ T7177] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 336.767706][ T7177] usb 1-1: can't read configurations, error -61 [ 336.774069][ T7177] usb usb1-port1: attempt power cycle [ 336.833712][ T24] audit: type=1400 audit(1723961806.895:3254): avc: denied { unlink } for pid=8065 comm="syz.1.1545" name="#35" dev="tmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 337.208009][ T7177] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 337.249923][ T8100] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 337.258814][ T8100] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038 (0x7fffffff) [ 337.298028][ T7177] usb 1-1: Using ep0 maxpacket: 32 [ 337.338172][ T7177] usb 1-1: too many configurations: 48, using maximum allowed: 8 [ 337.473316][ T6988] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 337.519462][ T7177] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 337.527138][ T7177] usb 1-1: can't read configurations, error -61 [ 337.687987][ T7177] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 337.778355][ T7177] usb 1-1: Using ep0 maxpacket: 32 [ 337.848913][ T7177] usb 1-1: too many configurations: 48, using maximum allowed: 8 [ 337.918027][ T6988] usb 2-1: Using ep0 maxpacket: 32 [ 337.978113][ T7177] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 337.985568][ T7177] usb 1-1: can't read configurations, error -61 [ 337.991810][ T7177] usb usb1-port1: unable to enumerate USB device [ 338.048098][ T6988] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.059020][ T6988] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.068641][ T6988] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 338.077566][ T6988] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.089223][ T6988] usb 2-1: config 0 descriptor?? [ 338.138468][ T6988] hub 2-1:0.0: USB hub found [ 338.161685][ T8116] EXT4-fs (loop3): Ignoring removed orlov option [ 338.169703][ T8116] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,orlov,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,abort,data_err=abort,sysvgroups,,errors=continue [ 338.358076][ T6988] hub 2-1:0.0: 1 port detected [ 338.358612][ T24] audit: type=1400 audit(1723961808.425:3255): avc: denied { read } for pid=8115 comm="syz.3.1556" name="usbmon0" dev="devtmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 338.419869][ T24] audit: type=1400 audit(1723961808.475:3256): avc: denied { open } for pid=8115 comm="syz.3.1556" path="/dev/usbmon0" dev="devtmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 338.462649][ T385] print_req_error: 38 callbacks suppressed [ 338.462668][ T385] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 338.482687][ T8125] device pim6reg1 entered promiscuous mode [ 339.016601][ T385] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 339.022893][ T2905] blk_update_request: I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 339.038917][ T385] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 339.038927][ T385] buffer_io_error: 26 callbacks suppressed [ 339.038937][ T385] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 339.039008][ T385] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 339.056629][ T2905] blk_update_request: I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 339.069503][ T385] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 339.074190][ T7611] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 339.085324][ T385] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 339.092991][ T2905] Buffer I/O error on dev loop0p4, logical block 1, async page read [ 339.102032][ T24] audit: type=1400 audit(1723961809.165:3257): avc: denied { write } for pid=8137 comm="syz.3.1561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 339.110748][ T6995] hub 2-1:0.0: activate --> -90 [ 339.119093][ T385] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 339.150133][ T385] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 339.161261][ T385] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 339.169423][ T385] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 339.180387][ T385] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 339.221970][ T2905] blk_update_request: I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 339.222208][ T385] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 339.239604][ T2905] Buffer I/O error on dev loop0p4, logical block 1, async page read [ 339.256340][ T385] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 339.272786][ T385] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 339.598126][ T7611] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.608900][ T7611] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.638709][ T7176] usb 2-1: USB disconnect, device number 62 [ 339.665577][ T24] audit: type=1400 audit(1723961809.725:3258): avc: denied { mount } for pid=8174 comm="syz.2.1570" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 339.725911][ T7611] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 339.734914][ T7611] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.743557][ T7611] usb 5-1: config 0 descriptor?? [ 339.897978][ T7600] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 340.050085][ T8186] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 340.059109][ T8186] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038 (0x7fffffff) [ 340.098025][ T7611] usbhid 5-1:0.0: can't add hid device: -71 [ 340.104033][ T7611] usbhid: probe of 5-1:0.0 failed with error -71 [ 340.111687][ T7611] usb 5-1: USB disconnect, device number 77 [ 340.147961][ T7600] usb 4-1: Using ep0 maxpacket: 16 [ 340.252347][ T8199] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 340.282825][ T24] kauditd_printk_skb: 3 callbacks suppressed [ 340.282951][ T24] audit: type=1400 audit(1723961810.315:3262): avc: denied { read } for pid=8185 comm="syz.4.1572" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 340.437109][ T8196] EXT4-fs (loop1): Ignoring removed oldalloc option [ 340.449738][ T8196] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 340.498084][ T7600] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 340.507007][ T7600] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 340.525963][ T8196] EXT4-fs (loop1): 1 truncate cleaned up [ 340.532040][ T8196] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,minixdf,jqfmt=vfsv1,,errors=continue [ 340.549830][ T7600] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 340.563116][ T7600] usb 4-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 340.572563][ T24] audit: type=1400 audit(1723961810.325:3263): avc: denied { read write } for pid=8185 comm="syz.4.1572" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 340.595343][ T24] audit: type=1400 audit(1723961810.325:3264): avc: denied { open } for pid=8185 comm="syz.4.1572" path="/89/file0/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 340.618602][ T24] audit: type=1400 audit(1723961810.585:3265): avc: denied { unmount } for pid=7499 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 340.641504][ T8202] FAULT_INJECTION: forcing a failure. [ 340.641504][ T8202] name failslab, interval 1, probability 0, space 0, times 0 [ 340.654117][ T8202] CPU: 0 PID: 8202 Comm: syz.2.1575 Tainted: G W 5.10.223-syzkaller-01561-g0890c03b8b7d #0 [ 340.665374][ T8202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 340.675363][ T8202] Call Trace: [ 340.678574][ T8202] dump_stack_lvl+0x1e2/0x24b [ 340.683088][ T8202] ? bfq_pos_tree_add_move+0x43b/0x43b [ 340.688386][ T8202] dump_stack+0x15/0x17 [ 340.692372][ T8202] should_fail+0x3c6/0x510 [ 340.696619][ T8202] ? p9_client_prepare_req+0x150/0xb50 [ 340.701916][ T8202] __should_failslab+0xa4/0xe0 [ 340.706602][ T8202] should_failslab+0x9/0x20 [ 340.710946][ T8202] kmem_cache_alloc+0x3d/0x2e0 [ 340.715552][ T8202] ? kasan_set_track+0x4b/0x70 [ 340.720140][ T8202] ? p9_client_prepare_req+0xb8/0xb50 [ 340.725348][ T8202] p9_client_prepare_req+0x150/0xb50 [ 340.730553][ T8202] ? do_syscall_64+0x34/0x70 [ 340.734982][ T8202] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 340.740891][ T8202] p9_client_rpc+0x159/0x1390 [ 340.745396][ T8202] ? queue_stack_map_delete_elem+0x10/0x10 [ 340.751040][ T8202] ? p9_client_walk+0x45b/0x7b0 [ 340.755724][ T8202] ? p9_fid_create+0x230/0x230 [ 340.760332][ T8202] ? bpf_trace_run2+0xf4/0x280 [ 340.764931][ T8202] ? bpf_trace_run1+0x210/0x210 [ 340.769699][ T8202] ? kmem_cache_free+0xa9/0x1e0 [ 340.774401][ T8202] ? ____kasan_slab_free+0xd2/0x160 [ 340.779420][ T8202] ? p9_req_put+0x145/0x180 [ 340.783855][ T8202] ? __bpf_trace_kmem_free+0x6f/0x90 [ 340.788967][ T8202] ? kmem_cache_free+0x1c0/0x1e0 [ 340.793819][ T8202] ? p9_req_put+0x145/0x180 [ 340.798159][ T8202] p9_client_clunk+0x80/0x330 [ 340.802673][ T8202] p9_client_walk+0x4f2/0x7b0 [ 340.807198][ T8202] ? p9_client_rpc+0x1390/0x1390 [ 340.811965][ T8202] ? v9fs_fid_lookup+0x118/0x160 [ 340.816733][ T8202] v9fs_vfs_lookup+0x198/0x3c0 [ 340.821334][ T8202] ? __d_alloc+0x4ec/0x6c0 [ 340.825584][ T8202] ? v9fs_inode_from_fid+0x2f0/0x2f0 [ 340.830709][ T8202] ? _raw_spin_unlock+0x4d/0x70 [ 340.835390][ T8202] ? d_alloc+0x199/0x1d0 [ 340.839474][ T8202] __lookup_hash+0x143/0x290 [ 340.843902][ T8202] filename_create+0x202/0x750 [ 340.848498][ T8202] ? __check_object_size+0x2e6/0x3c0 [ 340.853619][ T8202] ? kern_path_create+0x40/0x40 [ 340.858311][ T8202] do_symlinkat+0x104/0x400 [ 340.862647][ T8202] ? fput+0x1a/0x20 [ 340.866297][ T8202] ? do_mkdirat+0x2c0/0x2c0 [ 340.870702][ T8202] ? debug_smp_processor_id+0x17/0x20 [ 340.875840][ T8202] __x64_sys_symlinkat+0x7b/0x90 [ 340.880611][ T8202] do_syscall_64+0x34/0x70 [ 340.884866][ T8202] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 340.890677][ T8202] RIP: 0033:0x7fc1f933de79 [ 340.895018][ T8202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 340.914458][ T8202] RSP: 002b:00007fc1f7fbb038 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 340.922701][ T8202] RAX: ffffffffffffffda RBX: 00007fc1f94d9f80 RCX: 00007fc1f933de79 [ 340.930521][ T8202] RDX: 0000000020000080 RSI: 0000000000000009 RDI: 0000000020000040 [ 340.938414][ T8202] RBP: 00007fc1f7fbb090 R08: 0000000000000000 R09: 0000000000000000 [ 340.946222][ T8202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 340.954036][ T8202] R13: 0000000000000000 R14: 00007fc1f94d9f80 R15: 00007ffcbcc25d48 [ 340.969527][ T7625] EXT4-fs error (device loop1): mb_free_blocks:1524: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 341.052637][ T7600] usb 4-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice=f4.95 [ 341.080456][ T7600] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.094996][ T7600] usb 4-1: Product: syz [ 341.099318][ T7600] usb 4-1: Manufacturer: syz [ 341.103775][ T7600] usb 4-1: SerialNumber: syz [ 341.112286][ T7600] usb 4-1: config 0 descriptor?? [ 341.123417][ T8213] EXT4-fs (loop1): 1 orphan inode deleted [ 341.128132][ T8178] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 341.129086][ T8213] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,nojournal_checksum,usrquota, [ 341.135761][ T8178] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 341.156002][ T8213] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038 (0x7fffffff) [ 341.816684][ T312] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 342.258658][ T24] audit: type=1400 audit(1723961812.325:3266): avc: denied { create } for pid=8229 comm="syz.0.1581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 342.268994][ T8178] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,grpid,lazytime, [ 342.337964][ T312] usb 5-1: Using ep0 maxpacket: 8 [ 342.339919][ T24] audit: type=1400 audit(1723961812.405:3267): avc: denied { ioctl } for pid=8177 comm="syz.3.1571" path="/17/file1/file2" dev="loop3" ino=16 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 342.371363][ T8178] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1571: bg 0: block 425: padding at end of block bitmap is not set [ 342.389653][ T8178] EXT4-fs (loop3): Remounting filesystem read-only [ 342.396857][ T24] audit: type=1400 audit(1723961812.445:3268): avc: denied { create } for pid=8229 comm="syz.0.1581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 342.397383][ T8234] udc-core: couldn't find an available UDC or it's busy [ 342.425129][ T8234] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 342.432694][ T8178] EXT4-fs error (device loop3) in ext4_mb_clear_bb:5648: Corrupt filesystem [ 342.441644][ T24] audit: type=1400 audit(1723961812.455:3269): avc: denied { ioctl } for pid=8229 comm="syz.0.1581" path="socket:[43721]" dev="sockfs" ino=43721 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 342.568119][ T7600] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 342.578170][ T312] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.582070][ T7600] asix: probe of 4-1:0.0 failed with error -71 [ 342.589385][ T312] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.601642][ T7600] usb 4-1: USB disconnect, device number 72 [ 342.604720][ T312] usb 5-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 342.619175][ T312] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.627667][ T312] usb 5-1: config 0 descriptor?? [ 342.767964][ T7176] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 343.099968][ T312] hid-led 0003:04D8:F372.0039: hidraw0: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.4-1/input0 [ 343.130154][ T312] hid-led 0003:04D8:F372.0039: Greynut Luxafor initialized [ 343.148050][ T7176] usb 2-1: config 90 has an invalid descriptor of length 0, skipping remainder of the config [ 343.165764][ T7176] usb 2-1: config 90 has 0 interfaces, different from the descriptor's value: 1 [ 343.187991][ T7176] usb 2-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 343.198892][ T7176] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.257254][ T24] audit: type=1326 audit(1723961813.315:3270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8262 comm="syz.3.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255a712e79 code=0x7ffc0000 [ 343.280997][ T24] audit: type=1326 audit(1723961813.315:3271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8262 comm="syz.3.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f255a712e79 code=0x7ffc0000 [ 343.310825][ T8263] input: syz0 as /devices/virtual/input/input41 [ 343.370928][ T8264] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1588'. [ 343.412592][ T8267] tipc: Failed to remove local publication {66,1,1}/1975613770 [ 343.420853][ T8267] tipc: Failed to remove local publication {66,1,1}/1975613770 [ 343.428302][ T8267] tipc: Failed to remove local publication {66,1,1}/1975613770 [ 343.438041][ T312] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 345.261995][ T7177] usb 5-1: USB disconnect, device number 78 [ 345.273543][ T7175] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38) [ 345.281539][ T7176] usb 2-1: string descriptor 0 read error: -71 [ 345.289513][ T7176] usb 2-1: USB disconnect, device number 63 [ 345.295658][ T7173] leds luxafor0:green:led5: Setting an LED's brightness failed (-38) [ 345.305126][ T7173] leds luxafor0:red:led5: Setting an LED's brightness failed (-38) [ 345.313531][ T8285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1594'. [ 345.322818][ T7173] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38) [ 345.331130][ T7173] leds luxafor0:green:led4: Setting an LED's brightness failed (-38) [ 345.341603][ T7173] leds luxafor0:red:led4: Setting an LED's brightness failed (-38) [ 345.349873][ T7173] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38) [ 345.358273][ T7173] leds luxafor0:green:led3: Setting an LED's brightness failed (-38) [ 345.366694][ T7173] leds luxafor0:red:led3: Setting an LED's brightness failed (-38) [ 345.375266][ T7173] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38) [ 345.384401][ T7173] leds luxafor0:green:led2: Setting an LED's brightness failed (-38) [ 345.396090][ T7173] leds luxafor0:red:led2: Setting an LED's brightness failed (-38) [ 345.404559][ T7173] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38) [ 345.412970][ T7173] leds luxafor0:green:led1: Setting an LED's brightness failed (-38) [ 345.421475][ T7173] leds luxafor0:red:led1: Setting an LED's brightness failed (-38) [ 345.440701][ T7175] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38) [ 345.452225][ T7175] leds luxafor0:green:led0: Setting an LED's brightness failed (-38) [ 345.462869][ T7175] leds luxafor0:red:led0: Setting an LED's brightness failed (-38) [ 345.471304][ T8283] EXT4-fs (loop1): 1 orphan inode deleted [ 345.476877][ T8283] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,nojournal_checksum,usrquota, [ 345.518012][ T312] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.526339][ T8283] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038 (0x7fffffff) [ 345.538071][ T312] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.548381][ T312] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 345.557401][ T312] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.642132][ T312] usb 1-1: config 0 descriptor?? [ 346.160207][ T312] hid-led 0003:1D34:000A.003A: unknown main item tag 0x0 [ 346.167088][ T312] hid-led 0003:1D34:000A.003A: item fetching failed at offset 1/5 [ 346.175458][ T312] hid-led: probe of 0003:1D34:000A.003A failed with error -22 [ 346.366144][ T8242] udc-core: couldn't find an available UDC or it's busy [ 346.374703][ T8242] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 346.377063][ T8300] EXT4-fs (loop1): Unrecognized mount option "obj_type=T/…" or missing value [ 346.452468][ T8300] EXT4-fs (loop1): bad geometry: first data block 0 is beyond end of filesystem (0) [ 346.700161][ T8314] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 346.708035][ T8314] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 346.718695][ T8314] F2FS-fs (loop1): Found nat_bits in checkpoint [ 346.751141][ T8314] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 346.758326][ T8314] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 346.876522][ T24] kauditd_printk_skb: 262 callbacks suppressed [ 346.876535][ T24] audit: type=1400 audit(1723961816.935:3534): avc: denied { prog_load } for pid=8321 comm="syz.1.1601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 346.901792][ T24] audit: type=1400 audit(1723961816.935:3535): avc: denied { bpf } for pid=8321 comm="syz.1.1601" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 346.922560][ T24] audit: type=1400 audit(1723961816.935:3536): avc: denied { perfmon } for pid=8321 comm="syz.1.1601" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 346.943501][ T24] audit: type=1400 audit(1723961816.945:3537): avc: denied { append } for pid=75 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=11 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 346.966147][ T24] audit: type=1400 audit(1723961816.965:3538): avc: denied { prog_run } for pid=8321 comm="syz.1.1601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 346.985089][ T24] audit: type=1400 audit(1723961817.005:3539): avc: denied { read } for pid=75 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 347.007075][ T24] audit: type=1400 audit(1723961817.005:3540): avc: denied { search } for pid=75 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 347.029346][ T24] audit: type=1400 audit(1723961817.005:3541): avc: denied { open } for pid=75 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=11 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 347.053945][ T24] audit: type=1400 audit(1723961817.005:3542): avc: denied { getattr } for pid=75 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=11 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 347.082298][ T24] audit: type=1400 audit(1723961817.095:3543): avc: denied { read write } for pid=7625 comm="syz-executor" name="loop1" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 347.433640][ T7177] usb 1-1: USB disconnect, device number 76 [ 347.544237][ T8260] print_req_error: 87 callbacks suppressed [ 347.544285][ T8260] blk_update_request: I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 347.546098][ T8254] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 347.582950][ T8260] blk_update_request: I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 347.622506][ T8254] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 347.631046][ T8260] buffer_io_error: 62 callbacks suppressed [ 347.631060][ T8260] Buffer I/O error on dev loop0p4, logical block 1, async page read [ 347.674376][ T8254] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 347.696747][ T8343] EXT4-fs (loop0): 1 orphan inode deleted [ 347.702460][ T8343] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,nojournal_checksum,usrquota, [ 347.849452][ T8343] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038 (0x7fffffff) [ 348.472779][ T8339] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 348.536056][ T8339] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 348.546124][ T8339] F2FS-fs (loop2): invalid crc value [ 348.553294][ T8339] F2FS-fs (loop2): Found nat_bits in checkpoint [ 348.854222][ T312] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 348.862497][ T8339] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 348.871599][ T8339] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 349.139020][ T312] usb 2-1: Using ep0 maxpacket: 16 [ 349.338006][ T312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 349.346272][ T8260] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 349.350755][ T385] blk_update_request: I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 349.360560][ T8260] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 349.382076][ T312] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 349.382668][ T8260] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 349.414996][ T8260] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 349.426126][ T8260] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 349.434108][ T8260] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 349.444900][ T8260] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 349.453064][ T8260] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 349.488868][ T8260] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 349.496969][ T8260] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 349.505157][ T312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.507240][ T385] Buffer I/O error on dev loop0p4, logical block 1, async page read [ 349.515886][ T312] usb 2-1: config 0 descriptor?? [ 349.526541][ T673] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 349.539235][ T673] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 349.782813][ T8355] udc-core: couldn't find an available UDC or it's busy [ 349.790170][ T8355] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 350.168015][ T7177] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 350.188663][ T385] Buffer I/O error on dev loop0p4, logical block 1, async page read [ 350.188670][ T8260] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 350.268376][ T8355] udc-core: couldn't find an available UDC or it's busy [ 350.275261][ T8355] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 350.291091][ T312] hid-generic 0003:0158:0100.003B: unknown main item tag 0x1 [ 350.298721][ T312] hid-generic 0003:0158:0100.003B: unexpected long global item [ 350.306378][ T312] hid-generic: probe of 0003:0158:0100.003B failed with error -22 [ 350.481683][ T312] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 350.491140][ T7605] usb 2-1: USB disconnect, device number 64 [ 350.528147][ T7177] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.539197][ T7177] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.548782][ T7177] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 350.557599][ T7177] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.566144][ T7177] usb 3-1: config 0 descriptor?? [ 350.858068][ T312] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.869136][ T312] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.878831][ T312] usb 1-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 350.887867][ T312] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.900373][ T312] usb 1-1: config 0 descriptor?? [ 350.908005][ T7177] usbhid 3-1:0.0: can't add hid device: -71 [ 350.913811][ T7177] usbhid: probe of 3-1:0.0 failed with error -71 [ 350.921269][ T7177] usb 3-1: USB disconnect, device number 75 [ 351.437440][ T8418] EXT4-fs (loop1): Test dummy encryption mode enabled [ 351.444344][ T8418] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 351.454328][ T8418] EXT4-fs (loop1): Test dummy encryption mode enabled [ 351.462279][ T8418] EXT4-fs error (device loop1): __ext4_iget:4958: inode #11: block 1: comm syz.1.1621: invalid block [ 351.473510][ T8418] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1621: couldn't read orphan inode 11 (err -117) [ 351.485389][ T8418] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,acl,test_dummy_encryption,resgid=0x0000000000000000,jqfmt=vfsv0,mblk_io_submit,inode_readahead_blks=0x0000000000010000,noauto_da_alloc,test_dummy_encryption,,errors=continue [ 351.589588][ T312] logitech-hidpp-device 0003:046D:C086.003C: hidraw0: USB HID v0.00 Device [HID 046d:c086] on usb-dummy_hcd.0-1/input0 [ 351.695268][ T8433] xt_hashlimit: max too large, truncated to 1048576 [ 351.724676][ T8433] xt_CT: You must specify a L4 protocol and not use inversions on it [ 351.824946][ T7173] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 351.841508][ T312] usb 1-1: USB disconnect, device number 77 [ 352.028015][ T8438] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 352.035868][ T8438] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 352.043946][ T7605] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 352.045660][ T8438] F2FS-fs (loop4): invalid crc value [ 352.058432][ T8438] F2FS-fs (loop4): Found nat_bits in checkpoint [ 352.063253][ T7173] usb 2-1: Using ep0 maxpacket: 8 [ 352.092046][ T8438] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 352.099086][ T8438] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 352.215655][ T7173] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 352.223617][ T7173] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 352.232927][ T7173] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.243954][ T7173] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.253552][ T7173] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 352.266441][ T7173] usb 2-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 352.275364][ T7173] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.323676][ T7173] usb 2-1: config 0 descriptor?? [ 352.548410][ T8254] print_req_error: 9 callbacks suppressed [ 352.548429][ T8254] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 352.553987][ T8260] blk_update_request: I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 352.554040][ T8260] blk_update_request: I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 352.591632][ T8254] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 352.602552][ T8254] buffer_io_error: 5 callbacks suppressed [ 352.602563][ T8254] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 352.615597][ T7605] usb 3-1: Using ep0 maxpacket: 32 [ 352.616687][ T8254] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 352.632361][ T8254] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 352.640428][ T8254] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 352.651313][ T8254] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 352.659136][ T8254] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 352.670139][ T8254] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 352.678308][ T8254] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 352.689439][ T8254] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 352.704110][ T8260] blk_update_request: I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 352.717876][ T8254] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 352.729017][ T8260] Buffer I/O error on dev loop0p4, logical block 1, async page read [ 352.737146][ T8254] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 352.746577][ T8254] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 352.754614][ T8254] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 352.754666][ T673] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 352.771210][ T8254] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 352.779100][ T7605] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 352.780107][ T673] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 352.798775][ T7605] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 352.810004][ T7605] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 352.819000][ T7605] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.827658][ T7605] usb 3-1: config 0 descriptor?? [ 352.836435][ T7173] hid-steam 0003:28DE:1102.003D: unknown main item tag 0x0 [ 352.844131][ T7177] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 352.844567][ T8436] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 352.852080][ T7173] hid-steam 0003:28DE:1102.003D: : USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0 [ 352.870925][ T7173] hid-steam 0003:28DE:1102.003E: unknown main item tag 0x0 [ 352.882630][ T7173] hid-steam 0003:28DE:1102.003E: hidraw0: USB HID v0.00 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0 [ 352.883267][ T7605] hub 3-1:0.0: USB hub found [ 352.959027][ T7173] hid-steam 0003:28DE:1102.003D: Steam Controller 'XXXXXXXXXX' connected [ 352.968084][ T7173] input: Steam Controller as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28DE:1102.003D/input/input42 [ 352.980565][ T24] kauditd_printk_skb: 67 callbacks suppressed [ 352.980577][ T24] audit: type=1400 audit(1723961823.131:3611): avc: denied { read } for pid=78 comm="acpid" name="event3" dev="devtmpfs" ino=1939 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 353.014905][ T24] audit: type=1400 audit(1723961823.131:3612): avc: denied { open } for pid=78 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1939 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 353.050861][ T24] audit: type=1400 audit(1723961823.131:3613): avc: denied { ioctl } for pid=78 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=1939 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 353.075802][ T6978] usb 2-1: USB disconnect, device number 65 [ 353.088463][ T6978] hid-steam 0003:28DE:1102.003D: Steam Controller 'XXXXXXXXXX' disconnected [ 353.111361][ T7605] hub 3-1:0.0: 2 ports detected [ 353.151856][ T24] audit: type=1400 audit(1723961823.299:3614): avc: denied { mount } for pid=8461 comm="syz.4.1631" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 353.254123][ T7177] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 353.265173][ T7177] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 353.276368][ T7177] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 353.285454][ T7177] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.359450][ T8455] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 353.370256][ T24] audit: type=1400 audit(1723961823.478:3615): avc: denied { read } for pid=8434 comm="syz.2.1625" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 353.424494][ T24] audit: type=1400 audit(1723961823.478:3616): avc: denied { open } for pid=8434 comm="syz.2.1625" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 353.555650][ T24] audit: type=1400 audit(1723961823.488:3617): avc: denied { ioctl } for pid=8434 comm="syz.2.1625" path="/dev/kvm" dev="devtmpfs" ino=82 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 353.569283][ T7605] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 353.580848][ T24] audit: type=1400 audit(1723961823.499:3618): avc: denied { create } for pid=8461 comm="syz.4.1631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 353.589870][ T7605] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 353.609200][ T24] audit: type=1400 audit(1723961823.499:3619): avc: denied { setopt } for pid=8461 comm="syz.4.1631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 353.633744][ T24] audit: type=1400 audit(1723961823.499:3620): avc: denied { connect } for pid=8461 comm="syz.4.1631" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 353.672245][ T8469] input: syz1 as /devices/virtual/input/input44 [ 353.706399][ T8481] fuse: Bad value for 'fd' [ 353.730398][ T7605] usbhid 3-1:0.0: can't add hid device: -71 [ 353.736239][ T7605] usbhid: probe of 3-1:0.0 failed with error -71 [ 353.769380][ T7605] usb 3-1: USB disconnect, device number 76 [ 353.781241][ T8483] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 354.291993][ T7177] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 354.299915][ T7177] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input43 [ 354.316613][ T8493] EXT4-fs (loop2): Ignoring removed oldalloc option [ 354.323391][ T8493] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 354.345553][ T8493] EXT4-fs (loop2): 1 truncate cleaned up [ 354.352313][ T8493] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,minixdf,jqfmt=vfsv1,,errors=continue [ 354.495065][ T7499] EXT4-fs error (device loop2): mb_free_blocks:1524: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 354.702518][ T8503] EXT4-fs (loop2): Ignoring removed oldalloc option [ 354.712657][ T8503] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 354.935958][ T8503] EXT4-fs (loop2): 1 truncate cleaned up [ 354.941724][ T8503] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,minixdf,jqfmt=vfsv1,,errors=continue [ 355.199296][ T7499] EXT4-fs error (device loop2): mb_free_blocks:1524: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 355.230229][ T8512] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 355.236581][ T8512] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 355.252043][ T8512] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 355.288528][ T8512] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 355.295862][ T8512] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 355.305458][ T8517] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.312761][ T8517] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.320012][ T8517] device bridge_slave_0 entered promiscuous mode [ 355.327212][ T8517] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.334340][ T8517] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.341961][ T8517] device bridge_slave_1 entered promiscuous mode [ 355.394607][ T8517] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.401627][ T8517] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.408707][ T8517] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.415557][ T8517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.440209][ T7176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 355.448323][ T7176] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.455931][ T7176] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.476573][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 355.486355][ T7177] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.493244][ T7177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.501019][ T6973] usb 1-1: USB disconnect, device number 78 [ 355.513363][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 355.524816][ T7177] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.531854][ T7177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.552403][ T8529] 9pnet: Insufficient options for proto=fd [ 355.565775][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 355.578657][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 355.601221][ T7176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 355.614620][ T8517] device veth0_vlan entered promiscuous mode [ 355.623122][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 355.633439][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 355.641576][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 355.656768][ T8537] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue [ 355.667344][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 355.686532][ T8537] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038 (0x7fffffff) [ 355.746017][ T8517] device veth1_macvtap entered promiscuous mode [ 356.306638][ T7176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 356.330755][ T7177] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 356.342462][ T7176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 356.520272][ T5137] attempt to access beyond end of device [ 356.520272][ T5137] loop4: rw=2049, want=45104, limit=40427 [ 356.580730][ T8551] EXT4-fs (loop2): 1 orphan inode deleted [ 356.589319][ T8551] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 356.608705][ T8560] xt_hashlimit: size too large, truncated to 1048576 [ 356.617092][ T7177] usb 2-1: Using ep0 maxpacket: 32 [ 356.636008][ T8551] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038 (0x7fffffff) [ 356.711435][ T8556] EXT4-fs (loop3): Ignoring removed oldalloc option [ 356.785468][ T7177] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.801320][ T8556] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 356.809086][ T7177] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.821502][ T7177] usb 2-1: New USB device found, idVendor=0458, idProduct=0004, bcdDevice= 0.00 [ 356.831287][ T7177] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.835549][ T8556] EXT4-fs (loop3): 1 truncate cleaned up [ 356.845053][ T8556] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,oldalloc,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,minixdf,jqfmt=vfsv1,,errors=continue [ 356.864530][ T7177] usb 2-1: config 0 descriptor?? [ 356.903656][ T8568] syz.2.1649[8568] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 356.904051][ T8568] syz.2.1649[8568] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 357.044452][ T8561] EXT4-fs (loop0): Mount option "nodioread_nolock" incompatible with ext3 [ 357.074288][ T8563] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 357.115967][ T8563] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.1651: iget: bad i_size value: -67835469387268086 [ 357.129363][ T7499] EXT4-fs error (device loop2): ext4_lookup:1831: inode #2: comm syz-executor: deleted inode referenced: 16 [ 357.130079][ T8563] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1651: couldn't read orphan inode 15 (err -117) [ 357.152571][ T7499] EXT4-fs (loop2): Remounting filesystem read-only [ 357.154167][ T8563] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 357.159127][ T7499] EXT4-fs error (device loop2): ext4_lookup:1831: inode #2: comm syz-executor: deleted inode referenced: 16 [ 357.176845][ T8563] ext2 filesystem being mounted at /108/file0 supports timestamps until 2038 (0x7fffffff) [ 357.192725][ T8517] EXT4-fs error (device loop3): mb_free_blocks:1524: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 357.371585][ T8260] print_req_error: 14 callbacks suppressed [ 357.371602][ T8260] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 357.399960][ T385] blk_update_request: I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 357.417769][ T8260] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 357.431632][ T385] blk_update_request: I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 357.457676][ T8260] buffer_io_error: 7 callbacks suppressed [ 357.457688][ T8260] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 357.470741][ T385] Buffer I/O error on dev loop0p4, logical block 1, async page read [ 357.495388][ T8579] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 357.615401][ T8582] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.622785][ T8582] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.626308][ T7177] usbhid 2-1:0.0: can't add hid device: -71 [ 357.638717][ T7177] usbhid: probe of 2-1:0.0 failed with error -71 [ 357.645539][ T7174] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 357.657490][ T7177] usb 2-1: USB disconnect, device number 66 [ 357.670473][ T8582] device bridge_slave_0 entered promiscuous mode [ 357.680590][ T8582] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.854507][ T24] kauditd_printk_skb: 38 callbacks suppressed [ 357.854522][ T24] audit: type=1400 audit(1723961828.066:3659): avc: denied { write } for pid=8578 comm="syz.0.1654" name="001" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 357.902456][ T8582] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.913564][ T8582] device bridge_slave_1 entered promiscuous mode [ 357.959336][ T7174] usb 4-1: Using ep0 maxpacket: 32 [ 357.973490][ T8582] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.980458][ T8582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.987536][ T8582] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.994360][ T8582] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.003729][ T8260] blk_update_request: I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 358.004164][ T8254] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 358.016696][ T8260] blk_update_request: I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 358.039348][ T8260] Buffer I/O error on dev loop0p4, logical block 1, async page read [ 358.052546][ T8254] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 358.069671][ T8254] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 358.080668][ T8592] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 358.081844][ T6978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 358.089714][ T7174] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.089729][ T7174] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.089755][ T7174] usb 4-1: New USB device found, idVendor=044f, idProduct=b324, bcdDevice= 0.00 [ 358.089768][ T7174] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.090601][ T7174] usb 4-1: config 0 descriptor?? [ 358.139992][ T6978] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.147713][ T6978] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.160504][ T24] audit: type=1400 audit(1723961828.569:3660): avc: denied { read append } for pid=8596 comm="syz.4.1658" name="ppp" dev="devtmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 