last executing test programs: 5.131872205s ago: executing program 3 (id=10416): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) ioctl$EVIOCRMFF(0xffffffffffffffff, 0xc0085508, &(0x7f0000000400)=0x100000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x18, 0x0, 0x1, 0x101, 0x0, 0x0, {0x7}, [@CTA_LABELS_MASK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c0}, 0x8002) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000180)={0x20}, 0x20) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x1, 0x4db, &(0x7f0000003d00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000380)={0x0, 0x0}) ptrace$getenv(0x4204, r2, 0x201, &(0x7f0000000000)) geteuid() sendmsg$unix(0xffffffffffffffff, 0x0, 0x20000001) write$cgroup_devices(r0, &(0x7f00000000c0)=ANY=[], 0xffdd) 5.119320615s ago: executing program 3 (id=10417): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) getgid() r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010700020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010000020d00000904010102020d0000090582020002fd0000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000d00)={0x84, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000020000f0000f901000000000002"], 0x1c}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(0xffffffffffffffff, 0x0, 0xa) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r3, r4, 0x1, 0x0, @val=@iter={0x0}}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000013000100"/20, @ANYRES32=r6, @ANYBLOB="000000000000000005002700000000001c001a8018000a80140007"], 0x44}}, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, &(0x7f0000000140)='system.posix_acl_default\x00', 0x0, 0x7c, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) 4.860341276s ago: executing program 0 (id=10425): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000dc0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) socket$inet(0x2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000480), 0xb) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xe, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mkdir(0x0, 0x0) r1 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000100)='./control\x00', 0x0) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) unlink(&(0x7f00000001c0)='./control/file0\x00') openat(r1, &(0x7f0000000280)='./control\x00', 0x470082, 0x0) unlinkat(r1, &(0x7f0000000140)='./control\x00', 0x200) rmdir(&(0x7f0000000040)='./control\x00') mount$bind(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000300), 0x2, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000180)=@gcm_256={{0x304}, "8f62c1261107edef", "e72f5330cb98d234898e8ac94b80719f2f7f777e8dcc09a5f5a1e411a5d1a3e6", "9ec735b4", "8d1fdcee9a0d31a4"}, 0x38) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8a}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000ffffffff0000000073455b6fcdefd292", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000001000085000ceed57eb69d9a16d2999cbad60dfbba25"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) r4 = creat(&(0x7f0000000240)='./bus\x00', 0x0) pwritev2(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0x0, 0x0, 0x2) r5 = open(&(0x7f0000000100)='./bus\x00', 0x145000, 0x0) dup3(r5, r4, 0x0) 4.79721132s ago: executing program 0 (id=10426): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000020000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x11000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@flat=@weak_binder, @flat=@weak_binder={0x77622a85, 0x0, 0x2}, @flat=@binder={0x73622a85, 0x0, 0x200000000000000}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 4.248060893s ago: executing program 2 (id=10429): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) 4.170599539s ago: executing program 2 (id=10430): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_setup(0x3fe, &(0x7f0000000100)=0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$ext4(0x0, &(0x7f0000000500)='./file0\x00', 0x2050000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000280)={[{@i_version}, {@nobh}, {@dioread_nolock}, {@nodelalloc}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@acl}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ftruncate(r8, 0x2000009) ioctl$EXT4_IOC_MOVE_EXT(r7, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x0, 0x3c67}) r9 = dup(r6) write$FUSE_BMAP(r9, &(0x7f00000001c0)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r9, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r9]) chdir(&(0x7f0000000040)='./file0\x00') mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$incfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(r8, 0xb704, &(0x7f0000000240)) io_pgetevents(r1, 0x7, 0x0, &(0x7f0000000080), &(0x7f00000000c0)={0x77359400}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x1d]}, 0x8}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r10) io_submit(r1, 0x1, &(0x7f0000000000)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x0, r0, 0x0}]) 4.054999217s ago: executing program 2 (id=10434): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x4c) setresuid(0x0, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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", @ANYRESHEX], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x32) 