last executing test programs: 7.765859786s ago: executing program 4 (id=1271): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x1a, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0xb2}, @map_fd={0x18, 0x7, 0x1, 0x0, r0}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x23}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) write$selinux_attr(r2, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r4 = syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./file2\x00', 0x800000, &(0x7f0000000b80)=ANY=[@ANYBLOB="6e6f757365725f78617474722c666c7573685f6d657267652c6673796e635f6d6f64653d706f7369782c64697361626c655f6578745f6964656e746966792c6261636b67726f756e645f67633d73796e632c6673796e635f6d6f64653d7374726963742c6e6f626172726965722c6e6f696e6c696e655f646174612c6e6f626172726965722c71756f74612c6261636b67726f756e645f67633d6f66662c6e6f61636c2c6e6f657874656e745f63616368652c6e6f646973636172642c6163746976655f6c6f67733d342c00e62bc03000c35169ed09803fa1bee488c680f339e530b5e8ad120a2b4f078093a8e0ba2b3d1b5fe99356b80a454c1ec2f8e12392bbffe9fae2fa05e18a6b61f5eded2e484f574d2757a5fe762c770477aa3460313ee54451c6a6159eca600d6c85a8c09cef9996dc851a5f5edf1a4a22576c6dfe6b9e8dade2d3a8e6a8c7710733c1f69aabd88802917a3fd447c555a145ba9866309516e9c115a50c1b6bc191ce9cabdd5df2c69be704bd72ccb881cc63cb7cb372f95141c4d5c40010aeafe8d3b08956fbacad03"], 0x1, 0x5533, &(0x7f0000000d40)="$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") r5 = open_tree(r4, &(0x7f0000000080)='./file2\x00', 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r5, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) sync_file_range(r6, 0x24, 0x2, 0x4) getsockname$packet(r5, 0x0, &(0x7f0000000140)) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x8d) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f00000000c0)={r7, 0x4, 0x6}) 7.257478303s ago: executing program 4 (id=1274): syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009968810524711004f32010203010902"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000280)=ANY=[@ANYBLOB="12010002000000086a0541000000f0ff000109022d00010000a02009040006050300010009210000000122080009058103"], 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"/5107], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x48) 7.228520024s ago: executing program 3 (id=1275): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) getpid() r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, 0x0, 0x0) connect$pppl2tp(r2, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x5, 0x0, {0xa, 0x0, 0xf9d, @empty}}}, 0x32) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 7.216901554s ago: executing program 3 (id=1276): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = timerfd_create(0x8, 0x80000) timerfd_settime(r1, 0x3, &(0x7f0000000140)={{}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={'syz_tun\x00', {0x2, 0x4e22, @private=0xa010100}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r0, 0x0, 0x25, 0xa, @void}, 0x10) poll(&(0x7f0000000240)=[{r1, 0x4000}, {r3, 0x1402}, {r5, 0x200}, {r1, 0xa024}], 0x4, 0x77f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)=@bridge_getneigh={0x20, 0x1e, 0xb7b6511a36acb75d, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x41180}}, 0x20}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x480, @loopback}}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @broadcast}}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x4e21, @empty}}) 6.333851947s ago: executing program 3 (id=1278): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400"], 0x48) open$dir(&(0x7f0000000300)='./file0\x00', 0x4000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x11, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x8, 0x20000000000001, 0x0, &(0x7f0000000100)) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="736a80eb046e616d653d77696e6e742c757466383d302c726f6469722c756e695f786c6174653d302c696f636861727365743d6b6f69382d752c73686f72746e616d653d77696e39352c73686f72746e616d653d6d697865642c636f6465706167653d3836322c6e6f6e756d746d7461696c3d302c73686f6e616d653d6d697865642c696f636861727365743d63703836342c757466383df1ff9e9fd73f6b1c616d653d6d697865642c000000"], 0x26, 0x336, &(0x7f00000001c0)="$eJzs3T1sW9UXAPDjviROI/VvD3+pgsmwIaGqCWKAKVFVpIoMUGTxtWDRlI/YVIqFpTDE9QJiBLEgwcTWAcbOiAEhNgZWioQKiIVulVrxkP1e7OeP0BThlI/fb4iOzj3H976Xq/glSm5eWo/tC4tx8caN67G8XIqF9TPrcbMU1TgWSWQuBwDwb3IzTePXNHPn6vdX9qOlOa8LAJifwfv/KydGifK9XA0AcBQO+f3/UzOzl+a2LABgjqbe/x8cG574Mf/C8HcCAIB/rmeef+HJjc2I87XackTrnU69U4/HR+MbF+O1aMZWnI5K3I7IHhSyp4X+xyfObZ49Xev7sRr1fkenHtHqdurZk8JGMugvx2pUopr3p8P+pN+/OuivRcTl7mD+aJU69cVYyef/biW2Yi0q8f+p/ohzm2fXavkL1Fv7/d2IXizvX0R//aeiEt+8HJeiGRei3zta/95qrXYm3Rzr71wpD+oAAAAAAAAAAAAAAAAAAAAAAGAeTtWGqsPzb9JWt/P2+cmC6tj5OPVsOD8fqJedD5SW90/neTeZPB9o/HyeTn0hjt3TKwcAAAAAAAAAAAAAAAAAAIC/j/buUjSaza2d9u5b28WgW8i88dWnXxyPyZrXk1EmFrKXG6vJc1HoSmLYng7b02SsJg+SiFHxlavDFRdrysOrmGrvB+WpoVK+pkazeeKBHz6a1fXbKJPE1G0ZD0r5/IWh1v+y1B90HRys3aHmWpqmB7XvfTjdFaWIhalP3F8RfHn91fseaZ98dJD5PD/04aGHK89e++CTn7cbzchvTbO5tNO+nf7puZLC/inl97k0YyfMDnqjTG+nvdtIvv3lufvf+3qiOJm9f9Ji5s2D5/psMrOUBf1lHuZKF2ds/tnBi7eGu/fub+bJj9cbV/e+/+mwXYUvEg7qAAAAAAAAAAAAAAAAAACAI1H4W/G78NjT81sRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABy90f//LwS9qcxhglvdmB4qb+20D5z8+JFeKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/2G/BwAA//9pxHjs") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) 5.728830446s ago: executing program 0 (id=1279): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400"], 0x48) open$dir(&(0x7f0000000300)='./file0\x00', 0x4000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x8, 0x20000000000001, 0x0, &(0x7f0000000100)) ioctl$PPPIOCSCOMPRESS(0xffffffffffffffff, 0x4010744d) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="736a80eb046e616d653d77696e6e742c757466383d302c726f6469722c756e695f786c6174653d302c696f636861727365743d6b6f69382d752c73686f72746e616d653d77696e39352c73686f72746e616d653d6d697865642c636f6465706167653d3836322c6e6f6e756d746d7461696c3d302c73686f6e616d653d6d697865642c696f636861727365743d63703836342c757466383df1ff9e9fd73f6b1c616d653d6d697865642c000000"], 0x26, 0x336, &(0x7f00000001c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) 5.472572939s ago: executing program 3 (id=1280): socket(0x400000000010, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="390000001100090468fe0700000000000700ff3f0800000045000e070000001419001a00", 0x24}], 0x1) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') r4 = socket(0xa, 0x3, 0x3a) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newqdisc={0x7c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0x4}, {0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x400, 0xf4bd, 0x4, 0x0, 0x10001}, 0x80000000, 0x0, 0xb14b, 0x9, 0xeb, 0x0, 0x1c, 0x1e, 0x0, 0x1, {0x0, 0x2, 0xfeca, 0xa4, 0x8, 0x1}}}}, @TCA_STAB={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x5}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r7, 0xffffffffffffffff}, 0x0, &(0x7f00000005c0)}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) fcntl$getown(r8, 0x9) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r10, &(0x7f00000014c0)=[{&(0x7f0000000000)='|', 0xfd}], 0xf, 0x0) 5.348342421s ago: executing program 1 (id=1281): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r4}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="1d3200000000000000001000000014000f00fe8000000000000000f70000000000bb08000100"], 0x30}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="50400000f1a9500c", @ANYRES16=0x0, @ANYBLOB="000427bd7000fedbdf250600000014000300fc020000000000000000000000000000050001000000000014000200fc00000000000000000000000000000108000500ac14142e050001000100000014000200fe88000000000000000000000000000108000500ac1e0001"], 0x70}}, 0x24040044) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x20000800}, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114100000000008510000002000000850000002e00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) chdir(0x0) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') open(&(0x7f00000005c0)='./bus\x00', 0x66842, 0x0) 4.839765189s ago: executing program 0 (id=1282): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x6a) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="800000000000000024001280090001007866726d00000000140002"], 0x58}}, 0x0) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000300)=0x2) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000004480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000004440)={&(0x7f000000b580)=ANY=[], 0x7004}, 0x1, 0x0, 0x0, 0x4000000}, 0x815) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x9) r3 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) fcntl$addseals(r3, 0x409, 0xb) 4.76450233s ago: executing program 0 (id=1283): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/13, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000240)=ANY=[@ANYBLOB='N-N:N/'], 0x6a) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) syz_mount_image$f2fs(&(0x7f00000001c0), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x55a8, &(0x7f00000014c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="800000000000000024001280090001007866726d000000001400028008000200020000100800010503000000140003007866726d3000"], 0x58}}, 0x0) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000300)=0x2) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000004480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000004440)={&(0x7f000000b580)=ANY=[], 0x7004}, 0x1, 0x0, 0x0, 0x4000000}, 0x815) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x9) r5 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) fcntl$addseals(r5, 0x409, 0xb) 4.628319991s ago: executing program 3 (id=1284): openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5408, &(0x7f0000000040)={0x3, 0x0, 0xfffffffe, 0x7fffffef, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0x1000}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f00000003c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000080)={0x0, "69dcaf20127e9a854528f45826cb35be51ca73845d177dd8dba7221daeccfda56b75cfe286fdd14cb5b11b1cab614fec2236da7d88ea0f0700"}, 0x48, 0xfffffffffffffffe) keyctl$search(0xa, r3, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0xc3, 0xff, 0x2, 0x0, 0x0, "f98c7ad7a34bda2dc45bece06e6a1b466b759f", 0x1, 0x4}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r6) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000540)={0x1698, r7, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_FEATURES_WANTED={0x1210, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xd4, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/kvm\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10}]}, {0x4}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x729784d2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffe01}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x601}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/ttyS3\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/ttyS3\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffff01}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x80000000}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_VALUE={0x3e, 0x4, "54721f7ff15965ff25115e27ff3faab0dcb51d1095fc0559bef26cb769e0ca2866c2ccf9e3c45ad9579345bf75d51b97d711989d226405215c29"}, @ETHTOOL_A_BITSET_VALUE={0x9a, 0x4, "e5e89f7f5ca20e7e8be26c65c0934c678f63ce17178653ac044a8641a445ab4b456d761dc129fdafd5e941b6b09d2e6f62eb29fcf88f14831858e67ad00cea6811bd951848e96c88ffaef9d2f74a8521d100b9851e7c5ef549833d7ac7e75f4f8f27412b9ace01fbd997e9cdb0bf9a006216d0c608969579dc6b192ae6f6cd21fa3140ae4f9c27da38a64c9438ac654321efd1464b9c"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9c}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_BITS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe000000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}]}, @ETHTOOL_A_FEATURES_WANTED={0x80, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x79, 0x4, "f6c2dc331c85008cd141f7cd9d39b24fa04d31783b5298b6f06c7efcdc24e233dca46132ad4b8abb311f9d7259591256ed655813518fc8db18a14ca4ad00ed76c508b7fb2c8faaedd2d8d9348ba079146fab63beaa794b7f1c26c7dc9755e9ae9105cb54ad74a285a27272a7a855430a78caa49132"}]}, @ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x60, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}]}, @ETHTOOL_A_FEATURES_WANTED={0x34c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x10001}, @ETHTOOL_A_BITSET_VALUE={0x16, 0x4, "a74d7cf1503ad609a000eb7d1e26f2728251"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xf5ba}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x10000}, @ETHTOOL_A_BITSET_MASK={0xeb, 0x5, "2208fe318c5cfd3196666033c95e048feb32b845c3846703d9807e806a7e2083da0177636b22768f4163efad4bb2beadb0e68325b55b73b5ec76cff8c43ef79e89ff9c1700f16bc77ece0582824cfabec61e144f4cfbd1583db7e8c01b56791626f8be2cccb0dc6390b5196213c0157cbaed87b23a5852729084699cd05596ad98a82da71753d0943646c6cf510501fa7c74d5c386e72b524dbd92ff35f3b42888ab57a4a12e288c602e6605765c6505bf133e6cd7e1e2645a51502c24c7d9b4d8541e1b2e54664e75ea4b72bcdb6fdc6d27dabdfa4663ac4cc4f6e9c94400063f75e2e77d83e7"}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_VALUE={0x9d, 0x4, "90c55aa9e5432d47bb60d9ba34d20a8216766cab15fc1a126b84c46577b550b23cf46074a204d0c9ff49386050d5429f9c19d2deaf2178eb6c3d6d428abe5ed97ca11d264ff424a3df7a8ada9e4edde830981cde9c86e63552f2aab81b887ac1c44917a50b5968bcb81116d3ed6ef9a24b91a8ec1dc13e65ef6176423a7b8f41daff7103bfe3ed45f7921ca1eb2b6ffc2acc916f2d1877b14e"}, @ETHTOOL_A_BITSET_MASK={0xea, 0x5, "c4dd361abd041398ab703856cb4906e522556a26226d19efc1b8d04e05e6a04affdfa9b8cca31cbd564ed27593c184b5aa9c42d315560d005db74a9dd3be2f0c3982e3dc8975135542b51d00fc0b89f8a0fdb81ee292fe5974fa73ac49a1977a5541349b1404b16d831cf6146d28d323bf185ecbdd2b313eeb0ed97528062fa362bfcd5e2cc76b7630396342f1322791b443f20dc28862194d84ecd0eb9ba828b53020836fae04b82584156a155ade8ef30fc368ed7855f51e1f53504d61857a3035ee2b1c148f3a0ebefd494e5a4ab00622f3b01d1b67bf6e7bcc5082abcf505efd9de2d410"}, @ETHTOOL_A_BITSET_MASK={0x96, 0x5, "718ee2ddb7c54ae3c09a52cab31f6dd99b328e1b48eec37a3871197ef1c4aded87b36882c6cd5101610a0a3d0815b6384400f925d3466c5f65ae98eede328b79a0be85661fc94ccf7bd5c9c47f68a911fd003053296422709bb722f5592179323d64e651e2bd9609546a4da7e52d92d1b989025c95972f5f20a68c30c3f7ffdd6f4569b313e5a6979c73dd37fa7e2a3b25a2"}]}]}, 0x1698}, 0x1, 0x0, 0x0, 0x804}, 0x4010) syz_usb_connect$uac1(0x1, 0x7f, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6d, 0x3, 0x1, 0x0, 0x10, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8001, 0x1}, [@selector_unit={0x5, 0x24, 0x5, 0x3}, @extension_unit={0x9, 0x24, 0x8, 0x5, 0x9816, 0x9, "6d1c"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x5, 0x6, 0x8, {0x7, 0x25, 0x1, 0x82, 0xfd, 0x33}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x7, 0x9, 0x3, {0x7, 0x25, 0x1, 0x2, 0x6, 0x8e}}}}}}}]}}, &(0x7f0000003700)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 4.470345734s ago: executing program 1 (id=1285): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, &(0x7f0000000080)=0x205, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000500)={[0x9, 0x0, 0x200, 0xc, 0x80, 0x7, 0x80000000, 0x6e8b7efc, 0xc5c6, 0x0, 0x4, 0x0, 0xa006, 0x0, 0x7f000, 0x10], 0xeeee0000, 0x218400}) bind$tipc(0xffffffffffffffff, 0x0, 0x4517345f03069c7d) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x43}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) r4 = socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv6_newroute={0x24, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0xff}, [@RTA_METRICS={0x8, 0x8, 0x0, 0x1, "0009a305"}]}, 0x24}}, 0x0) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000300)={0x2, 0x3, 0x0, 0x9, 0xe, 0x0, 0x70bd29, 0x1000000, [@sadb_address={0x3, 0x6, 0x33, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e20}, @sadb_x_nat_t_type={0x1, 0x14, 0x3}, @sadb_ident={0x2, 0x14, 0x1000, 0x0, 0x63}]}, 0x70}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 4.373638475s ago: executing program 0 (id=1286): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) getpid() r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, 0x0, 0x0) connect$pppl2tp(r2, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x5, 0x0, {0xa, 0x0, 0xf9d, @empty}}}, 0x32) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 4.038729411s ago: executing program 4 (id=1287): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x1a1cc04, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@shortname_lower}, {@shortname_winnt}, {@fat=@codepage={'codepage', 0x3d, '852'}}, {@utf8no}, {@uni_xlateno}, {@uni_xlate}, {@numtail}, {@numtail}, {@rodir}, {@rodir}, {@shortname_winnt}, {@fat=@discard}]}, 0x81, 0x2ac, &(0x7f0000000840)="$eJzs3cuKI2UUAOBT6VxVSBauRLBAF67CzDzBBGlhMCslC93o4PSAJGGgAwEvGGflXnDlO/gOPoAb38CFS8GdvRBLkqpK0kmmezLEtLTft+g6qTon/yV/Xyiovz95fTx89GTy+OlXv0azmUTlftyPiyQ6UYnSNwEA3CYXWS0isoXrcqtRn+e2i1eVI3QPAPgXXGRZ/JE93+9/AOB2+ODDj97r9fun76dpM2L87XSQRH7Mr/cex2cxirO4kzVieacg/2th/vWVB/3TqKZpeTNg2opBxPjjn4vXvd8jFvV3ox2dzfp6kZUuxFvj2XQwb3l+rMVLSUQvS/KUe9GOVyNWtyvyw7sP+qf30u36GNTj7Td/KPr/91l0ox2/fBpPYhSPFm+xqv/6bpq+k33/55f5CAYRyWw6aCzyVrKTY3weAAAAAAAAAAAAAAAAAAAAAAD8P3TTpc76/jnlboDd7u7r2/sDRTv+isiKHX5ma/vr3EnTtNzGZzqoRV5fjdeqUb25kQMAAAAAAAAAAAAAAAAAAMB/x+TzL4YPR6Oz80vBT9k8aF2ZsxlU186Uj/VfX7U7GP4YsX/V8wRxUnRtlGw1kZSXDtBWY5/k1q5Go/KsOayOIu/8d/t37I1DDfDKoFxdw4dJXJPc3L1I1lZduQzPJ8keCzLbMXUnz6yqv8BIG0VvLr3Pyy86da2dEzUfcW05mZermvNPcu1M7cDfKRuSg/7cAQAAAAAAAAAAAAAAAAAAtq0e+o3fti4+vZEuAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDRrf7//zKIzuaZzWBWFC/OVK5ObpxPdjTbOfIwAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuOX+CQAA//9tF08i") socket(0x10, 0x803, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000380)) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@deltfilter={0x54, 0x2d, 0x2, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x8}, {0x7, 0xd}, {0xfff2, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0xb, 0xd}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x805}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(0x0, &(0x7f0000000440)={'fscrypt:', @desc3}, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="30000000f9030101000000000002a12373a488610e0905df000008000000050a000200040000000000010005000100016970018172a4073b2aaa9984205d240d3cae54262259b2734498f32a33f95949ec51bdb834af9acc34044a5c2b1a904d"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x1c9, 0x12) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0xfe, 0x0, &(0x7f0000000000)) dup(0xffffffffffffffff) mount$fuse(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, 0x0) 3.990119301s ago: executing program 0 (id=1288): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0xa, 0x0, &(0x7f0000000200)) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000b90e1369f6b2"], 0x8) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) sendto$inet(r2, &(0x7f0000000240)="fbe40e8ddd274b847c5d30fb66bc80dfb470095e005052066f6dabe24c5b9e44aee3c0ae40b608644487489f14dd9925b177c49b60e91aedded555dba9b8536eedd05b6f5edd660f6323f9ba44558714cf4b37b65b7e73243ef3fc0fe65ec182abc7430968678913d74fcd8ffe4a254a2ba3b5797b51ef7ed988caed9bfe8b7140d6454eab4c1620716e2497cf5d50035155bc9a0dd680229981907cf90d64146531494aad1d9d87ec65153ab56b5bcdd1a2d4e2306ba3fe5de6d2cc7ffd5571cb428572cf88b26051fe080956c7627fadf2cb3305070e", 0xd7, 0x4, &(0x7f0000000180)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c1300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000048aa5e6c850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) accept4$unix(r3, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=unix']) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x40000000004) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r6, &(0x7f0000004f40)=[{{0x0, 0x0, &(0x7f0000001500)=[{0x0}, {&(0x7f0000000400)="81", 0x1}], 0x2}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x20000010) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0x82020000) 3.805828384s ago: executing program 4 (id=1289): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="1d3200000000000000001000000014000f00fe8000000000000000f70000000000bb08000100"], 0x30}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="50400000f1a9500c", @ANYRES16=0x0, @ANYBLOB="000427bd7000fedbdf250600000014000300fc020000000000000000000000000000050001000000000014000200fc00000000000000000000000000000108000500ac14142e050001000100000014000200fe88000000000000000000000000000108000500ac1e0001"], 0x70}}, 0x24040044) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x20000800}, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114100000000008510000002000000850000002e00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') open(&(0x7f00000005c0)='./bus\x00', 0x66842, 0x0) 3.805396824s ago: executing program 2 (id=1290): socket$nl_generic(0x10, 0x3, 0x10) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) r4 = syz_open_procfs(0x0, 0x0) pread64(r4, &(0x7f0000000800)=""/254, 0xfe, 0xffffffff) 3.565744577s ago: executing program 1 (id=1291): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r4}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="1d3200000000000000001000000014000f00fe8000000000000000f70000000000bb08000100"], 0x30}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={0x0, 0x70}}, 0x24040044) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x20000800}, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114100000000008510000002000000850000002e00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) chdir(0x0) open(&(0x7f00000005c0)='./bus\x00', 0x66842, 0x0) 2.915189047s ago: executing program 4 (id=1292): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, &(0x7f0000000080)=0x205, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000500)={[0x9, 0x0, 0x200, 0xc, 0x80, 0x7, 0x80000000, 0x6e8b7efc, 0xc5c6, 0x0, 0x4, 0x0, 0xa006, 0x0, 0x7f000, 0x10], 0xeeee0000, 0x218400}) bind$tipc(0xffffffffffffffff, 0x0, 0x4517345f03069c7d) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) fsopen(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x43}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) r4 = socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv6_newroute={0x24, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0xff}, [@RTA_METRICS={0x8, 0x8, 0x0, 0x1, "0009a305"}]}, 0x24}}, 0x0) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000300)={0x2, 0x3, 0x0, 0x9, 0xe, 0x0, 0x70bd29, 0x1000000, [@sadb_address={0x3, 0x6, 0x33, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e20}, @sadb_x_nat_t_type={0x1, 0x14, 0x3}, @sadb_ident={0x2, 0x14, 0x1000, 0x0, 0x63}]}, 0x70}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.859701158s ago: executing program 3 (id=1293): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000004000000000000000000000000000000000000000000000076a6278a87740007da0e86"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x8) r1 = getpid() setrlimit(0x0, &(0x7f00000000c0)={0x2, 0xe3be}) mount$cgroup(0x0, 0x0, 0x0, 0x2008000, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x80101) ppoll(&(0x7f0000000100)=[{r0, 0x2}, {r2, 0x200}], 0x2, 0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2d, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r3, 0x40047451, &(0x7f0000000180)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r6 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x45e, 0xf9, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc, 0x0, 0x7c}}}}}]}}]}}, 0x0) syz_usb_control_io(r6, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x40, 0x6, 0x5, {0x5, 0x11, "00f400"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000480)=ANY=[@ANYRES32=r6, @ANYRES32=r0, @ANYBLOB="000000001c00000000b706000014000000b7030000000d00008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b6af8ff00000000b5090000000000007baaf0ff27fdda16cb9b40722ea3f02f88007163000000bf8700000000000007080000fffdffffbf2400000000000407060000daffffff740200000800080018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000005000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.849996458s ago: executing program 2 (id=1294): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000005c0)=""/6, 0x6, 0xfffc, 0x3, 0x0, 0x0, 0xc07}}, 0x120) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0xff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/13, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='flush_foreign\x00', r0, 0x0, 0x3}, 0x5) writev(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000580)={'filter\x00', 0x104, 0x4, 0x3f0, 0x0, 0x1f8, 0x1f8, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr, @rand_addr, 0x8}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x5}}}, {{@arp={@remote, @private, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'team_slave_0\x00', 'pimreg\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@random="8249ca4ee4e7", @remote, @broadcast, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x2}}}}, 0x440) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.613470561s ago: executing program 1 (id=1295): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r4}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="1d3200000000000000001000000014000f00fe8000000000000000f70000000000bb08000100"], 0x30}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="50400000f1a9500c", @ANYRES16=0x0, @ANYBLOB="000427bd7000fedbdf250600000014000300fc020000000000000000000000000000050001000000000014000200fc00000000000000000000000000000108000500ac14142e050001000100000014000200fe88000000000000000000000000000108000500ac1e0001"], 0x70}}, 0x24040044) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x20000800}, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114100000000008510000002000000850000002e00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) chdir(0x0) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') open(&(0x7f00000005c0)='./bus\x00', 0x66842, 0x0) 2.04579042s ago: executing program 4 (id=1296): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x2}, 0x94) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240", @ANYRES32], 0x0) r2 = socket$unix(0x1, 0x1, 0x0) setuid(0xee00) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000040)=@add_del={0x2, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000e1ff0000000000000000850000005300000085000000070000009500000000000000a94be0c51261be6a99e5e06bb0a232d5e1f5bc0b6e76f82e9a7cde9e8f1b547edf612a03f1737d951d7a617558b674e1c4fdfd771ebe7c33af3e4917be59ac67f0bbabcb8f41c23ba8d91633a8b9c70e804744dc081ac69cfea08e4e5a06003771bc3f325a6386a9d49e3c13b32461acf0be4b31638c29187d748841f4395494cdac15e52a4b6a2981eb4afadb"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc0, &(0x7f0000000140)=""/192}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9092dc1b6dbe9ab5becdcc777", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_control_io$hid(r1, 0x0, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x40, 0x1000, 0x4, 0x70004, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x4, 0x5, @void, @value, @value=r0}, 0x50) getsockname$packet(r6, 0x0, &(0x7f00000002c0)) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="4000000010000304000000000000000000000000158e7fab4f2b2baf96142d73c99dc1a39978142e3c02f932102242fe253530251c37981abe117f19aa0f3a50d6f71737d27202c0c93201d148c9fc70510051a642e88afcd2bf923239c3cb789e310373482b4e661a55d844125c", @ANYRES32=0x0, @ANYBLOB="adffa88800000000180012800b0001006970366772650000080002800400120008000a00", @ANYRES32, @ANYBLOB], 0x40}}, 0x8000) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) mprotect(&(0x7f000030e000/0x3000)=nil, 0x3000, 0x3000007) syz_usb_control_io(r1, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000240)={0x40, 0xa, 0x6, "6ef1989edd08"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000a00)={0x44, &(0x7f00000007c0)={0x0, 0x17, 0x33, "e9fe253f366885d3dc43c896c63fa2295b451aec9fc80e701f67b0e53ba61d26a4ad5fea9f7bb596703f76f54720d2c232511b"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0xe}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x80}, 0x0, &(0x7f0000000900)={0x20, 0x85, 0x4, 0x200}, &(0x7f0000000400)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000980)={0x20, 0x87, 0x2, 0x3ff}, &(0x7f00000009c0)={0x20, 0x89, 0x2}}) syz_usb_connect$cdc_ecm(0x2, 0x71, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000800)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x200, 0x40, 0x8, 0xb, 0x20, 0x5}, 0x45, &(0x7f0000000b00)={0x5, 0xf, 0x45, 0x4, [@wireless={0xb, 0x10, 0x1, 0x8, 0x86, 0x80, 0x2, 0x0, 0xd}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x8, 0x7, 0x5f}, @ssp_cap={0x24, 0x10, 0xa, 0xec, 0x6, 0x1, 0x880f, 0x1ff, [0xc030, 0x0, 0x0, 0x90, 0x18000, 0x0]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xf, 0x80, 0xba, 0xd}]}, 0x2, [{0xa6, &(0x7f0000000280)=ANY=[@ANYBLOB="a603cecaeeb8f4c909a56237d7b42e94d799d1b6850084aed66e44f2a04a6deabb943f5a1246da38e6c4dbbd7382ba175c28f6ba0b66c79eca5ef548064439d437b62c892a1f52eb34d1d7157c71ec8b1eadcdfbfb32d818a79b29004b7eb9096a12bbc221ca512001a64107af64340d7f8a45db2054b2de41ae30ee0bb56ff0763e1afdeecc889c046090b77a63404f6f668ae17e921735b06598c14d9f"]}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x44b}}]}) syz_usb_connect(0x0, 0x35, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xc9, 0xcb, 0x8e, 0x10, 0x152d, 0x310, 0x3b0a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x23, 0x1, 0x1, 0x4, 0x0, 0x3, [{{0x9, 0x4, 0xce, 0x0, 0x1, 0xe, 0x1, 0x0, 0x4, [], [{{0x9, 0x5, 0x3, 0xc, 0x40, 0x1, 0x40, 0x7, [@generic={0x8, 0xb, "71ad57a74b95"}]}}]}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000d80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00'}, 0x10) 1.98907822s ago: executing program 2 (id=1297): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x1a1cc04, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@shortname_lower}, {@shortname_winnt}, {@fat=@codepage={'codepage', 0x3d, '852'}}, {@utf8no}, {@uni_xlateno}, {@uni_xlate}, {@numtail}, {@numtail}, {@rodir}, {@rodir}, {@shortname_winnt}, {@fat=@discard}]}, 0x81, 0x2ac, &(0x7f0000000840)="$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") socket(0x10, 0x803, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000380)) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@deltfilter={0x54, 0x2d, 0x2, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x8}, {0x7, 0xd}, {0xfff2, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0xb, 0xd}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x805}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(0x0, &(0x7f0000000440)={'fscrypt:', @desc3}, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="30000000f9030101000000000002a12373a488610e0905df000008000000050a000200040000000000010005000100016970018172a4073b2aaa9984205d240d3cae54262259b2734498f32a33f95949ec51bdb834af9acc34044a5c2b1a904d"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x1c9, 0x12) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0xfe, 0x0, &(0x7f0000000000)) dup(0xffffffffffffffff) mount$fuse(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, 0x0) 1.889047602s ago: executing program 0 (id=1298): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x2}, 0x94) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240", @ANYRES32], 0x0) r2 = socket$unix(0x1, 0x1, 0x0) setuid(0xee00) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000040)=@add_del={0x2, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000e1ff0000000000000000850000005300000085000000070000009500000000000000a94be0c51261be6a99e5e06bb0a232d5e1f5bc0b6e76f82e9a7cde9e8f1b547edf612a03f1737d951d7a617558b674e1c4fdfd771ebe7c33af3e4917be59ac67f0bbabcb8f41c23ba8d91633a8b9c70e804744dc081ac69cfea08e4e5a06003771bc3f325a6386a9d49e3c13b32461acf0be4b31638c29187d748841f4395494cdac15e52a4b6a2981eb4afadb"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc0, &(0x7f0000000140)=""/192}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9092dc1b6dbe9ab5becdcc777", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_control_io$hid(r1, 0x0, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000001c0)) socket(0x1, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x40, 0x1000, 0x4, 0x70004, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x4, 0x5, @void, @value, @value=r0}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="4000000010000304000000000000000000000000158e7fab4f2b2baf96142d73c99dc1a39978142e3c02f932102242fe253530251c37981abe117f19aa0f3a50d6f71737d27202c0c93201d148c9fc70510051a642e88afcd2bf923239c3cb789e310373482b4e661a55d844125cfff185989449b759fd6cd6faa6f9ea56cb7477189356a282b44d33c96765bfb8b5a489f5", @ANYRES32=0x0, @ANYBLOB="adffa88800000000180012800b0001006970", @ANYRES32, @ANYBLOB], 0x40}}, 0x8000) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) mprotect(&(0x7f000030e000/0x3000)=nil, 0x3000, 0x3000007) syz_usb_control_io(r1, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000240)={0x40, 0xa, 0x6, "6ef1989edd08"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000a00)={0x44, &(0x7f00000007c0)={0x0, 0x17, 0x33, "e9fe253f366885d3dc43c896c63fa2295b451aec9fc80e701f67b0e53ba61d26a4ad5fea9f7bb596703f76f54720d2c232511b"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0xe}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x80}, 0x0, &(0x7f0000000900)={0x20, 0x85, 0x4, 0x200}, &(0x7f0000000400)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000980)={0x20, 0x87, 0x2, 0x3ff}, &(0x7f00000009c0)={0x20, 0x89, 0x2}}) syz_usb_connect$cdc_ecm(0x2, 0x71, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000800)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x200, 0x40, 0x8, 0xb, 0x20, 0x5}, 0x45, &(0x7f0000000b00)={0x5, 0xf, 0x45, 0x4, [@wireless={0xb, 0x10, 0x1, 0x8, 0x86, 0x80, 0x2, 0x0, 0xd}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x8, 0x7, 0x5f}, @ssp_cap={0x24, 0x10, 0xa, 0xec, 0x6, 0x1, 0x880f, 0x1ff, [0xc030, 0x0, 0x0, 0x90, 0x18000, 0x0]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xf, 0x80, 0xba, 0xd}]}, 0x2, [{0xa6, &(0x7f0000000280)=ANY=[@ANYBLOB="a603cecaeeb8f4c909a56237d7b42e94d799d1b6850084aed66e44f2a04a6deabb943f5a1246da38e6c4dbbd7382ba175c28f6ba0b66c79eca5ef548064439d437b62c892a1f52eb34d1d7157c71ec8b1eadcdfbfb32d818a79b29004b7eb9096a12bbc221ca512001a64107af64340d7f8a45db2054b2de41ae30ee0bb56ff0763e1afdeecc889c046090b77a63404f6f668ae17e921735b06598c14d9f"]}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x44b}}]}) syz_usb_connect(0x0, 0x35, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xc9, 0xcb, 0x8e, 0x10, 0x152d, 0x310, 0x3b0a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x23, 0x1, 0x1, 0x4, 0x0, 0x3, [{{0x9, 0x4, 0xce, 0x0, 0x1, 0xe, 0x1, 0x0, 0x4, [], [{{0x9, 0x5, 0x3, 0xc, 0x40, 0x1, 0x40, 0x7, [@generic={0x8, 0xb, "71ad57a74b95"}]}}]}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800000005"], 0x50) 1.659967965s ago: executing program 1 (id=1299): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r4}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[], 0x30}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="50400000f1a9500c", @ANYRES16=0x0, @ANYBLOB="000427bd7000fedbdf250600000014000300fc020000000000000000000000000000050001000000000014000200fc00000000000000000000000000000108000500ac14142e050001000100000014000200fe88000000000000000000000000000108000500ac1e0001"], 0x70}}, 0x24040044) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x20000800}, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114100000000008510000002000000850000002e00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) chdir(0x0) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') open(&(0x7f00000005c0)='./bus\x00', 0x66842, 0x0) 1.077333584s ago: executing program 2 (id=1300): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x1a1cc04, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@shortname_lower}, {@shortname_winnt}, {@fat=@codepage={'codepage', 0x3d, '852'}}, {@utf8no}, {@uni_xlateno}, {@uni_xlate}, {@numtail}, {@numtail}, {@rodir}, {@rodir}, {@shortname_winnt}, {@fat=@discard}]}, 0x81, 0x2ac, &(0x7f0000000840)="$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") socket(0x10, 0x803, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000380)) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@deltfilter={0x54, 0x2d, 0x2, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x8}, {0x7, 0xd}, {0xfff2, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0xb, 0xd}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x805}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(0x0, &(0x7f0000000440)={'fscrypt:', @desc3}, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="30000000f9030101000000000002a12373a488610e0905df000008000000050a000200040000000000010005000100016970018172a4073b2aaa9984205d240d3cae54262259b2734498f32a33f95949ec51bdb834af9acc34044a5c2b1a904d"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x1c9, 0x12) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0xfe, 0x0, &(0x7f0000000000)) dup(0xffffffffffffffff) mount$fuse(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, 0x0) 877.316737ms ago: executing program 2 (id=1301): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, &(0x7f0000000080)=0x205, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000500)={[0x9, 0x0, 0x200, 0xc, 0x80, 0x7, 0x80000000, 0x6e8b7efc, 0xc5c6, 0x0, 0x4, 0x0, 0xa006, 0x0, 0x7f000, 0x10], 0xeeee0000, 0x218400}) bind$tipc(0xffffffffffffffff, 0x0, 0x4517345f03069c7d) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x43}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) r4 = socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv6_newroute={0x24, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0xff}, [@RTA_METRICS={0x8, 0x8, 0x0, 0x1, "0009a305"}]}, 0x24}}, 0x0) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000300)={0x2, 0x3, 0x0, 0x9, 0xe, 0x0, 0x70bd29, 0x1000000, [@sadb_address={0x3, 0x6, 0x33, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e20}, @sadb_x_nat_t_type={0x1, 0x14, 0x3}, @sadb_ident={0x2, 0x14, 0x1000, 0x0, 0x63}]}, 0x70}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 369.787294ms ago: executing program 1 (id=1302): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, &(0x7f0000000080)=0x205, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000500)={[0x9, 0x0, 0x200, 0xc, 0x80, 0x7, 0x80000000, 0x6e8b7efc, 0xc5c6, 0x0, 0x4, 0x0, 0xa006, 0x0, 0x7f000, 0x10], 0xeeee0000, 0x218400}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x43}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 2 (id=1303): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000200"], 0x0, 0x2}, 0x94) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240", @ANYRES32], 0x0) r1 = socket$unix(0x1, 0x1, 0x0) setuid(0xee00) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000040)=@add_del={0x2, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000e1ff0000000000000000850000005300000085000000070000009500000000000000a94be0c51261be6a99e5e06bb0a232d5e1f5bc0b6e76f82e9a7cde9e8f1b547edf612a03f1737d951d7a617558b674e1c4fdfd771ebe7c33af3e4917be59ac67f0bbabcb8f41c23ba8d91633a8b9c70e804744dc081ac69cfea08e4e5a06003771bc3f325a6386a9d49e3c13b32461acf0be4b31638c29187d748841f4395494cdac15e52a4b6a2981eb4afadb"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc0, &(0x7f0000000140)=""/192}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9092dc1b6dbe9ab5becdcc777", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_control_io$hid(r0, 0x0, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="4000000010000304000000000000000000000000158e7fab4f2b2baf96142d73c99dc1a39978142e3c02f932102242fe253530251c37981abe117f19aa0f3a50d6f71737d27202c0c93201d148c9fc70510051a642e88afcd2bf923239c3cb789e310373482b4e661a55d844125cfff185989449b759fd6cd6faa6f9ea56cb7477189356a282b44d33c96765bfb8b5a489f5", @ANYRES32=0x0, @ANYBLOB="adffa88800000000180012800b0001006970366772650000080002800400120008000a00", @ANYRES32=r6, @ANYBLOB], 0x40}}, 0x8000) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) mprotect(&(0x7f000030e000/0x3000)=nil, 0x3000, 0x3000007) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000a00)={0x44, &(0x7f00000007c0)={0x0, 0x17, 0x33, "e9fe253f366885d3dc43c896c63fa2295b451aec9fc80e701f67b0e53ba61d26a4ad5fea9f7bb596703f76f54720d2c232511b"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0xe}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x80}, 0x0, &(0x7f0000000900)={0x20, 0x85, 0x4, 0x200}, &(0x7f0000000400)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000980)={0x20, 0x87, 0x2, 0x3ff}, &(0x7f00000009c0)={0x20, 0x89, 0x2}}) syz_usb_connect$cdc_ecm(0x2, 0x71, &(0x7f0000000c00)=ANY=[@ANYBLOB="12011001020000ff0705a1a440000102030109025f000101d3c006090400d5020206000415a60600006b1d9005000000080d240f01f9ffffffff8ff80f0447241408000200052401fb0015241280ffa32abbe41cabe51d9254ef81378517a88b045e4f01a607c0ffcb7e3905090582020846f0240280b6f80a0a60087a686d7b883d7bf22dc2bdbcfa281143d0d7944e15f9f4b0afbbf8d2b083b4cd54fdfc84f0a8eaa55afcb28368f7f85199ac4993c307117ee15eabff0e0ea9c014d3522ce518f57a697f0032761fdc33544690dc6cb1ce90ec25a3caeda5a8bc8b733ac7d92cca5f41b22534da310896f6fa6e4ccf1fbe6b4ff2ac91b1b121f63e9fb505c79005c5e9f4db9588112dd410dd0b96a7133ae1a4172da75cbdd65ffb6189f017bb5462d9fa11211a9982d97614c01caa73e5f81a8943f757da2ba4143ab16a564d23c7f12c0b04d3bb394b696cc1fe70be2c035180e234583555558b858d515870eb90ccd68ed76e36165f3d51a178628b25efd7aa2d1511547adfb8"], &(0x7f0000000800)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x200, 0x40, 0x8, 0xb, 0x20, 0x5}, 0x45, &(0x7f0000000b00)={0x5, 0xf, 0x45, 0x4, [@wireless={0xb, 0x10, 0x1, 0x8, 0x86, 0x80, 0x2, 0x0, 0xd}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x8, 0x7, 0x5f}, @ssp_cap={0x24, 0x10, 0xa, 0xec, 0x6, 0x1, 0x880f, 0x1ff, [0xc030, 0x0, 0x0, 0x90, 0x18000, 0x0]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xf, 0x80, 0xba, 0xd}]}, 