358.196108][ T7605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 358.204435][ T7605] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.211351][ T7605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.221297][ T24] audit: type=1400 audit(1723961828.622:3661): avc: denied { open } for pid=8596 comm="syz.4.1658" path="/dev/ppp" dev="devtmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 358.244679][ T24] audit: type=1400 audit(1723961828.622:3662): avc: denied { ioctl } for pid=8596 comm="syz.4.1658" path="/dev/ppp" dev="devtmpfs" ino=133 ioctlcmd=0x7451 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 358.245551][ T7605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 358.279504][ T7605] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.286386][ T7605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.302770][ T7176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 358.310706][ T7176] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 358.318759][ T7176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 358.327224][ T8601] udc-core: couldn't find an available UDC or it's busy [ 358.335375][ T8601] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 358.431554][ T7176] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 358.450420][ T8582] device veth0_vlan entered promiscuous mode [ 358.457167][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 358.465958][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 358.475223][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 358.483737][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 358.491769][ T7176] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 358.499817][ T7176] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 358.516230][ T8582] device veth1_macvtap entered promiscuous mode [ 358.522892][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 358.530904][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 358.539390][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 358.554117][ T7176] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 358.563198][ T7176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 358.572036][ T7176] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 358.580339][ T7176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 358.597529][ T6978] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 358.620457][ T24] audit: type=1326 audit(1723961829.042:3663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8605 comm="syz.2.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6df02a2e79 code=0x7ffc0000 [ 358.644552][ T24] audit: type=1326 audit(1723961829.042:3664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8605 comm="syz.2.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6df02a2e79 code=0x7ffc0000 [ 358.668292][ T24] audit: type=1326 audit(1723961829.042:3665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8605 comm="syz.2.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6df02a2e79 code=0x7ffc0000 [ 358.673516][ T8606] device pim6reg1 entered promiscuous mode [ 358.697501][ T5] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 358.697902][ T24] audit: type=1326 audit(1723961829.042:3666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8605 comm="syz.2.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6df02a2e79 code=0x7ffc0000 [ 358.729076][ T24] audit: type=1326 audit(1723961829.042:3667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8605 comm="syz.2.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6df02a2e79 code=0x7ffc0000 [ 358.730654][ T7174] thrustmaster 0003:044F:B324.003F: item fetching failed at offset 0/3 [ 358.753098][ T24] audit: type=1326 audit(1723961829.042:3668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8605 comm="syz.2.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6df02a2e79 code=0x7ffc0000 [ 358.761038][ T7174] thrustmaster 0003:044F:B324.003F: parse failed [ 358.790526][ T7174] thrustmaster: probe of 0003:044F:B324.003F failed with error -22 [ 358.845514][ T8608] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1626 sclass=netlink_route_socket pid=8608 comm=syz.2.1660 [ 358.876458][ T9] device bridge_slave_1 left promiscuous mode [ 358.882441][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.902822][ T6978] usb 2-1: Using ep0 maxpacket: 16 [ 358.917505][ T9] device bridge_slave_0 left promiscuous mode [ 358.933715][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.944376][ T9] device veth1_macvtap left promiscuous mode [ 358.950544][ T9] device veth0_vlan left promiscuous mode [ 358.960724][ T8611] exfat: Deprecated parameter 'utf8' [ 358.965863][ T8611] exfat: Deprecated parameter 'namecase' [ 358.978714][ T8611] exfat: Deprecated parameter 'namecase' [ 358.984659][ T8611] exfat: Deprecated parameter 'utf8' [ 358.992401][ T7174] usb 4-1: USB disconnect, device number 73 [ 359.020961][ T8611] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0x822ffc2e, utbl_chksum : 0xe619d30d) [ 359.027997][ T6978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.076694][ T6978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.102639][ T6978] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 359.105611][ T8610] mmap: syz.0.1661 (8610): VmData 17453056 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 359.127405][ T6978] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 359.127418][ T6978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.131935][ T6978] usb 2-1: config 0 descriptor?? [ 359.149249][ T5] usb 5-1: config 27 has an invalid descriptor of length 255, skipping remainder of the config [ 359.159557][ T5] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 359.174959][ T5] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 359.188333][ T5] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 359.197179][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.237834][ T5] usb 5-1: invalid MIDI out EP 0 [ 359.243045][ T5] snd-usb-audio: probe of 5-1:27.0 failed with error -22 [ 359.359600][ T6973] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 359.442937][ T7173] usb 5-1: USB disconnect, device number 79 [ 359.731332][ T6973] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.746184][ T6973] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.756283][ T6973] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 359.769243][ T6973] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 359.778125][ T6973] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.790491][ T6973] usb 3-1: config 0 descriptor?? [ 360.027047][ T8614] udc-core: couldn't find an available UDC or it's busy [ 360.033949][ T8614] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 360.161628][ T8625] netlink: 3468 bytes leftover after parsing attributes in process `syz.4.1665'. [ 360.164772][ T2905] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 360.178296][ T8258] blk_update_request: I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 360.182162][ T2905] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 360.208816][ T2905] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 360.224449][ T2905] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 360.233839][ T2905] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 360.242365][ T2905] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 360.252098][ T8258] Buffer I/O error on dev loop0p4, logical block 1, async page read [ 360.260899][ T8614] binder: BINDER_SET_CONTEXT_MGR already set [ 360.267466][ T8614] binder: 8613:8614 ioctl 4018620d 20000040 returned -16 [ 360.400460][ T6973] usbhid 3-1:0.0: can't add hid device: -71 [ 360.406292][ T6973] usbhid: probe of 3-1:0.0 failed with error -71 [ 360.460243][ T6973] usb 3-1: USB disconnect, device number 77 [ 360.482557][ T8648] EXT4-fs (loop4): 1 truncate cleaned up [ 360.490278][ T8648] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro, [ 360.557306][ T8659] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 360.566917][ T8659] EXT4-fs (loop0): Ignoring removed nobh option [ 360.575735][ T8659] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x0000000000000000,nouid32,jqfmt=vfsold,nolazytime,data=ordered,init_itable=0x0000000000000005,abort,bsdgroups,nobh,,errors=continue [ 360.602668][ T8659] EXT4-fs error (device loop0): __ext4_iget:4958: inode #12: block 13: comm syz.0.1673: invalid block [ 360.669563][ T8669] fuse: Unknown parameter 'f ' [ 360.702899][ T6981] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 360.826693][ T6983] usb 5-1: new full-speed USB device number 80 using dummy_hcd [ 360.940785][ T6973] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 361.074269][ T6981] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.085115][ T6981] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 361.097846][ T6981] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 361.106733][ T6981] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.115136][ T6981] usb 4-1: config 0 descriptor?? [ 361.217400][ T6983] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 361.230058][ T6983] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 361.274455][ T6978] usbhid 2-1:0.0: can't add hid device: -71 [ 361.280175][ T8677] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 361.280256][ T8677] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038 (0x7fffffff) [ 361.289246][ T6978] usbhid: probe of 2-1:0.0 failed with error -71 [ 361.307089][ T6973] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.317954][ T6973] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.331419][ T6978] usb 2-1: USB disconnect, device number 67 [ 361.338305][ T6973] usb 1-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 361.349149][ T6973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.358148][ T6973] usb 1-1: config 0 descriptor?? [ 361.398217][ T6983] usb 5-1: New USB device found, idVendor=08ca, idProduct=0010, bcdDevice=90.d6 [ 361.408067][ T6983] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.415850][ T6983] usb 5-1: Product: syz [ 361.419898][ T6983] usb 5-1: Manufacturer: syz [ 361.424273][ T6983] usb 5-1: SerialNumber: syz [ 361.430018][ T6983] usb 5-1: config 0 descriptor?? [ 361.435221][ T8686] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 361.447086][ T8686] EXT4-fs (loop1): 1 orphan inode deleted [ 361.452627][ T8686] EXT4-fs (loop1): 1 truncate cleaned up [ 361.458245][ T8686] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,max_dir_size_kb=0x0000000000000004,resgid=0x0000000000000000,nobarrier,init_itable,errors=remount-ro,init_itable=0x0000000000000008,journal_dev=0x000000007ffffffe,sb=0x0000000000000006, [ 361.551963][ T6981] plantronics 0003:047F:FFFF.0040: No inputs registered, leaving [ 361.560976][ T6981] plantronics 0003:047F:FFFF.0040: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 361.684444][ T6983] aiptek 5-1:0.0: Aiptek using 400 ms programming speed [ 361.692979][ T6983] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input45 [ 361.701950][ T6983] input: failed to attach handler kbd to device input45, error: -5 [ 361.713588][ T6983] usb 5-1: USB disconnect, device number 80 [ 361.913113][ T6978] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 361.931533][ T7173] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 362.074816][ T6973] usbhid 1-1:0.0: can't add hid device: -71 [ 362.080676][ T6973] usbhid: probe of 1-1:0.0 failed with error -71 [ 362.087969][ T6973] usb 1-1: USB disconnect, device number 79 [ 362.150804][ T6978] usb 2-1: Using ep0 maxpacket: 16 [ 362.274530][ T7173] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.284094][ T6978] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 362.285464][ T7173] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.295936][ T6978] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 362.315517][ T7173] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 362.317699][ T6978] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 362.335439][ T6978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.338184][ T7173] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.347997][ T6978] usb 2-1: config 0 descriptor?? [ 362.365402][ T7173] usb 3-1: config 0 descriptor?? [ 362.399496][ T6978] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 362.626423][ T6973] usb 2-1: USB disconnect, device number 68 [ 362.655723][ T385] print_req_error: 46 callbacks suppressed [ 362.655740][ T385] blk_update_request: I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 362.674936][ T8260] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 362.686585][ T8260] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 362.697522][ T385] blk_update_request: I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 362.708379][ T8260] buffer_io_error: 30 callbacks suppressed [ 362.708392][ T8260] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 362.721975][ T385] Buffer I/O error on dev loop0p4, logical block 1, async page read [ 362.730012][ T8260] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 362.743972][ T8260] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 362.752292][ T8260] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 362.768108][ T8260] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 362.782840][ T8260] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 362.802203][ T8260] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 362.812290][ T8260] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 362.823152][ T8260] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 362.884024][ T7173] hid-steam 0003:28DE:1142.0041: item fetching failed at offset 2/5 [ 362.892658][ T7173] hid-steam 0003:28DE:1142.0041: steam_probe:parse of hid interface failed [ 362.901843][ T8260] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 362.904785][ T7173] hid-steam: probe of 0003:28DE:1142.0041 failed with error -22 [ 362.917409][ T385] blk_update_request: I/O error, dev loop0, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 362.943305][ T8260] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 362.951600][ T385] Buffer I/O error on dev loop0p4, logical block 1, async page read [ 362.961088][ T8260] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 362.969286][ T8260] Buffer I/O error on dev loop0p1, logical block 0, async page read [ 363.304652][ T6973] usb 4-1: USB disconnect, device number 74 [ 363.446111][ T7173] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 363.827164][ T7173] usb 2-1: config 0 has an invalid interface number: 156 but max is 1 [ 363.835253][ T7173] usb 2-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 363.843710][ T7173] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 363.852425][ T7173] usb 2-1: config 0 has no interface number 0 [ 363.858464][ T7173] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 363.868289][ T7173] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 363.879197][ T7173] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 363.889471][ T7173] usb 2-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 363.940327][ T7173] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 363.950251][ T7173] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.963974][ T7173] usb 2-1: config 0 descriptor?? [ 364.005293][ T7173] usb 2-1: MIDIStreaming interface descriptor not found [ 364.142080][ T6983] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 364.192287][ T6978] usb 2-1: USB disconnect, device number 69 [ 364.375969][ T24] kauditd_printk_skb: 99 callbacks suppressed [ 364.375992][ T24] audit: type=1400 audit(1723961835.057:3768): avc: denied { create } for pid=8740 comm="syz.3.1692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 364.415504][ T24] audit: type=1400 audit(1723961835.078:3769): avc: denied { setopt } for pid=8740 comm="syz.3.1692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 364.436281][ T24] audit: type=1400 audit(1723961835.089:3770): avc: denied { listen } for pid=8740 comm="syz.3.1692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 364.575316][ T7174] usb 3-1: USB disconnect, device number 78 [ 364.618136][ T6983] usb 5-1: device descriptor read/64, error -71 [ 364.665373][ T7173] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 364.865510][ T6981] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 364.894048][ T7173] usb 4-1: Using ep0 maxpacket: 32 [ 364.970244][ T7174] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 365.008268][ T6983] usb 5-1: device descriptor read/64, error -71 [ 365.046615][ T7173] usb 4-1: unable to get BOS descriptor or descriptor too short [ 365.094488][ T7176] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 365.123128][ T7173] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 365.133098][ T7173] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 365.198988][ T7174] usb 