last executing test programs: 9.583990826s ago: executing program 3 (id=1292): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000280), &(0x7f00000001c0)}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f00000023c0)='net/tcp\x00') r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000340)=0x800003, 0x4) 8.522246769s ago: executing program 3 (id=1295): socket$packet(0x11, 0x0, 0x300) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000380), 0x20000000}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x2, 0x100, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', r0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r8, @ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="240003"], 0x10e0}}, 0x0) 8.521376059s ago: executing program 0 (id=1296): r0 = socket$inet(0x2, 0x2, 0x1) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000001000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r4}, 0x10) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x4e24, @empty}, {0x2, 0x0, @loopback}, {0x2, 0x4e23, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401e04012810000000000109022400010000000009040000020300000009210000000122050009058103"], 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x1b) 7.718332494s ago: executing program 3 (id=1299): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="9802"], 0x298) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40000, 0x20) 6.799792836s ago: executing program 3 (id=1302): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)=ANY=[], 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mm_page_alloc\x00', r4}, 0x10) r6 = getegid() r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003640)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='sys_enter\x00', r7}, 0x10) r8 = syz_mount_image$fuse(&(0x7f0000000d80), &(0x7f0000000dc0)='./file0\x00', 0x0, &(0x7f0000000e00)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x400}}, {@max_read={'max_read', 0x3d, 0x2}}, {@max_read={'max_read', 0x3d, 0x4}}, {@max_read={'max_read', 0x3d, 0x2}}, {@max_read={'max_read', 0x3d, 0x4}}, {@max_read={'max_read', 0x3d, 0x7fff}}], [{@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@obj_role={'obj_role', 0x3d, '^+%/\xee{:.\'@\xef]+%-'}}]}}, 0x1, 0x0, &(0x7f0000000f80)="d9f3bddbaa68ee1d3ee43bb7096daa3cc5896b73f00d384a3410088903a55a888cf8a636de2c78b316a0bcf9bd7f44321835b7a8076b450bcb0f") r9 = getpgrp(0x0) stat(&(0x7f0000000fc0)='./file0\x00', &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0}) r11 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000000580)={[{@dioread_nolock}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@debug}, {@noinit_itable}, {@errors_continue}, {@usrjquota}, {@orlov}, {@minixdf}, {@resgid={'resgid', 0x3d, r12}}, {@usrjquota}, {@i_version}]}, 0xfe, 0x43a, &(0x7f00000008c0)="$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") r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r13}, 0x18) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r14, 0x0) r15 = getpid() sched_setscheduler(r15, 0x2, &(0x7f0000000200)=0x6) lstat(0x0, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x0}) r17 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) fstat(r17, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x810412, &(0x7f0000000780)=ANY=[@ANYRES32=r19, @ANYBLOB="749235c63bc001e29d7d09ef375f63128afacfe8f0ceeecb4e9488820a629fbf61482e779fe677d802f4fdfb224c8e9d9df582f661c26d2970f7ab1e0f14f11584b083ba27367e9700cdb013122b6f2409000000005e9299d7a3ffff531126f8c5b59b3e9a83964da1c7aeb1e1", @ANYRES32, @ANYRES16=r17, @ANYRES32, @ANYRESOCT=r18, @ANYBLOB="77664895cba8dfdce399457cc28f7ded08ead3c0ec4c625aa2c471c377f46988078d00df4dbf922b6d413f529ebd63fad7f2d1c2eb5b8f26cb542c036fdb58341f55efafb88cfb32b4463aed848c7d22bde6d7046c734381291393fdec64d930caf86895846a8189006de1f11a9c5f543adad2a65e2494c99e256287f4bb58ec0375b688db94f3c0053cc848a566f17fa3025e7d8e5f5750d14f7309d69fe58b4b5779e5f5259bfe19c0efe18aefa4d385e7f9e33730333759efdf030756e8bf8962e6fcf3b8c519c233fff4bda5ca", @ANYRESOCT], 0x2, 0x1eb, &(0x7f0000000900)="$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") sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003540)=[{{&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000300)="e31a29d57fc5e9d9f0148b4725a89cc254e4df71c47b901219ad0910565c79e4974751cb94b3bdc18aef9a8a5aa5dbd3b2c34b524fdbd2e3b874405c30a5bfdffcf897f3b12e0f9763e8b51c22f13ea75298d647601e71fdc349209bfc990cd664410e4ef5e0ad4cadf3ba5a67f9d48ed347900f102e00f6039b67afefc122ae264b9316a0a732195f52224e02b5b93bebd10ea14edd3cb1b502b576cdd847ec42999ca278bc11bb29ab0a792bfd1af8e7cf7b83376a56f9ab08fa78eb93e7e484ac29c1a0ed1faf12bd9a074ec32291b3aab56250f6ac6c", 0xd8}, {&(0x7f00000004c0)="91aed8d7cae350f08d05e064984a69d753afd28b7cc8853dc628247294b7f1ca03937d6d7bd9c3bf35287630e83c181d898381480e805b7457b6ca939b8217b15d6e792bdf2a2212b66b949ee6f4bb6f5c8191be2f67c1e85ecc5c989ecead1460c2826bf1d7295624851f66704a49bcc54fbffdbb32ecc9cc347df9fb5df353e94af603a99197cfe4325f5a8326943045fbebfec90edf4c42fcd2db676e5927e185c9ad1f11f6a528a5adbb9f971ca850e665769b8c5ad8c0b4dbfc487afbaadc5e751f5a8893e472dda0eac294cb1aaee81c5c94d441e6", 0xd8}, {&(0x7f0000000200)="a2954238c3db487164e394039adcbb47cd097207cc73476e2c6d7ab5bddaae8eaacbecf4d3a5cdad", 0x28}, {0x0}], 0x4, &(0x7f0000003700)=ANY=[@ANYBLOB="1c00004e001000000100a21a4c357b063820fcd2407927fc500aebd3fa625382c73f48065741fb1e916a60d80c93a2facb6ab693d3fcbc908e2177be926914706e", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r2, @ANYRES32, @ANYRES32=r5, @ANYRES32, @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x885}}, {{&(0x7f0000000740)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000001480)="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", 0xffe}], 0x1, &(0x7f0000000800)=[@cred={{0x1c}}], 0x20, 0x20000010}}, {{&(0x7f0000000840)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000b00)=[{&(0x7f00000008c0)="91722476b04d1eb8462583bde0708a6cec1ec26c5694947f1de318c37dcc63c040da6e902809372c1a5f6f067ca8dcecbc28bc894ad95e71e0c4b9afed02574c06d9dcd0714475c442794de542b4870650a883b8941bf181e1c0747df97d5ed35df7af0cb92424da600fe783b69766e29320f934ccc53631f3863119c1f79e36c3fe04efd21152dac048a573c14dd1924705024718e4df413a291d537abbe1122e22882aad42f92c6e13f486a234c6b709fc2561aa2af6415b2ce9c4daf968c3a55c7e", 0xc3}, {&(0x7f0000000a40)="f324d8815e23f5e1f88d47ce9748e7882c80edacc583829f681d506ca5acd4bcaf17c90ded1f9b35ea3c43bdd18f4aeb5d5fb711a2cd6552e54ab64b3c2a810e3d1642639fb74c77b0f832b866914bbf3e448cb58d0506165ebd5afb68071e614d3a2a7234ea98222a46129f4c25a1a4d9e773b155e8e7d60444158a639f9b954a1f8855dcb7e6866069801c143699738fd60fa0fcbb95407ae66b90d2ebf3c9aaae5806f65c76a46562cfbd9f27", 0xae}, {&(0x7f0000002480)="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", 0x1000}], 0x3, &(0x7f0000001080)=[@rights={{0x1c, 0x1, 0x1, [r2, 0xffffffffffffffff, r4]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [r3, r4, r2, r0, r2, r3, r2]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, r0, 0xffffffffffffffff, r0, r3, r4, r3]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r6}}}, @rights={{0x20, 0x1, 0x1, [r3, r7, r0, r8]}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r12}}}], 0x140, 0x40014}}, {{&(0x7f0000001200)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000013c0)=[{&(0x7f0000001280)="94e04cab84230560b79e616c8f083152172b824e771afeaa8c05abdc493563e5979808af367d8501b2e5b3de35ab0c6fa21a5077b180280c1556cb5625b9034362834c6cecca81dd5727f376eddbb3061b587a215c96cad570a832f4bb96d5fb7fdb69ae143a1dc5970c211a662b", 0x6e}, {&(0x7f0000001300)="2b28275bcb4240e3d539bc704768c4515cb92fa771304745c29e1ebf783761de0fe9c5c7049c05fcec65aea85f56b7bc199e900f242a3b92db6f95e985dc1cd8599ec8a27afefafe366cffe6bb0eadf0b8863cb1fdb108b8444e36ce13460bcf90157989be255aaf3d293a7ed7c0720db3d30493b9b1299d7df990", 0x7b}, {&(0x7f0000001380)="d9813ec954a34b7a7edd1e9c85", 0xd}], 0x3, &(0x7f0000003500)=[@cred={{0x1c, 0x1, 0x2, {r15, r16, r19}}}], 0x20, 0x4040880}}], 0x4, 0x10) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_4={0x3, 0x1, 0x0, "f7940ef7"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @global=@item_012={0x2, 0x1, 0x1, "b8ef"}, @local=@item_012={0x2, 0x2, 0x0, "1a70"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) 6.59683768s ago: executing program 0 (id=1303): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x2d) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r0], 0x54}}, 0x4000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000100)={{0x1}}) 5.652842545s ago: executing program 0 (id=1306): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="9802"], 0x298) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, 0x0, &(0x7f0000000b80), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40000, 0x20) getdents(r7, 0x0, 0x0) 5.290342839s ago: executing program 1 (id=1307): open(&(0x7f0000000100)='./file0\x00', 0x121bff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000010c0)={[{@nobh}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noquota}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x85c5}}, {@nojournal_checksum}, {@jqfmt_vfsv1}]}, 0xfe, 0x576, &(0x7f00000024c0)="$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") r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='ext4_ext_remove_space_done\x00', r0}, 0x10) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[], 0x5c, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x11f25000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) r6 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'veth1_vlan\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x9}}) 5.072084814s ago: executing program 4 (id=1308): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x11, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000400000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085100000010000009500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 4.997453959s ago: executing program 4 (id=1309): epoll_create1(0x0) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file3\x00', 0x0, &(0x7f0000005700)=ANY=[@ANYBLOB="6e6f61636c2c6e6f757365725f78617474722c6e6f71756f74612c6e6f71756f74612c66617374626f6f742c6e6f696e6c696e655f64656e7472792c6a71666d743d76667376312c6673796e635f6d6f64653d7374726963742c6772706a71756f74613d272c616c6c6f635f6d6f64653d64656661756c742c6e6f696e6c696e655f78617474722c00e04cbd9a4f63af8c98e7f638dba07a40d32059fb6ddd2f4cc595bf28c283364e3ebb4d506eb7ea924d3bc4a944eb7ff5cd986dd3b7cb533e7d1a244d820bfa6d3ed0080f7bc8bfba8ae0b56c48ad64dcbcc449e149ea6d309082c9759d87451a2e1bbb8b7b013e3d5fad19da476837e286c64e240600000000000000b00d3188d38d15f988d55c7cdd5f4d76947e0e70ad90dac3ac2df4a232ccd9aed86b51c33c98784699aa72bbef855492eb3cd24b7fe8f2f215c60c01a07e4918a0"], 0x1, 0x550f, &(0x7f00000001c0)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x5, 0x0, 0x1787}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000005880)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$EXT4_IOC_SWAP_BOOT(r5, 0x6611) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x6, 0xff, 0x40, 0x8, 0x10048, 0xffffffffffffffff, 0x8, '\x00', 0x0, r0, 0xffffffff, 0x0, 0x0, 0x0, @void, @value, @value=r1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000b00)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0022}]}) sigaltstack(0x0, 0x0) ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f00000058c0)=0x1) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) 4.594967567s ago: executing program 0 (id=1312): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, &(0x7f0000000bc0)) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000340)=""/225, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x35b, &(0x7f00000003c0)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x325, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2502"}, {0x0, 0x1, "000000050000000026000400"}, {0x19, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x25, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bbf8ed38adb72bbf4b9aeb7f4eb1927c4619f91394c02bcfbbb7d71138537d68e2d2c6393"}, {0x0, 0x11, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b0561"}, {0x0, 0x3, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605a"}]}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x17, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 4.286148418s ago: executing program 3 (id=1313): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000100)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000600)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}}, &(0x7f0000000640)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000680)={0x40, 0x19, 0x2, "4bc0"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x40}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x80}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x7}}) 4.025669755s ago: executing program 1 (id=1314): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x2d) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r0], 0x54}}, 0x4000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000100)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000180)={0x0, 0x745, 0x101}) 4.012465986s ago: executing program 4 (id=1315): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0xb4, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6, 0x5, {0x9d}}, @filter_kind_options=@f_fw={{0x7}, {0x78, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x2}}, @TCA_FW_INDEV={0x14, 0x3, 'batadv_slave_1\x00'}, @TCA_FW_INDEV={0x14, 0x3, 'veth0_to_bond\x00'}, @TCA_FW_CLASSID={0x8}, @TCA_FW_POLICE={0xc, 0x2, [@TCA_POLICE_AVRATE={0x8}]}, @TCA_FW_CLASSID={0x8}, @TCA_FW_INDEV={0x14, 0x3, 'pimreg1\x00'}, @TCA_FW_INDEV={0x14, 0x3, 'syzkaller1\x00'}]}}]}, 0xb4}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@ipv6_deladdr={0x2c, 0x15, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @empty}]}, 0x2c}}, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {0x0}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf, 0xb00}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b", @ANYRES32], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x3, 0xa4, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) dup2(r8, r7) r9 = socket$vsock_stream(0x28, 0x1, 0x0) fgetxattr(r9, &(0x7f0000000000)=ANY=[], 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0200000004000000060000000500000000100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r10}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x2006, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa, &(0x7f0000000180)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf9, &(0x7f0000000240)=[{}, {}], 0x10, 0x0, 0x0, &(0x7f0000000340), 0x8, 0x4b, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYRESOCT=r2, @ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r10, &(0x7f0000000040)="dd75ae5fde21fe9b85e2422ee6deaa3e18e8a84d07dd44e41d24455f4f49d33d"}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r12}, 0x10) syz_usb_control_io$uac1(r1, 0x0, 0x0) 3.399912889s ago: executing program 0 (id=1317): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000000000407d1ed43000000000000109022400010000483009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000008000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="22050000000400000000000000000000000000000000fcffffff00008b1881f595ac"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448cc, &(0x7f0000000380)="bed84dca7e6011b44d3969aa08806f5fab47d54d6bb97954488329963e05ad3ed9f82f61ae162b1ef533297234ff1c63a5414d357efa907b1348b9e99ff4568f7401438109a6e4e5c69138e5cfacd00fb3e5885e15ad859f7003a46ea860718d5f092b072fbf6f82b7b06bbb4b7d0edcc7272cc6cb2a9ad725ab6a5f001d8ddf18a85c7977506ac7a42db39d2baa8b5f044e1fc324a8df7ceba7782cdcb951bd1a5f2d51a64e") r3 = dup(r1) connect$inet6(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x4, 0x0, 0x0) 3.316018964s ago: executing program 2 (id=1318): sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53a1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='cdev_update\x00', r4}, 0x18) fchdir(0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r6, 0x10, &(0x7f0000000140)) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000180)=0x80000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) 3.256242708s ago: executing program 2 (id=1319): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x80c406, &(0x7f0000000500)=ANY=[@ANYBLOB="646f74732c646f747300646d61736b3d30303030303030303003994db69d6fadd9fe8357bb9b326973636172642c0166733d6e6f7774066c655f726f2c6769643d8bde74b54a903862b1d491a0644fd032adf103782b3e6ab9bb8b7d5a0000008000000000831cac568a8781052c1f78a90d525fbffbbe712b3588cd20fd6b4fa30f99796b63d0000200006bf7964f30b515830fe521179cb856fcec51525e76986850e3c2079c07811902047009a8bd311ec4398a92a06f061a5a0ba1eb2b3db991e65cb55232662ecb874cb1ea47734fd6c56b06c03f20235fad7299622ac7c70fbb5466c8f69e506f15f9048273682c4abdddc8cbc849980b03000000000000000000000063e0c97554c132b6effff3b3e0c109c72f794db4da27b9108716f1877464f58d22d0ea6e75321d887a6a375c5cf8cce358a8df2720e76ce466c78c7901cc6071bc2eafaa394d4290e95d4db56b59ed5d9bd10d94b075a7ace6d3f19993baa452c9ecc39f61cc383b51b627ad3b736c045f8c784b64bbaac710f4372841998dee85b80f515bdeba72caeb00c76ae7cb06986d7e9f9fec03b990c1fc56d5161ae3c622a649f9f95781dd32bc8e4090861fcad6bed6a3be33f3602b136695e7543543b93f62312f5387cd4c6d1aa22271ec1be39d675c08f44ed601b6c8fbf92f448158194570618bfd504dfd0ff459eff7bc34e453816efefe372fcecc66f0956afbe155f1f53d0eff4872d6921804209e82af2ed0a588b8ebbef33bbbc3d495d110acf1a7537f33a8f5a82a29e2d6761b50d3db9dae0a9606eb4b0a92cdb504659776a21344b8fdc9ca3851a76938dd00e59cb1d1ad7ec9ac6e19d3244e209fd56e67caf895cf9f8507b063cac9ddc2ae46f7dff3f9b86b5b3838383015a502f3540a8a796580c78737b10f54977af5cee89e91cc54e21101973aed1e03820294e9811ef0c389ec53e04e14f226213fa4fd2f9c32cd317f936edcf16bffd78d69907336f1e4cf69c22d2e8f0a1caa2623483b45be9f59f1b74cd3f19a92db916f959d4bcb800c50bfabd4d63861e036ef6d614d46c31ab711ad2ead248d781e89017fc7c22d22be274e450e5f1837bf10921f4b117439ad4503f11682542bdba745be99695d4c3d64b96997f1a6f8f3145f94f227694be7682e8a2a1a288b69474164171c6dc00e770cb068702087467ee08643516fbc3f5f71715559152dbdb61082060c73a9338db0407ed89b6941d034f623a6643e394456", @ANYRES16, @ANYBLOB="5fc5e0cc89c3068519a1a4d35631da3ac1da1498ccbed34b45633d4cecc0ce311f7adfa5ee00b0ede9ce477b0717355c8145c254b208e7b26c8704f414550ccfcd9f78ef990092397d833e4961136c5ad068266b4af5edbd182a21f3"], 