0x2, [{0xa6, &(0x7f0000000280)=ANY=[@ANYBLOB="a603cecaeeb8f4c909a56237d7b42e94d799d1b6850084aed66e44f2a04a6deabb943f5a1246da38e6c4dbbd7382ba175c28f6ba0b66c79eca5ef548064439d437b62c892a1f52eb34d1d7157c71ec8b1eadcdfbfb32d818a79b29004b7eb9096a12bbc221ca512001a64107af64340d7f8a45db2054b2de41ae30ee0bb56ff0763e1afdeecc889c046090b77a63404f6f668ae17e921735b06598c14d9f"]}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x44b}}]}) syz_usb_connect(0x0, 0x35, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xc9, 0xcb, 0x8e, 0x10, 0x152d, 0x310, 0x3b0a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x23, 0x1, 0x1, 0x4, 0x0, 0x3, [{{0x9, 0x4, 0xce, 0x0, 0x1, 0xe, 0x1, 0x0, 0x4, [], [{{0x9, 0x5, 0x3, 0xc, 0x40, 0x1, 0x40, 0x7, [@generic={0x8, 0xb, "71ad57a74b95"}]}}]}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800000005"], 0x50) kernel console output (not intermixed with test programs): ] syz.4.845[3928] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 223.373578][ T3919] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 223.404610][ T3919] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 223.433547][ T3956] loop3: detected capacity change from 0 to 512 [ 223.456008][ T3956] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.851: casefold flag without casefold feature [ 223.469214][ T3956] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.851: couldn't read orphan inode 15 (err -117) [ 223.483229][ T3956] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 223.499626][ T1421] usb 1-1: new low-speed USB device number 32 using dummy_hcd [ 223.913897][ T1421] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 223.953385][ T1421] usb 1-1: config 1 has no interface number 1 [ 223.986505][ T1421] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 224.016940][ T1421] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 224.031323][ T1421] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 0 [ 224.066947][ T560] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 224.074605][ T1421] usb 1-1: string descriptor 0 read error: -22 [ 224.081130][ T1421] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 224.090403][ T1421] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.109621][ T1421] usb 1-1: low speed audio streaming not supported [ 224.110982][ T3966] loop2: detected capacity change from 0 to 256 [ 224.316103][ T287] EXT4-fs (loop3): unmounting filesystem. [ 224.357744][ T1421] usb 1-1: USB disconnect, device number 32 [ 224.395469][ T560] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 224.573000][ T560] usb 2-1: USB disconnect, device number 29 [ 225.009567][ T331] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 225.054736][ T39] hid-generic FFFC:0003:0000.002F: unknown main item tag 0x0 [ 225.062349][ T39] hid-generic FFFC:0003:0000.002F: unknown main item tag 0x0 [ 225.069811][ T39] hid-generic FFFC:0003:0000.002F: unknown main item tag 0x0 [ 225.077351][ T39] hid-generic FFFC:0003:0000.002F: unknown main item tag 0x0 [ 225.084922][ T39] hid-generic FFFC:0003:0000.002F: unknown main item tag 0x0 [ 225.092654][ T39] hid-generic FFFC:0003:0000.002F: unknown main item tag 0x0 [ 225.101019][ T39] hid-generic FFFC:0003:0000.002F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 225.137934][ T3983] 9pnet_fd: p9_fd_create_unix (3983): problem connecting socket: éq‰Y’3aK: -111 [ 225.148960][ T3983] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 225.155710][ T3983] futex_wake_op: syz.1.858 tries to shift op by 32; fix this program [ 225.191056][ T331] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 225.201151][ T331] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65344, setting to 1024 [ 225.212673][ T331] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 225.224978][ T331] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 225.234320][ T331] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.242366][ T331] usb 4-1: Product: syz [ 225.247161][ T331] usb 4-1: Manufacturer: syz [ 225.251851][ T331] usb 4-1: SerialNumber: syz [ 225.259632][ T331] usb 4-1: config 0 descriptor?? [ 225.265375][ T3972] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 225.272754][ T3972] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 225.433937][ T3986] loop4: detected capacity change from 0 to 512 [ 225.442390][ T3986] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.859: casefold flag without casefold feature [ 225.455120][ T3986] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.859: couldn't read orphan inode 15 (err -117) [ 225.467013][ T3986] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 225.483939][ T3972] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 225.492040][ T3972] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 225.917645][ T331] Error reading MAC address [ 225.925048][ T331] usb 4-1: USB disconnect, device number 31 [ 226.209562][ T560] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 226.284760][ T286] EXT4-fs (loop4): unmounting filesystem. [ 226.564537][ T560] usb 1-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 226.577355][ T560] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.586945][ T560] usb 1-1: config 0 descriptor?? [ 227.160365][ T4009] loop4: detected capacity change from 0 to 512 [ 227.170898][ T4009] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.865: casefold flag without casefold feature [ 227.183698][ T4009] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.865: couldn't read orphan inode 15 (err -117) [ 227.195582][ T844] Bluetooth: hci0: command 0x1003 tx timeout [ 227.195940][ T4009] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 227.201737][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 227.242799][ T4013] loop1: detected capacity change from 0 to 256 [ 228.280466][ T286] EXT4-fs (loop4): unmounting filesystem. [ 228.504963][ T4033] loop1: detected capacity change from 0 to 256 [ 228.513308][ T4033] FAT-fs (loop1): Unrecognized mount option "sj€ëname=winnt" or missing value [ 228.901349][ T560] usbhid 1-1:0.0: can't add hid device: -71 [ 228.909393][ T560] usbhid: probe of 1-1:0.0 failed with error -71 [ 228.914523][ T4039] loop3: detected capacity change from 0 to 40427 [ 228.916698][ T560] usb 1-1: USB disconnect, device number 33 [ 228.929594][ T4039] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 228.936259][ T4039] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 228.946562][ T4039] F2FS-fs (loop3): Found nat_bits in checkpoint [ 228.981198][ T4039] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 228.988308][ T4039] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 229.008180][ T287] syz-executor: attempt to access beyond end of device [ 229.008180][ T287] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 229.069617][ T1439] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 229.739094][ T4051] 9pnet_fd: p9_fd_create_unix (4051): problem connecting socket: éq‰Y’3aK: -111 [ 229.751511][ T1439] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 229.752264][ T4051] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 229.762144][ T1439] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65344, setting to 1024 [ 229.773926][ T4051] futex_wake_op: syz.1.876 tries to shift op by 32; fix this program [ 229.780214][ T1439] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 229.809411][ T1439] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 229.818605][ T1439] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.826656][ T1439] usb 3-1: Product: syz [ 229.830915][ T1439] usb 3-1: Manufacturer: syz [ 229.835695][ T1439] usb 3-1: SerialNumber: syz [ 229.844053][ T1439] usb 3-1: config 0 descriptor?? [ 229.844840][ T4057] loop0: detected capacity change from 0 to 256 [ 229.849292][ T4037] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 229.862768][ T4037] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 230.136983][ T4037] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 230.186833][ T4037] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 230.668445][ T4068] loop4: detected capacity change from 0 to 512 [ 230.684193][ T4068] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.881: casefold flag without casefold feature [ 230.702138][ T4068] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.881: couldn't read orphan inode 15 (err -117) [ 230.714275][ T4068] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 231.059587][ T1439] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 231.069742][ T1439] dm9601 3-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.2-1, Davicom DM96xx USB 10/100 Ethernet, 6e:f1:98:9e:dd:08 [ 231.083620][ T1439] usb 3-1: USB disconnect, device number 30 [ 231.089895][ T1439] dm9601 3-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.2-1, Davicom DM96xx USB 10/100 Ethernet [ 231.259586][ T1421] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 231.440623][ T1421] usb 4-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 231.449758][ T1421] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.458491][ T1421] usb 4-1: config 0 descriptor?? [ 231.527045][ T286] EXT4-fs (loop4): unmounting filesystem. [ 232.737550][ T4119] loop0: detected capacity change from 0 to 256 [ 232.744878][ T4119] FAT-fs (loop0): Unrecognized mount option "sj€ëname=winnt" or missing value [ 232.755044][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 233.062840][ T4132] loop1: detected capacity change from 0 to 256 [ 233.350324][ T1439] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 233.540606][ T1439] usb 5-1: config 0 has no interfaces? [ 233.547543][ T1439] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 233.556642][ T1439] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.564667][ T1439] usb 5-1: Product: syz [ 233.568843][ T1439] usb 5-1: Manufacturer: syz [ 233.573461][ T1439] usb 5-1: SerialNumber: syz [ 233.579003][ T1439] usb 5-1: config 0 descriptor?? [ 233.956009][ T1421] usbhid 4-1:0.0: can't add hid device: -71 [ 233.968990][ T1421] usbhid: probe of 4-1:0.0 failed with error -71 [ 234.388030][ T4147] loop0: detected capacity change from 0 to 256 [ 234.396907][ T4147] FAT-fs (loop0): Unrecognized mount option "sj€ëname=winnt" or missing value [ 234.451325][ T1421] usb 4-1: USB disconnect, device number 32 [ 234.589562][ T1439] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 234.719803][ T4149] loop2: detected capacity change from 0 to 256 [ 234.790851][ T1439] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 234.816123][ T1439] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65344, setting to 1024 [ 235.215962][ T1439] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 235.261052][ T1439] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 235.270308][ T1439] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.282658][ T1439] usb 2-1: Product: syz [ 235.286865][ T1439] usb 2-1: Manufacturer: syz [ 235.291539][ T1439] usb 2-1: SerialNumber: syz [ 235.296565][ T1439] usb 2-1: config 0 descriptor?? [ 235.301857][ T4142] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 235.309009][ T4142] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 235.410623][ T4159] loop3: detected capacity change from 0 to 256 [ 235.418932][ T4159] FAT-fs (loop3): Unrecognized mount option "sj€ëname=winnt" or missing value [ 235.521821][ T4142] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 235.529186][ T4142] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 235.536786][ T314] blk_print_req_error: 4 callbacks suppressed [ 235.536800][ T314] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 235.593228][ T4161] loop2: detected capacity change from 0 to 512 [ 235.604211][ T4161] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.901: casefold flag without casefold feature [ 235.617107][ T4161] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.901: couldn't read orphan inode 15 (err -117) [ 235.629051][ T4161] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 236.288942][ T4175] loop3: detected capacity change from 0 to 512 [ 236.290485][ T1421] usb 5-1: USB disconnect, device number 33 [ 236.309607][ T4175] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.904: casefold flag without casefold feature [ 236.323271][ T4175] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.904: couldn't read orphan inode 15 (err -117) [ 236.342868][ T4175] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 236.449336][ T288] EXT4-fs (loop2): unmounting filesystem. [ 236.869274][ T1439] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 236.882281][ T1439] dm9601 2-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet, 6e:f1:98:9e:dd:08 [ 236.900063][ T1439] usb 2-1: USB disconnect, device number 30 [ 236.906471][ T1439] dm9601 2-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet [ 236.949581][ T1421] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 237.176896][ T1421] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 237.177141][ T287] EXT4-fs (loop3): unmounting filesystem. [ 237.188078][ T1421] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 237.201534][ T1421] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.210026][ T1421] usb 5-1: Product: syz [ 237.214283][ T1421] usb 5-1: Manufacturer: syz [ 237.218873][ T1421] usb 5-1: SerialNumber: syz [ 237.224889][ T1421] usb 5-1: config 0 descriptor?? [ 237.230791][ T1421] hub 5-1:0.0: bad descriptor, ignoring hub [ 237.236758][ T1421] hub: probe of 5-1:0.0 failed with error -5 [ 237.250330][ T1421] snd-usb-audio: probe of 5-1:0.0 failed with error -2 [ 237.265273][ T415] udevd[415]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 237.320259][ T4199] loop2: detected capacity change from 0 to 512 [ 237.329795][ T4199] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.910: casefold flag without casefold feature [ 237.342516][ T4199] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.910: couldn't read orphan inode 15 (err -117) [ 237.354978][ T4199] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 237.355112][ T4197] loop3: detected capacity change from 0 to 256 [ 237.370636][ T4197] FAT-fs (loop3): Unrecognized mount option "sj€ëname=winnt" or missing value [ 237.434792][ T4189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.443405][ T4189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.829573][ T560] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 238.020591][ T560] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 238.034489][ T560] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65344, setting to 1024 [ 238.056898][ T560] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 238.095918][ T560] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 238.119563][ T560] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.138841][ T560] usb 2-1: Product: syz [ 238.147191][ T560] usb 2-1: Manufacturer: syz [ 238.189488][ T288] EXT4-fs (loop2): unmounting filesystem. [ 238.197539][ T560] usb 2-1: SerialNumber: syz [ 238.207317][ T4213] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4213 comm=syz.3.913 [ 238.220174][ T560] usb 2-1: config 0 descriptor?? [ 238.225519][ T4202] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 238.232883][ T4202] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 238.441404][ T4202] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 238.448603][ T4202] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 238.509557][ T1439] usb 4-1: new low-speed USB device number 33 using dummy_hcd [ 238.573640][ T4219] loop0: detected capacity change from 0 to 2048 [ 238.619895][ T4219] loop0: p1 < > p3 p4 < > [ 238.625072][ T4219] loop0: p3 start 4284289 is beyond EOD, truncated [ 238.659182][ T314] udevd[314]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 238.693586][ T343] udevd[343]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 238.711370][ T1439] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 238.720423][ T1439] usb 4-1: config 1 has no interface number 1 [ 238.726492][ T1439] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 238.737557][ T1439] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 238.750466][ T1439] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 0 [ 238.827022][ T4223] loop0: detected capacity change from 0 to 256 [ 238.835386][ T4223] FAT-fs (loop0): Unrecognized mount option "sj€ëname=winnt" or missing value [ 239.008145][ T560] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 239.016415][ T314] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 239.018010][ T1439] usb 4-1: string descriptor 0 read error: -22 [ 239.039157][ T1439] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 239.048312][ T1439] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.058152][ T1439] usb 4-1: low speed audio streaming not supported [ 239.121701][ T4226] 9pnet_fd: p9_fd_create_unix (4226): problem connecting socket: éq‰Y’3aK: -111 [ 239.133586][ T4226] futex_wake_op: syz.2.917 tries to shift op by 32; fix this program [ 239.157006][ T560] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 239.166777][ T560] usb 2-1: USB disconnect, device number 31 [ 239.271315][ T1421] usb 4-1: USB disconnect, device number 33 [ 239.506219][ T4228] loop0: detected capacity change from 0 to 512 [ 239.516524][ T4228] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.918: casefold flag without casefold feature [ 239.530054][ T4228] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.918: couldn't read orphan inode 15 (err -117) [ 239.542304][ T4228] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 239.669639][ T1421] usb 5-1: USB disconnect, device number 34 [ 240.902961][ T4241] syz.4.922[4241] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 240.903032][ T4241] syz.4.922[4241] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 240.944307][ T285] EXT4-fs (loop0): unmounting filesystem. [ 241.014199][ T560] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 241.025035][ T4245] loop4: detected capacity change from 0 to 512 [ 241.044840][ T4245] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.924: casefold flag without casefold feature [ 241.057587][ T4245] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.924: couldn't read orphan inode 15 (err -117) [ 241.069489][ T4245] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 241.102032][ T4246] loop0: detected capacity change from 0 to 256 [ 241.117543][ T4246] FAT-fs (loop0): Unrecognized mount option "sj€ëname=winnt" or missing value [ 241.169618][ T289] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 241.199682][ T844] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 241.205822][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 241.384539][ T560] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 241.394394][ T560] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65344, setting to 1024 [ 241.394484][ T4253] loop2: detected capacity change from 0 to 256 [ 241.405618][ T560] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 241.425715][ T560] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 241.438231][ T560] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.446462][ T560] usb 2-1: Product: syz [ 241.450746][ T560] usb 2-1: Manufacturer: syz [ 241.455419][ T560] usb 2-1: SerialNumber: syz [ 241.464911][ T560] usb 2-1: config 0 descriptor?? [ 241.470673][ T4233] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 241.477954][ T4233] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 241.486960][ T289] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 241.496797][ T289] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65344, setting to 1024 [ 241.508105][ T289] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 241.519648][ T289] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 241.528733][ T289] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.536808][ T289] usb 4-1: Product: syz [ 241.541027][ T289] usb 4-1: Manufacturer: syz [ 241.545659][ T289] usb 4-1: SerialNumber: syz [ 241.678343][ T289] usb 4-1: config 0 descriptor?? [ 241.696180][ T4239] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 241.707013][ T4233] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 241.715066][ T4239] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 241.724442][ T4233] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 241.911769][ T286] EXT4-fs (loop4): unmounting filesystem. [ 241.924101][ T4239] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 241.936381][ T4239] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 242.288951][ T4259] loop4: detected capacity change from 0 to 40427 [ 242.305701][ T4259] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 242.317283][ T4259] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 242.328008][ T4259] F2FS-fs (loop4): Found nat_bits in checkpoint [ 242.351202][ T4259] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 242.358319][ T4259] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 242.395651][ T286] syz-executor: attempt to access beyond end of device [ 242.395651][ T286] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 242.754360][ T560] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 242.769911][ T560] dm9601 2-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet, 6e:f1:98:9e:dd:08 [ 242.784401][ T560] usb 2-1: USB disconnect, device number 32 [ 242.790765][ T560] dm9601 2-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet [ 242.885416][ T4279] loop4: detected capacity change from 0 to 256 [ 242.893587][ T4279] FAT-fs (loop4): Unrecognized mount option "sj€ëname=winnt" or missing value [ 243.049672][ T1421] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 243.063853][ T343] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 243.164809][ T289] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 243.176191][ T289] dm9601 4-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet, 6e:f1:98:9e:dd:08 [ 243.178416][ T4296] loop2: detected capacity change from 0 to 512 [ 243.189806][ T289] usb 4-1: USB disconnect, device number 34 [ 243.204673][ T289] dm9601 4-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet [ 243.220895][ T4296] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.931: casefold flag without casefold feature [ 243.235265][ T4296] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.931: couldn't read orphan inode 15 (err -117) [ 243.247693][ T4296] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 243.261010][ T1421] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 243.276210][ T1421] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65344, setting to 1024 [ 243.300884][ T1421] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 243.320126][ T1421] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 243.335292][ T1421] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.349402][ T1421] usb 1-1: Product: syz [ 243.356019][ T1421] usb 1-1: Manufacturer: syz [ 243.360691][ T1421] usb 1-1: SerialNumber: syz [ 243.365853][ T1421] usb 1-1: config 0 descriptor?? [ 243.371114][ T4272] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 243.378338][ T4272] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 243.586781][ T4272] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 243.598966][ T4311] loop4: detected capacity change from 0 to 512 [ 243.599228][ T4272] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 243.614321][ T4311] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.933: casefold flag without casefold feature [ 243.627471][ T4311] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.933: couldn't read orphan inode 15 (err -117) [ 243.641419][ T4311] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 243.849315][ T4315] syz.3.934[4315] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 243.849389][ T4315] syz.3.934[4315] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 244.313462][ T1421] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 244.338623][ T288] EXT4-fs (loop2): unmounting filesystem. [ 244.817238][ T4321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.842422][ T4321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.851362][ T1421] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 244.865037][ T286] EXT4-fs (loop4): unmounting filesystem. [ 244.915790][ T1421] usb 1-1: USB disconnect, device number 34 [ 244.954495][ T4329] loop4: detected capacity change from 0 to 512 [ 244.979080][ T4329] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.938: casefold flag without casefold feature [ 244.991896][ T4329] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.938: couldn't read orphan inode 15 (err -117) [ 245.004153][ T4329] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 245.765645][ T4331] loop2: detected capacity change from 0 to 256 [ 245.780572][ T4331] FAT-fs (loop2): Unrecognized mount option "sj€ëname=winnt" or missing value [ 245.900876][ T415] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 247.868711][ T286] EXT4-fs (loop4): unmounting filesystem. [ 247.875077][ T1421] hid-generic FFFC:0003:0000.0030: unknown main item tag 0x0 [ 247.925398][ T1421] hid-generic FFFC:0003:0000.0030: unknown main item tag 0x0 [ 248.150188][ T4335] loop3: detected capacity change from 0 to 40427 [ 248.157630][ T4335] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 248.179579][ T4335] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 248.195808][ T4349] loop1: detected capacity change from 0 to 256 [ 248.202545][ T4349] FAT-fs (loop1): Unrecognized mount option "sj€ëname=winnt" or missing value [ 248.216978][ T4335] F2FS-fs (loop3): invalid crc value [ 248.224021][ T1421] hid-generic FFFC:0003:0000.0030: unknown main item tag 0x0 [ 248.231554][ T1421] hid-generic FFFC:0003:0000.0030: unknown main item tag 0x0 [ 248.239032][ T1421] hid-generic FFFC:0003:0000.0030: unknown main item tag 0x0 [ 248.249248][ T1421] hid-generic FFFC:0003:0000.0030: unknown main item tag 0x0 [ 248.778376][ T1421] hid-generic FFFC:0003:0000.0030: hidraw0: HID v0.00 Device [syz1] on syz0 [ 248.796678][ T4359] loop1: detected capacity change from 0 to 512 [ 248.809694][ T4335] F2FS-fs (loop3): Found nat_bits in checkpoint [ 248.817611][ T4359] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.945: casefold flag without casefold feature [ 248.870151][ T4359] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.945: couldn't read orphan inode 15 (err -117) [ 249.189751][ T4359] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 249.235297][ T4364] fido_id[4364]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 249.533880][ T4376] loop0: detected capacity change from 0 to 256 [ 250.170937][ T289] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 250.358065][ T284] EXT4-fs (loop1): unmounting filesystem. [ 250.777177][ T4386] syz.1.952[4386] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 250.777250][ T4386] syz.1.952[4386] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 250.860954][ T289] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 250.889402][ T289] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65344, setting to 1024 [ 250.901031][ T289] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 250.926415][ T289] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 250.935536][ T289] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.948966][ T289] usb 5-1: Product: syz [ 250.953489][ T289] usb 5-1: Manufacturer: syz [ 250.958313][ T289] usb 5-1: SerialNumber: syz [ 251.364696][ T289] usb 5-1: config 0 descriptor?? [ 251.370399][ T4372] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 251.381784][ T4372] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 251.564442][ T4401] loop2: detected capacity change from 0 to 256 [ 251.572905][ T4401] FAT-fs (loop2): Unrecognized mount option "sj€ëname=winnt" or missing value [ 251.602650][ T4372] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 251.626874][ T4372] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 251.824573][ T4405] loop0: detected capacity change from 0 to 512 [ 251.855302][ T4405] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.957: casefold flag without casefold feature [ 251.898711][ T4405] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.957: couldn't read orphan inode 15 (err -117) [ 251.924408][ T4398] loop1: detected capacity change from 0 to 40427 [ 251.939594][ T4398] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 251.945367][ T4405] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 251.952788][ T4398] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 251.984385][ T4398] F2FS-fs (loop1): Found nat_bits in checkpoint [ 252.038153][ T4398] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 252.045310][ T4398] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 253.320570][ T289] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 253.398097][ T285] EXT4-fs (loop0): unmounting filesystem. [ 253.441710][ T289] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 253.668852][ T4428] loop0: detected capacity change from 0 to 512 [ 253.690898][ T289] usb 5-1: USB disconnect, device number 35 [ 253.756693][ T4422] hid-generic FFFC:0003:0000.0031: unknown main item tag 0x0 [ 253.764202][ T4422] hid-generic FFFC:0003:0000.0031: unknown main item tag 0x0 [ 253.771712][ T4422] hid-generic FFFC:0003:0000.0031: unknown main item tag 0x0 [ 253.779172][ T4422] hid-generic FFFC:0003:0000.0031: unknown main item tag 0x0 [ 253.786639][ T4422] hid-generic FFFC:0003:0000.0031: unknown main item tag 0x0 [ 253.794811][ T4428] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.962: casefold flag without casefold feature [ 253.807707][ T4422] hid-generic FFFC:0003:0000.0031: unknown main item tag 0x0 [ 253.815463][ T4428] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.962: couldn't read orphan inode 15 (err -117) [ 253.815832][ T4422] hid-generic FFFC:0003:0000.0031: hidraw0: HID v0.00 Device [syz1] on syz0 [ 253.837302][ T4428] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 254.409801][ T4420] loop1: detected capacity change from 0 to 40427 [ 254.589275][ T4434] fido_id[4434]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 254.603183][ T4420] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 254.604964][ T285] EXT4-fs (loop0): unmounting filesystem. [ 254.619386][ T4420] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 254.645631][ T4420] F2FS-fs (loop1): invalid crc value [ 254.659801][ T4420] F2FS-fs (loop1): Found nat_bits in checkpoint [ 254.675278][ T4447] loop2: detected capacity change from 0 to 512 [ 254.722552][ T4447] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.966: casefold flag without casefold feature [ 254.924617][ T4447] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.966: couldn't read orphan inode 15 (err -117) [ 254.945919][ T4420] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 254.945928][ T4447] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 255.039867][ T4420] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 255.223591][ T4420] syz.1.959[4420] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 255.223669][ T4420] syz.1.959[4420] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 255.786993][ T288] EXT4-fs (loop2): unmounting filesystem. [ 256.081305][ T4463] loop3: detected capacity change from 0 to 40427 [ 256.120599][ T4463] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 256.142033][ T4463] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 256.180992][ T4463] F2FS-fs (loop3): Found nat_bits in checkpoint [ 256.888282][ T4482] loop0: detected capacity change from 0 to 256 [ 256.895466][ T4482] FAT-fs (loop0): Unrecognized mount option "sj€ëname=winnt" or missing value [ 257.696956][ T415] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 257.722173][ T4463] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 257.722198][ T4463] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 257.740059][ T287] syz-executor: attempt to access beyond end of device [ 257.740059][ T287] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 257.813950][ T4489] loop2: detected capacity change from 0 to 512 [ 258.090519][ T4489] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.976: casefold flag without casefold feature [ 258.118732][ T4489] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.976: couldn't read orphan inode 15 (err -117) [ 258.147234][ T4489] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 259.108096][ T288] EXT4-fs (loop2): unmounting filesystem. [ 259.149642][ T289] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 259.160382][ T4505] loop0: detected capacity change from 0 to 512 [ 259.203793][ T4505] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.980: casefold flag without casefold feature [ 259.788833][ T4505] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.980: couldn't read orphan inode 15 (err -117) [ 259.801751][ T4505] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 259.982807][ T4516] loop4: detected capacity change from 0 to 512 [ 260.534714][ T4516] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.982: casefold flag without casefold feature [ 260.547874][ T4516] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.982: couldn't read orphan inode 15 (err -117) [ 260.560416][ T4516] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 260.609413][ T285] EXT4-fs (loop0): unmounting filesystem. [ 260.615288][ T289] usb 4-1: config 0 has no interfaces? [ 260.631108][ T289] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 260.649577][ T289] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.657647][ T289] usb 4-1: Product: syz [ 260.661855][ T289] usb 4-1: Manufacturer: syz [ 260.666450][ T289] usb 4-1: SerialNumber: syz [ 260.719882][ T289] usb 4-1: config 0 descriptor?? [ 261.367813][ T286] EXT4-fs (loop4): unmounting filesystem. [ 261.373892][ T289] usb 4-1: USB disconnect, device number 35 [ 261.390798][ T4525] loop2: detected capacity change from 0 to 40427 [ 261.407574][ T4525] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 261.421692][ T4525] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 261.441659][ T4525] F2FS-fs (loop2): Found nat_bits in checkpoint [ 261.477792][ T4525] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 261.493183][ T4525] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 261.530217][ T288] syz-executor: attempt to access beyond end of device [ 261.530217][ T288] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 261.548019][ T4542] loop3: detected capacity change from 0 to 256 [ 261.554770][ T4542] FAT-fs (loop3): Unrecognized mount option "sj€ëname=winnt" or missing value [ 261.581781][ T4544] loop0: detected capacity change from 0 to 512 [ 261.590665][ T415] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 261.637186][ T4544] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.990: casefold flag without casefold feature [ 261.660872][ T4544] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.990: couldn't read orphan inode 15 (err -117) [ 261.679605][ T309] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 261.687592][ T4544] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 261.911398][ T309] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 261.921293][ T309] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65344, setting to 1024 [ 262.864735][ T309] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 262.877424][ T4559] 9pnet_fd: p9_fd_create_unix (4559): problem connecting socket: éq‰Y’3aK: -111 [ 262.890958][ T285] EXT4-fs (loop0): unmounting filesystem. [ 262.905660][ T309] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 262.928807][ T4559] futex_wake_op: syz.3.992 tries to shift op by 32; fix this program [ 263.008026][ T4561] loop1: detected capacity change from 0 to 512 [ 263.023552][ T4561] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.994: casefold flag without casefold feature [ 263.030559][ T4564] loop0: detected capacity change from 0 to 256 [ 263.046796][ T309] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.046882][ T4561] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.994: couldn't read orphan inode 15 (err -117) [ 263.054932][ T309] usb 5-1: Product: syz [ 263.073266][ T4561] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 263.083635][ T309] usb 5-1: Manufacturer: syz [ 264.568118][ T309] usb 5-1: SerialNumber: syz [ 264.606480][ T4573] 9pnet_fd: p9_fd_create_unix (4573): problem connecting socket: éq‰Y’3aK: -111 [ 264.608933][ T309] usb 5-1: config 0 descriptor?? [ 264.621696][ T4536] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 264.629220][ T4536] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 264.663047][ T284] EXT4-fs (loop1): unmounting filesystem. [ 264.702930][ T4573] futex_wake_op: syz.2.996 tries to shift op by 32; fix this program [ 264.847230][ T309] dm9601: probe of 5-1:0.0 failed with error -71 [ 264.860268][ T309] usb 5-1: USB disconnect, device number 36 [ 264.940465][ T4583] loop1: detected capacity change from 0 to 40427 [ 264.950507][ T4583] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 264.957494][ T4583] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 264.967154][ T623] Bluetooth: hci0: command 0x1003 tx timeout [ 264.973331][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 264.982733][ T4583] F2FS-fs (loop1): Found nat_bits in checkpoint [ 264.997025][ T4587] loop3: detected capacity change from 0 to 512 [ 265.031046][ T4587] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.1001: casefold flag without casefold feature [ 265.034909][ T4583] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 265.044113][ T4587] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1001: couldn't read orphan inode 15 (err -117) [ 265.052229][ T4583] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 265.063366][ T4587] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 265.099569][ T289] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 265.108821][ T284] syz-executor: attempt to access beyond end of device [ 265.108821][ T284] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 265.288281][ T4592] loop1: detected capacity change from 0 to 256 [ 265.290639][ T289] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 265.295055][ T4592] FAT-fs (loop1): Unrecognized mount option "sj€ëname=winnt" or missing value [ 265.304461][ T289] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65344, setting to 1024 [ 265.326423][ T289] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 265.344784][ T289] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 265.354226][ T289] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.362279][ T289] usb 1-1: Product: syz [ 265.366521][ T289] usb 1-1: Manufacturer: syz [ 265.371177][ T289] usb 1-1: SerialNumber: syz [ 265.376742][ T415] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 265.396045][ T289] usb 1-1: config 0 descriptor?? [ 265.409008][ T4581] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 265.421771][ T4581] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 265.634110][ T4581] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 265.641582][ T4581] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 265.962958][ T287] EXT4-fs (loop3): unmounting filesystem. [ 265.977236][ T4602] loop3: detected capacity change from 0 to 512 [ 265.986604][ T4602] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.1004: casefold flag without casefold feature [ 265.999902][ T4602] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1004: couldn't read orphan inode 15 (err -117) [ 266.011900][ T4602] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 266.124134][ T289] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 266.898147][ T45] Bluetooth: hci1: command 0x1003 tx timeout [ 266.904176][ T844] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 266.913589][ T4608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.915152][ T1421] hid-generic FFFC:0003:0000.0032: unknown main item tag 0x0 [ 266.929382][ T1421] hid-generic FFFC:0003:0000.0032: unknown main item tag 0x0 [ 266.936866][ T1421] hid-generic FFFC:0003:0000.0032: unknown main item tag 0x0 [ 266.945517][ T4608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.952932][ T4610] loop2: detected capacity change from 0 to 512 [ 266.954558][ T1421] hid-generic FFFC:0003:0000.0032: unknown main item tag 0x0 [ 267.232645][ T287] EXT4-fs (loop3): unmounting filesystem. [ 267.260016][ T1421] hid-generic FFFC:0003:0000.0032: unknown main item tag 0x0 [ 267.267551][ T1421] hid-generic FFFC:0003:0000.0032: unknown main item tag 0x0 [ 267.278192][ T4608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.332282][ T4608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.345751][ T4616] 9pnet_fd: p9_fd_create_unix (4616): problem connecting socket: éq‰Y’3aK: -111 [ 267.358530][ T4616] futex_wake_op: syz.3.1007 tries to shift op by 32; fix this program [ 267.373246][ T1421] hid-generic FFFC:0003:0000.0032: hidraw0: HID v0.00 Device [syz1] on syz0 [ 267.390743][ T289] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 267.400438][ T4610] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.1006: casefold flag without casefold feature [ 267.427205][ T289] usb 1-1: USB disconnect, device number 35 [ 267.465453][ T4620] loop3: detected capacity change from 0 to 256 [ 267.472154][ T4610] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1006: couldn't read orphan inode 15 (err -117) [ 267.485983][ T4610] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 267.896632][ T4623] fido_id[4623]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 269.146203][ T288] EXT4-fs (loop2): unmounting filesystem. [ 269.159574][ T4600] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 269.189653][ T4635] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4635 comm=syz.2.1011 [ 269.630613][ T4600] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 269.645850][ T4600] usb 2-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 269.655129][ T4600] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.663641][ T4600] usb 2-1: Product: syz [ 269.667832][ T4600] usb 2-1: Manufacturer: syz [ 269.672624][ T4600] usb 2-1: SerialNumber: syz [ 269.681134][ T4600] usb 2-1: config 0 descriptor?? [ 269.693345][ T4600] hub 2-1:0.0: bad descriptor, ignoring hub [ 269.704374][ T4600] hub: probe of 2-1:0.0 failed with error -5 [ 269.713602][ T4637] loop4: detected capacity change from 0 to 40427 [ 269.724886][ T4600] snd-usb-audio: probe of 2-1:0.0 failed with error -2 [ 269.735203][ T4637] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 269.743529][ T415] udevd[415]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 269.749580][ T4637] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 269.759249][ T289] usb 3-1: new low-speed USB device number 31 using dummy_hcd [ 269.790777][ T4637] F2FS-fs (loop4): Found nat_bits in checkpoint [ 269.848926][ T4637] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 269.856138][ T4637] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 269.891286][ T4622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.901009][ T286] syz-executor: attempt to access beyond end of device [ 269.901009][ T286] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 269.916708][ T4622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.987800][ T289] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 270.002948][ T289] usb 3-1: config 1 has no interface number 1 [ 270.097760][ T289] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 270.112778][ T289] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 270.126151][ T289] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 0 [ 270.184627][ T289] usb 3-1: string descriptor 0 read error: -22 [ 270.204715][ T289] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 270.233121][ T289] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.269746][ T289] usb 3-1: low speed audio streaming not supported [ 270.521768][ T289] usb 3-1: USB disconnect, device number 31 [ 270.544128][ T4652] loop4: detected capacity change from 0 to 256 [ 270.550893][ T4652] FAT-fs (loop4): Unrecognized mount option "sj€ëname=winnt" or missing value [ 270.769805][ T4656] loop0: detected capacity change from 0 to 512 [ 270.790049][ T4656] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.1018: casefold flag without casefold feature [ 270.803758][ T4656] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.1018: couldn't read orphan inode 15 (err -117) [ 271.490248][ T4656] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 271.650068][ T4662] 9pnet_fd: p9_fd_create_unix (4662): problem connecting socket: éq‰Y’3aK: -111 [ 271.662866][ T4662] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 271.694301][ T4662] futex_wake_op: syz.4.1019 tries to shift op by 32; fix this program [ 272.670279][ T1439] usb 2-1: USB disconnect, device number 33 [ 272.678110][ T285] EXT4-fs (loop0): unmounting filesystem. [ 272.696715][ T4674] loop0: detected capacity change from 0 to 256 [ 272.715038][ T4668] loop1: detected capacity change from 0 to 40427 [ 272.744660][ T4668] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 272.757687][ T4668] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 272.821481][ T4668] F2FS-fs (loop1): Found nat_bits in checkpoint [ 273.027698][ T4668] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 273.071414][ T4668] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 273.110994][ T284] syz-executor: attempt to access beyond end of device [ 273.110994][ T284] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 273.627830][ T4692] loop0: detected capacity change from 0 to 512 [ 273.644987][ T4692] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.1028: casefold flag without casefold feature [ 273.658227][ T4692] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.1028: couldn't read orphan inode 15 (err -117) [ 273.689741][ T4692] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 273.749621][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 273.755672][ T844] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 273.809642][ T4702] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4702 comm=syz.4.1031 [ 274.885437][ T309] usb 5-1: new low-speed USB device number 37 using dummy_hcd [ 274.922656][ T285] EXT4-fs (loop0): unmounting filesystem. [ 274.953105][ T4711] loop2: detected capacity change from 0 to 512 [ 275.012172][ T4711] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.1033: casefold flag without casefold feature [ 275.025083][ T4711] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1033: couldn't read orphan inode 15 (err -117) [ 276.410196][ T4722] loop1: detected capacity change from 0 to 512 [ 276.430088][ T4711] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 276.551249][ T24] hid-generic FFFC:0003:0000.0033: unknown main item tag 0x0 [ 276.559095][ T24] hid-generic FFFC:0003:0000.0033: unknown main item tag 0x0 [ 276.566562][ T24] hid-generic FFFC:0003:0000.0033: unknown main item tag 0x0 [ 276.574048][ T24] hid-generic FFFC:0003:0000.0033: unknown main item tag 0x0 [ 276.581509][ T24] hid-generic FFFC:0003:0000.0033: unknown main item tag 0x0 [ 276.588358][ T4730] loop3: detected capacity change from 0 to 512 [ 276.589070][ T309] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 276.597329][ T4730] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.1038: casefold flag without casefold feature [ 276.604343][ T24] hid-generic FFFC:0003:0000.0033: unknown main item tag 0x0 [ 277.350936][ T309] usb 5-1: config 1 has no interface number 1 [ 277.357221][ T309] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 277.385520][ T4730] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1038: couldn't read orphan inode 15 (err -117) [ 277.590703][ T4730] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 277.600412][ T288] EXT4-fs (loop2): unmounting filesystem. [ 277.639448][ T309] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 277.686228][ T24] hid-generic FFFC:0003:0000.0033: hidraw0: HID v0.00 Device [syz1] on syz0 [ 277.696059][ T309] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 0 [ 277.711339][ T415] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 277.733515][ T309] usb 5-1: string descriptor 0 read error: -71 [ 277.936354][ T4748] 9pnet_fd: p9_fd_create_unix (4748): problem connecting socket: éq‰Y’3aK: -111 [ 277.986158][ T4747] fido_id[4747]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 278.008334][ T309] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 278.017557][ T309] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.027233][ T309] usb 5-1: can't set config #1, error -71 [ 278.034331][ T309] usb 5-1: USB disconnect, device number 37 [ 278.050641][ T4748] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 278.067490][ T4748] futex_wake_op: syz.4.1041 tries to shift op by 32; fix this program [ 278.329607][ T28] audit: type=1400 audit(1751416033.932:179): avc: denied { write } for pid=4739 comm="syz.2.1040" name="route" dev="proc" ino=4026532566 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 278.380985][ T287] EXT4-fs (loop3): unmounting filesystem. [ 279.376553][ T4774] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4774 comm=syz.3.1049 [ 280.445478][ T4777] loop2: detected capacity change from 0 to 256 [ 280.452203][ T4777] FAT-fs (loop2): Unrecognized mount option "sj€ëname=winnt" or missing value [ 280.463748][ T844] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 280.511390][ T4786] loop0: detected capacity change from 0 to 256 [ 280.518955][ T415] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 280.539650][ T308] usb 4-1: new low-speed USB device number 36 using dummy_hcd [ 280.920832][ T308] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 280.930001][ T308] usb 4-1: config 1 has no interface number 1 [ 280.936354][ T308] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 280.981635][ T1439] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 280.989716][ T308] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 281.002694][ T308] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 0 [ 281.016204][ T308] usb 4-1: string descriptor 0 read error: -22 [ 281.022410][ T308] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 281.031525][ T308] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.285138][ T4792] loop1: detected capacity change from 0 to 512 [ 281.325473][ T415] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 281.328334][ T308] usb 4-1: low speed audio streaming not supported [ 281.430552][ T1439] usb 5-1: config 0 has no interfaces? [ 281.438524][ T1439] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 281.447642][ T1439] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.455708][ T1439] usb 5-1: Product: syz [ 281.459922][ T1439] usb 5-1: Manufacturer: syz [ 281.464544][ T1439] usb 5-1: SerialNumber: syz [ 281.473068][ T1439] usb 5-1: config 0 descriptor?? [ 281.495058][ T4798] loop0: detected capacity change from 0 to 40427 [ 281.505410][ T4798] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 281.516859][ T4798] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 281.528096][ T4798] F2FS-fs (loop0): Found nat_bits in checkpoint [ 281.532537][ T1439] usb 4-1: USB disconnect, device number 36 [ 281.563810][ T4798] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 281.571008][ T4798] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 281.604162][ T285] syz-executor: attempt to access beyond end of device [ 281.604162][ T285] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 281.681190][ T4785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.689824][ T4785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.901855][ T4828] 9pnet_fd: p9_fd_create_unix (4828): problem connecting socket: éq‰Y’3aK: -111 [ 282.913158][ T4828] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 282.925089][ T4828] futex_wake_op: syz.2.1064 tries to shift op by 32; fix this program [ 283.594165][ T1439] usb 5-1: USB disconnect, device number 38 [ 283.643205][ T4837] loop0: detected capacity change from 0 to 256 [ 283.645128][ T4838] loop4: detected capacity change from 0 to 512 [ 283.661645][ T4838] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.1066: casefold flag without casefold feature [ 283.676203][ T4838] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1066: couldn't read orphan inode 15 (err -117) [ 283.689781][ T4838] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 284.467037][ T4845] loop1: detected capacity change from 0 to 40427 [ 284.506258][ T4845] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 284.512908][ T4845] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 284.548268][ T286] EXT4-fs (loop4): unmounting filesystem. [ 284.747144][ T4845] F2FS-fs (loop1): Found nat_bits in checkpoint [ 284.797019][ T4862] loop4: detected capacity change from 0 to 512 [ 284.810931][ T4845] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 284.819343][ T4862] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.1073: casefold flag without casefold feature [ 284.832756][ T4845] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 284.861932][ T4862] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1073: couldn't read orphan inode 15 (err -117) [ 284.876504][ T4862] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 284.892147][ T284] syz-executor: attempt to access beyond end of device [ 284.892147][ T284] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 284.940308][ T4860] loop0: detected capacity change from 0 to 40427 [ 284.949580][ T844] Bluetooth: hci0: command 0x1003 tx timeout [ 284.955604][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 284.967693][ T4860] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 284.974662][ T4860] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 284.994165][ T4860] F2FS-fs (loop0): Found nat_bits in checkpoint [ 285.062145][ T4860] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 285.069358][ T4860] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 285.111362][ T285] syz-executor: attempt to access beyond end of device [ 285.111362][ T285] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 285.205330][ T4875] loop0: detected capacity change from 0 to 256 [ 285.299627][ T4422] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 285.501473][ T4422] usb 3-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 285.571861][ T4422] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.607050][ T4422] usb 3-1: config 0 descriptor?? [ 285.719571][ T289] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 285.861091][ T286] EXT4-fs (loop4): unmounting filesystem. [ 285.910872][ T289] usb 4-1: config 0 has no interfaces? [ 285.918127][ T289] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 285.928791][ T289] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.938658][ T289] usb 4-1: Product: syz [ 285.943151][ T289] usb 4-1: Manufacturer: syz [ 285.947791][ T289] usb 4-1: SerialNumber: syz [ 285.980008][ T289] usb 4-1: config 0 descriptor?? [ 286.046476][ T4882] loop4: detected capacity change from 0 to 40427 [ 286.056549][ T4882] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 286.625945][ T4878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.640767][ T4882] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 286.641967][ T4878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.665625][ T4882] F2FS-fs (loop4): Found nat_bits in checkpoint [ 286.708570][ T4882] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 286.715794][ T4882] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 286.787367][ T286] syz-executor: attempt to access beyond end of device [ 286.787367][ T286] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 286.953429][ T4901] loop1: detected capacity change from 0 to 256 [ 287.034098][ T4902] loop4: detected capacity change from 0 to 256 [ 287.040864][ T4902] FAT-fs (loop4): Unrecognized mount option "sj€ëname=winnt" or missing value [ 287.095252][ T4904] loop4: detected capacity change from 0 to 512 [ 287.108392][ T4904] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.1085: casefold flag without casefold feature [ 287.123707][ T4904] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1085: couldn't read orphan inode 15 (err -117) [ 287.135978][ T4904] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 288.040897][ T4422] usbhid 3-1:0.0: can't add hid device: -71 [ 288.054551][ T4422] usbhid: probe of 3-1:0.0 failed with error -71 [ 288.062483][ T286] EXT4-fs (loop4): unmounting filesystem. [ 288.071111][ T4913] loop0: detected capacity change from 0 to 512 [ 288.075375][ T4422] usb 3-1: USB disconnect, device number 32 [ 288.085110][ T4915] loop1: detected capacity change from 0 to 512 [ 288.088865][ T4917] loop2: detected capacity change from 0 to 512 [ 288.107390][ T4917] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.1089: casefold flag without casefold feature [ 288.122000][ T4913] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.1086: casefold flag without casefold feature [ 288.137198][ T4915] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.1088: casefold flag without casefold feature [ 288.152830][ T4915] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.1088: couldn't read orphan inode 15 (err -117) [ 288.153592][ T4917] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1089: couldn't read orphan inode 15 (err -117) [ 288.165698][ T4913] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.1086: couldn't read orphan inode 15 (err -117) [ 288.188358][ T4915] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 288.188577][ T4917] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 288.209448][ T4913] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 288.369639][ T309] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 288.870128][ T4422] usb 4-1: USB disconnect, device number 37 [ 288.961785][ T285] EXT4-fs (loop0): unmounting filesystem. [ 288.976582][ T4935] loop0: detected capacity change from 0 to 512 [ 288.984028][ T309] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 288.994464][ T309] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65344, setting to 1024 [ 289.006175][ T309] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 289.012974][ T4935] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.1091: casefold flag without casefold feature [ 289.026568][ T309] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 289.038004][ T309] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.085803][ T309] usb 5-1: Product: syz [ 289.090046][ T309] usb 5-1: Manufacturer: syz [ 289.094661][ T309] usb 5-1: SerialNumber: syz [ 289.164837][ T4935] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.1091: couldn't read orphan inode 15 (err -117) [ 289.206968][ T309] usb 5-1: config 0 descriptor?? [ 289.216979][ T288] EXT4-fs (loop2): unmounting filesystem. [ 289.301919][ T4923] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 289.302850][ T4935] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 289.309205][ T4923] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 289.748394][ T4923] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 289.800314][ T4923] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 289.816019][ T284] EXT4-fs (loop1): unmounting filesystem. [ 289.836172][ T285] EXT4-fs (loop0): unmounting filesystem. [ 289.870736][ T4952] loop1: detected capacity change from 0 to 256 [ 289.955389][ T4954] loop0: detected capacity change from 0 to 256 [ 289.962099][ T4954] FAT-fs (loop0): Unrecognized mount option "sj€ëname=winnt" or missing value [ 290.635180][ T4965] loop2: detected capacity change from 0 to 512 [ 290.760066][ T309] Error reading MAC address [ 290.781027][ T4965] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.1098: casefold flag without casefold feature [ 290.800887][ T4965] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1098: couldn't read orphan inode 15 (err -117) [ 290.812985][ T4965] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 291.269557][ T308] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 291.277157][ T1439] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 291.343198][ T4978] 9pnet_fd: p9_fd_create_unix (4978): problem connecting socket: éq‰Y’3aK: -111 [ 291.354205][ T4978] futex_wake_op: syz.0.1101 tries to shift op by 32; fix this program [ 291.372329][ T4980] loop0: detected capacity change from 0 to 512 [ 291.381717][ T4980] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.1102: casefold flag without casefold feature [ 291.394551][ T4980] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.1102: couldn't read orphan inode 15 (err -117) [ 291.406645][ T4980] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 291.430311][ T4959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.445592][ T4959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.455135][ T4959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.472119][ T4959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.480671][ T308] usb 2-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 291.490779][ T308] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.499867][ T288] EXT4-fs (loop2): unmounting filesystem. [ 291.500180][ T1439] usb 4-1: config 0 has no interfaces? [ 291.512531][ T308] usb 2-1: config 0 descriptor?? [ 291.530827][ T1439] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 291.539993][ T1439] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.547998][ T1439] usb 4-1: Product: syz [ 291.646118][ T309] hid-generic FFFC:0003:0000.0034: unknown main item tag 0x0 [ 291.656346][ T309] hid-generic FFFC:0003:0000.0034: unknown main item tag 0x0 [ 291.664511][ T309] hid-generic FFFC:0003:0000.0034: unknown main item tag 0x0 [ 291.672389][ T309] hid-generic FFFC:0003:0000.0034: unknown main item tag 0x0 [ 291.811449][ T309] hid-generic FFFC:0003:0000.0034: unknown main item tag 0x0 [ 291.819439][ T309] hid-generic FFFC:0003:0000.0034: unknown main item tag 0x0 [ 291.830721][ T309] hid-generic FFFC:0003:0000.0034: hidraw0: HID v0.00 Device [syz1] on syz0 [ 292.016115][ T1439] usb 4-1: Manufacturer: syz [ 292.020824][ T1439] usb 4-1: SerialNumber: syz [ 292.026338][ T1439] usb 4-1: config 0 descriptor?? [ 292.229731][ T285] EXT4-fs (loop0): unmounting filesystem. [ 292.242352][ T4973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.247342][ T4990] loop0: detected capacity change from 0 to 512 [ 292.252571][ T4973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.259458][ T4990] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.1104: casefold flag without casefold feature [ 292.277896][ T4990] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.1104: couldn't read orphan inode 15 (err -117) [ 292.291424][ T4990] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 292.515847][ T39] usb 5-1: USB disconnect, device number 39 [ 