3-1: Using ep0 maxpacket: 16 [ 365.218140][ T7173] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 365.227166][ T7173] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 365.235188][ T7173] usb 4-1: SerialNumber: syz [ 365.236982][ T6981] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.250353][ T6981] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 365.256508][ T8743] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 365.260087][ T6981] usb 1-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 365.275690][ T6983] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 365.276337][ T7173] cdc_ether 4-1:1.0: skipping garbage [ 365.283055][ T6981] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.296704][ T6981] usb 1-1: config 0 descriptor?? [ 365.313188][ T7174] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 365.437469][ T7176] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.448362][ T7176] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 365.458236][ T7176] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 365.470972][ T7176] usb 2-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice= 0.00 [ 365.479867][ T7176] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.491596][ T7176] usb 2-1: config 0 descriptor?? [ 365.504040][ T7174] usb 3-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 365.513008][ T7174] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.521107][ T7173] cdc_ether: probe of 4-1:1.0 failed with error -71 [ 365.527638][ T7174] usb 3-1: Product: syz [ 365.531590][ T7174] usb 3-1: Manufacturer: syz [ 365.543386][ T7173] usb 4-1: USB disconnect, device number 75 [ 365.550371][ T7174] usb 3-1: SerialNumber: syz [ 365.556068][ T7174] usb 3-1: config 0 descriptor?? [ 365.570445][ T6983] usb 5-1: device descriptor read/64, error -71 [ 365.727938][ T24] audit: type=1400 audit(1723961836.506:3771): avc: denied { create } for pid=8750 comm="syz.1.1696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 365.728578][ T8751] udc-core: couldn't find an available UDC or it's busy [ 365.747859][ T24] audit: type=1400 audit(1723961836.506:3772): avc: denied { setopt } for pid=8750 comm="syz.1.1696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 365.754695][ T8751] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 365.783572][ T24] audit: type=1400 audit(1723961836.569:3773): avc: denied { bind } for pid=8750 comm="syz.1.1696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 365.803036][ T24] audit: type=1400 audit(1723961836.569:3774): avc: denied { listen } for pid=8750 comm="syz.1.1696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 365.805563][ T6981] belkin 0003:1020:0006.0042: report_id 0 is invalid [ 365.823066][ T24] audit: type=1400 audit(1723961836.579:3775): avc: denied { connect } for pid=8750 comm="syz.1.1696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 365.829397][ T6981] belkin 0003:1020:0006.0042: item 0 0 1 8 parsing failed [ 365.848607][ T24] audit: type=1400 audit(1723961836.579:3776): avc: denied { write } for pid=8750 comm="syz.1.1696" path="socket:[47263]" dev="sockfs" ino=47263 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 365.855756][ T6981] belkin 0003:1020:0006.0042: parse failed [ 365.884713][ T6981] belkin: probe of 0003:1020:0006.0042 failed with error -22 [ 366.010473][ T7176] wacom 0003:056A:0317.0043: unknown main item tag 0x0 [ 366.017406][ T7176] wacom 0003:056A:0317.0043: Unknown device_type for 'HID 056a:0317'. Assuming pen. [ 366.037083][ T7174] uvcvideo: Found UVC 0.00 device syz (045e:0721) [ 366.045415][ T7174] uvcvideo: No valid video chain found. [ 366.051483][ T6981] usb 1-1: USB disconnect, device number 80 [ 366.054854][ T7176] wacom 0003:056A:0317.0043: hidraw0: USB HID v0.00 Device [HID 056a:0317] on usb-dummy_hcd.1-1/input0 [ 366.057315][ T6983] usb 5-1: device descriptor read/64, error -71 [ 366.080056][ T7174] usb 3-1: USB disconnect, device number 79 [ 366.087949][ T7176] input: Wacom Intuos Pro L Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0317.0043/input/input46 [ 366.180321][ T6983] usb usb5-port1: attempt power cycle [ 366.249123][ T8751] EXT4-fs warning (device loop1): dx_probe:844: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 366.260989][ T8751] EXT4-fs warning (device loop1): dx_probe:847: Enable large directory feature to access it [ 366.271144][ T8751] EXT4-fs warning (device loop1): dx_probe:945: inode #2: comm syz.1.1696: Corrupt directory, running e2fsck is recommended [ 366.284490][ T8751] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 366.292403][ T8751] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2204: inode #15: comm syz.1.1696: corrupted in-inode xattr [ 366.304661][ T8751] EXT4-fs (loop1): Remounting filesystem read-only [ 366.311185][ T8751] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1696: couldn't read orphan inode 15 (err -117) [ 366.323370][ T8751] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,abort,init_itable,stripe=0x0000000000000001,grpjquota=.nouid32,errors=remount-ro,jqfmt=vfsv1,grpid,, [ 366.343387][ T8751] udc-core: couldn't find an available UDC or it's busy [ 366.350150][ T8751] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 366.357847][ T8751] EXT4-fs warning (device loop1): dx_probe:844: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 366.369600][ T8751] EXT4-fs warning (device loop1): dx_probe:847: Enable large directory feature to access it [ 366.379786][ T8751] EXT4-fs warning (device loop1): dx_probe:945: inode #2: comm syz.1.1696: Corrupt directory, running e2fsck is recommended [ 366.392765][ T8751] EXT4-fs warning (device loop1): dx_probe:844: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 366.404102][ T8751] EXT4-fs warning (device loop1): dx_probe:847: Enable large directory feature to access it [ 366.413983][ T8751] EXT4-fs warning (device loop1): dx_probe:945: inode #2: comm syz.1.1696: Corrupt directory, running e2fsck is recommended [ 366.426677][ T8751] EXT4-fs error (device loop1): ext4_find_dest_de:2076: inode #2: block 3: comm syz.1.1696: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 366.445387][ T8751] EXT4-fs (loop1): Remounting filesystem read-only [ 366.453432][ T6973] usb 2-1: USB disconnect, device number 70 [ 366.589758][ T6983] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 366.653621][ T24] audit: type=1400 audit(1723961837.461:3777): avc: denied { mount } for pid=8776 comm="syz.0.1703" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 SYZFAIL: bad allocate request allocated=0 size=18446744073709551099/18446744073709551104 (errno 11: Resource temporarily unavailable) [ 366.777843][ T8775] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 366.788942][ T8775] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 366.926106][ T6983] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.942470][ T6983] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.952321][ T6983] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 366.961245][ T8775] F2FS-fs (loop2): Found nat_bits in checkpoint [ 366.961256][ T6983] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.962849][ T6983] usb 5-1: config 0 descriptor?? [ 367.037559][ T6983] usb 5-1: can't set config #0, error -71 [ 367.050616][ T6983] usb 5-1: USB disconnect, device number 83 [ 367.697655][ T1198] device bridge_slave_1 left promiscuous mode [ 367.703620][ T1198] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.711045][ T1198] device bridge_slave_0 left promiscuous mode [ 367.717115][ T1198] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.724977][ T1198] device veth1_macvtap left promiscuous mode [ 368.991586][ T1198] device bridge_slave_1 left promiscuous mode [ 368.997519][ T1198] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.004978][ T1198] device bridge_slave_0 left promiscuous mode [ 369.010925][ T1198] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.018651][ T1198] device bridge_slave_1 left promiscuous mode [ 369.024674][ T1198] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.032026][ T1198] device bridge_slave_0 left promiscuous mode [ 369.038129][ T1198] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.045949][ T1198] device veth1_macvtap left promiscuous mode [ 369.051803][ T1198] device veth0_vlan left promiscuous mode [ 369.057484][ T1198] device veth1_macvtap left promiscuous mode [ 369.063365][ T1198] device veth0_vlan left promiscuous mode