0xff, 0x2b1, &(0x7f0000000100)="$eJzs3E1rE0EYwPEn2TabVvpyEvTig170stR4VKFRWhADStoV9SBs6VZDYlJ2gyYimLOnfo7i0ZsgfoHe/QDeiiA99eRKk826iemLISY1/f8g7Mw8O5uZnQSeCWx2H2+9LG741oZTlWRaJSnSkH2ReSlIWyI8pprlVNQutzPSkGsLr/berzx5ej+byy3lVZezqzcyqjp76fPrtx8uf6mee/Rx1jRlZ/7Z7o/Mt53zOxd2f66+KPha8LVcqaqja5VK1Vkrubpe8IuW6sOS6/iuFsq+63XEN0qVzc26OuX1melNz/V9dcp1TUpdqxVNh6Mqq2VZOjN9UE7LGZL66x72dj7vZHuGztSdG2+el3UMEZn6Y03t7dGMCAAAjNLh+X8yOqed/ye783+RY/L/d+FZs58Gnv8bEuX/RbeZ/1e9ujrPnUI8/8eR7MXO/H/xRL2S/25A6FeiEavc6Qh5XnaqdyfyfwAAAAAAAAAAAAAAAAAAAAAA/gf7QTAXBMHcwTEpIkFYN0XEiNV7dOUJ8TEQX/8g9jLDBT5i/TEGYg/upUW+N2p2zU40j6348r3c0oI2xR7826vVbCOKX2/FtTM+KdNhPNMznpKrV1rxg9jdB7l4fKtmT8l611iNjlpjkLcBAAAAAICxZmlkPmpMS7S/tyw1pTve3L83CxMi0v59oGt/PyEXJ4Y4EQAAAAAAcCi//qbolEquN5yCMcT36rsg0l/3m4E5kGEYIhJrMcOlip+TXxEZ3JRTcuyU9UQXNMVtj3a4C/c123f39Cn51J2wcGtgFwwSIq2WyXDNur4FAAAAAMbL7/3AqEcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDZNYy/Lhv1HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDT4lcAAAD//4aMsuk=") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r0, &(0x7f0000000380), 0x20000000}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) tkill(0x0, 0x12) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x80a, &(0x7f0000000340)=ANY=[@ANYBLOB='iocharset=cp437,fmask=00000000000000000000315,errors=remount-ro,umask=00000000000000000000177,errors=remount-ro,umask=00000000000000000001775,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c696f636861727365743d63703933362c666d61736b3d30303030303030303030303030303030303030303030312c005e78aae2dff810901336831a8ac30acbcd22a575ef96"], 0x5, 0x1516, &(0x7f00000037c0)="$eJzs3AuYTlX7MPD7XmvtMSQ9TXIY1lr35kkOyyRJDknlkCRJkuSUmKRJXklIDDklDUlIDkNyGEJymJg0zufzMUmSJklCckrWd03xeXur7/2//7fv9b/+c/+ua1/Pup+177XXfu7nsPZ2+LbL0FpNat/ViIjg34K/PiQDQCwADASAawAgAIAKcRXisvtzS0z+9w7C/loPp13pGbArieufs3H9czauf87G9c/ZuP45G9c/Z+P652xcf8Zyss3TC1/LW87d+P5/Tsa///+LZJUd++Xastd3/RdSuP45G9f/f63gv7IT1z9n4/rnbFz/nI3rnxPk+tMern/OxvVnLCe70vef/2GLgSs/hxy1Xen3H2OMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4yxnOGMv0wBwKX2lZ4XY4wxxhhjjDHG/jo+15WeAWOMMcYYY4wxxv7/QxAgQUEAMZALYiE35AEBAFdDPrgGInAtxMF1kB+uhwJQEApBYYiHIlAUNBiwQBBCMSgOUbgBSsCNUBJKQWkoAw7KQgLcBOXgZigPt0AFuBUqwm1QCSpDFagKt0M1uAOqw51wF9wNNaAm1ILacA/UgXuhLtwH9eB+qA8PQAN4EBrCQ9AIHobG8Ag0gUehKTwGzaA5tICW0Oq/lf8i9ICXoCf0gmToDX3gZegL/aA/DICB8AoMgldhMLwGKTAEhsLrMAzegOHwJoyAkTAK3oLR8DaMgbEwDsZDKkyAifAOTIJ3YTJMgakwDdJgOsyA92AmzILZ8D7MgQ9gLsyD+bAA0uFDWAiLIAM+gsXwMWTCElgKy2A5rICVsApWwxpYC+tgPWyAjbAJNsMW2ArbYDvsgJ2wC3bDJ7AHPoW98Bnsg8//xfzT/5DfFQEBBQpUqDAGYzAWYzEP5sG8mBfzYT6MYATjMA7zY34sgAWwEBbCeIzHolgUDRokJCyGxTCKUSyBJbAklsTSWBodOkzABCyHN2N5LI8VsAJWxIpYCStjZayKVbEaVsPqWB3vwruwBtbAWlgL78F7sDfWxbpYD+thfax/6fYUNsJG2BgbYxNsgk2xKTbDZtgCW2ArbIWtsTW2wTaYiInYDtthe2yPSZiEHbADdsSO2Ak7YWfsjF2wC3bFbtgNX8wF+BK+hL2whuiNfbAP9sWUXP1xAA7AV3AQvoqv4muYgkNwKL6Or+MbOBxP4QgciaNwFFYTb+MYHIskxmMqpuJEnIiTcBJOxik4BadhGk7HGTgDZ+IsnIXv4xz8AD/AeTgPF2A6puNCXIQZmIGL8TRm4hJcistwOa7A5bgKV+MqXIvrcC1uwA24CTfhFtyC23Ab7sAduAsVAH6Cn+KnmIL7cB/ux/14AA/gQTyIWZiFh/AQHsbDeASP4FE8isfwOJ7A43gST+IpPI1n8Ayew3N4Hp+P/7rxrlJrUkBkU0KJGBEjYkWsyCPyiLwir8gn8omIiIg4ESfyi/yigCggColCIl7Ei6KiqDDCCBJhDACIqIiKEqKEKClKitKitHDCiQSRIMqJcqK8KC8qiFtFRXGbqCQqi7auqqgqqolEV13cKe4Sd4kaoqaoJWqL2qKOqCPqirqinqgn6ov6ooF4UDQUvbE/PiyyK9NEDMGmYig2E82FvPgN1loMxzairUgUT4qROALbi9YuSTwjOogx2FH8TYzF50RnMR67iBdEV9FNdBcvih6ijespeonJ2Fv0EdOwr+gn+osBYibWFO/jnNy1xGsiRQwRQ8XrYgG+IYaLN8UIMVKMEm+J0eJtMUaMFePEeJEqJoiJ4h0xSbwrJospYqqYJtLEdDFDvCdmillitnhfzBEfiLlinpgvFoh08aFYKBaJDPGRWCw+FpliiVgqlonlYoVYKVaJ1WKNWCvWifVig9goNonNYovYKraJ7WKH2Cl2id3iE7FHfCr2is/EPvG52C++EAfEl+Kg+Epkia/FIfGNOCy+FUfEd+Ko+F4cE8fFCfGDOCl+FKfEaXFGnBXnxE/ivPhZXBBegEQppJRKBjJG5pKxMrfMI6+SeWVw8dW9VsbJ62R+eb0sIAvKQrKwjJdFZFGppZFWkgxlMVlcRuUNsoS8UZaUpWRpWUY6WVYmyJtkOXmzLC9vkRXkrbKivE1WkpVlFVlV3i6ryTskRH49Rg1ZU9aSteU9so68V9aV98l68n5ZXz4gG8gHZUP5kGwkH5aN5SOyiXxUNpWPyWayuWwhW8pW8nHZWj4h28i2MlE+KdvJp2R7+bRMks/IDtJffIs8JzvL52UX+YLsKrvJ7vJneUF62VP2kgC9ZR/5suwr+8n+coAcKF+Rg+SrcrB8TabIIXKofF0Ok2/I4fJNOUKOlKPkW3K0fFuOkWPlODlepsoJcqJ8R06S78rJcoqcKqfJNDld9r840mwp/2n+O3+QP/iXo2+Sm+UWuVVuk9vlDrlT7pK75W65R+6Re+VeuU/uk/vlfnlAHpAH5UGZJbPkIXlIHpaH5RF5RB6VR+UxeVyelT/Ik/JHeUqelqflWXlOnpPnL74GoFAJJZVSgYpRuVSsyq3yqKtUXnW1yqeuURF1rYpT16n86npVQBVUhVRhFa+KqKJKK6OsIhWqYqq4iqob8OIbRpVWZZRTZVWCuulfyVcl1I2qpCr1m/xL80v+k/m1Uq1Ua9VatVFtVKJKVO1UO9VetVdJKkl1UB1UR9VRdVKdVGfVWXVRXVRX1VV1V91VD9VD9VQ9VbJKVn3Uy6qv6qf6qwFqoHpFDVKD1GA1WKWoFDVUDVXD1DA1XA1XI9QINUqNUqPVaDVGjVHj1DiVqlLVRDVRTVKT1GQ1WU1VU1WaSlMz1Aw1U81Us9VsNUfNUXPVXDVfzVfpKl0tVAtVhspQi9VilamWqCVqmVqmVqgVapVapdaoNWqdWqc2qA0qU21Wm9VWtVVtV9vVTrVT7Va71R61R+1Ve9U+tU/tV/vVAXVAHVQHVZbKUofUIXVYHVZH1BF1VB1Vx9QxdUKdUCfVSXVKnVJn1Bl1Tp1T59V5dUFdyF72BSIQgQpUEBPEBLFBbJAnyBPkDfIG+YJ8QSSIBHFBXJA/uD4oEBQMCgWFg/igSFA00IEJbCAuFj0a3BCUCG4MSgalgtJBmcAFZYOE4KagXHBzUD64JagQ3BpUDG4LKgWVgypB1eD2oFpwR1A9uDO4K7g7qBHUDGoFtYN7gjrBvUHd4L6gXnB/UD94IGgQPBg0DB4KGgUPB42DR4ImwaNB0+CxoFnQPGgRtAxa/aXje3+q4BOup+6lk3Vv3Ue/rPvqfrq/HqAH6lf0IP2qHqxf0yl6iB6qX9fD9Bt6uH5Tj9Aj9Sj9lh6t39Zj9Fg9To/XqXqCnqjf0ZP0u3qynqKn6mk6TU/XM/R7eqaepWfr9/Uc/YGeq+fp+XqBTtcf6oV6kc7QH+nF+mOdqZfopXqZXq5X6JV6lV6t1+i1ep1erzfojXqT3qy36K16m96ud+idepferT/Re/Sneq/+TO/Tn+v9+gt9QH+pD+qvdJb+Wh/S3+jD+lt9RH+nj+rv9TF9XJ/QP+iT+kd9Sp/WZ/RZfU7/pM/rn/UF7bMX99k/70YZZWJMjIk1sSaPyWPymrwmn8lnIiZi4kycyW/ymwKmgClkCpl4E2+KmqImGxkyxUwxEzVRU8KUMCVNSVPalDbOOJNgEkw5U86UN+VNBVPBVDQVTSVTyVQxVczt5nZzh7nD3GnuNHebu01NU9PUNrVNHVPH1DV1TT1Tz9Q39U0D08A0NA1NI9PINDaNTRPTxDQ1TU0z08y0MC1MK9PKtDatTRvTxiSaRNPOtDPtTXuTZJJMB9PBdDQdTSfTyXQ2nU0X08V0NV1Nd9Pd9DA9TE/T0ySbZNPH9DF9TV/T3/Q3A81AM8gMMoPNYJNiUsxQM9QMM8PMcDPcjDAjzajshap524wxY804M96kmlQz0Uw0k8wkM9lMNlPNVJNm0swMM8PMNDPNbDPbzDFzzFwz18w38026STcLzUKTYTLMYrPYZJpMs9QsNcvNcrPSrDSrzWqz1qw162G92Wg2ms1ms9lqtprtZrvZaXaa3Wa32WP2mL1mr9ln9pn9Zr85YA6Yg+agyTJZ5pA5ZA6bw+aIOWKOmqPmmDlmTpgT5qQ5aU6ZU+aMOWPOmYIXfy+9ibW5bR57lc1rr7b57DX2H+NCtrCNt0VsUattAVvwN7Gx1pa0pWxpW8Y6W9Ym2Jt+F1eylW0VW9XebqvZO2z138V17L22rr3P1rP329r2nt/E9e0DtoF91DZEBLDNbWPb0jaxj9qm9jHbzDa3LWxL284+Zdvbp22SfcZ2sM/+Ll5oF9nVdo1da9fZPfZTe8aetYftt/ac/cn2tL3sQPuKHWRftYPtazbFDvldPMq+ZUfbt+0YO9aOs+N/F0+102yanW5n2PfsTDvrd3G6/dDOsRl2rp1n59sFv8TZc8qwH9nF9mObaZfYpXaZXW5X2JV21f+d6zK7wW60m+xu+4ndarfZ7XaH3Wl3/RJnn8de+5ndZz+3h+w39oD90h60R2yW/fqXOPv8jtjv7FH7vT1mj9sT9gd70v5oT9nTv5x/9rn/YH+2F6y3QEhAkhQFFEO5KJZyUx66ivLS1ZSPrqEIXUtxdB3lp+upABWkQlSY4qkIFSVNhiwRhVSMilOUbqBL6/TSVIYclaUEuonK0c1Unm6hCnQrVaTbqBJVpipUlW6nanQHVac76S66m2pQTapFtekeqkP3Ul26j+rR/VSfHqAG9CA1pIeoET1MjekRakKPUlN6jJpRc2pBLakVPU6t6QlqQ20pkZ6kdvQUtaenKYmeoQ70LHWkv1Eneo460/PUhV6grtSNutOL1INeop7Ui5KpN/Whl6kv9aP+NIAG0is0iF6lwfQapdAQGkqv0zB6g4bTmzSCRtIoeotG09s0hsbSOBpPqTSBJtI7NInepck0habSNEqj6TSD3qOZNItm0/s0hz6guTSP5tMCSqcPaSEtogz6iBbTx5RJS2gpLaPltIJW0ipaTWtoLa2j9bSBNtIm2kxbaCtto+20g3bSLtpNn9Ae+pT20me0jz6n/fQFHaAv6SB9RVn0NR2ib+gwfUtH6Dvfi76nY3ScTtAPdJJ+pFN0ms7QWTpHP9F5+pkukCcIMRShDFUYhDFhrjA2zB3mCa8K84ZXh/nCa8JIeG0YF14X5g+vDwuEBcNCYeEwPiwSFg11aEIbUhiGxcLiYTS8ISwR3hiWDEuFpcMyoQvLhgnhTWG58OawfHhLWCG8NawY3hZWCiuHj95fNbw9rBbeEVYP7wwTw7vDGmHNsFZYO7wnrBPeG9YN7wvrhfeH5cMHwgbhg2HD8KGwUfhw2Dh8JGwSPho2DR8Lm4XNwxZhy7BV+HjYOnwibBO2DRPDJ8N24VNh+/DpMCl8JuwQPvtL/wOL/rw/Oewd9glfDl8Ovb9Pzo8uiKZHP4wujC6KZkQ/ii6OfhzNjC6JLo0uiy6ProiujK6Kro6uia6Nrouuj26IboxuinpfOxc4dMJJp1zgYlwuF+tyuzzuKpfXXe3yuWtcxF3r4tx1Lr+73hVwBV0hV9jFuyKuqNPOOOvIha6YK+6i7gZXwt3oSrpSrrQr45wr6xJcS9fKtXKt3ROujWvrEt2T7kn3lHvKPe2eds+4Du5Z19H9zXVyz7nO7nn3vHvBdXXdXHf3ouvhJuT79TOZ7Pq4Pq6v6+v6u/5uoBvoBrlBbrAb7FJcihvqhrphbpgb7oa7EW6EG+VGudFutBvjxrhxbpxLdaluopvoJrlJbrKb7Ka6qS7NpbkZboab6Wa6arN+PcpcN9fNd/Ndukt3C132mjHDLXaLXabLdEvdUrfcLXcr3Uq32q12a91at96tdxvdRrfZbXZb3Va33W13O91Ot9vtdnv8Nb8O6va5/W6/O+AOuIPuK5flvnaH3DfusPvWHXHfuaPue3fMHXcn3A/upPvRnXKn3Rl31p1zP7nz7md3wXmXGpkQmRh5JzIp8m5kcmRKZGpkWiQtMj0yI/JeZGZkVmR25P3InMgHkbmReZH5kQWR9MiHkYWRRZGMyEeRxZGPI5mRJZGlkWWR5ZEVEe+LbA19MV/cR/0NvoS/0Zf0pXxpX8Y7X9Yn+Jt8OX+zL+9v8RX8rb6iv81X8pV9Ff+Yb+ab+xa+pW/lH/et/RO+jW/rE/2Tvp1/yrf3T/sk/4zv4J/1Hf3ffCf/nO/sn/dd/Au+q+/mu/sXfQ//ku/pe/lk39v38S/7vr6f7+8H+IH+FT/Iv+oH+9d8ih/ih/rX/TD/hh/u3/Qj/Eg/KuYtP/rSJTKM96l+gp/o3/GT/Lt+sp/ip/ppPs1P9zP8e36mn+Vn+/f9HP+Bn+vn+fl+gU/3H/qFfpHP8B/5xf5jn+mXXLqp7Ff6VX61X+PX+nV+vd/gN/pNfrPf4rf6bX673+F3+l1+t//E7/Gf+r3+M7/Pf+73+y/8Af+lP+i/8ln+a3/If+MP+2/9Ef+dP+q/98f8cX/C/+BP+h/9KX/an/Fn/Tn/kz/vf/YX+N+sMcYYY4z9l0y43BR/1N/7D54Tf7dzHwC4elvhrL/vz15Rri/wa7ufiG8XAYBnenV5+NJWo0ZycvLFfTMlBMXnAVz6k6BsMXA5XgKJ8BQkQVso94fz7ye6naN/Mn70VoA8f5cTC5fjy+N/8SfjP/7kqIUVwzNx/4/x5wGULH45JzdcjpdAosp+bAvl/2T8gq3/yfxzf5kK0ObvcvLC5fjy/BPgCXgWkn6zJ2OMMcYYY4wx9qt+okqnS9efl/7G5x9dn8eryzm54HL8z67PGWOMMcYYY4wxduU91637048nJbXt9K83qv+3srjxP7XhPcClZxQA/JsDAvzHz2LLf+RYKRc/Ov/YtfysD+B/Rin/isYV/mJijDHGGGOM/eUuL/p/+7y6UhNijDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcZyoP/Efyd2pc+RMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYu9L+TwAAAP//8SoNew==") futimesat(0xffffffffffffffff, 0x0, 0x0) (fail_nth: 7) 2.878798394s ago: executing program 2 (id=1320): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000079e02200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x2ce, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6ef5c98002982901fec0ffff000000000000ffffe0000001fe8000000000000000000300000000aa"], 0x0) 2.878164534s ago: executing program 1 (id=1321): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000280), &(0x7f00000001c0)}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f00000023c0)='net/tcp\x00') r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000340)=0x800003, 0x4) 2.877588024s ago: executing program 2 (id=1322): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="9802"], 0x298) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) write$FUSE_NOTIFY_RETRIEVE(r2, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40000, 0x20) getdents(r7, 0x0, 0x0) 1.980970345s ago: executing program 2 (id=1323): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="9802"], 0x298) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40000, 0x20) 1.927854459s ago: executing program 1 (id=1324): open(&(0x7f0000000100)='./file0\x00', 0x121bff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000010c0)={[{@nobh}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noquota}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x85c5}}, {@nojournal_checksum}, {@jqfmt_vfsv1}]}, 0xfe, 0x576, &(0x7f00000024c0)="$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") r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='ext4_ext_remove_space_done\x00', r0}, 0x10) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[], 0x5c, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x11f25000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) r6 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'veth1_vlan\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x9}}) 1.362160518s ago: executing program 0 (id=1325): socket$inet(0x2, 0x2, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000340), 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401e04012810000000000109022400010000000009040000020300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000540)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="0000f000"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.259774105s ago: executing program 4 (id=1326): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000007f00"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000000026001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) listen(r4, 0x0) r5 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x1, 0x2000000000903, 0x4}, 0x20) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) setsockopt$inet6_int(r5, 0x29, 0x24, &(0x7f0000000100)=0x42, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@local, 0x10000, 0x1, 0x1, 0x3, 0x0, 0x2}, 0x20) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) 1.003924102s ago: executing program 1 (id=1327): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r4}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) 982.735193ms ago: executing program 2 (id=1328): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000380)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x20000000}}, 0x30) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, [@map_idx={0x18, 0x9, 0x5, 0x0, 0xd}, @map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9db}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000100)='GPL\x00', 0x7, 0xa0, &(0x7f0000000140)=""/160, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x7, 0x400, 0xfffffff7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0x1, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="2e0000000000000000000000000000002f110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x58dc, 0x8, 0x1100, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000407b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mm_page_alloc\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r5, &(0x7f0000000000)="fa", 0xfffffdef) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x3) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x2, 0x4, 0x2300, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000400)='mm_page_alloc\x00', r7}, 0xc) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000016c0)={0x0, &(0x7f0000000040)=""/38, &(0x7f0000000380), &(0x7f00000006c0), 0x1, r6}, 0x38) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 461.159089ms ago: executing program 3 (id=1329): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r4}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(r5, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) 105.225843ms ago: executing program 1 (id=1330): pipe2$9p(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write$FUSE_INIT(r2, &(0x7f0000000340)={0x50}, 0x50) vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r2, 0x407, 0x2000000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={0x0, 0x1, 0xffffffffffffffff, 0x3, 0x80000}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2cf6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) 77.568375ms ago: executing program 4 (id=1331): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000180)=@v1={0x0, @adiantum, 0x0, @desc1}) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_UNICAST_FLOOD={0x5}, @IFLA_BRPORT_MCAST_FLOOD={0x5}]}}}]}, 0x4c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r1}, 0x18) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000001040)={0x0, 0x5915, 0x0, [0x7, 0x7, 0x1, 0x9], [0x7, 0x6, 0x5, 0x9, 0x7, 0xc, 0x1, 0x2, 0x82, 0x4, 0x3, 0x2, 0xde00, 0x10001, 0xc65a, 0x1ff, 0x800, 0x8000000000000001, 0x2, 0xfffffffffffff000, 0x7, 0x0, 0x101, 0xe517, 0x3, 0x7, 0xffffffffffffffca, 0x100000001, 0x3, 0xffffffff, 0x9, 0x6, 0x1, 0x1, 0x1, 0xfa2, 0xfffffffffffff99d, 0xffffffffffffffc1, 0xfffffffeffffffff, 0x37, 0x4, 0xd2, 0x8, 0x5, 0x0, 0x2, 0x0, 0x6, 0xeea3, 0x9, 0x4fa, 0x8, 0x3, 0xa, 0x2, 0x4, 0x8, 0xff, 0x3, 0x8, 0x81, 0xfffffffffffffff2, 0x6, 0x1ff, 0x6, 0x94, 0x1, 0x8, 0x7fff, 0x2, 0x4, 0xbbc5, 0x8, 0x9, 0x8, 0xfa55, 0x8000000000000001, 0x700, 0x6, 0x7, 0x7, 0x100000000, 0x8, 0x7, 0x8, 0x8000000000000001, 0x3, 0x6, 0x1ff, 0xfff, 0x8001, 0x2, 0xce, 0xd, 0x7, 0x7, 0x100000000000000, 0x1, 0x3, 0x3, 0x9, 0x2, 0x4, 0xf3, 0xfffffffffffff800, 0x2, 0x6, 0x0, 0x2, 0xfffffffffffffff8, 0x5, 0x2, 0x1, 0x2, 0x9, 0x100000001, 0x5, 0xcd, 0x0, 0x8, 0x2]}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000001480)={0x1d, 0x2, {0x8, @usage=0x3, 0x0, 0x8001, 0x0, 0x9, 0x8, 0x0, 0x80, @usage=0x1ff, 0x0, 0x7, [0xffff, 0x6, 0x3, 0x9, 0x3, 0xffffffffffffffff]}, {0x7fffffffffffffff, @usage=0x1, 0x0, 0x1, 0x3d7b, 0x9, 0x6, 0x4, 0x40, @usage=0xa, 0x3, 0x7, [0x8, 0x800, 0xfffffffffffffff5, 0x5, 0x0, 0x4]}, {0x80000001, @usage=0x9, 0x0, 0x7, 0x2, 0x8000000000000000, 0xffffffffffffffff, 0x67, 0x19, @struct={0x5, 0x6}, 0x1, 0x6, [0x0, 0x5, 0x2fd, 0x100000000000000, 0x101, 0x7]}, {0x8000, 0x4, 0x6}}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000001880)={0x9, 0x1, {0xf, @usage=0x7, 0x0, 0x374, 0x7ff, 0x0, 0x8, 0x7fffffffffffffff, 0x11, @usage=0x1, 0xb, 0x6, [0xd, 0xdfcb, 0x7, 0x7, 0x8, 0x9]}, {0x7ff, @struct={0x9, 0xfc}, r5, 0x2, 0x3, 0x2, 0xe, 0x5, 0x2, @usage=0xe7e, 0x2, 0x9, [0x1, 0x9, 0x1, 0x1, 0x100000000, 0x1]}, {0x0, @struct={0x3, 0xbc}, r6, 0x8, 0x0, 0x7, 0x7fffffffffffffff, 0x200, 0x82, @struct={0x9, 0x7}, 0x101, 0x9, [0x9, 0x80, 0x7, 0xd9, 0x5, 0xfffffffffffffd3c]}, {0x1, 0x6, 0x2}}) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000080)={'macvtap0\x00', @random="ace9cf6b91f9"}) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r10, 0x11, 0x66, 0x0, 0x0) bind$inet6(r10, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c200de00ba8d7061966c86dd60bc426000082c00fc000000000000000000000000000000ff0200000000000000000000000000013b000001"], 0x0) 0s ago: executing program 4 (id=1332): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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") mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) clock_gettime(0xffff8001, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000005840)={0x1ff}) kernel console output (not intermixed with test programs): bridge_slave_0) entered blocking state [ 294.868994][ T5009] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.876062][ T5009] device bridge_slave_0 entered promiscuous mode [ 294.885848][ T5009] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.892958][ T5009] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.900200][ T5009] device bridge_slave_1 entered promiscuous mode [ 294.931941][ T5009] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.938924][ T5009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.946141][ T5009] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.952949][ T5009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.969942][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 294.977503][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.984927][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.994044][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 295.002007][ T286] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.002298][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.012872][ T286] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.019702][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.036296][ T286] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 295.040728][ T304] usb 3-1: USB disconnect, device number 45 [ 295.049099][ T286] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 295.049110][ T286] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.049707][ T286] usb 1-1: config 0 descriptor?? [ 295.077814][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 295.085816][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.092674][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.105052][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 295.113910][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 295.130104][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 295.140913][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 295.149012][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 295.156290][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 295.164495][ T5009] device veth0_vlan entered promiscuous mode [ 295.175229][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 295.183969][ T5009] device veth1_macvtap entered promiscuous mode [ 295.193026][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 295.202184][ T303] device bridge_slave_1 left promiscuous mode [ 295.208503][ T303] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.215653][ T303] device bridge_slave_0 left promiscuous mode [ 295.221976][ T303] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.230509][ T303] device veth1_macvtap left promiscuous mode [ 295.236326][ T303] device veth0_vlan left promiscuous mode [ 295.320488][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 295.330861][ T5017] EXT4-fs (loop1): Ignoring removed nobh option [ 295.358428][ T5017] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noquota,acl,init_itable=0x00000000000085c5,nojournal_checksum,jqfmt=vfsv1,,errors=continue [ 295.695211][ T286] prodikeys 0003:041E:2801.0024: unknown main item tag 0x0 [ 295.702587][ T286] prodikeys 0003:041E:2801.0024: unknown main item tag 0x0 [ 295.710038][ T286] prodikeys 0003:041E:2801.0024: unknown main item tag 0x0 [ 295.717317][ T286] prodikeys 0003:041E:2801.0024: unknown main item tag 0x0 [ 295.724342][ T286] prodikeys 0003:041E:2801.0024: unknown main item tag 0x0 [ 295.733163][ T286] prodikeys 0003:041E:2801.0024: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.0-1/input0 [ 295.798971][ T286] usb 1-1: USB disconnect, device number 48 [ 296.018187][ T311] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 296.211394][ T5034] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue [ 296.377173][ T311] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.388340][ T311] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.397926][ T311] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 296.407330][ T311] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.418707][ T311] usb 5-1: config 0 descriptor?? [ 296.757144][ T311] usbhid 5-1:0.0: can't add hid device: -71 [ 296.762946][ T311] usbhid: probe of 5-1:0.0 failed with error -71 [ 296.771467][ T311] usb 5-1: USB disconnect, device number 53 [ 296.887110][ T286] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 297.100551][ T5045] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue [ 297.223354][ T5050] EXT4-fs (loop4): bad s_want_extra_isize: 11962 [ 297.257225][ T286] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 297.268983][ T286] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 297.280180][ T286] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 297.290386][ T286] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.362926][ T5043] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 297.592658][ T24] audit: type=1326 audit(1726333557.985:2180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5042 comm="syz.2.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9309151ef9 code=0x7ffc0000 [ 297.659703][ T24] audit: type=1326 audit(1726333558.015:2181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5042 comm="syz.2.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9309151ef9 code=0x7ffc0000 [ 297.687926][ T24] audit: type=1326 audit(1726333558.015:2182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5042 comm="syz.2.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9309151ef9 code=0x7ffc0000 [ 297.711785][ T24] audit: type=1326 audit(1726333558.015:2183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5042 comm="syz.2.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9309151ef9 code=0x7ffc0000 [ 297.735595][ T24] audit: type=1326 audit(1726333558.025:2184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5042 comm="syz.2.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9309151ef9 code=0x7ffc0000 [ 297.759023][ T24] audit: type=1326 audit(1726333558.035:2185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5042 comm="syz.2.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f9309151ef9 code=0x7ffc0000 [ 297.782780][ T24] audit: type=1326 audit(1726333558.035:2186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5042 comm="syz.2.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9309151ef9 code=0x7ffc0000 [ 297.806230][ T24] audit: type=1326 audit(1726333558.035:2187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5042 comm="syz.2.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9309151ef9 code=0x7ffc0000 [ 297.829600][ T24] audit: type=1326 audit(1726333558.045:2188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5042 comm="syz.2.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9309151ef9 code=0x7ffc0000 [ 297.852908][ T24] audit: type=1326 audit(1726333558.045:2189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5042 comm="syz.2.1095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9309151ef9 code=0x7ffc0000 [ 297.917125][ T286] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 297.924796][ T286] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input80 [ 297.935058][ T286] usb 3-1: USB disconnect, device number 46 [ 298.284822][ T311] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 298.947257][ T311] usb 1-1: Using ep0 maxpacket: 16 [ 298.968429][ T5078] EXT4-fs (loop2): Test dummy encryption mode enabled [ 298.978000][ T5078] EXT4-fs error (device loop2): __ext4_iget:4986: inode #11: block 1: comm syz.2.1104: invalid block [ 298.989149][ T5078] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1104: couldn't read orphan inode 11 (err -117) [ 299.001066][ T5078] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000010000,jqfmt=vfsv0,delalloc,inode_readahead_blks=0x0000000000400000,noauto_da_alloc,test_dummy_encryption,,errors=continue [ 299.028390][ T5076] EXT4-fs (loop4): Ignoring removed nobh option [ 299.067283][ T311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.074631][ T5076] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noquota,acl,init_itable=0x00000000000085c5,nojournal_checksum,jqfmt=vfsv1,,errors=continue [ 299.093385][ T311] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 299.116377][ T311] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 299.125726][ T311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.137685][ T311] usb 1-1: config 0 descriptor?? [ 299.293129][ T5087] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1104'. [ 299.788097][ T5095] EXT4-fs (loop4): bad s_want_extra_isize: 11962 [ 299.839293][ T5059] fuse: Bad value for 'fd' [ 299.978544][ T5059] EXT4-fs (loop0): Ignoring removed orlov option [ 300.382686][ T5102] syz.2.1107[5102] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 300.382740][ T5102] syz.2.1107[5102] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 300.507383][ T5059] erofs: (device loop0): mounted with root inode @ nid 36. [ 300.617410][ T311] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0025/input/input81 [ 300.912723][ T311] microsoft 0003:045E:07DA.0025: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 300.925888][ T311] usb 1-1: USB disconnect, device number 49 [ 301.159943][ T5119] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 301.248507][ T5119] EXT4-fs (loop1): 1 orphan inode deleted [ 301.254126][ T5119] EXT4-fs (loop1): 1 truncate cleaned up [ 301.259887][ T5119] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,max_dir_size_kb=0x0000000000000008,resgid=0x0000000000000000,inode_readahead_blks=0x0000000000010000,max_dir_size_kb=0x000000000000ffff,errors=remount-ro,init_itable=0x0000000000000008,journal_dev=0x000000007fffff [ 301.424841][ T5129] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.431873][ T5129] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.440773][ T5129] device bridge_slave_0 entered promiscuous mode [ 301.447855][ T5129] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.448964][ T5130] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 301.454892][ T5129] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.455248][ T5129] device bridge_slave_1 entered promiscuous mode [ 301.464897][ T5130] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038 (0x7fffffff) [ 301.534577][ T5129] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.541476][ T5129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.548732][ T5129] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.555934][ T5129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.574277][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 301.582298][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.589983][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.600581][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 301.609672][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.616620][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.654768][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 301.663542][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.670393][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.697310][ T54] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 301.827703][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 301.843702][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 301.872267][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 301.880592][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 301.889163][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 301.896901][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 301.909238][ T5129] device veth0_vlan entered promiscuous mode [ 301.923011][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 301.931800][ T5144] tipc: Started in network mode [ 301.936476][ T5144] tipc: Own node identity 00000000000000000000000000000001, cluster identity 4711 [ 301.945881][ T5144] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 301.954389][ T5144] tipc: Enabled bearer , priority 10 [ 301.964091][ T5129] device veth1_macvtap entered promiscuous mode [ 301.978603][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 301.992872][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 302.147476][ T54] usb 1-1: config 17 has an invalid descriptor of length 255, skipping remainder of the config [ 302.158105][ T54] usb 1-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 302.171365][ T54] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 302.180401][ T54] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.227844][ T303] device bridge_slave_1 left promiscuous mode [ 302.237092][ T419] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 302.238289][ T303] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.256965][ T303] device bridge_slave_0 left promiscuous mode [ 302.263827][ T303] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.272514][ T303] device veth1_macvtap left promiscuous mode [ 302.278605][ T303] device veth0_vlan left promiscuous mode [ 302.596676][ T5159] syz.4.1120[5159] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 302.596730][ T5159] syz.4.1120[5159] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 302.677972][ T987] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 302.837082][ T419] usb 3-1: Using ep0 maxpacket: 32 [ 302.885510][ T5127] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 302.892810][ T5127] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 302.903675][ T5127] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 302.924775][ T5127] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 302.931834][ T5127] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 302.975830][ T419] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.986784][ T419] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.987076][ T987] usb 2-1: Using ep0 maxpacket: 16 [ 302.996448][ T419] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 303.011134][ T419] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.060698][ T419] hub 3-1:4.0: USB hub found [ 303.067093][ T311] tipc: 32-bit node address hash set to 1000000 [ 303.277654][ T419] hub 3-1:4.0: 2 ports detected [ 303.282973][ T987] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.294044][ T987] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 303.307035][ T987] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 303.316852][ T987] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.447538][ T987] usb 2-1: config 0 descriptor?? [ 304.570504][ T5173] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1121'. [ 304.898929][ T5154] fuse: Bad value for 'fd' [ 304.927664][ T5154] EXT4-fs (loop1): Ignoring removed orlov option [ 304.987319][ T304] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 305.021617][ T987] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0026/input/input82 [ 305.098132][ T987] microsoft 0003:045E:07DA.0026: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 305.221822][ T987] usb 2-1: USB disconnect, device number 59 [ 305.247141][ T304] usb 4-1: Using ep0 maxpacket: 32 [ 305.397172][ T304] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.408051][ T304] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.417964][ T304] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 305.426756][ T304] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.435486][ T304] usb 4-1: config 0 descriptor?? [ 305.547170][ T419] hub 3-1:4.0: activate --> -90 [ 305.603534][ T4447] attempt to access beyond end of device [ 305.603534][ T4447] loop0: rw=524288, want=45072, limit=40427 [ 305.616899][ T4447] attempt to access beyond end of device [ 305.616899][ T4447] loop0: rw=0, want=45072, limit=40427 [ 305.632442][ T303] attempt to access beyond end of device [ 305.632442][ T303] loop0: rw=2049, want=45112, limit=40427 [ 305.637453][ T54] usb 1-1: string descriptor 0 read error: -71 [ 305.652146][ T54] aiptek 1-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 305.663749][ T54] usb 1-1: USB disconnect, device number 50 [ 305.872665][ T5184] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.880770][ T5184] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.889513][ T5184] device bridge_slave_0 entered promiscuous mode [ 305.899662][ T5184] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.906512][ T5184] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.929292][ T304] lua 0003:1E7D:2C2E.0027: global environment stack underflow [ 306.080362][ T5184] device bridge_slave_1 entered promiscuous mode [ 306.087664][ T311] usb 3-1: USB disconnect, device number 47 [ 306.104824][ T304] lua 0003:1E7D:2C2E.0027: item 0 0 1 11 parsing failed [ 306.111812][ T304] lua 0003:1E7D:2C2E.0027: parse failed [ 306.117323][ T304] lua: probe of 0003:1E7D:2C2E.0027 failed with error -22 [ 306.164815][ T5184] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.171695][ T5184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.178807][ T5184] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.185566][ T5184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.207354][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 306.214861][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.222054][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.231199][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 306.239275][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.246093][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.261373][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 306.270160][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.277371][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.298424][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 306.306488][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 306.323613][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 306.334927][ T5184] device veth0_vlan entered promiscuous mode [ 306.344494][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 306.359675][ T5184] device veth1_macvtap entered promiscuous mode [ 306.384764][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 306.396984][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 306.406845][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 306.416068][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 306.424302][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 306.480000][ T303] device bridge_slave_1 left promiscuous mode [ 306.486897][ T303] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.502251][ T303] device bridge_slave_0 left promiscuous mode [ 306.519365][ T303] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.544727][ T303] device veth1_macvtap left promiscuous mode [ 306.551289][ T303] device veth0_vlan left promiscuous mode [ 306.667144][ T311] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 306.677525][ T5194] EXT4-fs (sda1): resizing filesystem from 262144 to 2 blocks [ 306.687171][ T5194] EXT4-fs warning (device sda1): ext4_resize_fs:1982: can't shrink FS - resize aborted [ 306.926665][ T24] kauditd_printk_skb: 25 callbacks suppressed [ 306.926675][ T24] audit: type=1400 audit(1726333567.314:2215): avc: denied { remount } for pid=5204 comm="syz.2.1132" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 306.987303][ T304] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 