292.835187][ T5005] loop4: detected capacity change from 0 to 256 [ 293.290362][ T285] EXT4-fs (loop0): unmounting filesystem. [ 293.366342][ T5009] loop0: detected capacity change from 0 to 256 [ 293.373178][ T5009] FAT-fs (loop0): Unrecognized mount option "sj€ëname=winnt" or missing value [ 293.410112][ T5013] loop0: detected capacity change from 0 to 256 [ 293.600790][ T1439] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 293.810594][ T308] usbhid 2-1:0.0: can't add hid device: -71 [ 293.825391][ T308] usbhid: probe of 2-1:0.0 failed with error -71 [ 293.841086][ T308] usb 2-1: USB disconnect, device number 34 [ 293.860878][ T1439] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 293.878399][ T1439] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 293.891323][ T1439] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 293.904725][ T1439] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.912957][ T1439] usb 3-1: Product: syz [ 293.917110][ T1439] usb 3-1: Manufacturer: syz [ 293.921923][ T1439] usb 3-1: SerialNumber: syz [ 293.927148][ T1439] usb 3-1: config 0 descriptor?? [ 293.932409][ T5011] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 293.939765][ T5011] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 294.083718][ T5024] loop3: detected capacity change from 0 to 512 [ 294.146390][ T5024] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.1113: casefold flag without casefold feature [ 294.166720][ T5024] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1113: couldn't read orphan inode 15 (err -117) [ 294.173494][ T4600] usb 4-1: USB disconnect, device number 38 [ 294.184564][ T5024] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 294.188387][ T5011] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 294.200923][ T5011] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 294.279453][ T5028] loop0: detected capacity change from 0 to 2048 [ 294.300382][ T5028] loop0: p1 < > p3 p4 < > [ 294.308489][ T5028] loop0: p3 start 4284289 is beyond EOD, truncated [ 294.523042][ T314] udevd[314]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 294.523157][ T4925] udevd[4925]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 294.848988][ T1439] Error reading MAC address [ 294.861437][ T1439] usb 3-1: USB disconnect, device number 33 [ 294.919061][ T287] EXT4-fs (loop3): unmounting filesystem. [ 294.943478][ T5043] loop3: detected capacity change from 0 to 512 [ 294.964651][ T5043] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.1118: casefold flag without casefold feature [ 294.977425][ T5043] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1118: couldn't read orphan inode 15 (err -117) [ 294.989385][ T5043] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 295.341222][ T5052] loop0: detected capacity change from 0 to 512 [ 295.352004][ T5052] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.1119: casefold flag without casefold feature [ 295.365073][ T5052] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.1119: couldn't read orphan inode 15 (err -117) [ 295.377214][ T5052] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 295.867570][ T287] EXT4-fs (loop3): unmounting filesystem. [ 296.259738][ T4422] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 296.334393][ T285] EXT4-fs (loop0): unmounting filesystem. [ 296.355723][ T5076] 9pnet_fd: p9_fd_create_unix (5076): problem connecting socket: éq‰Y’3aK: -111 [ 296.368861][ T5076] futex_wake_op: syz.0.1124 tries to shift op by 32; fix this program [ 296.391152][ T5079] 9pnet_fd: p9_fd_create_unix (5079): problem connecting socket: éq‰Y’3aK: -111 [ 296.402673][ T5079] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 296.411125][ T5079] futex_wake_op: syz.0.1126 tries to shift op by 32; fix this program [ 296.450693][ T4422] usb 4-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 296.459798][ T4422] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.482607][ T4422] usb 4-1: config 0 descriptor?? [ 297.269466][ T5090] loop2: detected capacity change from 0 to 512 [ 297.279472][ T5090] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.1129: casefold flag without casefold feature [ 297.292461][ T5090] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1129: couldn't read orphan inode 15 (err -117) [ 297.304745][ T5090] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 298.123721][ T288] EXT4-fs (loop2): unmounting filesystem. [ 298.469577][ T844] Bluetooth: hci0: command 0x1003 tx timeout [ 298.469595][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 298.533359][ T5110] 9pnet_fd: p9_fd_create_unix (5110): problem connecting socket: éq‰Y’3aK: -111 [ 298.578775][ T5110] futex_wake_op: syz.1.1135 tries to shift op by 32; fix this program [ 298.900212][ T4422] usbhid 4-1:0.0: can't add hid device: -71 [ 298.906544][ T4422] usbhid: probe of 4-1:0.0 failed with error -71 [ 299.798192][ T4422] usb 4-1: USB disconnect, device number 39 [ 299.909745][ T5131] loop2: detected capacity change from 0 to 512 [ 299.952515][ T5131] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.1142: casefold flag without casefold feature [ 299.980428][ T5131] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1142: couldn't read orphan inode 15 (err -117) [ 300.009705][ T5131] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 300.083942][ T5129] loop3: detected capacity change from 0 to 40427 [ 300.094923][ T5129] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 300.102026][ T5129] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 300.120611][ T5129] F2FS-fs (loop3): Found nat_bits in checkpoint [ 300.681027][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 300.698218][ T5129] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 300.710006][ T5129] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 300.713533][ T5145] 9pnet_fd: p9_fd_create_unix (5145): problem connecting socket: éq‰Y’3aK: -111 [ 300.731102][ T5145] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 300.742593][ T5145] futex_wake_op: syz.0.1145 tries to shift op by 32; fix this program [ 301.015543][ T288] EXT4-fs (loop2): unmounting filesystem. [ 301.027326][ T287] syz-executor: attempt to access beyond end of device [ 301.027326][ T287] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 301.113347][ T5154] loop1: detected capacity change from 0 to 256 [ 301.499630][ T4422] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 301.680603][ T4422] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 301.690425][ T4422] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65344, setting to 1024 [ 301.701590][ T4422] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 301.713060][ T4422] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 301.722149][ T4422] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.730166][ T4422] usb 5-1: Product: syz [ 301.734338][ T4422] usb 5-1: Manufacturer: syz [ 301.738920][ T4422] usb 5-1: SerialNumber: syz [ 301.744035][ T4422] usb 5-1: config 0 descriptor?? [ 301.749223][ T5157] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 301.756419][ T5157] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 301.965804][ T5157] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 301.973258][ T5157] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 302.789587][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 302.789605][ T389] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 302.871755][ T5184] loop1: detected capacity change from 0 to 512 [ 302.880389][ T5184] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.1157: casefold flag without casefold feature [ 302.893485][ T5184] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.1157: couldn't read orphan inode 15 (err -117) [ 302.905660][ T5184] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 303.039747][ T24] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 303.111707][ T4422] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 303.171198][ T4422] dm9601 5-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.4-1, Davicom DM96xx USB 10/100 Ethernet, 6e:f1:98:9e:dd:08 [ 303.193867][ T4422] usb 5-1: USB disconnect, device number 40 [ 303.201699][ T4422] dm9601 5-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.4-1, Davicom DM96xx USB 10/100 Ethernet [ 303.212525][ T24] usb 3-1: device descriptor read/64, error -71 [ 303.377495][ T5219] loop3: detected capacity change from 0 to 512 [ 303.499587][ T24] usb 3-1: device descriptor read/64, error -71 [ 303.778539][ T284] EXT4-fs (loop1): unmounting filesystem. [ 303.815984][ T4422] hid-generic FFFC:0003:0000.0035: unknown main item tag 0x0 [ 303.823605][ T4422] hid-generic FFFC:0003:0000.0035: unknown main item tag 0x0 [ 303.831178][ T4422] hid-generic FFFC:0003:0000.0035: unknown main item tag 0x0 [ 303.838620][ T4422] hid-generic FFFC:0003:0000.0035: unknown main item tag 0x0 [ 303.846090][ T4422] hid-generic FFFC:0003:0000.0035: unknown main item tag 0x0 [ 303.853657][ T4422] hid-generic FFFC:0003:0000.0035: unknown main item tag 0x0 [ 303.861558][ T4422] hid-generic FFFC:0003:0000.0035: hidraw0: HID v0.00 Device [syz1] on syz0 [ 303.890089][ T24] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 303.900843][ T5236] loop4: detected capacity change from 0 to 256 [ 304.178309][ T24] usb 3-1: device descriptor read/64, error -71 [ 304.459650][ T24] usb 3-1: device descriptor read/64, error -71 [ 304.579779][ T24] usb usb3-port1: attempt power cycle [ 304.816164][ T5249] 9pnet_fd: p9_fd_create_unix (5249): problem connecting socket: éq‰Y’3aK: -111 [ 304.834888][ T5249] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 304.842378][ T5249] futex_wake_op: syz.4.1167 tries to shift op by 32; fix this program [ 304.848753][ T5243] loop1: detected capacity change from 0 to 40427 [ 304.860528][ T5243] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 304.868274][ T5243] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 304.877250][ T5243] F2FS-fs (loop1): invalid crc value [ 304.883785][ T5243] F2FS-fs (loop1): Found nat_bits in checkpoint [ 304.905510][ T5243] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 304.912910][ T5243] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 304.944752][ T5242] syz.1.1164[5242] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 304.944802][ T5242] syz.1.1164[5242] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 305.059583][ T24] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 305.115998][ T24] usb 3-1: device descriptor read/8, error -71 [ 305.301092][ T24] usb 3-1: device descriptor read/8, error -71 [ 305.441086][ T5263] loop3: detected capacity change from 0 to 512 [ 305.451329][ T5263] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.1170: casefold flag without casefold feature [ 305.464173][ T5263] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1170: couldn't read orphan inode 15 (err -117) [ 305.476252][ T5263] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 305.600068][ T24] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 305.640615][ T24] usb 3-1: device descriptor read/8, error -71 [ 305.780509][ T5272] loop2: detected capacity change from 0 to 512 [ 305.790291][ T5272] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.1172: casefold flag without casefold feature [ 305.790531][ T24] usb 3-1: device descriptor read/8, error -71 [ 305.803290][ T5272] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1172: couldn't read orphan inode 15 (err -117) [ 305.821256][ T5272] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 306.365089][ T24] usb usb3-port1: unable to enumerate USB device [ 306.378023][ T287] EXT4-fs (loop3): unmounting filesystem. [ 306.436893][ T5284] loop0: detected capacity change from 0 to 512 [ 306.447473][ T5284] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.1176: casefold flag without casefold feature [ 306.462763][ T5284] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.1176: couldn't read orphan inode 15 (err -117) [ 306.484102][ T5284] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 306.758533][ T288] EXT4-fs (loop2): unmounting filesystem. [ 306.869590][ T844] Bluetooth: hci0: command 0x1003 tx timeout [ 306.875638][ T389] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 306.905239][ T5296] loop4: detected capacity change from 0 to 512 [ 306.929140][ T5296] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.1179: casefold flag without casefold feature [ 306.943323][ T5296] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1179: couldn't read orphan inode 15 (err -117) [ 306.955630][ T5296] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 307.159564][ T4346] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 307.296477][ T285] EXT4-fs (loop0): unmounting filesystem. [ 307.350634][ T4346] usb 3-1: config 0 has no interfaces? [ 307.357498][ T4346] usb 3-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 307.366622][ T4346] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.374666][ T4346] usb 3-1: Product: syz [ 307.378841][ T4346] usb 3-1: Manufacturer: syz [ 307.383485][ T4346] usb 3-1: SerialNumber: syz [ 307.388750][ T4346] usb 3-1: config 0 descriptor?? [ 307.595830][ T5292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.604420][ T5292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.754985][ T286] EXT4-fs (loop4): unmounting filesystem. [ 308.009641][ T4346] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 308.169556][ T4346] usb 2-1: device descriptor read/64, error -71 [ 308.244581][ T5314] loop3: detected capacity change from 0 to 40427 [ 308.254096][ T5314] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 308.260780][ T5314] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 308.271031][ T5314] F2FS-fs (loop3): Found nat_bits in checkpoint [ 308.294074][ T5314] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 308.301275][ T5314] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 308.332544][ T287] syz-executor: attempt to access beyond end of device [ 308.332544][ T287] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 308.441079][ T4346] usb 2-1: device descriptor read/64, error -71 [ 308.626229][ T5328] loop4: detected capacity change from 0 to 512 [ 308.635374][ T5328] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.1188: casefold flag without casefold feature [ 308.648454][ T5328] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1188: couldn't read orphan inode 15 (err -117) [ 308.660430][ T5328] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 308.709576][ T308] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 308.709572][ T4346] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 308.884341][ T4346] usb 2-1: device descriptor read/64, error -71 [ 309.020554][ T308] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 309.030371][ T308] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65344, setting to 1024 [ 309.041524][ T308] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 309.052804][ T308] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 309.061875][ T308] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.069862][ T308] usb 4-1: Product: syz [ 309.074012][ T308] usb 4-1: Manufacturer: syz [ 309.078599][ T308] usb 4-1: SerialNumber: syz [ 309.084052][ T308] usb 4-1: config 0 descriptor?? [ 309.089277][ T5326] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 309.096525][ T5326] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 309.159632][ T4346] usb 2-1: device descriptor read/64, error -71 [ 309.279781][ T4346] usb usb2-port1: attempt power cycle [ 309.315416][ T5326] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 309.323716][ T5326] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 309.480729][ T286] EXT4-fs (loop4): unmounting filesystem. [ 309.718410][ T4346] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 309.761031][ T4346] usb 2-1: device descriptor read/8, error -71 [ 309.874627][ T708] usb 3-1: USB disconnect, device number 38 [ 309.902074][ T5344] 9pnet_fd: p9_fd_create_unix (5344): problem connecting socket: éq‰Y’3aK: -111 [ 309.913380][ T5344] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 309.920486][ T5344] futex_wake_op: syz.2.1191 tries to shift op by 32; fix this program [ 309.930542][ T4346] usb 2-1: device descriptor read/8, error -71 [ 309.981764][ T5346] loop0: detected capacity change from 0 to 256 [ 310.209862][ T4346] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 310.257607][ T4346] usb 2-1: device descriptor read/8, error -71 [ 310.313465][ T308] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 310.324465][ T308] dm9601 4-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet, 6e:f1:98:9e:dd:08 [ 310.344417][ T308] usb 4-1: USB disconnect, device number 40 [ 310.350772][ T308] dm9601 4-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet [ 310.377251][ T5350] loop4: detected capacity change from 0 to 256 [ 310.410653][ T4346] usb 2-1: device descriptor read/8, error -71 [ 310.529770][ T4346] usb usb2-port1: unable to enumerate USB device [ 311.256217][ T708] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 311.450626][ T708] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 311.460499][ T708] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 311.471812][ T708] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 311.483306][ T708] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 311.492468][ T708] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.500588][ T708] usb 4-1: Product: syz [ 311.504770][ T708] usb 4-1: Manufacturer: syz [ 311.509363][ T708] usb 4-1: SerialNumber: syz [ 311.514808][ T708] usb 4-1: config 0 descriptor?? [ 311.520031][ T5356] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 311.527240][ T5356] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 311.754761][ T5356] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 311.783301][ T5356] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 311.989623][ T844] Bluetooth: hci0: command 0x1003 tx timeout [ 311.989638][ T389] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 312.016895][ T5369] loop2: detected capacity change from 0 to 512 [ 312.046286][ T5369] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.1200: casefold flag without casefold feature [ 312.059160][ T5369] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1200: couldn't read orphan inode 15 (err -117) [ 312.059303][ T5367] loop0: detected capacity change from 0 to 40427 [ 312.077502][ T5369] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 312.089585][ T5367] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 312.103242][ T5367] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 312.153581][ T5367] F2FS-fs (loop0): Found nat_bits in checkpoint [ 312.156816][ T5376] loop4: detected capacity change from 0 to 512 [ 312.180413][ T5376] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.1201: casefold flag without casefold feature [ 312.191898][ T5367] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 312.193463][ T5376] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1201: couldn't read orphan inode 15 (err -117) [ 312.200278][ T5367] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 312.296037][ T5376] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 312.426105][ T708] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 312.453626][ T285] syz-executor: attempt to access beyond end of device [ 312.453626][ T285] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 313.257832][ T288] EXT4-fs (loop2): unmounting filesystem. [ 313.498207][ T286] EXT4-fs (loop4): unmounting filesystem. [ 313.687932][ T5393] loop1: detected capacity change from 0 to 512 [ 313.709626][ T708] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 313.731338][ T5400] loop4: detected capacity change from 0 to 512 [ 313.737729][ T708] usb 4-1: USB disconnect, device number 41 [ 313.741866][ T5393] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.1206: casefold flag without casefold feature [ 313.746683][ T5397] loop0: detected capacity change from 0 to 256 [ 313.762681][ T5398] loop2: detected capacity change from 0 to 256 [ 313.762686][ T5393] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.1206: couldn't read orphan inode 15 (err -117) [ 313.762796][ T5393] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 313.777815][ T5400] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.1205: casefold flag without casefold feature [ 313.807030][ T5400] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1205: couldn't read orphan inode 15 (err -117) [ 313.827933][ T5400] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 316.158003][ T5413] loop2: detected capacity change from 0 to 512 [ 316.165569][ T284] EXT4-fs (loop1): unmounting filesystem. [ 316.177843][ T286] EXT4-fs (loop4): unmounting filesystem. [ 316.272595][ T5413] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.1209: casefold flag without