3.986852853s ago: executing program 2 (id=10435): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x46}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r2}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r4}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) close(r3) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r7}, 0x10) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000001440)={0xfffffffffffffd87, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000001840)={0x24, 0x0, &(0x7f0000001740)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000300)={0x24, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000001e00100000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000fcffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_control_io$hid(r8, &(0x7f0000000040)={0x24, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000312"], 0x0, 0x0}, 0x0) syz_usb_disconnect(r8) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r9}, 0x50) read$FUSE(r0, &(0x7f0000002900)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r10}, 0x10) syz_fuse_handle_req(r0, &(0x7f00000070c0)="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", 0x2000, &(0x7f0000006d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002240)={0x20, 0x0, 0x0, {0x0, 0x4}}}) 3.911819769s ago: executing program 0 (id=10437): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0x1}, &(0x7f0000000000), &(0x7f0000000040)='%pS \x00'}, 0x20) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x8, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1d6}, [@map_fd={0x18, 0x8}, @ldst={0x3, 0x1, 0x2, 0x6, 0x5, 0x30, 0xfffffffffffffffc}, @map_val={0x18, 0x2, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x50e}]}, &(0x7f0000000600)='syzkaller\x00', 0x513, 0xfa, &(0x7f0000000640)=""/250, 0x41000, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000780)={0x3, 0x2, 0x9, 0x7fffffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x9}, 0x90) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000008c0)={0x0, @dev, @local}, &(0x7f0000000900)=0xc) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000940)={r1, r2, 0x25, 0x2, @void}, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, r0, 0x0, '\x00', r2, 0x0, 0x0, 0x100000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000900000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000900)='kmem_cache_free\x00', r4}, 0x10) socket$inet6(0xa, 0x80000, 0x1) utime(&(0x7f0000000080)='./file0/file0\x00', 0x0) 3.910974049s ago: executing program 1 (id=10438): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c756e695f786c6174653d312c73686f72746e616d653d6c6f7765722c73682c756e695f786c6174653d302c757466383d302c73686f72746e616d653d6d697865642c726f6469722c73686f72746e616d653d6d697865642c636865636b3d7374726963742c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c726f6469722c757466383d312c616c6c6f775f7574696d653d30303030303030303030303030303030303030373335312c6572726f72733d72656d6f756e742d726f2c736d61636b6673666c6f6f723d756e695f789afd74653d312c00"], 0x6, 0x2d0, &(0x7f00000003c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r5, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x9, 0x8000, 0x90, 0xffffffffffffffff, 0xfffffff7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0xffffff45) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1b, 0x7, &(0x7f0000000540)=ANY=[@ANYRESHEX=r2, @ANYRES32=r6, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000001c0)='kmem_cache_free\x00', r7}, 0x10) recvmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000006c0)={'ip6gre0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="640000001500000227bd7000000000000a00a0fe", @ANYRES32=0x0, @ANYBLOB="080009000600000014000100ff02000000000000000000000000000114000200ff0200000000000000000000000000010800090005e9ffff13000600ffffffffff0300000000000080000000"], 0x64}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000003c0)=0x70, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) 3.910614729s ago: executing program 0 (id=10439): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_process_fork\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a00010000000000000000000a000000000000000000000004001e"], 0x24}}, 0x0) 2.937323174s ago: executing program 1 (id=10440): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) 2.936422384s ago: executing program 0 (id=10441): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793b10d105012008d8286203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="ebff01000000fa3debcc3668f6d1182f9bf998309ea723b03535f570daaee8934dfef2c733"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = socket(0x10, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfb}}]}}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) (async) syz_usb_control_io(r2, &(0x7f0000000c80)={0x2c, 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$hid(r2, &(0x7f0000001840)={0xfffffd7b, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="e37be631b018dc73bd4ec9eee98995a7ffb103f3575da8d05c7b517e81039c9568ce56bb4b2b5e7aa83faa63b75a62d09becc2076ed5a9109f8731a8dde22e54869f5009526db57d4e3b588531481763f8cea439ebfb98a02101a96b4755029f68b69074956cd1d2012a1b81173aabb6fe8b9f05", @ANYRESOCT=r2, @ANYRES8, @ANYRES16, @ANYRESHEX=r0, @ANYRESHEX], 