307.016590][ T5208] 9pnet: Insufficient options for proto=fd [ 307.027253][ T311] usb 1-1: config 17 has an invalid descriptor of length 255, skipping remainder of the config [ 307.037778][ T311] usb 1-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 307.050987][ T311] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 307.060281][ T311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.247076][ T304] usb 2-1: Using ep0 maxpacket: 32 [ 307.377206][ T304] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.388196][ T304] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.398038][ T304] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 307.407007][ T304] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.418553][ T304] usb 2-1: config 0 descriptor?? [ 307.457763][ T5192] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 307.465371][ T5192] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 307.476416][ T5192] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 307.497026][ T5192] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 307.503932][ T5192] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 307.828218][ T3980] usb 4-1: USB disconnect, device number 48 [ 307.934997][ T304] lua 0003:1E7D:2C2E.0028: global environment stack underflow [ 307.942544][ T304] lua 0003:1E7D:2C2E.0028: item 0 0 1 11 parsing failed [ 307.949489][ T304] lua 0003:1E7D:2C2E.0028: parse failed [ 307.954981][ T304] lua: probe of 0003:1E7D:2C2E.0028 failed with error -22 [ 308.187614][ T15] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 308.427777][ T15] usb 3-1: Using ep0 maxpacket: 16 [ 308.547197][ T15] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.557984][ T15] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.567683][ T15] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 308.580297][ T15] usb 3-1: New USB device found, idVendor=056a, idProduct=0022, bcdDevice= 0.00 [ 308.589136][ T15] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.597541][ T15] usb 3-1: config 0 descriptor?? [ 308.758690][ T5229] FAULT_INJECTION: forcing a failure. [ 308.758690][ T5229] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 308.771670][ T5229] CPU: 1 PID: 5229 Comm: syz.3.1136 Not tainted 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 308.782030][ T5229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 308.793289][ T5229] Call Trace: [ 308.796417][ T5229] dump_stack_lvl+0x1e2/0x24b [ 308.801076][ T5229] ? bfq_pos_tree_add_move+0x43b/0x43b [ 308.806348][ T5229] ? __kasan_record_aux_stack+0xd3/0x100 [ 308.811819][ T5229] dump_stack+0x15/0x17 [ 308.815808][ T5229] should_fail+0x3c6/0x510 [ 308.820076][ T5229] should_fail_usercopy+0x1a/0x20 [ 308.825020][ T5229] _copy_to_user+0x20/0x90 [ 308.829353][ T5229] simple_read_from_buffer+0xc7/0x150 [ 308.834553][ T5229] proc_fail_nth_read+0x1a3/0x210 [ 308.839430][ T5229] ? proc_fault_inject_write+0x390/0x390 [ 308.844896][ T5229] ? security_file_permission+0x86/0xb0 [ 308.850275][ T5229] ? rw_verify_area+0x1c3/0x360 [ 308.854964][ T5229] ? proc_fault_inject_write+0x390/0x390 [ 308.860442][ T5229] vfs_read+0x200/0xba0 [ 308.864428][ T5229] ? __kasan_check_read+0x11/0x20 [ 308.869280][ T5229] ? kernel_read+0x70/0x70 [ 308.873535][ T5229] ? __kasan_check_write+0x14/0x20 [ 308.878492][ T5229] ? mutex_lock+0xa5/0x110 [ 308.882729][ T5229] ? mutex_trylock+0xa0/0xa0 [ 308.887246][ T5229] ? __fdget_pos+0x2e7/0x3a0 [ 308.891663][ T5229] ? ksys_read+0x77/0x2c0 [ 308.895908][ T5229] ksys_read+0x199/0x2c0 [ 308.899922][ T5229] ? vfs_write+0xe70/0xe70 [ 308.904179][ T5229] ? ____fput+0x15/0x20 [ 308.908158][ T5229] ? debug_smp_processor_id+0x17/0x20 [ 308.913456][ T5229] __x64_sys_read+0x7b/0x90 [ 308.917790][ T5229] do_syscall_64+0x34/0x70 [ 308.922046][ T5229] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 308.927861][ T5229] RIP: 0033:0x7f413a82993c [ 308.932630][ T5229] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 308.953074][ T5229] RSP: 002b:00007f41394a4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 308.961559][ T5229] RAX: ffffffffffffffda RBX: 00007f413a9e2f80 RCX: 00007f413a82993c [ 308.969906][ T5229] RDX: 000000000000000f RSI: 00007f41394a40a0 RDI: 0000000000000006 [ 308.977715][ T5229] RBP: 00007f41394a4090 R08: 0000000000000000 R09: 00000000000001e5 [ 308.985522][ T5229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 308.993327][ T5229] R13: 0000000000000000 R14: 00007f413a9e2f80 R15: 00007ffcbdb72dd8 [ 309.307265][ T15] usbhid 3-1:0.0: can't add hid device: -71 [ 309.313296][ T15] usbhid: probe of 3-1:0.0 failed with error -71 [ 309.320863][ T15] usb 3-1: USB disconnect, device number 48 [ 309.420606][ T5184] attempt to access beyond end of device [ 309.420606][ T5184] loop0: rw=524288, want=45072, limit=40427 [ 309.432989][ T311] usb 1-1: string descriptor 0 read error: -71 [ 309.433682][ T5184] attempt to access beyond end of device [ 309.433682][ T5184] loop0: rw=0, want=45072, limit=40427 [ 309.440947][ T311] aiptek 1-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 309.463809][ T311] usb 1-1: USB disconnect, device number 51 [ 309.470073][ T303] attempt to access beyond end of device [ 309.470073][ T303] loop0: rw=2049, want=45112, limit=40427 [ 309.654194][ T5236] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.661181][ T5236] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.664259][ T987] usb 2-1: USB disconnect, device number 60 [ 309.668489][ T5236] device bridge_slave_0 entered promiscuous mode [ 309.691729][ T5236] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.699617][ T5236] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.706796][ T5236] device bridge_slave_1 entered promiscuous mode [ 309.715622][ T5242] EXT4-fs (sda1): resizing filesystem from 262144 to 2 blocks [ 309.724083][ T5242] EXT4-fs warning (device sda1): ext4_resize_fs:1982: can't shrink FS - resize aborted [ 309.763676][ T5244] FAULT_INJECTION: forcing a failure. [ 309.763676][ T5244] name failslab, interval 1, probability 0, space 0, times 0 [ 309.772586][ T5236] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.783767][ T5236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.786301][ T5244] CPU: 1 PID: 5244 Comm: syz.2.1142 Not tainted 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 309.791187][ T5236] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.800829][ T5244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 309.800833][ T5244] Call Trace: [ 309.800850][ T5244] dump_stack_lvl+0x1e2/0x24b [ 309.800866][ T5244] ? bfq_pos_tree_add_move+0x43b/0x43b [ 309.807705][ T5236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.817756][ T5244] ? stack_trace_save+0x113/0x1c0 [ 309.817773][ T5244] ? stack_trace_snprint+0xf0/0xf0 [ 309.848046][ T5244] dump_stack+0x15/0x17 [ 309.852038][ T5244] should_fail+0x3c6/0x510 [ 309.856792][ T5244] ? dup_task_struct+0x57/0xc30 [ 309.861602][ T5244] __should_failslab+0xa4/0xe0 [ 309.866192][ T5244] should_failslab+0x9/0x20 [ 309.870531][ T5244] kmem_cache_alloc+0x3d/0x2e0 [ 309.870765][ T5236] device veth0_vlan entered promiscuous mode [ 309.875128][ T5244] ? __kasan_check_write+0x14/0x20 [ 309.885898][ T5244] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 309.886498][ T5236] device veth1_macvtap entered promiscuous mode [ 309.891450][ T5244] dup_task_struct+0x57/0xc30 [ 309.891461][ T5244] ? __kasan_check_write+0x14/0x20 [ 309.891469][ T5244] copy_process+0x5c8/0x3340 [ 309.891479][ T5244] ? kstrtol_from_user+0x310/0x310 [ 309.891494][ T5244] ? memset+0x35/0x40 [ 309.921142][ T5244] ? __fsnotify_parent+0x4b9/0x6c0 [ 309.926072][ T5244] ? check_stack_object+0x114/0x130 [ 309.931138][ T5244] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 309.936414][ T5244] ? copy_clone_args_from_user+0x774/0x830 [ 309.942044][ T5244] kernel_clone+0x21e/0x9e0 [ 309.946383][ T5244] ? __delayed_free_task+0x20/0x20 [ 309.951335][ T5244] ? create_io_thread+0x1e0/0x1e0 [ 309.956194][ T5244] ? kernel_write+0x3d0/0x3d0 [ 309.960704][ T5244] __x64_sys_clone3+0x376/0x3a0 [ 309.965399][ T5244] ? __ia32_sys_clone+0x290/0x290 [ 309.970261][ T5244] ? ksys_write+0x260/0x2c0 [ 309.974602][ T5244] ? debug_smp_processor_id+0x17/0x20 [ 309.979802][ T5244] do_syscall_64+0x34/0x70 [ 309.984062][ T5244] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 309.989781][ T5244] RIP: 0033:0x7f9309151ef9 [ 309.994062][ T5244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.013960][ T5244] RSP: 002b:00007f9307dcaf08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 310.022357][ T5244] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f9309151ef9 [ 310.030252][ T5244] RDX: 00007f9307dcaf20 RSI: 0000000000000058 RDI: 00007f9307dcaf20 [ 310.038061][ T5244] RBP: 00007f9307dcb090 R08: 0000000000000000 R09: 0000000000000058 [ 310.045877][ T5244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.053696][ T5244] R13: 0000000000000000 R14: 00007f9309309f80 R15: 00007ffc9e212248 [ 310.069003][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 310.083638][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 310.094726][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 310.102856][ T24] audit: type=1400 audit(1726333570.484:2216): avc: denied { setopt } for pid=5245 comm="syz.3.1143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 310.109055][ T5249] EXT4-fs (loop1): bad s_want_extra_isize: 11962 [ 310.132371][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 310.141016][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 310.149426][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 310.157374][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 310.165139][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 310.173468][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 310.181482][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 310.188858][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 310.198585][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 310.259970][ T5255] EXT4-fs (loop0): Ignoring removed nobh option [ 310.268781][ T5255] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noquota,acl,init_itable=0x00000000000085c5,nojournal_checksum,jqfmt=vfsv1,,errors=continue [ 310.569746][ T1051] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 310.618125][ T3980] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 310.647590][ T303] device bridge_slave_1 left promiscuous mode [ 310.653568][ T303] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.661105][ T303] device bridge_slave_0 left promiscuous mode [ 310.667103][ T303] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.674715][ T303] device veth1_macvtap left promiscuous mode [ 310.680644][ T303] device veth0_vlan left promiscuous mode [ 310.837300][ T1051] usb 4-1: Using ep0 maxpacket: 32 [ 310.977215][ T1051] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.987364][ T3980] usb 3-1: config 17 has an invalid descriptor of length 255, skipping remainder of the config [ 310.988280][ T1051] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.998544][ T3980] usb 3-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 311.007753][ T1051] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 311.020674][ T3980] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 311.029358][ T1051] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.038373][ T3980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.081007][ T1051] hub 4-1:4.0: USB hub found [ 311.237129][ T304] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 311.297353][ T1051] hub 4-1:4.0: 2 ports detected [ 311.601093][ T5251] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 311.608207][ T5251] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 311.624660][ T5251] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 311.637295][ T304] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 311.648644][ T304] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 311.658407][ T5251] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 311.660196][ T304] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 311.666613][ T5251] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 311.675799][ T304] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.707359][ T5265] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 312.179734][ T304] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 312.187191][ T304] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input85 [ 312.198130][ T304] usb 2-1: USB disconnect, device number 61 [ 312.617182][ T1051] hub 4-1:4.0: activate --> -90 [ 312.949628][ T5289] EXT4-fs (loop0): bad s_want_extra_isize: 11962 [ 313.027697][ T20] usb 4-1: USB disconnect, device number 49 [ 313.106484][ T4895] attempt to access beyond end of device [ 313.106484][ T4895] loop2: rw=524288, want=45072, limit=40427 [ 313.117867][ T4895] attempt to access beyond end of device [ 313.117867][ T4895] loop2: rw=0, want=45072, limit=40427 [ 313.129096][ T3980] usb 3-1: string descriptor 0 read error: -71 [ 313.135538][ T7] attempt to access beyond end of device [ 313.135538][ T7] loop2: rw=2049, want=45112, limit=40427 [ 313.137880][ T3980] aiptek 3-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 313.157240][ T455] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 313.326577][ T3980] usb 3-1: USB disconnect, device number 49 [ 313.382327][ T7] tipc: Disabling bearer [ 313.395709][ T7] tipc: Left network mode [ 313.431103][ T5294] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.440649][ T5294] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.448073][ T5294] device bridge_slave_0 entered promiscuous mode [ 313.455203][ T5294] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.462603][ T5294] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.470180][ T5294] device bridge_slave_1 entered promiscuous mode [ 313.519763][ T5294] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.527051][ T5294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.536090][ T5294] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.544519][ T5294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.552180][ T455] usb 2-1: config 17 has an invalid descriptor of length 255, skipping remainder of the config [ 313.563207][ T455] usb 2-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 313.593430][ T455] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 313.606507][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 313.611415][ T455] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.621622][ T303] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.629860][ T303] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.660097][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 313.668246][ T303] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.676311][ T303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.690894][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 313.698908][ T303] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.705728][ T303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.715150][ T5299] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.724508][ T5299] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.732618][ T5299] device bridge_slave_0 entered promiscuous mode [ 313.742411][ T5299] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.749473][ T5299] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.756959][ T5299] device bridge_slave_1 entered promiscuous mode [ 313.769210][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 313.790087][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 313.818259][ T632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 313.838800][ T5294] device veth0_vlan entered promiscuous mode [ 313.847900][ T632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 314.030411][ T632] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 314.068989][ T632] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 314.117379][ T632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 314.128900][ T5294] device veth1_macvtap entered promiscuous mode [ 314.151408][ T632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 314.172775][ T632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 314.206624][ T7] device bridge_slave_1 left promiscuous mode [ 314.219287][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.227950][ T5312] EXT4-fs (sda1): resizing filesystem from 262144 to 2 blocks [ 314.236129][ T5312] EXT4-fs warning (device sda1): ext4_resize_fs:1982: can't shrink FS - resize aborted [ 314.246226][ T7] device bridge_slave_0 left promiscuous mode [ 314.252334][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.260468][ T7] device veth1_macvtap left promiscuous mode [ 314.266776][ T7] device veth0_vlan left promiscuous mode [ 314.307000][ T5287] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 314.313989][ T5287] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 314.327819][ T632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 314.339252][ T632] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 314.348713][ T5287] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 314.353893][ T632] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.366721][ T632] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.374718][ T632] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 314.394758][ T632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 314.405632][ T5287] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 314.413619][ T632] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 314.424477][ T5287] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 314.430274][ T632] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.438947][ T632] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.452368][ T632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 314.464825][ T632] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 314.490074][ T632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 314.498690][ T632] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 314.550486][ T632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 314.560663][ T632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 314.574818][ T5299] device veth0_vlan entered promiscuous mode [ 314.592399][ T5299] device veth1_macvtap entered promiscuous mode [ 315.681703][ T632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 315.694116][ T632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 315.702009][ T632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 315.710612][ T632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 315.718752][ T632] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 315.726296][ T632] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 315.734688][ T632] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 315.775602][ T632] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 315.783751][ T632] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 315.792201][ T632] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 315.803035][ T632] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 316.861072][ T4142] attempt to access beyond end of device [ 316.861072][ T4142] loop1: rw=524288, want=45072, limit=40427 [ 316.873086][ T455] usb 2-1: string descriptor 0 read error: -71 [ 316.993298][ T4142] attempt to access beyond end of device [ 316.993298][ T4142] loop1: rw=0, want=45072, limit=40427 [ 317.008956][ T5340] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_dev=0x0000000000000000,nouid32,,errors=continue [ 317.024244][ T5340] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 317.025343][ T49] attempt to access beyond end of device [ 317.025343][ T49] loop1: rw=2049, want=45112, limit=40427 [ 317.081881][ T455] aiptek 2-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 317.122710][ T455] usb 2-1: USB disconnect, device number 62 [ 317.375966][ T5360] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1166'. [ 317.684567][ T5363] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.691712][ T5363] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.699275][ T5363] device bridge_slave_0 entered promiscuous mode [ 317.707488][ T5363] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.714383][ T5363] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.722031][ T5363] device bridge_slave_1 entered promiscuous mode [ 317.747132][ T286] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 317.757629][ T5363] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.764450][ T5363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.771656][ T5363] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.778534][ T5363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.798241][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 317.805717][ T303] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.813079][ T303] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.823761][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 317.831833][ T303] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.837085][ T3979] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 317.838775][ T303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.856146][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 317.864292][ T303] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.871176][ T303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.881026][ T7] device bridge_slave_1 left promiscuous mode [ 317.886962][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.894384][ T7] device bridge_slave_0 left promiscuous mode [ 317.900430][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.908357][ T7] device veth1_macvtap left promiscuous mode [ 317.914692][ T7] device veth0_vlan left promiscuous mode [ 318.035640][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 318.043412][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 318.054872][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 318.067928][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 318.076132][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 318.084467][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 318.287604][ T3979] usb 3-1: device descriptor read/64, error -71 [ 318.297886][ T5363] device veth0_vlan entered promiscuous mode [ 318.309339][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 318.318307][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 318.327381][ T286] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 318.328538][ T5363] device veth1_macvtap entered promiscuous mode [ 318.341541][ T286] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 318.347871][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 318.362279][ T286] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 318.362894][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 318.378907][ T286] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 318.394285][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 318.399376][ T286] usb 5-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 318.411100][ T286] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.423317][ T286] usb 5-1: config 0 descriptor?? [ 318.427262][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 318.457814][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 318.467864][ T286] usb 5-1: MIDIStreaming interface descriptor not found [ 318.687093][ T3979] usb 3-1: device descriptor read/64, error -71 [ 318.698718][ T286] usb 5-1: USB disconnect, device number 54 [ 318.757297][ T311] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 318.988128][ T7] device bridge_slave_1 left promiscuous mode [ 318.994172][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.011885][ T7] device bridge_slave_0 left promiscuous mode [ 319.021645][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.039544][ T7] device veth1_macvtap left promiscuous mode [ 319.050801][ T7] device veth0_vlan left promiscuous mode [ 319.097159][ T54] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 319.127138][ T311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.147080][ T311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.167077][ T311] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 319.197091][ T311] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 319.205937][ T311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.259936][ T311] usb 2-1: config 0 descriptor?? [ 319.737493][ T54] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.767335][ T54] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.815866][ T54] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 319.848343][ T54] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 319.857524][ T54] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.870333][ T54] usb 1-1: config 0 descriptor?? [ 319.937138][ T311] usbhid 2-1:0.0: can't add hid device: -71 [ 319.943048][ T311] usbhid: probe of 2-1:0.0 failed with error -71 [ 319.952424][ T311] usb 2-1: USB disconnect, device number 63 [ 320.108348][ T5400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1178'. [ 320.118485][ T5400] device ip6gretap0 entered promiscuous mode [ 320.407137][ T54] usbhid 1-1:0.0: can't add hid device: -71 [ 320.411237][ T5403] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 320.412939][ T54] usbhid: probe of 1-1:0.0 failed with error -71 [ 320.422529][ T5403] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038 (0x7fffffff) [ 320.431457][ T54] usb 1-1: USB disconnect, device number 52 [ 320.597138][ T469] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 320.747235][ T311] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 320.815838][ T455] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 320.906015][ T469] usb 4-1: Using ep0 maxpacket: 32 [ 320.971574][ T5419] EXT4-fs (loop0): Test dummy encryption mode enabled [ 320.979975][ T5419] EXT4-fs error (device loop0): __ext4_iget:4986: inode #11: block 1: comm syz.0.1185: invalid block [ 320.991372][ T5419] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.1185: couldn't read orphan inode 11 (err -117) [ 321.003186][ T5419] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000010000,jqfmt=vfsv0,delalloc,inode_readahead_blks=0x0000000000400000,noauto_da_alloc,test_dummy_encryption,,errors=continue [ 321.027220][ T469] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.047325][ T469] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.110861][ T469] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 321.120758][ T469] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.157292][ T311] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.168405][ T311] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.177977][ T311] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 321.181281][ T469] hub 4-1:4.0: USB hub found [ 321.186886][ T311] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.227167][ T455] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.238788][ T455] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.256828][ T5424] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1185'. [ 321.288125][ T455] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 321.302279][ T455] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 321.312449][ T455] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.357222][ T455] usb 2-1: config 0 descriptor?? [ 321.359717][ T311] usb 5-1: config 0 descriptor?? [ 321.387176][ T469] hub 4-1:4.0: 2 ports detected [ 321.678161][ T5427] EXT4-fs (sda1): resizing filesystem from 262144 to 2 blocks [ 321.685500][ T5427] EXT4-fs warning (device sda1): ext4_resize_fs:1982: can't shrink FS - resize aborted [ 321.772631][ T5430] 9pnet: Insufficient options for proto=fd [ 321.838254][ T455] prodikeys 0003:041E:2801.0029: unknown main item tag 0x0 [ 321.845295][ T455] prodikeys 0003:041E:2801.0029: unknown main item tag 0x0 [ 321.863520][ T455] prodikeys 0003:041E:2801.0029: unknown main item tag 0x0 [ 321.870913][ T455] prodikeys 0003:041E:2801.0029: unknown main item tag 0x0 [ 321.880801][ T455] prodikeys 0003:041E:2801.0029: unknown main item tag 0x0 [ 321.888631][ T311] lg-g15 0003:046D:C222.002A: unknown main item tag 0x0 [ 321.895800][ T311] lg-g15 0003:046D:C222.002A: unknown main item tag 0x0 [ 321.895918][ T455] prodikeys 0003:041E:2801.0029: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.1-1/input0 [ 321.902838][ T311] lg-g15 0003:046D:C222.002A: unknown main item tag 0x5 [ 321.928315][ T5432] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue [ 321.937797][ T311] lg-g15 0003:046D:C222.002A: hidraw1: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.4-1/input0 [ 322.049126][ T311] usb 2-1: USB disconnect, device number 64 [ 322.107916][ T5348] usb 5-1: USB disconnect, device number 55 [ 322.571883][ T24] audit: type=1400 audit(1726333582.960:2217): avc: denied { prog_load } for pid=5439 comm="syz.1.1189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 322.591317][ T24] audit: type=1400 audit(1726333582.960:2218): avc: denied { bpf } for pid=5439 comm="syz.1.1189" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 322.646598][ T24] audit: type=1400 audit(1726333582.960:2219): avc: denied { perfmon } for pid=5439 comm="syz.1.1189" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 322.668328][ T24] audit: type=1400 audit(1726333582.990:2220): avc: denied { read write } for pid=5363 comm="syz-executor" name="loop1" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 322.694537][ T24] audit: type=1400 audit(1726333582.990:2221): avc: denied { open } for pid=5363 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 322.719356][ T24] audit: type=1400 audit(1726333582.990:2222): avc: denied { ioctl } for pid=5363 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=112 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 322.767130][ T5348] hub 4-1:4.0: activate --> -90 [ 322.776323][ T24] audit: type=1400 audit(1726333583.010:2223): avc: denied { read } for pid=76 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 322.798467][ T24] audit: type=1400 audit(1726333583.010:2224): avc: denied { search } for pid=76 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 322.935337][ T24] audit: type=1400 audit(1726333583.010:2225): avc: denied { append } for pid=76 comm="syslogd" name="messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 322.981913][ T24] audit: type=1400 audit(1726333583.010:2226): avc: denied { open } for pid=76 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 323.009895][ T5446] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 323.019109][ T5446] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038 (0x7fffffff) [ 323.093617][ T5466] EXT4-fs (sda1): resizing filesystem from 262144 to 2 blocks [ 323.102300][ T5466] EXT4-fs warning (device sda1): ext4_resize_fs:1982: can't shrink FS - resize aborted [ 323.220267][ T5348] usb 4-1: USB disconnect, device number 50 [ 323.260031][ T5471] EXT4-fs (loop0): Ignoring removed nobh option [ 323.348424][ T5471] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noquota,acl,init_itable=0x00000000000085c5,nojournal_checksum,jqfmt=vfsv1,,errors=continue [ 323.932800][ T5486] 9pnet: Insufficient options for proto=fd [ 323.947237][ T3979] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 324.197141][ T3979] usb 2-1: Using ep0 maxpacket: 16 [ 324.204078][ T5492] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue [ 324.229275][ T54] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 324.327153][ T3979] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.337988][ T3979] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.347690][ T3979] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 324.360324][ T3979] usb 2-1: New USB device found, idVendor=056a, idProduct=0022, bcdDevice= 0.00 [ 324.369381][ T3979] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.378388][ T3979] usb 2-1: config 0 descriptor?? [ 324.417198][ T3980] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 324.587196][ T54] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.597971][ T54] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.607460][ T54] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 324.616317][ T54] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.637391][ T54] usb 3-1: config 0 descriptor?? [ 324.797126][ T3980] usb 5-1: config 17 has an invalid descriptor of length 255, skipping remainder of the config [ 324.810593][ T3980] usb 5-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 324.826149][ T3980] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 324.839154][ T3980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.934594][ T5502] FAULT_INJECTION: forcing a failure. [ 324.934594][ T5502] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 324.948113][ T5502] CPU: 0 PID: 5502 Comm: syz.3.1206 Not tainted 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 324.957788][ T5502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 324.967992][ T5502] Call Trace: [ 324.971099][ T5502] dump_stack_lvl+0x1e2/0x24b [ 324.975782][ T5502] ? bfq_pos_tree_add_move+0x43b/0x43b [ 324.977127][ T54] usbhid 3-1:0.0: can't add hid device: -71 [ 324.981163][ T5502] dump_stack+0x15/0x17 [ 324.981175][ T5502] should_fail+0x3c6/0x510 [ 324.981185][ T5502] should_fail_usercopy+0x1a/0x20 [ 324.981196][ T5502] _copy_from_user+0x20/0xd0 [ 324.981208][ T5502] __se_sys_mount+0x179/0x3b0 [ 324.981228][ T5502] ? kvm_sched_clock_read+0x18/0x40 [ 324.997244][ T54] usbhid: probe of 3-1:0.0 failed with error -71 [ 324.999998][ T5502] ? __x64_sys_mount+0xd0/0xd0 [ 325.000016][ T5502] __x64_sys_mount+0xbf/0xd0 [ 325.005905][ T54] usb 3-1: USB disconnect, device number 52 [ 325.008935][ T5502] do_syscall_64+0x34/0x70 [ 325.008947][ T5502] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 325.008956][ T5502] RIP: 0033:0x7f413a82aef9 [ 325.008967][ T5502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.008973][ T5502] RSP: 002b:00007f4139483038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 325.077067][ T5502] RAX: ffffffffffffffda RBX: 00007f413a9e3058 RCX: 00007f413a82aef9 [ 325.084877][ T5502] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 0000000000000000 [ 325.092676][ T5502] RBP: 00007f4139483090 R08: 0000000020000400 R09: 0000000000000000 [ 325.100487][ T5502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.108298][ T5502] R13: 0000000000000000 R14: 00007f413a9e3058 R15: 00007ffcbdb72dd8 [ 325.126632][ T5502] overlayfs: failed to resolve './file1': -2 [ 325.147162][ T3979] usbhid 2-1:0.0: can't add hid device: -71 [ 325.153225][ T3979] usbhid: probe of 2-1:0.0 failed with error -71 [ 325.160123][ T3979] usb 2-1: USB disconnect, device number 65 [ 325.289767][ T5494] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 325.296416][ T5494] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 325.306764][ T5494] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 325.326574][ T5494] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 325.333577][ T5494] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 325.447265][ T455] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 325.714925][ T5520] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1537 sclass=netlink_route_socket pid=5520 comm=syz.2.1211 [ 325.857283][ T455] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 325.868715][ T455] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 325.916874][ T455] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 325.928948][ T455] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.997135][ T5507] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 326.519961][ T5538] 9pnet: Insufficient options for proto=fd [ 326.537120][ T455] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 326.545837][ T455] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input88 [ 326.562532][ T455] usb 1-1: USB disconnect, device number 53 [ 327.175083][ T5294] attempt to access beyond end of device [ 327.175083][ T5294] loop4: rw=524288, want=45072, limit=40427 [ 327.186758][ T5294] attempt to access beyond end of device [ 327.186758][ T5294] loop4: rw=0, want=45072, limit=40427 [ 327.200256][ T7] attempt to access beyond end of device [ 327.200256][ T7] loop4: rw=2049, want=45112, limit=40427 [ 327.207279][ T3980] usb 5-1: string descriptor 0 read error: -71 [ 327.218136][ T3980] aiptek 5-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 327.227661][ T3980] usb 5-1: USB disconnect, device number 56 [ 327.241381][ T5548] process 'syz.0.1220' launched './file1' with NULL argv: empty string added [ 327.287104][ T311] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 327.296736][ T54] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 327.487926][ T5555] FAT-fs (loop1): bogus sectors per cluster 255 [ 327.504649][ T5555] FAT-fs (loop1): Can't find a valid FAT filesystem [ 327.537087][ T311] usb 4-1: Using ep0 maxpacket: 32 [ 327.560765][ T5558] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.568124][ T5558] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.575433][ T5558] device bridge_slave_0 entered promiscuous mode [ 327.582625][ T5558] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.590134][ T5558] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.600398][ T24] kauditd_printk_skb: 170 callbacks suppressed [ 327.600410][ T24] audit: type=1326 audit(1726333587.992:2397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5554 comm="syz.1.