casefold feature [ 316.303705][ T5413] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.1209: couldn't read orphan inode 15 (err -117) [ 316.325905][ T5413] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 316.445919][ T5422] loop4: detected capacity change from 0 to 40427 [ 316.463075][ T5422] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 316.478877][ T289] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 316.492831][ T5422] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 316.503665][ T5422] F2FS-fs (loop4): Found nat_bits in checkpoint [ 316.539331][ T5422] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 316.543521][ T5412] loop0: detected capacity change from 0 to 40427 [ 316.546515][ T5422] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 316.569710][ T5412] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 316.588825][ T5412] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 316.597248][ T286] syz-executor: attempt to access beyond end of device [ 316.597248][ T286] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 316.601283][ T5412] F2FS-fs (loop0): invalid crc value [ 316.649985][ T5412] F2FS-fs (loop0): Found nat_bits in checkpoint [ 316.670668][ T289] usb 4-1: config 0 has no interfaces? [ 316.678632][ T289] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 316.702328][ T289] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.723869][ T289] usb 4-1: Product: syz [ 316.731681][ T289] usb 4-1: Manufacturer: syz [ 316.738759][ T5412] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 316.745909][ T289] usb 4-1: SerialNumber: syz [ 316.750567][ T5412] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 316.762444][ T289] usb 4-1: config 0 descriptor?? [ 316.795227][ T5412] syz.0.1208[5412] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 316.795300][ T5412] syz.0.1208[5412] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 316.840995][ T5435] loop4: detected capacity change from 0 to 512 [ 316.891548][ T5435] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.1214: casefold flag without casefold feature [ 316.918269][ T5435] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1214: couldn't read orphan inode 15 (err -117) [ 316.943295][ T5435] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 316.970313][ T5415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.983493][ T5415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.864358][ T286] EXT4-fs (loop4): unmounting filesystem. [ 317.913716][ T288] EXT4-fs (loop2): unmounting filesystem. [ 317.946935][ T5455] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5455 comm=syz.2.1220 [ 317.989937][ T5457] loop0: detected capacity change from 0 to 512 [ 317.999981][ T5457] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.1221: casefold flag without casefold feature [ 318.012804][ T5457] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.1221: couldn't read orphan inode 15 (err -117) [ 318.024990][ T5457] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 318.405646][ T289] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 318.479565][ T308] usb 3-1: new low-speed USB device number 39 using dummy_hcd [ 318.590626][ T289] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 318.600494][ T289] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65344, setting to 1024 [ 318.611685][ T289] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 318.623048][ T289] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 318.632199][ T289] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.640277][ T289] usb 5-1: Product: syz [ 318.644463][ T289] usb 5-1: Manufacturer: syz [ 318.649070][ T289] usb 5-1: SerialNumber: syz [ 318.654501][ T289] usb 5-1: config 0 descriptor?? [ 318.659743][ T5452] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 318.667008][ T5452] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 318.670737][ T308] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 318.683572][ T308] usb 3-1: config 1 has no interface number 1 [ 318.689725][ T308] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 318.700762][ T308] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 318.713738][ T308] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 0 [ 318.726693][ T308] usb 3-1: string descriptor 0 read error: -22 [ 318.732950][ T308] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 318.742065][ T308] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.757100][ T308] usb 3-1: low speed audio streaming not supported [ 318.842181][ T285] EXT4-fs (loop0): unmounting filesystem. [ 318.856365][ T5465] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1223'. [ 318.941647][ T5452] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 318.965675][ T5452] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 319.053401][ T309] usb 3-1: USB disconnect, device number 39 [ 319.204783][ T1421] usb 4-1: USB disconnect, device number 42 [ 319.216782][ T5472] loop3: detected capacity change from 0 to 512 [ 319.226544][ T5472] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.1225: casefold flag without casefold feature [ 319.239403][ T5472] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1225: couldn't read orphan inode 15 (err -117) [ 319.251514][ T5472] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 319.635514][ T308] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 320.111066][ T289] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 320.123205][ T289] dm9601 5-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.4-1, Davicom DM96xx USB 10/100 Ethernet, 6e:f1:98:9e:dd:08 [ 320.136445][ T287] EXT4-fs (loop3): unmounting filesystem. [ 320.137431][ T308] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 320.152458][ T308] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65344, setting to 1024 [ 320.160941][ T5486] loop3: detected capacity change from 0 to 512 [ 320.175032][ T289] usb 5-1: USB disconnect, device number 41 [ 320.181257][ T308] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 320.192348][ T5486] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.1228: casefold flag without casefold feature [ 320.192700][ T289] dm9601 5-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.4-1, Davicom DM96xx USB 10/100 Ethernet [ 320.217077][ T308] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 320.219864][ T5486] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1228: couldn't read orphan inode 15 (err -117) [ 320.237470][ T308] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.238587][ T5486] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 320.246108][ T308] usb 1-1: Product: syz [ 320.266034][ T308] usb 1-1: Manufacturer: syz [ 320.270902][ T308] usb 1-1: SerialNumber: syz [ 320.280058][ T308] usb 1-1: config 0 descriptor?? [ 320.285441][ T5470] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 320.293245][ T5470] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 320.612689][ T5470] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 320.620039][ T5470] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 320.674058][ T5494] loop1: detected capacity change from 0 to 512 [ 320.697856][ T1421] hid-generic FFFC:0003:0000.0036: unknown main item tag 0x0 [ 320.705485][ T1421] hid-generic FFFC:0003:0000.0036: unknown main item tag 0x0 [ 320.707500][ T5494] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.1230: casefold flag without casefold feature [ 320.713372][ T1421] hid-generic FFFC:0003:0000.0036: unknown main item tag 0x0 [ 320.733174][ T1421] hid-generic FFFC:0003:0000.0036: unknown main item tag 0x0 [ 320.740598][ T1421] hid-generic FFFC:0003:0000.0036: unknown main item tag 0x0 [ 320.748064][ T1421] hid-generic FFFC:0003:0000.0036: unknown main item tag 0x0 [ 320.748891][ T5497] 9pnet_fd: p9_fd_create_unix (5497): problem connecting socket: éq‰Y’3aK: -111 [ 320.756234][ T1421] hid-generic FFFC:0003:0000.0036: hidraw0: HID v0.00 Device [syz1] on syz0 [ 320.765001][ T5494] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.1230: couldn't read orphan inode 15 (err -117) [ 320.842114][ T5500] futex_wake_op: syz.4.1231 tries to shift op by 32; fix this program [ 320.927631][ T5494] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 321.073301][ T287] EXT4-fs (loop3): unmounting filesystem. [ 321.129421][ T5509] loop4: detected capacity change from 0 to 512 [ 321.163185][ T5509] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.1234: casefold flag without casefold feature [ 321.176522][ T5509] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1234: couldn't read orphan inode 15 (err -117) [ 321.188723][ T5509] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 322.304751][ T308] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 322.353539][ T286] EXT4-fs (loop4): unmounting filesystem. [ 322.359805][ T308] usb 1-1: USB disconnect, device number 36 [ 323.518288][ T1421] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 323.583911][ T5530] loop0: detected capacity change from 0 to 512 [ 323.621125][ T415] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 323.695643][ T284] EXT4-fs (loop1): unmounting filesystem. [ 323.725898][ T5537] loop1: detected capacity change from 0 to 256 [ 323.735524][ T1421] usb 3-1: config 0 has no interfaces? [ 323.742419][ T1421] usb 3-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 323.752273][ T1421] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.760515][ T1421] usb 3-1: Product: syz [ 323.765246][ T1421] usb 3-1: Manufacturer: syz [ 323.770934][ T1421] usb 3-1: SerialNumber: syz [ 323.819581][ T289] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 323.833457][ T5534] loop3: detected capacity change from 0 to 40427 [ 323.833985][ T1421] usb 3-1: config 0 descriptor?? [ 323.845294][ T5534] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 323.852039][ T5534] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 323.862723][ T5534] F2FS-fs (loop3): Found nat_bits in checkpoint [ 323.884820][ T5534] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 323.892163][ T5534] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 324.036913][ T287] syz-executor: attempt to access beyond end of device [ 324.036913][ T287] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 324.117639][ T5519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.118584][ T289] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 324.135959][ T5519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.145156][ T289] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 324.154505][ T289] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.213049][ T289] usb 5-1: Product: syz [ 324.217253][ T289] usb 5-1: Manufacturer: syz [ 324.221936][ T289] usb 5-1: SerialNumber: syz [ 324.227352][ T289] usb 5-1: config 0 descriptor?? [ 324.230197][ T5543] 9pnet_fd: p9_fd_create_unix (5543): problem connecting socket: éq‰Y’3aK: -111 [ 324.233079][ T289] hub 5-1:0.0: bad descriptor, ignoring hub [ 324.247477][ T289] hub: probe of 5-1:0.0 failed with error -5 [ 324.250626][ T5543] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 324.261250][ T5543] futex_wake_op: syz.3.1243 tries to shift op by 32; fix this program [ 324.262416][ T289] snd-usb-audio: probe of 5-1:0.0 failed with error -2 [ 324.281897][ T415] udevd[415]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 324.440028][ T5529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.448514][ T5529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.513353][ T5546] loop0: detected capacity change from 0 to 512 [ 324.523628][ T5546] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.1244: casefold flag without casefold feature [ 324.536598][ T5546] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.1244: couldn't read orphan inode 15 (err -117) [ 324.548913][ T5546] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 324.685893][ T5552] loop1: detected capacity change from 0 to 512 [ 324.695975][ T5552] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.1245: casefold flag without casefold feature [ 324.708963][ T5552] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.1245: couldn't read orphan inode 15 (err -117) [ 324.721719][ T5552] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 325.359818][ T289] usb 3-1: USB disconnect, device number 40 [ 325.386156][ T285] EXT4-fs (loop0): unmounting filesystem. [ 325.400526][ T5563] loop0: detected capacity change from 0 to 256 [ 325.629365][ T284] EXT4-fs (loop1): unmounting filesystem. [ 325.800152][ T5567] loop1: detected capacity change from 0 to 512 [ 325.810398][ T5567] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.1248: casefold flag without casefold feature [ 325.823273][ T5567] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.1248: couldn't read orphan inode 15 (err -117) [ 325.835414][ T5567] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 326.135975][ T289] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 326.309594][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 326.309621][ T389] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 326.350668][ T289] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 326.360467][ T289] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65344, setting to 1024 [ 326.371877][ T289] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 326.383153][ T289] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 326.392490][ T289] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.400547][ T289] usb 3-1: Product: syz [ 326.404739][ T289] usb 3-1: Manufacturer: syz [ 326.409351][ T289] usb 3-1: SerialNumber: syz [ 326.415953][ T289] usb 3-1: config 0 descriptor?? [ 326.421739][ T5561] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 326.429264][ T5561] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 326.429653][ T5576] loop3: detected capacity change from 0 to 512 [ 326.490138][ T4925] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 326.569831][ T1439] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 326.676788][ T5561] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 326.683988][ T5561] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 326.695025][ T284] EXT4-fs (loop1): unmounting filesystem. [ 327.094663][ T5585] loop1: detected capacity change from 0 to 256 [ 327.103721][ T5585] FAT-fs (loop1): Unrecognized mount option "sj€ëname=winnt" or missing value [ 327.116750][ T4346] usb 5-1: USB disconnect, device number 42 [ 327.171532][ T4925] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 327.192602][ T1439] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 327.205527][ T1439] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65344, setting to 1024 [ 327.216796][ T1439] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 327.233775][ T1439] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 327.242924][ T1439] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.251000][ T1439] usb 1-1: Product: syz [ 327.255226][ T1439] usb 1-1: Manufacturer: syz [ 327.259899][ T1439] usb 1-1: SerialNumber: syz [ 327.270910][ T1439] usb 1-1: config 0 descriptor?? [ 327.279995][ T5573] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 327.288159][ T5573] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 327.496811][ T5573] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 327.506174][ T5573] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 327.837309][ T5590] loop4: detected capacity change from 0 to 40427 [ 327.895752][ T5590] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 327.931416][ T5590] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 327.949109][ T289] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 327.956584][ T5590] F2FS-fs (loop4): Found nat_bits in checkpoint [ 327.959964][ T289] dm9601 3-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.2-1, Davicom DM96xx USB 10/100 Ethernet, 6e:f1:98:9e:dd:08 [ 327.977622][ T289] usb 3-1: USB disconnect, device number 41 [ 327.988891][ T289] dm9601 3-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.2-1, Davicom DM96xx USB 10/100 Ethernet [ 328.016695][ T5590] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 328.023803][ T5590] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 328.063875][ T286] syz-executor: attempt to access beyond end of device [ 328.063875][ T286] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 328.089590][ T308] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 328.165281][ T5616] loop4: detected capacity change from 0 to 256 [ 328.176572][ T1439] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 328.188785][ T1439] usb 1-1: USB disconnect, device number 37 [ 328.271040][ T308] usb 4-1: config 0 has no interfaces? [ 328.279613][ T308] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 328.288842][ T308] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.296926][ T308] usb 4-1: Product: syz [ 328.302397][ T308] usb 4-1: Manufacturer: syz [ 328.307069][ T308] usb 4-1: SerialNumber: syz [ 328.312707][ T308] usb 4-1: config 0 descriptor?? [ 328.531941][ T5594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.613845][ T5594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.647776][ T5631] loop1: detected capacity change from 0 to 512 [ 328.684022][ T5631] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.1258: casefold flag without casefold feature [ 328.696960][ T5631] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.1258: couldn't read orphan inode 15 (err -117) [ 328.708561][ T5637] loop0: detected capacity change from 0 to 512 [ 328.716115][ T5631] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 328.729107][ T5637] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.1260: casefold flag without casefold feature [ 328.749063][ T5637] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.1260: couldn't read orphan inode 15 (err -117) [ 328.763157][ T5637] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 329.821888][ T5647] loop2: detected capacity change from 0 to 256 [ 329.829183][ T5647] FAT-fs (loop2): Unrecognized mount option "sj€ëname=winnt" or missing value [ 330.085449][ T285] EXT4-fs (loop0): unmounting filesystem. [ 330.099279][ T415] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 330.110209][ T284] EXT4-fs (loop1): unmounting filesystem. [ 330.342275][ T5660] loop2: detected capacity change from 0 to 256 [ 330.348959][ T5660] FAT-fs (loop2): Unrecognized mount option "sj€ëname=winnt" or missing value [ 330.409585][ T308] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 330.590609][ T308] usb 1-1: config 0 has no interfaces? [ 330.597505][ T308] usb 1-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 330.606660][ T308] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.614703][ T308] usb 1-1: Product: syz [ 330.618989][ T308] usb 1-1: Manufacturer: syz [ 330.623622][ T308] usb 1-1: SerialNumber: syz [ 330.629000][ T308] usb 1-1: config 0 descriptor?? [ 330.677994][ T308] usb 4-1: USB disconnect, device number 43 [ 331.081416][ T5651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.090036][ T5651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.102282][ T5666] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1268'. [ 331.192446][ T5668] loop4: detected capacity change from 0 to 512 [ 331.344757][ T4346] hid-generic FFFC:0003:0000.0037: unknown main item tag 0x0 [ 331.352830][ T4346] hid-generic FFFC:0003:0000.0037: unknown main item tag 0x0 [ 331.360320][ T4346] hid-generic FFFC:0003:0000.0037: unknown main item tag 0x0 [ 331.367730][ T4346] hid-generic FFFC:0003:0000.0037: unknown main item tag 0x0 [ 331.375181][ T4346] hid-generic FFFC:0003:0000.0037: unknown main item tag 0x0 [ 331.382620][ T4346] hid-generic FFFC:0003:0000.0037: unknown main item tag 0x0 [ 331.383467][ T5674] loop4: detected capacity change from 0 to 40427 [ 331.390548][ T4346] hid-generic FFFC:0003:0000.0037: hidraw0: HID v0.00 Device [syz1] on syz0 [ 331.397288][ T5674] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 331.412937][ T5674] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 331.672030][ T4346] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 331.676406][ T5674] F2FS-fs (loop4): Found nat_bits in checkpoint [ 331.730279][ T5674] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 331.737388][ T5674] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 331.758462][ T286] syz-executor: attempt to access beyond end of device [ 331.758462][ T286] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 331.880938][ T4346] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 331.891028][ T4346] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65344, setting to 1024 [ 331.902240][ T4346] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 331.913728][ T4346] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 331.922808][ T4346] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.930862][ T4346] usb 2-1: Product: syz [ 331.935037][ T4346] usb 2-1: Manufacturer: syz [ 331.939661][ T4346] usb 2-1: SerialNumber: syz [ 331.970351][ T4346] usb 2-1: config 0 descriptor?? [ 331.976148][ T5673] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 331.984658][ T5673] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 332.227400][ T5673] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 332.234597][ T5673] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 332.269581][ T19] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 332.439576][ T309] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 332.450724][ T19] usb 5-1: config 0 has no interfaces? [ 332.457638][ T19] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 332.466864][ T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.474912][ T19] usb 5-1: Product: syz [ 332.479095][ T19] usb 5-1: Manufacturer: syz [ 332.483722][ T19] usb 5-1: SerialNumber: syz [ 332.488944][ T19] usb 5-1: config 0 descriptor?? [ 332.620579][ T309] usb 3-1: config 0 has no interfaces? [ 332.627322][ T309] usb 3-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 332.636561][ T309] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.680709][ T309] usb 3-1: Product: syz [ 332.685404][ T309] usb 3-1: Manufacturer: syz [ 332.690118][ T309] usb 3-1: SerialNumber: syz [ 332.695451][ T309] usb 3-1: config 0 descriptor?? [ 332.702803][ T5690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.712079][ T5690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.038504][ T5697] loop3: detected capacity change from 0 to 256 [ 333.045709][ T5697] FAT-fs (loop3): Unrecognized mount option "sj€ëname=winnt" or missing value [ 333.061998][ T4346] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 333.109576][ T5694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.276161][ T5694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.290293][ T4346] usb 2-1: USB disconnect, device number 39 [ 333.297963][ T309] usb 1-1: USB disconnect, device number 38 [ 333.418599][ T5703] loop0: detected capacity change from 0 to 256 [ 333.425289][ T5703] FAT-fs (loop0): Unrecognized mount option "sj€ëname=winnt" or missing value [ 333.673318][ T5707] loop1: detected capacity change from 0 to 512 [ 333.683228][ T5707] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.1281: casefold flag without casefold feature [ 333.696116][ T5707] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.1281: couldn't read orphan inode 15 (err -117) [ 333.708173][ T5707] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 334.182351][ T5714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1282'. [ 334.191399][ T5714] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1282'. [ 334.406532][ T5718] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5718 comm=syz.3.1284 [ 334.433426][ T5716] loop0: detected capacity change from 0 to 40427 [ 334.440443][ T5716] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 334.448236][ T5716] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 334.457470][ T5716] F2FS-fs (loop0): invalid crc value [ 334.464036][ T5716] F2FS-fs (loop0): Found nat_bits in checkpoint [ 334.487062][ T5716] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 334.494200][ T5716] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 334.539031][ T284] EXT4-fs (loop1): unmounting filesystem. [ 334.961465][ T19] usb 4-1: new low-speed USB device number 44 using dummy_hcd [ 334.976281][ T4346] usb 5-1: USB disconnect, device number 43 [ 334.994379][ T5728] loop4: detected capacity change from 0 to 256 [ 335.044297][ T5732] 9pnet_fd: p9_fd_create_unix (5732): problem connecting socket: éq‰Y’3aK: -111 [ 335.057654][ T5732] futex_wake_op: syz.0.1288 tries to shift op by 32; fix this program [ 335.153783][ T19] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 335.162918][ T19] usb 4-1: config 1 has no interface number 1 [ 335.197871][ T19] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 335.211916][ T19] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 335.225065][ T19] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 0 [ 335.238827][ T5737] loop4: detected capacity change from 0 to 512 [ 335.245192][ T308] usb 3-1: USB disconnect, device number 42 [ 335.256249][ T19] usb 4-1: string descriptor 0 read error: -22 [ 335.263013][ T19] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 335.272523][ T19] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.280995][ T5737] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.1289: casefold flag without casefold feature [ 335.298107][ T5737] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.1289: couldn't read orphan inode 15 (err -117) [ 335.310431][ T19] usb 4-1: low speed audio streaming not supported [ 335.321210][ T5737] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 335.571898][ T309] usb 4-1: USB disconnect, device number 44 [ 335.660552][ T5745] loop1: detected capacity change from 0 to 512 [ 335.721900][ T5745] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.1291: casefold flag without casefold feature [ 335.737003][ T5745] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.1291: couldn't read orphan inode 15 (err -117) [ 335.749428][ T5745] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 336.100567][ T286] EXT4-fs (loop4): unmounting filesystem. [ 336.402781][ T284] EXT4-fs (loop1): unmounting filesystem. [ 336.434431][ T5763] loop1: detected capacity change from 0 to 512 [ 336.455291][ T5763] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.1295: casefold flag without casefold feature [ 336.469414][ T5763] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.1295: couldn't read orphan inode 15 (err -117) [ 336.479561][ T308] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 336.486254][ T5763] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 336.790814][ T308] usb 4-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 336.799955][ T308] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.808779][ T308] usb 4-1: config 0 descriptor?? [ 337.033039][ T5772] loop2: detected capacity change from 0 to 256 [ 337.109588][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 337.115770][ T389] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 337.340133][ T309] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 337.382657][ T284] EXT4-fs (loop1): unmounting filesystem. [ 337.419654][ T4346] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 337.465318][ T5778] loop1: detected capacity change from 0 to 512 [ 337.488942][ T5778] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.1299: casefold flag without casefold feature [ 337.502427][ T5778] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.1299: couldn't read orphan inode 15 (err -117) [ 337.514659][ T5778] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 337.566981][ T309] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 337.577004][ T309] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65344, setting to 1024 [ 337.588605][ T309] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 337.600173][ T309] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 337.609241][ T309] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.617272][ T309] usb 5-1: Product: syz [ 337.621465][ T309] usb 5-1: Manufacturer: syz [ 337.626078][ T309] usb 5-1: SerialNumber: syz [ 337.633533][ T309] usb 5-1: config 0 descriptor?? [ 337.641620][ T5770] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 337.648977][ T5770] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 337.661092][ T4346] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 337.673438][ T4346] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65344, setting to 1024 [ 337.696024][ T4346] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 337.709029][ T4346] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 337.719236][ T4346] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.728247][ T4346] usb 1-1: Product: syz [ 337.733420][ T4346] usb 1-1: Manufacturer: syz [ 337.738203][ T4346] usb 1-1: SerialNumber: syz [ 337.788975][ T4346] usb 1-1: config 0 descriptor?? [ 337.794315][ T5774] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 337.801620][ T5774] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 337.874370][ T5770] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 337.881651][ T5770] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 337.944593][ T5784] loop2: detected capacity change from 0 to 256 [ 338.011550][ T5774] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 338.018771][ T5774] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 338.636304][ T5791] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1296'. [ 338.646546][ T284] EXT4-fs (loop1): unmounting filesystem. [ 339.042689][ T4346] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 339.053192][ T4346] dm9601 1-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.0-1, Davicom DM96xx USB 10/100 Ethernet, 6e:f1:98:9e:dd:08 [ 339.067144][ T4346] usb 1-1: USB disconnect, device number 39 [ 339.073609][ T4346] dm9601 1-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.0-1, Davicom DM96xx USB 10/100 Ethernet [ 339.085642][ T309] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 339.097670][ T309] dm9601 5-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.4-1, Davicom DM96xx USB 10/100 Ethernet, 6e:f1:98:9e:dd:08 [ 339.119345][ T309] usb 5-1: USB disconnect, device number 44 [ 339.129252][ T309] dm9601 5-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.4-1, Davicom DM96xx USB 10/100 Ethernet [ 339.150353][ T708] ================================================================== [ 339.158436][ T708] BUG: KASAN: use-after-free in worker_thread+0x9ff/0x11f0 [ 339.165657][ T708] Read of size 8 at addr ffff88811594cce0 by task kworker/1:6/708 [ 339.173459][ T708] [ 339.175780][ T708] CPU: 1 PID: 708 Comm: kworker/1:6 Not tainted 6.1.141-syzkaller-00036-g7011769d221c #0 [ 339.185587][ T708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 339.195649][ T708] Workqueue: 0x0 (rcu_gp) [ 339.200103][ T708] Call Trace: [ 339.203387][ T708] [ 339.206316][ T708] __dump_stack+0x21/0x24 [ 339.210672][ T708] dump_stack_lvl+0xee/0x150 [ 339.215273][ T708] ? __cfi_dump_stack_lvl+0x8/0x8 [ 339.220309][ T708] ? __cfi__printk+0x8/0x8 [ 339.224735][ T708] ? __schedule+0xb8f/0x14e0 [ 339.229328][ T708] ? worker_thread+0x9ff/0x11f0 [ 339.234162][ T708] print_address_description+0x71/0x210 [ 339.239714][ T708] print_report+0x4a/0x60 [ 339.244046][ T708] kasan_report+0x122/0x150 [ 339.248536][ T708] ? worker_thread+0x9ff/0x11f0 [ 339.253382][ T708] __asan_report_load8_noabort+0x14/0x20 [ 339.259019][ T708] worker_thread+0x9ff/0x11f0 [ 339.263686][ T708] kthread+0x281/0x320 [ 339.267749][ T708] ? __cfi_worker_thread+0x10/0x10 [ 339.272843][ T708] ? __cfi_kthread+0x10/0x10 [ 339.277428][ T708] ret_from_fork+0x1f/0x30 [ 339.281840][ T708] [ 339.284859][ T708] [ 339.287186][ T708] Allocated by task 4346: [ 339.289581][ T19] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 339.291505][ T708] kasan_set_track+0x4b/0x70 [ 339.291527][ T708] kasan_save_alloc_info+0x25/0x30 [ 339.308733][ T708] __kasan_kmalloc+0x95/0xb0 [ 339.313310][ T708] __kmalloc_node+0xb2/0x1e0 [ 339.317902][ T708] kvmalloc_node+0x294/0x480 [ 339.322475][ T708] alloc_netdev_mqs+0x8d/0xf90 [ 339.327249][ T708] alloc_etherdev_mqs+0x37/0x40 [ 339.332101][ T708] usbnet_probe+0x20c/0x2780 [ 339.336679][ T708] usb_probe_interface+0x610/0xaf0 [ 339.341787][ T708] really_probe+0x2cb/0x960 [ 339.346282][ T708] __driver_probe_device+0x198/0x280 [ 339.351562][ T708] driver_probe_device+0x54/0x3e0 [ 339.356568][ T708] __device_attach_driver+0x2e9/0x4a0 [ 339.361916][ T708] bus_for_each_drv+0x183/0x210 [ 339.366743][ T708] __device_attach+0x2a2/0x400 [ 339.371482][ T708] device_initial_probe+0x1a/0x20 [ 339.376483][ T708] bus_probe_device+0xc0/0x1f0 [ 339.381223][ T708] device_add+0xb4d/0xef0 [ 339.385530][ T708] usb_set_configuration+0x19c2/0x1f10 [ 339.390960][ T708] usb_generic_driver_probe+0x91/0x150 [ 339.396390][ T708] usb_probe_device+0x159/0x270 [ 339.401213][ T708] really_probe+0x2cb/0x960 [ 339.405690][ T708] __driver_probe_device+0x198/0x280 [ 339.410947][ T708] driver_probe_device+0x54/0x3e0 [ 339.415943][ T708] __device_attach_driver+0x2e9/0x4a0 [ 339.421287][ T708] bus_for_each_drv+0x183/0x210 [ 339.426110][ T708] __device_attach+0x2a2/0x400 [ 339.430844][ T708] device_initial_probe+0x1a/0x20 [ 339.435843][ T708] bus_probe_device+0xc0/0x1f0 [ 339.440576][ T708] device_add+0xb4d/0xef0 [ 339.444878][ T708] usb_new_device+0xa70/0x1520 [ 339.449614][ T708] hub_event+0x2a5d/0x4680 [ 339.454006][ T708] process_one_work+0x71f/0xc40 [ 339.458826][ T708] worker_thread+0xa29/0x11f0 [ 339.463472][ T708] kthread+0x281/0x320 [ 339.467525][ T708] ret_from_fork+0x1f/0x30 [ 339.471927][ T708] [ 339.474228][ T708] Freed by task 4346: [ 339.478182][ T708] kasan_set_track+0x4b/0x70 [ 339.482748][ T708] kasan_save_free_info+0x31/0x50 [ 339.487754][ T708] ____kasan_slab_free+0x132/0x180 [ 339.492839][ T708] __kasan_slab_free+0x11/0x20 [ 339.497575][ T708] slab_free_freelist_hook+0xc2/0x190 [ 339.502919][ T708] __kmem_cache_free+0xb7/0x1b0 [ 339.507739][ T708] kfree+0x6f/0xf0 [ 339.511433][ T708] kvfree+0x35/0x40 [ 339.515219][ T708] netdev_freemem+0x3f/0x60 [ 339.519692][ T708] netdev_release+0x7f/0xb0 [ 339.524168][ T708] device_release+0xa4/0x1d0 [ 339.528730][ T708] kobject_put+0x19d/0x280 [ 339.533115][ T708] put_device+0x1f/0x30 [ 339.537246][ T708] free_netdev+0x392/0x490 [ 339.541643][ T708] usbnet_disconnect+0x25a/0x3b0 [ 339.546552][ T708] usb_unbind_interface+0x223/0x8d0 [ 339.551723][ T708] device_release_driver_internal+0x508/0x820 [ 339.557764][ T708] device_release_driver+0x19/0x20 [ 339.562859][ T708] bus_remove_device+0x2ee/0x350 [ 339.567767][ T708] device_del+0x6a4/0xeb0 [ 339.572071][ T708] usb_disable_device+0x3a8/0x750 [ 339.577066][ T708] usb_disconnect+0x31e/0x860 [ 339.581725][ T708] hub_event+0x1bd5/0x4680 [ 339.586114][ T708] process_one_work+0x71f/0xc40 [ 339.590935][ T708] worker_thread+0xd2e/0x11f0 [ 339.595580][ T708] kthread+0x281/0x320 [ 339.599620][ T708] ret_from_fork+0x1f/0x30 [ 339.604007][ T708] [ 339.606307][ T708] Last potentially related work creation: [ 339.611999][ T708] kasan_save_stack+0x3a/0x60 [ 339.616648][ T708] __kasan_record_aux_stack+0xb6/0xc0 [ 339.621996][ T708] kasan_record_aux_stack_noalloc+0xb/0x10 [ 339.627775][ T708] insert_work+0x51/0x300 [ 339.632080][ T708] __queue_work+0x9b1/0xd30 [ 339.636554][ T708] queue_work_on+0xd2/0x140 [ 339.641029][ T708] usbnet_link_change+0x176/0x1a0 [ 339.646025][ T708] usbnet_probe+0x1d55/0x2780 [ 339.650682][ T708] usb_probe_interface+0x610/0xaf0 [ 339.655766][ T708] really_probe+0x2cb/0x960 [ 339.660241][ T708] __driver_probe_device+0x198/0x280 [ 339.665498][ T708] driver_probe_device+0x54/0x3e0 [ 339.670500][ T708] __device_attach_driver+0x2e9/0x4a0 [ 339.675845][ T708] bus_for_each_drv+0x183/0x210 [ 339.680666][ T708] __device_attach+0x2a2/0x400 [ 339.685402][ T708] device_initial_probe+0x1a/0x20 [ 339.690397][ T708] bus_probe_device+0xc0/0x1f0 [ 339.695131][ T708] device_add+0xb4d/0xef0 [ 339.699436][ T708] usb_set_configuration+0x19c2/0x1f10 [ 339.704878][ T708] usb_generic_driver_probe+0x91/0x150 [ 339.710338][ T708] usb_probe_device+0x159/0x270 [ 339.715160][ T708] really_probe+0x2cb/0x960 [ 339.719635][ T708] __driver_probe_device+0x198/0x280 [ 339.724893][ T708] driver_probe_device+0x54/0x3e0 [ 339.729889][ T708] __device_attach_driver+0x2e9/0x4a0 [ 339.735232][ T708] bus_for_each_drv+0x183/0x210 [ 339.740052][ T708] __device_attach+0x2a2/0x400 [ 339.744795][ T708] device_initial_probe+0x1a/0x20 [ 339.749790][ T708] bus_probe_device+0xc0/0x1f0 [ 339.754523][ T708] device_add+0xb4d/0xef0 [ 339.758824][ T708] usb_new_device+0xa70/0x1520 [ 339.763562][ T708] hub_event+0x2a5d/0x4680 [ 339.767949][ T708] process_one_work+0x71f/0xc40 [ 339.772768][ T708] worker_thread+0xa29/0x11f0 [ 339.777433][ T708] kthread+0x281/0x320 [ 339.781478][ T708] ret_from_fork+0x1f/0x30 [ 339.785867][ T708] [ 339.788163][ T708] The buggy address belongs to the object at ffff88811594c000 [ 339.788163][ T708] which belongs to the cache kmalloc-4k of size 4096 [ 339.802205][ T708] The buggy address is located 3296 bytes inside of [ 339.802205][ T708] 4096-byte region [ffff88811594c000, ffff88811594d000) [ 339.815623][ T708] [ 339.817921][ T708] The buggy address belongs to the physical page: [ 339.824305][ T708] page:ffffea0004565200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x115948 [ 339.834521][ T708] head:ffffea0004565200 order:3 compound_mapcount:0 compound_pincount:0 [ 339.842811][ T708] flags: 0x4000000000010200(slab|head|zone=1) [ 339.848860][ T708] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043380 [ 339.857420][ T708] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 339.866025][ T708] page dumped because: kasan: bad access detected [ 339.872425][ T708] page_owner tracks the page as allocated [ 339.878114][ T708] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 2104227407, free_ts 0 [ 339.897714][ T708] post_alloc_hook+0x1f5/0x210 [ 339.902460][ T708] prep_new_page+0x1c/0x110 [ 339.906948][ T708] get_page_from_freelist+0x2c7b/0x2cf0 [ 339.912480][ T708] __alloc_pages+0x19e/0x3a0 [ 339.917052][ T708] alloc_slab_page+0x6e/0xf0 [ 339.921619][ T708] new_slab+0x98/0x3d0 [ 339.925664][ T708] ___slab_alloc+0x6f6/0xb50 [ 339.930225][ T708] __slab_alloc+0x5e/0xa0 [ 339.934528][ T708] __kmem_cache_alloc_node+0x203/0x2c0 [ 339.939963][ T708] __kmalloc_node_track_caller+0xa0/0x1e0 [ 339.945658][ T708] kmemdup+0x2b/0x60 [ 339.949525][ T708] __devinet_sysctl_register+0xad/0x320 [ 339.955047][ T708] devinet_sysctl_register+0x169/0x1e0 [ 339.960478][ T708] inetdev_init+0x2d1/0x510 [ 339.964953][ T708] inetdev_event+0x1f8/0x10e0 [ 339.969604][ T708] raw_notifier_call_chain+0xa1/0x110 [ 339.974949][ T708] page_owner free stack trace missing [ 339.980286][ T708] [ 339.982590][ T708] Memory state around the buggy address: [ 339.988189][ T708] ffff88811594cb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 339.996219][ T708] ffff88811594cc00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 340.004249][ T708] >ffff88811594cc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 340.012275][ T708] ^ [ 340.019454][ T708] ffff88811594cd00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 340.027483][ T708] ffff88811594cd80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 340.035518][ T708] ================================================================== [ 340.043558][ T708] Disabling lock debugging due to kernel taint [ 340.056595][ T308] usbhid 4-1:0.0: can't add hid device: -71 [ 340.062751][ T28] audit: type=1400 audit(1751416095.772:180): avc: denied { read } for pid=86 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 340.087429][ T308] usbhid: probe of 4-1:0.0 failed with error -71 [ 340.094352][ T28] audit: type=1400 audit(1751416095.772:181): avc: denied { search } for pid=86 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 340.115711][ T28] audit: type=1400 audit(1751416095.772:182): avc: denied { write } for pid=86 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 340.136966][ T28] audit: type=1400 audit(1751416095.772:183): avc: denied { add_name } for pid=86 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 340.157616][ T28] audit: type=1400 audit(1751416095.772:184): avc: denied { create } for pid=86 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 340.178122][ T28] audit: type=1400 audit(1751416095.772:185): avc: denied { append open } for pid=86 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 340.200981][ T28] audit: type=1400 audit(1751416095.772:186): avc: denied { getattr } for pid=86 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 340.225128][ T308] usb 4-1: USB disconnect, device number 45 [ 340.270788][ T19] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 340.281024][ T19] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65344, setting to 1024 [ 340.292626][ T19] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 340.305603][ T19] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 340.314690][ T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.322946][ T19] usb 3-1: Product: syz [ 340.327090][ T19] usb 3-1: Manufacturer: syz [ 340.332017][ T19] usb 3-1: SerialNumber: syz [ 340.337142][ T19] usb 3-1: config 0 descriptor?? [ 340.342423][ T5798] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 340.349646][ T5798] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 340.557813][ T5798] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 340.565082][ T5798] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 340.987641][ T19] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 341.188803][ T19] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 341.198612][ T19] usb 3-1: USB disconnect, device number 43