0x0, 0x0}, 0x0) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$UI_GET_VERSION(r3, 0x8004552d, &(0x7f00000008c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000900)={'veth0_to_hsr\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x3, 0x3, 0xd, 0x1412, r3, 0x3, '\x00', r4, r3, 0x3, 0x2, 0x1, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32=r5], 0x0}, 0x90) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) syz_usb_control_io$hid(r2, &(0x7f0000000000)={0x24, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="000312"], 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r2, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0003040000000403270497263e33e6a5d4cf02e1921ae7a14da749cfca0df1636d5fa2cfc4be4bb8b2723157ba1e1f28d3e19ef52a9372d7c3600ab0760ce14fa1976f10ee0583345425b66214b163b8161c3e77c48b0b2f9aee44e9c663e9e2f3831745f5650cb71dc8323039ec530547fa1549c7"], 0x0, 0x0, 0x0}, 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0xd, 0x2, 0x7, 0x1, 0x1, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0xea, 0x9, 0xc}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x4, 0x8f, 0x20}}]}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x300, 0x1, 0x4, 0x3, 0xff}, 0xf5, &(0x7f00000003c0)={0x5, 0xf, 0xf5, 0x4, [@ptm_cap={0x3}, @generic={0xc5, 0x10, 0x2, "1eb204205f11753e06f77fc9e35c510b9e1063077690c29c51670ed9a0dfa16a9c512cbe07bcc5c3a2e094e75ebdce583575668bc74a0835d737d70d2374961ffbfb1b0a857703d7112818f6903dab3d8a66d17e7458413f52d696c90897e1340ffcd26444dccca0918306d1419ee0e00b81a14b766f471d1d65cc1f74656a586e6a511ae101e91babed9b4678e4ff33a8e083b9a77fcbe5fa04f5ffb3e64206328712a34b36cd52eed3ae9e5c5b7361deb97d12475d6ba81f9f4e6011e07d9b9f1b"}, @ss_container_id={0x14, 0x10, 0x4, 0x76, "f84a19a3fdde2d2ab38d9e654be8e3ef"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "bfa76634037853b088832fe09454fb1c"}]}, 0x8, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x81a}}, {0x89, &(0x7f0000000500)=@string={0x89, 0x3, "dab3007de1ee0539a12f499a7a51f9b2bad70e8abec48a3e725b7538ff584951144e4cb2bd1da30eea5d87bd157ebb925271c49e4966bfb83e9b2bab8e25fa4b907fef454999eee548d75004c141f8d6316cd0d1896450609575139ba04f3227bde2d0d87c2250ed6af8c9636603612e5ced2cda4cb02c6847318eb11b8f82544826a807a1faf9"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x810}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x3c0a}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x861}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x41f}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x812}}, {0x75, &(0x7f00000006c0)=@string={0x75, 0x3, "4db2d809393e850f6e2e9ed5e9a1b6b0d7f2a2d5a0c211635356d2ea072b648b08cc2be0a76a10cba453f4d6dc471e423e0060fd2e155a61c635ed9c58a796e98706bfdc5abc5799f76c5ce403d4d4fc46bd406f55cf5798beea533874fff9d0f9714134fceb9f2926a98ee0a67b2a461c6649"}}]}) (async) fsetxattr$trusted_overlay_redirect(r7, &(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x8, 0x3) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="210002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x5) 2.901843247s ago: executing program 1 (id=10442): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="4698f5224c70976982238d6ad668a96905df6add725aea67fb3f33e394f5de07f393514389636d75646181f511e40e74bb92d755f50616621a410cd90ee5da12b5158c011496b5ae85baa4bebe10df7546faf9730a0b0489e2d89f3151424dde1719f2b9a64edb60a14286cccb531ee15ec7c2ff1687640d74b9ea5a06f26eff5c919756f7f70ce2d4d3e4148a"], 0x105) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents(r5, 0x0, 0x0) 2.865956259s ago: executing program 1 (id=10443): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e6f657874656e745f63616368650000000001000000667361707072616956652c00000000486b5b5bab28b90f4dac07cf915f018f8853f025994ba5f7e78d47"], 0x1, 0x5506, &(0x7f0000005a40)="$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") 2.753154468s ago: executing program 1 (id=10444): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000440)={0x24, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockopt$SO_BINDTODEVICE(r4, 0x1, 0x43, &(0x7f0000000000), 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7150000000007000000000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480), &(0x7f0000000380), 0x5, r6}, 0x38) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@private0, @in6=@remote}, {@in6=@remote, 0x0, 0x32}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0xe}, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000580)={0x0, 0x0, @ioapic={0x0, 0x0, 0x47, 0x4, 0x0, [{}, {0x5, 0x40, 0xf8, '\x00', 0x1}, {0x0, 0x0, 0x20}, {0x3, 0x0, 0x5}, {0x3, 0x0, 0x7, '\x00', 0x4f}, {0x2, 0x2, 0x3, '\x00', 0x2}, {0x27, 0xe8, 0x3, '\x00', 0x4}, {0x0, 0x0, 0x7, '\x00', 0x9}, {0x0, 0x7f, 0x1, '\x00', 0x7f}, {0x3, 0x1, 0x4, '\x00', 0x81}, {0x4, 0x4, 0x1, '\x00', 0x20}, {0x0, 0x80, 0x1, '\x00', 0x5}, {0x0, 0x0, 0x0, '\x00', 0x1}, {0xc6, 0x5, 0x0, '\x00', 0x8}, {0x81, 0x20, 0x0, '\x00', 0xdf}, {0x7c, 0x81, 0x1f}, {0x0, 0x0, 0x3f, '\x00', 0x4}, {0x0, 0x0, 0x0, '\x00', 0x8}, {0x0, 0x0, 0x0, '\x00', 0x80}, {0x8, 0xfc, 0x84}, {0x1f, 0x8, 0x81}, {0x7a, 0x5, 0x6, '\x00', 0x2}, {0x1, 