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5d453ef9 code=0x7ffc0000 [ 327.617120][ T54] usb 3-1: not running at top speed; connect to a high speed hub [ 327.631559][ T5558] device bridge_slave_1 entered promiscuous mode [ 327.655891][ T24] audit: type=1326 audit(1726333588.022:2398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5554 comm="syz.1.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5d453ef9 code=0x7ffc0000 [ 327.683611][ T5558] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.690475][ T5558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.697580][ T5558] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.704372][ T5558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.725190][ T24] audit: type=1326 audit(1726333588.022:2399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5554 comm="syz.1.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f3b5d453ef9 code=0x7ffc0000 [ 327.744442][ T5558] device veth0_vlan entered promiscuous mode [ 327.758105][ T311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.758356][ T5555] EXT4-fs (loop1): Ignoring removed nobh option [ 327.773131][ T5558] device veth1_macvtap entered promiscuous mode [ 327.782782][ T311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.787461][ T54] usb 3-1: config 95 has an invalid interface number: 1 but max is 0 [ 327.793211][ T311] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 327.802458][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 327.809625][ T311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.825059][ T311] usb 4-1: config 0 descriptor?? [ 327.830259][ T24] audit: type=1326 audit(1726333588.032:2400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5554 comm="syz.1.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5d453ef9 code=0x7ffc0000 [ 327.833905][ T5555] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 327.853721][ T24] audit: type=1326 audit(1726333588.032:2401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5554 comm="syz.1.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5d453ef9 code=0x7ffc0000 [ 327.869703][ T54] usb 3-1: config 95 has no interface number 0 [ 327.890392][ T24] audit: type=1326 audit(1726333588.032:2402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5554 comm="syz.1.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3b5d453ef9 code=0x7ffc0000 [ 327.911835][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 327.919793][ T24] audit: type=1326 audit(1726333588.032:2403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5554 comm="syz.1.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5d453ef9 code=0x7ffc0000 [ 327.943779][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 327.957880][ T24] audit: type=1326 audit(1726333588.032:2404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5554 comm="syz.1.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5d453ef9 code=0x7ffc0000 [ 327.958285][ T54] usb 3-1: config 95 interface 1 has no altsetting 0 [ 327.994920][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 328.001606][ T24] audit: type=1326 audit(1726333588.032:2405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5554 comm="syz.1.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f3b5d453ef9 code=0x7ffc0000 [ 328.002948][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 328.034722][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 328.043414][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 328.051417][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 328.056519][ T24] audit: type=1326 audit(1726333588.032:2406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5554 comm="syz.1.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b5d453ef9 code=0x7ffc0000 [ 328.058919][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 328.090864][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 328.100589][ T5555] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nobh,max_batch_time=0x00000000000003ff,nojournal_checksum,usrquota,dioread_nolock,nodiscard, [ 328.151722][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 328.153353][ T5555] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038 (0x7fffffff) [ 328.172258][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 328.267488][ T54] usb 3-1: string descriptor 0 read error: -22 [ 328.273774][ T54] usb 3-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 328.283009][ T54] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.290882][ T5570] EXT4-fs (loop1): Ignoring removed orlov option [ 328.299961][ T5570] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000040000,data_err=abort,barrier=0x0000000000000002,discard,norecovery,dioread_lock,orlov,bsdgroups,max_batch_time=0x0000000000000002,user_xattr,quota,,errors=continue [ 328.337821][ T311] lua 0003:1E7D:2C2E.002B: global environment stack underflow [ 328.345162][ T311] lua 0003:1E7D:2C2E.002B: item 0 0 1 11 parsing failed [ 328.352364][ T311] lua 0003:1E7D:2C2E.002B: parse failed [ 328.358180][ T311] lua: probe of 0003:1E7D:2C2E.002B failed with error -22 [ 328.364194][ T7] device bridge_slave_1 left promiscuous mode [ 328.371971][ T5568] F2FS-fs (loop0): invalid crc value [ 328.375902][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.387898][ T7] device bridge_slave_0 left promiscuous mode [ 328.394109][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.403029][ T7] device veth1_macvtap left promiscuous mode [ 328.409488][ T7] device veth0_vlan left promiscuous mode [ 328.417128][ T3979] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 328.438641][ T5568] F2FS-fs (loop0): Found nat_bits in checkpoint [ 328.476176][ T5568] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 328.492457][ T5580] tipc: Started in network mode [ 328.497362][ T5580] tipc: Own node identity 00000000000000000000000000000001, cluster identity 4711 [ 328.507528][ T5580] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 328.515736][ T5580] tipc: Enabled bearer , priority 10 [ 329.027195][ T3979] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.027389][ T5236] attempt to access beyond end of device [ 329.027389][ T5236] loop0: rw=524288, want=45072, limit=40427 [ 329.042017][ T3979] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.049251][ T5236] attempt to access beyond end of device [ 329.049251][ T5236] loop0: rw=0, want=45072, limit=40427 [ 329.077134][ T3979] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 329.092215][ T3979] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 329.101722][ T3979] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.113396][ T3979] usb 5-1: config 0 descriptor?? [ 329.135624][ T49] attempt to access beyond end of device [ 329.135624][ T49] loop0: rw=2049, want=45128, limit=40427 [ 329.611116][ T5591] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.618245][ T5591] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.625762][ T5591] device bridge_slave_0 entered promiscuous mode [ 329.628353][ T3979] usbhid 5-1:0.0: can't add hid device: -71 [ 329.634017][ T5591] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.638791][ T3979] usbhid: probe of 5-1:0.0 failed with error -71 [ 329.646140][ T5348] tipc: 32-bit node address hash set to 1000000 [ 329.655152][ T3979] usb 5-1: USB disconnect, device number 57 [ 329.662227][ T5591] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.672196][ T5591] device bridge_slave_1 entered promiscuous mode [ 329.711473][ T5591] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.718364][ T5591] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.725549][ T5591] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.732387][ T5591] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.752483][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 329.759923][ T303] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.767152][ T303] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.776346][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 329.784678][ T303] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.791539][ T303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.819921][ T311] usb 3-1: USB disconnect, device number 53 [ 329.832978][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 329.841169][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.848197][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.870347][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 329.879525][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 329.887559][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 329.898285][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 329.907937][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 329.915165][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 329.926988][ T5591] device veth0_vlan entered promiscuous mode [ 329.938782][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 329.949069][ T7] device bridge_slave_1 left promiscuous mode [ 329.955068][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.962417][ T7] device bridge_slave_0 left promiscuous mode [ 329.968714][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.976295][ T7] device veth1_macvtap left promiscuous mode [ 329.982336][ T7] device veth0_vlan left promiscuous mode [ 330.043808][ T5591] device veth1_macvtap entered promiscuous mode [ 330.054819][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 330.082279][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 330.114634][ T5602] EXT4-fs (loop0): bad s_want_extra_isize: 11962 [ 330.257365][ T5348] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 330.352826][ T286] usb 4-1: USB disconnect, device number 51 [ 330.407119][ T311] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 330.677203][ T5348] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 330.688907][ T5348] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 330.700567][ T5348] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 330.709932][ T5348] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.767140][ T5598] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 330.907226][ T311] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.918342][ T311] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 331.087331][ T311] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 331.096275][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.104306][ T311] usb 3-1: Product: syz [ 331.109748][ T311] usb 3-1: Manufacturer: syz [ 331.114188][ T311] usb 3-1: SerialNumber: syz [ 331.227520][ T5348] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 331.262893][ T5348] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input90 [ 331.311871][ T5348] usb 5-1: USB disconnect, device number 58 [ 331.317640][ C1] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 331.358991][ T5596] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 331.657115][ T3980] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 331.687556][ T5621] loop2: p1 < > p4 [ 331.692186][ T5621] loop2: p4 size 8388608 extends beyond EOD, truncated [ 332.127148][ T3980] usb 4-1: config 17 has an invalid descriptor of length 255, skipping remainder of the config [ 332.137443][ T3980] usb 4-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 332.150248][ T3980] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 332.159153][ T5621] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 332.165832][ T3980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.387100][ T419] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 332.636974][ C0] hrtimer: interrupt took 16682 ns [ 332.679061][ T24] kauditd_printk_skb: 71 callbacks suppressed [ 332.679074][ T24] audit: type=1400 audit(1726333593.062:2478): avc: denied { unlink } for pid=5619 comm="syz.3.1237" name="#4d" dev="tmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 332.767177][ T419] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 332.778362][ T419] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 332.789511][ T419] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 332.798377][ T419] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.817407][ T5629] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 333.039457][ T24] audit: type=1326 audit(1726333593.432:2479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5628 comm="syz.4.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a778abef9 code=0x7ffc0000 [ 333.068768][ T24] audit: type=1326 audit(1726333593.432:2480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5628 comm="syz.4.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a778abef9 code=0x7ffc0000 [ 333.092426][ T24] audit: type=1326 audit(1726333593.432:2481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5628 comm="syz.4.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6a778abef9 code=0x7ffc0000 [ 333.121563][ T24] audit: type=1326 audit(1726333593.432:2482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5628 comm="syz.4.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a778abef9 code=0x7ffc0000 [ 333.145111][ T24] audit: type=1326 audit(1726333593.432:2483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5628 comm="syz.4.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6a778abef9 code=0x7ffc0000 [ 333.168644][ T24] audit: type=1326 audit(1726333593.432:2484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5628 comm="syz.4.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a778abef9 code=0x7ffc0000 [ 333.192026][ T24] audit: type=1326 audit(1726333593.432:2485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5628 comm="syz.4.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f6a778abef9 code=0x7ffc0000 [ 333.193386][ T5348] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 333.215428][ T24] audit: type=1326 audit(1726333593.432:2486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5628 comm="syz.4.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a778abef9 code=0x7ffc0000 [ 333.246340][ T24] audit: type=1326 audit(1726333593.432:2487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5628 comm="syz.4.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6a778abef9 code=0x7ffc0000 [ 333.327224][ T419] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 333.334777][ T419] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input92 [ 333.346017][ T419] usb 5-1: USB disconnect, device number 59 [ 333.427177][ T311] cdc_ncm 3-1:1.0: bind() failure [ 333.447256][ T311] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 333.467545][ T311] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 333.474746][ T311] usb 3-1: USB disconnect, device number 54 [ 333.483440][ T5640] EXT4-fs (loop2): Test dummy encryption mode enabled [ 333.491453][ T5640] EXT4-fs error (device loop2): __ext4_iget:4986: inode #11: block 1: comm syz.2.1242: invalid block [ 333.502374][ T5640] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1242: couldn't read orphan inode 11 (err -117) [ 333.514206][ T5640] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000010000,jqfmt=vfsv0,delalloc,inode_readahead_blks=0x0000000000400000,noauto_da_alloc,test_dummy_encryption,,errors=continue [ 333.540730][ T25] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 333.587153][ T5348] usb 1-1: not running at top speed; connect to a high speed hub [ 333.667623][ T5348] usb 1-1: config 95 has an invalid interface number: 1 but max is 0 [ 333.676638][ T5348] usb 1-1: config 95 has no interface number 0 [ 333.719990][ T5348] usb 1-1: config 95 interface 1 has no altsetting 0 [ 333.888591][ T5647] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 333.897436][ T5647] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038 (0x7fffffff) [ 333.947488][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.958716][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.968479][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 333.981153][ T25] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 333.990089][ T5348] usb 1-1: string descriptor 0 read error: -22 [ 333.996127][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.004061][ T5348] usb 1-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 334.013498][ T5348] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.022028][ T25] usb 2-1: config 0 descriptor?? [ 334.207114][ T3979] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 334.357170][ T25] usbhid 2-1:0.0: can't add hid device: -71 [ 334.363207][ T25] usbhid: probe of 2-1:0.0 failed with error -71 [ 334.370476][ T25] usb 2-1: USB disconnect, device number 66 [ 334.427276][ T3980] usb 4-1: string descriptor 0 read error: -71 [ 334.433849][ T3980] aiptek 4-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 334.443689][ T3980] usb 4-1: USB disconnect, device number 52 [ 334.449597][ T3979] usb 5-1: Using ep0 maxpacket: 16 [ 334.567131][ T3979] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.578161][ T3979] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 334.591041][ T3979] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 334.600066][ T3979] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.608054][ T311] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 334.619336][ T3979] usb 5-1: config 0 descriptor?? [ 334.857094][ T311] usb 3-1: Using ep0 maxpacket: 32 [ 335.137146][ T311] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 335.146053][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.154071][ T311] usb 3-1: Product: syz [ 335.160488][ T3979] microsoft 0003:045E:07DA.002C: unknown main item tag 0x0 [ 335.167563][ T311] usb 3-1: Manufacturer: syz [ 335.171959][ T3979] microsoft 0003:045E:07DA.002C: unknown main item tag 0x0 [ 335.178997][ T311] usb 3-1: SerialNumber: syz [ 335.183650][ T3979] microsoft 0003:045E:07DA.002C: unknown main item tag 0x0 [ 335.190940][ T311] usb 3-1: config 0 descriptor?? [ 335.195790][ T3979] microsoft 0003:045E:07DA.002C: unknown main item tag 0x0 [ 335.202872][ T3979] microsoft 0003:045E:07DA.002C: unknown main item tag 0x0 [ 335.209953][ T3979] microsoft 0003:045E:07DA.002C: unknown main item tag 0x0 [ 335.216939][ T3979] microsoft 0003:045E:07DA.002C: unknown main item tag 0x0 [ 335.224045][ T3979] microsoft 0003:045E:07DA.002C: unknown main item tag 0x0 [ 335.231682][ T3979] microsoft 0003:045E:07DA.002C: unknown main item tag 0x0 [ 335.238774][ T3979] microsoft 0003:045E:07DA.002C: unknown main item tag 0x0 [ 335.248862][ T3979] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.002C/input/input94 [ 335.310935][ T5668] EXT4-fs (sda1): resizing filesystem from 262144 to 2 blocks [ 335.318387][ T5668] EXT4-fs warning (device sda1): ext4_resize_fs:1982: can't shrink FS - resize aborted [ 335.338510][ T3979] microsoft 0003:045E:07DA.002C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 335.624600][ T5674] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1245'. [ 335.762125][ T3979] usb 5-1: USB disconnect, device number 60 [ 335.775925][ T455] usb 1-1: USB disconnect, device number 54 [ 336.217130][ T419] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 336.346855][ T5687] 9pnet: Insufficient options for proto=fd [ 336.457129][ T3980] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 336.577099][ T419] usb 2-1: config 17 has an invalid descriptor of length 255, skipping remainder of the config [ 336.587518][ T419] usb 2-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 336.600445][ T419] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 336.609474][ T419] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.957209][ T3980] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 336.968325][ T3980] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 336.979752][ T3980] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 336.988818][ T3980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.017120][ T5685] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 337.078123][ T5677] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 337.084372][ T5677] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 337.094943][ T5677] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 337.115538][ T5677] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 337.122456][ T5677] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 337.177134][ T419] usb 2-1: string descriptor 0 read error: -71 [ 337.183624][ T419] aiptek 2-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 337.195719][ T419] usb 2-1: USB disconnect, device number 67 [ 337.557934][ T25] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 337.705740][ T5363] attempt to access beyond end of device [ 337.705740][ T5363] loop1: rw=524288, want=45072, limit=40427 [ 337.743617][ T3980] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 337.751222][ T3980] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input95 [ 337.760358][ T5363] attempt to access beyond end of device [ 337.760358][ T5363] loop1: rw=0, want=45072, limit=40427 [ 337.772479][ T3980] usb 4-1: USB disconnect, device number 53 [ 337.782878][ T7] attempt to access beyond end of device [ 337.782878][ T7] loop1: rw=2049, want=45112, limit=40427 [ 337.838821][ T49] tipc: Disabling bearer [ 337.844483][ T49] tipc: Left network mode [ 338.017152][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.038666][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.106859][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 338.149248][ T25] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 338.158273][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.166948][ T25] usb 5-1: config 0 descriptor?? [ 338.481800][ T5721] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.488813][ T5721] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.496275][ T5721] device bridge_slave_0 entered promiscuous mode [ 338.503468][ T5719] FAT-fs (loop2): bogus sectors per cluster 255 [ 338.509840][ T5719] FAT-fs (loop2): Can't find a valid FAT filesystem [ 338.516408][ T5721] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.523999][ T5721] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.531541][ T5721] device bridge_slave_1 entered promiscuous mode [ 338.537771][ T25] usbhid 5-1:0.0: can't add hid device: -71 [ 338.543469][ T25] usbhid: probe of 5-1:0.0 failed with error -71 [ 338.550613][ T25] usb 5-1: USB disconnect, device number 61 [ 338.559547][ T24] kauditd_printk_skb: 66 callbacks suppressed [ 338.559559][ T24] audit: type=1326 audit(1726333598.952:2554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5718 comm="syz.2.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f073d39eef9 code=0x7ffc0000 [ 338.588868][ T24] audit: type=1326 audit(1726333598.952:2555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5718 comm="syz.2.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f073d39eef9 code=0x7ffc0000 [ 338.598460][ T5719] EXT4-fs (loop2): Ignoring removed nobh option [ 338.629321][ T5721] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.636266][ T5721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.643393][ T5721] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.643557][ T24] audit: type=1326 audit(1726333598.982:2556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5718 comm="syz.2.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f073d39eef9 code=0x7ffc0000 [ 338.650165][ T5721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.673761][ T5719] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 338.697700][ T24] audit: type=1326 audit(1726333598.982:2557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5718 comm="syz.2.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f073d39eef9 code=0x7ffc0000 [ 338.723054][ T5719] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nobh,max_batch_time=0x00000000000003ff,nojournal_checksum,usrquota,dioread_nolock,nodiscard, [ 338.740354][ T5348] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 338.750548][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 338.757974][ T5719] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038 (0x7fffffff) [ 338.759926][ T24] audit: type=1326 audit(1726333598.982:2558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5718 comm="syz.2.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f073d39eef9 code=0x7ffc0000 [ 338.777439][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 338.799468][ T24] audit: type=1326 audit(1726333598.982:2559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5718 comm="syz.2.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f073d39eef9 code=0x7ffc0000 [ 338.822973][ T24] audit: type=1326 audit(1726333598.982:2560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5718 comm="syz.2.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f073d39eef9 code=0x7ffc0000 [ 338.846640][ T303] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.847018][ T24] audit: type=1326 audit(1726333598.982:2561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5718 comm="syz.2.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f073d39eef9 code=0x7ffc0000 [ 338.888408][ T24] audit: type=1326 audit(1726333598.982:2562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5718 comm="syz.2.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f073d39eef9 code=0x7ffc0000 [ 338.889906][ T5730] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 338.911986][ T49] device bridge_slave_1 left promiscuous mode [ 338.920990][ T5730] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038 (0x7fffffff) [ 338.927534][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.936781][ T24] audit: type=1326 audit(1726333598.982:2563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5718 comm="syz.2.1265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f073d39eef9 code=0x7ffc0000 [ 338.966702][ T49] device bridge_slave_0 left promiscuous mode [ 338.978220][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.986200][ T49] device veth1_macvtap left promiscuous mode [ 338.992128][ T49] device veth0_vlan left promiscuous mode [ 339.067719][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 339.075643][ T303] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.082486][ T303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.089752][ T311] rtl8150 3-1:0.0: couldn't reset the device [ 339.090519][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 339.095650][ T311] rtl8150: probe of 3-1:0.0 failed with error -5 [ 339.103779][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 339.111570][ T311] usb 3-1: USB disconnect, device number 55 [ 339.132594][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 339.140935][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 339.151257][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 339.161581][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 339.169590][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 339.176839][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 339.184060][ T5348] usb 4-1: not running at top speed; connect to a high speed hub [ 339.185188][ T5721] device veth0_vlan entered promiscuous mode [ 339.201367][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 339.209328][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 339.229169][ T5721] device veth1_macvtap entered promiscuous mode [ 339.240416][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 339.257592][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 339.265742][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 339.277161][ T5348] usb 4-1: config 95 has an invalid interface number: 1 but max is 0 [ 339.285058][ T5348] usb 4-1: config 95 has no interface number 0 [ 339.292200][ T5745] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 339.301822][ T5348] usb 4-1: config 95 interface 1 has no altsetting 0 [ 339.309408][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 339.320768][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 339.477114][ T311] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 339.557205][ T5348] usb 4-1: string descriptor 0 read error: -22 [ 339.563357][ T5348] usb 4-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 339.572361][ T5348] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.637153][ T469] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 339.717193][ T311] usb 3-1: Using ep0 maxpacket: 32 [ 339.837180][ T311] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.848035][ T311] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.857722][ T311] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 339.866793][ T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.908131][ T311] hub 3-1:4.0: USB hub found [ 339.967115][ T25] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 340.007157][ T469] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.018103][ T469] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.021940][ T5753] EXT4-fs (loop4): Test dummy encryption mode enabled [ 340.027876][ T469] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 340.037281][ T5753] EXT4-fs (loop4): Test dummy encryption mode enabled [ 340.047206][ T469] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 340.054139][ T5753] EXT4-fs (loop4): Ignoring removed orlov option [ 340.062875][ T469] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.070819][ T5753] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,dioread_lock,test_dummy_encryption,commit=0x0000000000000005,orlov,barrier=0x0000000000000080,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue [ 340.077653][ T469] usb 2-1: config 0 descriptor?? [ 340.117130][ T311] hub 3-1:4.0: 2 ports detected [ 340.377202][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.388064][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.397672][ T25] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 340.406525][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.415140][ T25] usb 1-1: config 0 descriptor?? [ 340.607889][ T469] prodikeys 0003:041E:2801.002D: unknown main item tag 0x0 [ 340.615076][ T469] prodikeys 0003:041E:2801.002D: unknown main item tag 0x0 [ 340.622259][ T469] prodikeys 0003:041E:2801.002D: unknown main item tag 0x0 [ 340.629533][ T469] prodikeys 0003:041E:2801.002D: unknown main item tag 0x0 [ 340.636684][ T469] prodikeys 0003:041E:2801.002D: unknown main item tag 0x0 [ 340.644574][ T469] prodikeys 0003:041E:2801.002D: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.1-1/input0 [ 340.767127][ T25] usbhid 1-1:0.0: can't add hid device: -71 [ 340.772962][ T25] usbhid: probe of 1-1:0.0 failed with error -71 [ 340.781150][ T25] usb 1-1: USB disconnect, device number 55 [ 340.834062][ T469] usb 2-1: USB disconnect, device number 68 [ 341.059219][ T5348] usb 4-1: USB disconnect, device number 54 [ 341.227226][ T286] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 341.504688][ T3980] hub 3-1:4.0: activate --> -90 [ 341.587406][ T5773] exfat: Deprecated parameter 'namecase' [ 341.593001][ T5773] exfat: Deprecated parameter 'utf8' [ 341.598135][ T5773] exfat: Deprecated parameter 'namecase' [ 341.603544][ T5773] exfat: Deprecated parameter 'utf8' [ 341.610680][ T5773] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 341.827161][ T286] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 341.838345][ T286] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 341.849867][ T286] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 341.858687][ T286] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.868696][ T3980] usb 3-1: USB disconnect, device number 56 [ 341.887223][ T5759] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 341.977091][ T469] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 342.377330][ T25] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 342.377352][ T469] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.395745][ T469] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.454911][ T286] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 342.462937][ T469] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 342.462974][ T286] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input97 [ 342.486825][ T286] usb 5-1: USB disconnect, device number 62 [ 342.490162][ T469] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 342.501633][ T469] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.510784][ T469] usb 2-1: config 0 descriptor?? [ 342.520718][ T5788] EXT4-fs (loop2): bad s_want_extra_isize: 11962 [ 342.737100][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 342.857211][ T469] usbhid 2-1:0.0: can't add hid device: -71 [ 342.862991][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.873720][ T469] usbhid: probe of 2-1:0.0 failed with error -71 [ 342.879839][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 342.893215][ T469] usb 2-1: USB disconnect, device number 69 [ 342.899547][ T25] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 342.909055][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.917460][ T25] usb 1-1: config 0 descriptor?? [ 342.991061][ T5794] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 343.000094][ T5794] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038 (0x7fffffff) [ 343.300462][ T5805] EXT4-fs (loop1): Ignoring removed nobh option [ 343.392460][ T5782] fuse: Bad value for 'fd' [ 343.468410][ T5782] EXT4-fs (loop0): Ignoring removed orlov option [ 343.499715][ T5805] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noquota,acl,init_itable=0x00000000000085c5,nojournal_checksum,jqfmt=vfsv1,,errors=continue [ 343.611838][ T5782] erofs: (device loop0): mounted with root inode @ nid 36. [ 343.632039][ T25] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.002E/input/input98 [ 343.697181][ T469] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 343.720556][ T25] microsoft 0003:045E:07DA.002E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 343.831955][ T25] usb 1-1: USB disconnect, device number 56 [ 344.245189][ T469] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 344.258447][ T469] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 344.268319][ T24] kauditd_printk_skb: 97 callbacks suppressed [ 344.268329][ T24] audit: type=1400 audit(1726333604.662:2661): avc: denied { create } for pid=5822 comm="syz.3.1289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 344.273021][ T469] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.301711][ T24] audit: type=1400 audit(1726333604.692:2662): avc: denied { setopt } for pid=5822 comm="syz.3.1289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 344.302489][ T469] usb 3-1: config 0 descriptor?? [ 344.326760][ T24] audit: type=1400 audit(1726333604.712:2663): avc: denied { write } for pid=5822 comm="syz.3.1289" name="task" dev="proc" ino=37754 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 344.348448][ T24] audit: type=1400 audit(1726333604.712:2664): avc: denied { add_name } for pid=5822 comm="syz.3.1289" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 344.357828][ T469] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 344.369721][ T24] audit: type=1400 audit(1726333604.722:2665): avc: denied { create } for pid=5822 comm="syz.3.1289" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 