0x0, 0x7, '\x00', 0x4}, {0xae, 0x0, 0x4, '\x00', 0x3}]}}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'ip_vti0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0xd, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x9}, @map_fd={0x18, 0x8, 0x1, 0x0, r5}, @alu={0x7, 0x1, 0x7, 0x0, 0x3, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x1, 0x9, 0x8, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x26}, @call={0x85, 0x0, 0x0, 0x8c}]}, &(0x7f0000000180)='GPL\x00', 0x7, 0x4b, &(0x7f00000004c0)=""/75, 0x40f00, 0x10, '\x00', r10, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x4, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000900)=[{0x0, 0x3, 0x9, 0x5}, {0x4, 0x5, 0x4, 0x8}], 0x10, 0x7}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="000312"], 0x0, 0x0}, 0x0) 2.291932153s ago: executing program 4 (id=10446): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000940), 0xfc, 0x564, &(0x7f00000003c0)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffff7f850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='ext4_ext_show_extent\x00', r2}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000300)={[{0x0, 'memory'}]}, 0x8) write$cgroup_int(r1, &(0x7f0000000200), 0x4343b) 1.905371614s ago: executing program 3 (id=10447): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000013000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="000000000000000010000c800c0022"], 0x30}}, 0x0) 1.890487684s ago: executing program 4 (id=10448): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) 1.533718412s ago: executing program 0 (id=10450): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x80049367, &(0x7f00000001c0)) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000000), &(0x7f0000000040)=r2}, 0x20) (async, rerun: 32) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000001780)={0x2c, 0x0, &(0x7f00000014c0)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$hid(r0, &(0x7f0000001040)={0x24, 0x0, &(0x7f0000000f00)={0x0, 0x3, 0xc, @string={0xc, 0x3, "155de9ce87cce5c2f052"}}, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00031200000012033f"], 0x0, 0x0}, 0x0) 1.235237575s ago: executing program 4 (id=10449): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000b07c3900"/20, @ANYRES32=r0, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 32) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x40f00, 0xfa806960f97dca36, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r1}, 0x55) (async) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r2, 0x400, 0x0) timer_create(0x6, &(0x7f0000000340)={0x0, 0xe, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) truncate(&(0x7f0000000040)='./file0\x00', 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async, rerun: 64) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"/1012], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x90) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000300)='kfree\x00', r4}, 0x10) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1b96, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setregs(0xd, r5, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r5, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r5, 0x2, &(0x7f0000000740)={0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 64) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000c40)=ANY=[@ANYRESHEX]) (async, rerun: 64) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) (async, rerun: 64) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') (async, rerun: 64) bpf$MAP_CREATE(0x0, 0x0, 0x0) (rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) 937.447608ms ago: executing program 3 (id=10451): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000340)="5800fe001400192340834b80040d8c5602117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000110000224e0000", 0x58}], 0x1) 936.808698ms ago: executing program 3 (id=10452): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3c8, 0x0, 0x0, 0x1d0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@multicast2, @multicast1, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'pim6reg\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x418) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x0, 0x8}, 0x48) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wg1\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="1cfaff08000000090000006b04f009920a000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x1c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000480)={'ip_vti0\x00', &(0x7f0000000840)}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x9, 0x8, 0x40, 0x42, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000000), 0x86, r5}, 0x38) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="f40000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000c400128009000100766c616e00000000b40002800600010000000000040003800c00020004000000020000000c000200540a0000180000001c0004800c00010004000000000800000c0001000600000006000000700004800c00010000000100100001000c00010005000000680000000c00010005000000ee9500000c00010003000000018000000c000100220b0000010000000c00010004000000010000000c00010006000000020000000c0001007fae0000010000000c000100800000000600000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB="93e73f5e7cc54eb8bd43069b3bd0533e8ce7ca25"], 0xf4}, 0x1, 0xba01}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) r10 = socket$inet6(0xa, 0x2, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000370400"/20, @ANYRES32=r12, @ANYBLOB="0b120500000000005c1a81b991fe0bd0e8704767726500000100", @ANYRES32=r12, @ANYBLOB], 0x3c}}, 0x0) sendmmsg$inet(r10, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) 912.0059ms ago: executing program 3 (id=10453): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x9, 0x0, 0x0, 0x8000}, 0x48) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000040)='./file2\x00', 0x300001a, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES16], 0xd, 0x2aa, &(0x7f0000001300)="$eJzs3cFqK2UUAOAzSZpGXSSIG0VwQBeuyq1bN41yBbErJYK60OC9FyQJhRYCVjB21Sdw6Xv4CG7c+AaCW8Fdu6iMTGamSWhSQ40p9H7f6jD/f86czF/SVc589fpo8OQoibOL36PVSqJ2EAdxmUQnalH5IRoBADwcl1kWf2V3yWzUNt8NALANxf//wn33AgBsxyefff5R9/Dw8cdp2opX2+fjXhIRo/Nxr1jvPotvYhhP41G04yoiu1bEH3x4+Dgaaa4Tb40m416eOfry17J+98+Iaf5+tKOzPH8/LczlT8a9nXgx0ug+26labccry/PfWZIfvWa8/eZc/3vRjt++jqMYxpPIc2f53++n6fvZjxfffZHfJs9PatHbne6byerbPBcAAAAAAAAAAAAAAAAAAAAAAB62vTRNivE90/k9+aVy/k79arq+l1Y6i/N5ivykKlTMB8qiHNEzyeKnar7OozRNs3LjLL8RrzW8WAAAAAAAAAAAAAAAAAAAAAByJ9+eDvrD4dPjjQTVNIDqZ/13rXMwd+WNOB3066sL7q5/r/lpA3mvt26ORiM29Fj+LXgh72fjlXdnh/tpFEF1MBu918vvFUVPB/20XKoe8qCfRLN64MvTW9XB/Ty/1IzFzcl1wXUby6Z/ElfZ4pm2rltdzGpu6Gk0X1q69HeWZevVefeP4ozKK8l0xMZ6d98pg6UfMA9aN8/9l9UFV35l1P/TFw4AAAAAAAAAAAAAAAAAALDS7Ee/SxbPbk2t/W9NAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCWzd7/XwWtiFi8ciOYlMm37SmDZhyf3PNHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4DnwTwAAAP//0hxJIw==") r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fadvise64(r1, 0x100000000, 0x0, 0x2) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000048000), 0x4000000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000200000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, 0x1, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) syz_usb_connect(0x0, 0x32, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000083ef0840e07d6e67db77000000010902200001000000000904000000ef0101000a"], 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000458e5e080304c8f05602000000010902120001000000000904"], 0x0) syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000b00)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1e, 0xe0, 0xf9, [{{0x9, 0x4, 0x0, 0x58, 0x1, 0x7, 0x1, 0x2, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x7, 0x80}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x75, 0x8, 0x4}}]}}}]}}]}}, &(0x7f00000011c0)={0xa, &(0x7f0000000b40)={0xa, 0x6, 0x200, 0x9, 0x6, 0xbb, 0xff, 0x8}, 0xfd, &(0x7f0000000b80)=ANY=[@ANYBLOB="050ffd00043d1002cb3e61dba2b95d0b590722b8f92ea6bb9ee74b062ae119ef4697c079e768d46711dfa5e4c21d55995e9f227530ff503183740fbc633b5a4eade624100adf260100000f0008000f00000000be000000c0000030c0ff00c000000030ffff0083100bfb73f05aa6ea067eeb5b31e9416e9b662bbfc5f4248a765e0d712ff9191644ec9fb6a6ec0fe52c387e25fbbdb674ef8ac59ac3f8695b0c334d0364bd3e57f50b91cd74ae6f82a3b8b48d41c2fd07eedde08903ea163dc8f5d7c2a03a8270838a629c28ca5508eb87bb7010a349337110dacb4f5a5fea62f014100410188687aaa797918a368212de812d2af3"], 0xa, [{0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x1827}}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x430}}, {0x4, &(0x7f0000000d00)=@lang_id={0x4, 0x3, 0x443}}, {0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x420}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x414}}, {0xfa, &(0x7f0000000dc0)=@string={0xfa, 0x3, "b5b0e6136cbacf9e49eb1d96dea62103696b7910fef212e44e1f8c81921658aab5a5e70ec71c47619137cebef54801c7450b4a043ad3814d8aa9d6bee212f6bffaa7bc639e34f24157925a749c07474713b97fd66784e7a8fabf8dcd27a2762103d2c250793a51d28d405e1a8effc7388b5654b1a717f6ac7baed8322005e9c21fdbfa752033cd93ab1d0f53f51f6439eaa776be665ebd52e93eb779e276882ab0d087ec270a93fe69e836a041c2b256e6b3a5740b8a70a50e5c8aaae098b0dfc8eccd9ba7b3d3e8e1746e56e7634d61f49ce43da4cbd8b0d4e5912a7ab3786f402e5abb670f1b37fad368a8d2143828064353964135bf58"}}, {0x86, &(0x7f0000000f80)=@string={0x86, 0x3, "c110dbdda66e296cbd9145e8c0807842a6b896847c4a6a1d2333cce25ea980eaac8e94712f2523acdfea0b306438e62ee2d999fe96601ae5f267fd5b7729be28ab6fbe76a8e2e9c8b45c6b374330a406636ec634c7cfb8acbbf89c7eedad994205a5d5aebe92a4a9599df0b5f24e6575b05cfa3765cc6ce05b2acb5a72030915c2f831f9"}}, {0xf2, &(0x7f0000001040)=@string={0xf2, 0x3, "35d446796f2cbe11015db27a81e47c9e1f287af95c36880121686ad4e9e459cd8a7c18dd6241ef4083fa59aaea9d3014a94aa455f81ccd7941d751a36a196495500a6807c6e5b614e6b343862b2490b245a15d90e4f1faa017daa3b69aec2c82ab61b4bffbcff26f8a3a0f7ab1ca3ef172b760c528709359d0a839a98c8607510f8ba8056af5e1de1ac645f6e23c6f0a8e91e900470822ea3d4a21baff5d489e515ebf258d56cf78d2cda795d5bc577b055762fa91695b3993828df4b520aa3f4d418467562e6bc82ec77fb9db70a84b69be886e52cc4d367723761adb3c727b5a41879b838b3f63080e4028ce9096bc"}}, {0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x44a}}, {0x5e, &(0x7f0000001140)=@string={0x5e, 0x3, "8828bdbb022930f951168a3e3c43e8e77ca84ac07d1d38523eb4d1fc056edd20196fe076bad46df83dd0483422eaab51694076843ca6ab8ae4666187cd1cfa64d882e6378b0370861b95b2cc2ea65512315b42cbb84139e6eba0d705"}}]}) syz_usb_control_io(r4, &(0x7f00000004c0)={0x2c, &(0x7f0000000280)={0x0, 