344.458995][ T24] audit: type=1400 audit(1726333604.722:2666): avc: denied { associate } for pid=5822 comm="syz.3.1289" name="file1" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 345.017136][ T15] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 345.167197][ T24] audit: type=1400 audit(1726333605.552:2667): avc: denied { ioctl } for pid=5809 comm="syz.2.1287" path="socket:[38758]" dev="sockfs" ino=38758 ioctlcmd=0x48cc scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 345.309058][ T15] usb 5-1: too many configurations: 64, using maximum allowed: 8 [ 345.412099][ T5841] EXT4-fs (loop1): Ignoring removed nobh option [ 345.468154][ T15] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 345.488970][ T15] usb 5-1: can't read configurations, error -61 [ 345.521889][ T5841] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noquota,acl,init_itable=0x00000000000085c5,nojournal_checksum,jqfmt=vfsv1,,errors=continue [ 345.677133][ T15] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 345.947183][ T286] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 346.007194][ T15] usb 5-1: too many configurations: 64, using maximum allowed: 8 [ 346.157260][ T15] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 346.164772][ T15] usb 5-1: can't read configurations, error -61 [ 346.171041][ T15] usb usb5-port1: attempt power cycle [ 346.298911][ T24] audit: type=1400 audit(1726333606.692:2668): avc: denied { write } for pid=5853 comm="syz.1.1297" name="001" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 346.328532][ T5856] usb usb8: check_ctrlrecip: process 5856 (syz.1.1297) requesting ep 01 but needs 81 [ 346.337890][ T5856] usb usb8: usbfs: process 5856 (syz.1.1297) did not claim interface 0 before use [ 346.413275][ T3980] usb 3-1: USB disconnect, device number 57 [ 346.467143][ T286] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.467708][ T5860] 9pnet: Insufficient options for proto=fd [ 346.480049][ T286] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.493432][ T286] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 346.506501][ T286] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 346.744057][ T286] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.752678][ T286] usb 1-1: config 0 descriptor?? [ 346.807112][ T15] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 346.937113][ T15] usb 5-1: too many configurations: 64, using maximum allowed: 8 [ 347.067187][ T15] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 347.074612][ T15] usb 5-1: can't read configurations, error -61 [ 347.119855][ T286] usbhid 1-1:0.0: can't add hid device: -71 [ 347.139985][ T286] usbhid: probe of 1-1:0.0 failed with error -71 [ 347.349904][ T15] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 347.358392][ T286] usb 1-1: USB disconnect, device number 57 [ 347.676700][ T469] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 347.687230][ T15] usb 5-1: too many configurations: 64, using maximum allowed: 8 [ 347.819367][ T5880] udc-core: couldn't find an available UDC or it's busy [ 347.827293][ T5880] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 347.977232][ T469] usb 4-1: Using ep0 maxpacket: 16 [ 347.987159][ T15] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 347.994600][ T15] usb 5-1: can't read configurations, error -61 [ 348.000732][ T15] usb usb5-port1: unable to enumerate USB device [ 348.137631][ T469] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.149091][ T469] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 348.164188][ T469] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 348.292071][ T469] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.307970][ T469] usb 4-1: config 0 descriptor?? [ 348.853679][ T5873] fuse: Bad value for 'fd' [ 349.042842][ T5897] EXT4-fs (loop1): Ignoring removed nobh option [ 349.147258][ T469] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.002F/input/input99 [ 349.238767][ T469] microsoft 0003:045E:07DA.002F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 349.268788][ T469] usb 4-1: USB disconnect, device number 55 [ 349.286931][ T5897] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noquota,acl,init_itable=0x00000000000085c5,nojournal_checksum,jqfmt=vfsv1,,errors=continue [ 349.641030][ T5904] F2FS-fs (loop4): invalid crc value [ 349.652396][ T5909] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 349.663872][ T5909] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 349.672977][ T5909] F2FS-fs (loop2): invalid crc value [ 349.679441][ T5904] F2FS-fs (loop4): Found nat_bits in checkpoint [ 349.897091][ T5909] F2FS-fs (loop2): Found nat_bits in checkpoint [ 349.903178][ T5904] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 349.908443][ T5904] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 349.953358][ T5909] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 349.960316][ T5909] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 350.000208][ T24] audit: type=1400 audit(1726333610.382:2669): avc: denied { read } for pid=5902 comm="syz.4.1309" name="loop-control" dev="devtmpfs" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 350.024654][ T24] audit: type=1400 audit(1726333610.382:2670): avc: denied { open } for pid=5902 comm="syz.4.1309" path="/dev/loop-control" dev="devtmpfs" ino=110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 350.049977][ T24] audit: type=1400 audit(1726333610.382:2671): avc: denied { ioctl } for pid=5902 comm="syz.4.1309" path="/dev/loop-control" dev="devtmpfs" ino=110 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 350.088919][ T24] audit: type=1326 audit(1726333610.382:2672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5902 comm="syz.4.1309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a778abef9 code=0x7ffc0000 [ 350.156159][ T5558] attempt to access beyond end of device [ 350.156159][ T5558] loop4: rw=2049, want=45112, limit=40427 [ 350.156355][ T24] audit: type=1326 audit(1726333610.382:2673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5902 comm="syz.4.1309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a778abef9 code=0x7ffc0000 [ 350.197097][ T3980] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 350.237728][ T24] audit: type=1326 audit(1726333610.382:2674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5902 comm="syz.4.1309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f6a778abef9 code=0x7ffc0000 [ 350.261262][ T24] audit: type=1326 audit(1726333610.382:2675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5902 comm="syz.4.1309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a778abef9 code=0x7ffc0000 [ 350.284535][ T24] audit: type=1326 audit(1726333610.382:2676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5902 comm="syz.4.1309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a778abef9 code=0x7ffc0000 [ 350.307882][ T24] audit: type=1326 audit(1726333610.382:2677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5902 comm="syz.4.1309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6a778abef9 code=0x7ffc0000 [ 350.331382][ T24] audit: type=1326 audit(1726333610.382:2678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5902 comm="syz.4.1309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a778abef9 code=0x7ffc0000 [ 350.827098][ T3980] usb 4-1: Using ep0 maxpacket: 32 [ 350.833241][ T5941] EXT4-fs (sda1): resizing filesystem from 262144 to 2 blocks [ 350.840829][ T5941] EXT4-fs warning (device sda1): ext4_resize_fs:1982: can't shrink FS - resize aborted [ 350.967139][ T3980] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.967312][ T5945] FAULT_INJECTION: forcing a failure. [ 350.967312][ T5945] name failslab, interval 1, probability 0, space 0, times 0 [ 350.979521][ T3980] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.993259][ T5945] CPU: 1 PID: 5945 Comm: syz.2.1319 Not tainted 5.10.225-syzkaller-00513-g8d23314f588a #0 [ 351.000038][ T3980] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 351.009476][ T5945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 351.009481][ T5945] Call Trace: [ 351.009501][ T5945] dump_stack_lvl+0x1e2/0x24b [ 351.009510][ T5945] ? panic+0x812/0x812 [ 351.009518][ T5945] ? bfq_pos_tree_add_move+0x43b/0x43b [ 351.009527][ T5945] dump_stack+0x15/0x17 [ 351.009546][ T5945] should_fail+0x3c6/0x510 [ 351.018670][ T3980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.028239][ T5945] ? __alloc_skb+0x80/0x510 [ 351.028259][ T5945] __should_failslab+0xa4/0xe0 [ 351.055066][ T3980] hub 4-1:4.0: USB hub found [ 351.061130][ T5945] should_failslab+0x9/0x20 [ 351.061151][ T5945] kmem_cache_alloc+0x3d/0x2e0 [ 351.083425][ T5945] __alloc_skb+0x80/0x510 [ 351.087590][ T5945] ? kmem_cache_alloc+0x168/0x2e0 [ 351.092446][ T5945] ? audit_log_start+0x48c/0x9b0 [ 351.097222][ T5945] audit_log_start+0x4ae/0x9b0 [ 351.101819][ T5945] ? audit_serial+0x30/0x30 [ 351.106160][ T5945] ? kmem_cache_free+0x1c0/0x1e0 [ 351.110931][ T5945] ? audit_log_end+0x1c8/0x230 [ 351.115531][ T5945] ? audit_log_end+0x1c8/0x230 [ 351.120233][ T5945] audit_seccomp+0x61/0x1e0 [ 351.124561][ T5945] __seccomp_filter+0xd03/0x1e10 [ 351.129336][ T5945] ? vfs_write+0x852/0xe70 [ 351.133588][ T5945] ? __secure_computing+0x300/0x300 [ 351.138619][ T5945] ? kmem_cache_free+0x1c0/0x1e0 [ 351.143393][ T5945] ? __fdget+0x1ce/0x240 [ 351.147477][ T5945] ? do_utimes+0x1fd/0x270 [ 351.151726][ T5945] ? __kasan_check_write+0x14/0x20 [ 351.156678][ T5945] ? switch_fpu_return+0x1e4/0x3c0 [ 351.161621][ T5945] __secure_computing+0xf0/0x300 [ 351.166394][ T5945] syscall_enter_from_user_mode+0xbf/0x1a0 [ 351.172038][ T5945] do_syscall_64+0x13/0x70 [ 351.176296][ T5945] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 351.182015][ T5945] RIP: 0033:0x7f073d39d93c [ 351.186269][ T5945] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 351.205708][ T5945] RSP: 002b:00007f073c018030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 351.213952][ T5945] RAX: ffffffffffffffda RBX: 00007f073d556f80 RCX: 00007f073d39d93c [ 351.221763][ T5945] RDX: 000000000000000f RSI: 00007f073c0180a0 RDI: 0000000000000007 [ 351.229575][ T5945] RBP: 00007f073c018090 R08: 0000000000000000 R09: 0000000000000000 [ 351.237388][ T5945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.245203][ T5945] R13: 0000000000000000 R14: 00007f073d556f80 R15: 00007fff27b252f8 [ 351.252989][ T3980] hub 4-1:4.0: 2 ports detected [ 351.363225][ T469] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 351.370741][ T455] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 351.737400][ T469] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.737440][ T455] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 351.759696][ T455] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 351.775351][ T455] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 351.785877][ T455] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.795627][ T469] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.810907][ T469] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 351.821348][ T469] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.831943][ T469] usb 1-1: config 0 descriptor?? [ 351.837356][ T5939] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 352.252686][ T5960] EXT4-fs (loop1): Ignoring removed nobh option [ 352.254539][ T5963] 9pnet: Insufficient options for proto=fd [ 352.268316][ T5960] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noquota,acl,init_itable=0x00000000000085c5,nojournal_checksum,jqfmt=vfsv1,,errors=continue [ 352.367166][ T469] usbhid 1-1:0.0: can't add hid device: -71 [ 352.373026][ T455] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 352.380131][ T469] usbhid: probe of 1-1:0.0 failed with error -71 [ 352.389018][ T455] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input100 [ 352.398996][ T469] usb 1-1: USB disconnect, device number 58 [ 352.432553][ T455] usb 5-1: USB disconnect, device number 67 [ 352.438485][ C1] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 352.627292][ T3980] hub 4-1:4.0: activate --> -90 [ 353.107566][ T469] usb 4-1: USB disconnect, device number 56 [ 353.135629][ T286] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 353.707124][ T286] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.723474][ T286] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.734869][ T286] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 353.757078][ T286] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 353.765925][ T286] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.781236][ T286] usb 1-1: config 0 descriptor?? [ 354.168797][ T5997] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 354.183899][ T5997] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038 (0x7fffffff) [ 355.570084][ T5987] sched: RT throttling activated [ 357.577080][ T3979] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 360.587119][ T286] usbhid 1-1:0.0: can't add hid device: -32 [ 360.592912][ T286] usbhid: probe of 1-1:0.0 failed with error -32 [ 366.565964][ T3979] usb 2-1: device descriptor read/64, error -110 [ 370.564295][ T3979] usb 2-1: device descriptor read/64, error -32 [ 373.577078][ T3979] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 379.577273][ T3979] usb 2-1: device descriptor read/64, error -32 [ 385.597351][ T3979] usb 2-1: device descriptor read/64, error -32 [ 387.597105][ T3979] usb usb2-port1: attempt power cycle [ 397.597083][ T3979] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 405.597165][ T3979] usb 2-1: device descriptor read/8, error -32 [ 409.597141][ T3979] usb 2-1: device descriptor read/8, error -32 [ 414.563078][ T3979] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 421.607091][ T3979] usb 2-1: device descriptor read/8, error -32 [ 427.617049][ T3979] usb 2-1: device descriptor read/8, error -32 [ 430.608260][ T3979] usb usb2-port1: unable to enumerate USB device [ 459.585631][ T24] kauditd_printk_skb: 63 callbacks suppressed [ 459.585646][ T24] audit: type=1400 audit(1726333719.972:2740): avc: denied { read } for pid=5996 comm="syz.4.1332" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 464.617066][ T24] audit: type=1400 audit(1726333719.972:2741): avc: denied { open } for pid=5996 comm="syz.4.1332" path="/20/file0/bus/file0" dev="overlay" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 484.597334][ T24] audit: type=1400 audit(1726333744.992:2742): avc: denied { ioctl } for pid=5996 comm="syz.4.1332" path="/20/file0/bus/file0" dev="overlay" ino=13 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 517.586352][ T24] audit: type=1400 audit(1726333777.972:2743): avc: denied { write } for pid=5996 comm="syz.4.1332" dev="loop4" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 530.650265][ T24] audit: type=1400 audit(1726333791.042:2744): avc: denied { unmount } for pid=5299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 530.828266][ T286] usb 1-1: USB disconnect, device number 59 SYZFAIL: failed to send rpc fd=3 want=31736 sent=0 n=-1 (errno 32: Broken pipe) [ 530.904521][ T24] audit: type=1400 audit(1726333791.292:2745): avc: denied { remove_name } for pid=5558 comm="syz-executor" name="lost+found" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 530.979057][ T24] audit: type=1400 audit(1726333791.332:2746): avc: denied { write } for pid=271 comm="syz-executor" path="pipe:[13376]" dev="pipefs" ino=13376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 531.015967][ T24] audit: type=1400 audit(1726333791.342:2747): avc: denied { rmdir } for pid=5558 comm="syz-executor" name="lost+found" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 531.042658][ T24] audit: type=1400 audit(1726333791.342:2748): avc: denied { unlink } for pid=5558 comm="syz-executor" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 531.098016][ T24] audit: type=1400 audit(1726333791.342:2749): avc: denied { unlink } for pid=5558 comm="syz-executor" name="file1" dev="loop4" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 531.121569][ T24] audit: type=1400 audit(1726333791.342:2750): avc: denied { rmdir } for pid=5558 comm="syz-executor" name="file1" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 531.987645][ T632] device bridge_slave_1 left promiscuous mode [ 531.993738][ T632] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.001096][ T632] device bridge_slave_0 left promiscuous mode [ 532.007113][ T632] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.014691][ T632] device veth1_macvtap left promiscuous mode [ 532.020532][ T632] device veth0_vlan left promiscuous mode [ 533.347950][ T632] device bridge_slave_1 left promiscuous mode [ 533.353899][ T632] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.361250][ T632] device bridge_slave_0 left promiscuous mode [ 533.367213][ T632] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.374837][ T632] device bridge_slave_1 left promiscuous mode [ 533.380852][ T632] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.388048][ T632] device bridge_slave_0 left promiscuous mode [ 533.393937][ T632] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.401563][ T632] device bridge_slave_1 left promiscuous mode [ 533.407597][ T632] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.414724][ T632] device bridge_slave_0 left promiscuous mode [ 533.420783][ T632] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.428344][ T632] device bridge_slave_1 left promiscuous mode [ 533.434228][ T632] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.441521][ T632] device bridge_slave_0 left promiscuous mode [ 533.447519][ T632] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.456521][ T632] device veth1_macvtap left promiscuous mode [ 533.462490][ T632] device veth0_vlan left promiscuous mode [ 533.468202][ T632] device veth1_macvtap left promiscuous mode [ 533.473980][ T632] device veth0_vlan left promiscuous mode [ 533.479937][ T632] device veth1_macvtap left promiscuous mode [ 533.485739][ T632] device veth0_vlan left promiscuous mode [ 533.491593][ T632] device veth1_macvtap left promiscuous mode [ 533.497420][ T632] device veth0_vlan left promiscuous mode