0x6, 0x80, {0x80, 0x10, "55e12ebdb10b6edcf31d21dac89d3a37dbb2b5e7035df88842b85ebcaf62e9c896a5bcb9f0cbb24e268a3caa4be1f25212af0ac35067572e86f1eda14da7b6a85f99b20526a046177eb0ffb7b0ec851eb4c5752d59b1dde513808060a062615cde6d09f8b914eeae990a46b519808267695b1e1ef52f1acd91d67253df06"}}, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc07}}, &(0x7f0000000380)={0x0, 0xf, 0x10, {0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x2, 0x90, 0x2, 0xfc, 0x1, 0x2}]}}, &(0x7f00000003c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x24, 0x10, 0x3, 0xff, "b50b3823", "10df9adb"}}, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x60, 0x22, 0x2, 0x2f, 0x4, 0x401}}}, &(0x7f0000000a40)={0x84, &(0x7f0000000500)={0x0, 0x1, 0x38, "eddde310d4fe84080e4bdf577752b309257ad41fd0cc029eeb3b128c5f1d16abff044c6cef151cf4bc4dd9f3a5cc009ae9df101924a68b9f"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0xaf}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x81}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000600)={0x20, 0x0, 0x8, {0x0, 0x80, [0x870f]}}, &(0x7f0000000640)={0x40, 0x7, 0x2, 0xfffb}, &(0x7f0000000680)={0x40, 0x9, 0x1, 0x9}, &(0x7f00000006c0)={0x40, 0xb, 0x2, "3fad"}, &(0x7f00000007c0)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000000800)={0x40, 0x13, 0x6}, &(0x7f0000000840)={0x40, 0x17, 0x6, @local}, &(0x7f0000000880)={0x40, 0x19, 0x2, '{\t'}, &(0x7f00000008c0)={0x40, 0x1a, 0x2}, &(0x7f0000000900)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000940)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000980)={0x40, 0x21, 0x1, 0x6}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r5, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2249000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r6, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}]}, 0x2c}}, 0x4c001) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, 0x1, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x6}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x8}]}, @CTA_STATUS={0x8}]}, 0x30}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r9, 0x4040ae77, &(0x7f0000000000)) close(r9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000017c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) syz_usb_control_io(r4, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03076044238cb89e14f086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 792.791879ms ago: executing program 2 (id=10454): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x74}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x7100}, 0x80) 741.333493ms ago: executing program 2 (id=10455): prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000008000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) syz_mount_image$fuse(0x0, 0x0, 0x104421, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ac0000001200010500000000000000000000000000000000000000000000000b00"/56, @ANYRES32=0x0], 0xac}}, 0x0) 225.584473ms ago: executing program 4 (id=10456): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)="c8", &(0x7f0000000380), 0x9}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, 0x0, 0x0}, 0x20) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000280), 0x40000, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_page_alloc\x00', r0}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r1) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="9802"], 0x298) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c77e8a772372a392866040000000000000000001690f60c60cd260537b73ed6650f6b4755827e6262d584012554bcc9e884f6782d33ccf807786838d0b1343ae090e8193da3d05aced41ed87d41382e1a32be7bbe6c4aa794b70af19c0db0cfac1f8a13e8abfb46132c21fcaffd3e7ffe", @ANYRESHEX=r3, @ANYBLOB=',msize=0x0000000000010001,\x00']) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getdents(r4, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000100)=0x5) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 158.784768ms ago: executing program 4 (id=10457): r0 = socket$netlink(0x10, 0x3, 0xf) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/keycreate\x00') openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) preadv(r1, &(0x7f00000026c0)=[{&(0x7f0000000240)=""/4088, 0xff8}], 0x1, 0x6, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x75) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000001280)={[{@jqfmt_vfsv0}, {@max_batch_time={'max_batch_time', 0x3d, 0x101}}]}, 0x1, 0x784, &(0x7f00000007c0)="$eJzs3c1rHOUfAPDvbJKmSfv7JYKg9RQQNFC6MTW2Ch4qHkSwUNCz7bLZhppNtmQ3pQkBW0TwIqh4EPTSsy/15tWXq/4XHqSlalqseJDI7Eu7bXbTTZvdDeTzgck+z8xsnue7z8wzz+wMOwHsWRPpn0zEoYj4KIkYq89PImKomhqMOFFb7/b6Wj6dktjYePOPpLrOrfW1fDS9J3WgnnkyIn58P+JwZnO55ZXV+VyxWFiq56cqC+enyiurR84t5OYKc4XFY9MzM0ePv3D82M7F+tcvqwevf/zas9+c+Oe9J65++FMSJ+JgfVlzHDtlIibqn8lQ+hHe49WdLqzPkn5XgIeS7poDtb08DsVYDFRTbYz0smYAQLe8GxEbAMAekzj+A8Ae0/ge4Nb6Wr4x9fcbid668UpE7K/F37i+WVsyWL9mt796HXT0VnLPlZEkIsZ3oPyJiPjiu7e/Sqfo0nVIgFYuXY6IM+MTm/v/ZNM9C9v13FYLN4arLxP3zdb/Qe98n45/Xmw1/svcGf9Ei/HPcIt992E8eP/PXNuBYtpKx38vN93bdrsp/rrxgXruf9Ux31By9lyxkPZt/4+IyRgaTvPT1VVb3wU1efPfm+3Kbx7//fnJO1+m5aevd9fIXBscvvc9s7lK7lHjbrhxOeKpwVbxJ3faP2kz/j3VYRmvv/TB5+2WpfGn8TamzfF318aViGdatv/dtky2vD9xqro5TDU2iha+/fWz0XblN7d/OqXlN84FeiFt/9Gt4x9Pmu/XLG+/jJ+vjP3QbtmD42+9/e9L3qqm99XnXcxVKkvTEfuSNzbPP3r3vY18Y/00/smnW+//W23/6TnhmQ7jH7z++9cPH393pfHPbqv9t5+4ent+oF35nbX/TDU1WZ/TSf/XaQUf5bMDAAAAAAAAAAAAAAAAAAAAAAAAgE5lIuJgJJnsnXQmk83WnuH9eIxmiqVy5fDZ0vLibFSflT0eQ5nGT12ONf0e6nT99/Ab+aP35Z+PiMci4tPhkWo+my8VZ/sdPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADUHWjz/P/Ub8P9rh0A0DX7+10BAKDnHP8BYO/Z3vF/pGv1AAB6x/k/AOw9HR//z3S3HgBA7zj/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoMtOnTyZTht/r6/l0/zshZXl+dKFI7OF8nx2YTmfzZeWzmfnSqW5YiGbLy20/UeXai/FUun8TCwuX5yqFMqVqfLK6umF0vJi5fS5hdxc4XRhqGeRAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDnyiur87lisbAksWViZHdUY9ckBmNXVEOia4nmXmKkfx0UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwC73XwAAAP//+Lkq2Q==") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000012c0)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000002580)={0x6, 0x0, [{0x6000, 0xb4, &(0x7f0000001300)=""/180}, {0x4000, 0x1000, &(0x7f00000013c0)=""/4096}, {0x6000, 0x94, &(0x7f00000023c0)=""/148}, {0x1, 0x57, &(0x7f0000002480)=""/87}, {0x10000, 0x6a, &(0x7f0000002500)=""/106}, {0x4000, 0xff0, &(0x7f0000002700)=""/4080}]}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f0000003700)=""/94, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_LOG_BASE(r3, 0x4008af04, &(0x7f0000000500)=&(0x7f0000000340)) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4008004) write$binfmt_script(0xffffffffffffffff, &(0x7f0000003780)={'#! ', './file0', [], 0xa, "29542bebc7af99addcfd108537df3ed2bbf79bf4ee0c15613bba2e29dfdc47e2ad50f46918669e030e5d196580543e5531a047f7a7bc4c1bb9675ca256f4bba4196ce3d10fc8bc7a4257f7e01947bf2e9dc22e70645f25c236325a6726c8ddc6e909744b1ce4eba5858154b591b235b46d805522f673eb84b15dad3745251cf464cc3998982b269b7506bc8df41e4915d53d32389e41649ea37164d39d9381350f097526c31063facf50aa53d12ed7b4eee135403ca12037d41732012bb36dc4f4a0f300d10d99a3d10e81ee9fdde76360388d1eb5d7b5d32f1228b7a6db71175e5d4ea292ba977485"}, 0xf4) write$binfmt_script(r2, &(0x7f0000000040)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) clock_gettime(0x0, &(0x7f0000000340)) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000001240)='cgroup.freeze\x00', 0x275a, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x408}, 0x48000) preadv(r6, &(0x7f0000000100), 0x0, 0x6, 0xffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) 1.26125ms ago: executing program 1 (id=10458): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x51) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) fspick(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$netlink(0x10, 0x3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0xd0}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x80ffffff}, 0x48) 0s ago: executing program 4 (id=10459): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000140)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "28d7b07d54891881fe02c1203fe49696b9f26f2da4149683f065714f8a61d1f32c99064bbd27b2aa77459cff33a3a98350f1af9d51ed5bef3d63520d260804d0"}, 0x48, 0xfffffffffffffffd) keyctl$revoke(0x3, r4) add_key$keyring(&(0x7f0000000100), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0000004900010029bd7000000000000a00f8"], 0x4c}}, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) unshare(0x60600) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x34}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0xab) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000080100000000000000fe001800002dac71029b9661593bac4265df720b4f5ad3be5e5594f67a334de8729e29326d4b3da237f16b53d0ee887c35341c16f91b58920ca4e86a7e1272b8e9231991d22f", @ANYRES64=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) kernel console output (not intermixed with test programs): er: syz [ 1458.173014][T22803] usb 1-1: SerialNumber: syz [ 1458.178145][T22803] usb 1-1: config 0 descriptor?? [ 1458.190360][ T24] audit: type=1400 audit(1385.723:9616): avc: denied { accept } for pid=2208 comm="syz.2.9809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1458.235625][T22803] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 1458.243174][T22803] usb 1-1: Detected FT-X [ 1458.248572][ T2183] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 1458.249949][ T24] audit: type=1400 audit(1385.788:9617): avc: denied { mounton } for pid=2182 comm="syz.4.9798" path="/32/file0" dev="tmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 1458.261731][ T2183] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e11d, mo2=0002] [ 1458.288742][ T2183] System zones: 0-1, 2-3, 4-36, 98-101, 102-102 [ 1458.295242][ T2183] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,debug,norecovery,commit=0x0000000000000005,norecovery,,errors=continue [ 1458.412879][T22818] usb 5-1: USB disconnect, device number 58 [ 1458.448555][T27021] usb 2-1: device descriptor read/64, error -71 [ 1458.459297][T22803] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1458.487624][ T2185] sit: Dst spoofed 0.0.0.0/2002::bfd8:a5dd -> 224.0.0.1/2002:c021:42c4:3911:45ba:dd28:fd7f:ffc [ 1458.575584][ T2225] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2225 comm=syz.2.9812 [ 1458.576771][T26998] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 1458.595049][T27021] usb usb2-port1: attempt power cycle [ 1458.622759][ T2229] udc-core: couldn't find an available UDC or it's busy [ 1458.629526][ T2229] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1458.640897][T26998] usb 4-1: 2:1: cannot set freq 5590914 to ep 0x82 [ 1458.664441][T26998] usb 4-1: USB disconnect, device number 58 [ 1458.717557][ T2187] fuse: Bad value for 'user_id' [ 1458.747723][T22803] ftdi_sio 1-1:0.0: GPIO initialisation failed: -5 [ 1458.754494][T22803] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1458.964632][T22803] usb 1-1: USB disconnect, device number 38 [ 1458.970983][T22803] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1458.983389][T22803] ftdi_sio 1-1:0.0: device disconnected [ 1459.036130][T27021] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1459.228539][T27021] usb 2-1: device descriptor read/8, error -71 [ 1459.442232][T27009] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1459.517269][T27021] usb 2-1: device descriptor read/8, error -71 [ 1459.689595][ T2233] F2FS-fs (loop4): Test dummy encryption mode enabled [ 1459.697133][ T2233] F2FS-fs (loop4): invalid crc value [ 1459.703988][ T2233] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1459.733133][ T2233] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1459.891650][T27009] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1459.912375][ T24] audit: type=1400 audit(1387.248:9618): avc: denied { create } for pid=2248 comm="syz.0.9821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1459.965648][T27009] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1460.007302][T27009] usb 4-1: config 0 descriptor?? [ 1460.262545][ T2277] fuse: Bad value for 'fd' [ 1460.510697][T27009] usb 4-1: Cannot read MAC address [ 1460.515779][T27009] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -71 [ 1460.524355][ T2283] netlink: 172 bytes leftover after parsing attributes in process `syz.3.9830'. [ 1460.534140][T27009] usb 4-1: USB disconnect, device number 59 [ 1460.630128][ T2289] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1460.637880][ T2289] EXT4-fs (loop4): 1 orphan inode deleted [ 1460.644514][ T2289] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1460.762173][ T2300] overlayfs: workdir and upperdir must be separate subtrees [ 1461.045056][T22803] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1461.300837][T27009] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1461.451059][T22803] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1461.463213][T22803] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1461.481043][T22803] usb 5-1: config 0 descriptor?? [ 1461.554195][ T2313] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 1461.570390][T27009] usb 4-1: Using ep0 maxpacket: 8 [ 1461.739905][T27009] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1461.964241][T27009] usb 4-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=f4.28 [ 1461.994669][T27009] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1461.996885][ T2328] input: syz1 as /devices/virtual/input/input137 [ 1462.009304][T27009] usb 4-1: Product: syz [ 1462.013424][T27009] usb 4-1: Manufacturer: syz [ 1462.018165][T27009] usb 4-1: SerialNumber: syz [ 1462.019602][ T2328] udc-core: couldn't find an available UDC or it's busy [ 1462.023242][T27009] usb 4-1: config 0 descriptor?? [ 1462.035163][ T2328] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1462.241494][T22803] usb 5-1: Cannot read MAC address [ 1462.273777][T22803] MOSCHIP usb-ethernet driver: probe of 5-1:0.0 failed with error -71 [ 1462.299299][ T24] audit: type=1400 audit(1389.578:9619): avc: denied { mounton } for pid=2292 comm="syz.3.9832" path="/proc/61/cgroup" dev="proc" ino=171535 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 1462.515733][T22803] usb 5-1: USB disconnect, device number 59 [ 1462.623152][ T2345] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9850'. [ 1462.904263][T27021] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1462.936225][T27009] uvcvideo: Found UVC 0.00 device syz (8086:0b03) [ 1462.942750][T27009] uvcvideo: No valid video chain found. [ 1462.950223][T27009] usb 4-1: USB disconnect, device number 60 [ 1463.461100][T27021] usb 1-1: Using ep0 maxpacket: 8 [ 1463.588017][T27021] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1463.705478][T26571] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1463.718302][ T2368] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 1463.728401][ T2368] Quota error (device loop4): v2_read_file_info: Block with free entry too big (37 >= 6). [ 1463.738278][ T2368] EXT4-fs warning (device loop4): ext4_enable_quotas:6467: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1463.754033][ T2368] EXT4-fs (loop4): mount failed [ 1463.756044][ T2387] udc-core: couldn't find an available UDC or it's busy [ 1463.766171][ T2387] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1463.773685][T27021] usb 1-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=f4.28 [ 1463.782641][T27021] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1463.790630][T27021] usb 1-1: Product: syz [ 1463.794587][T27021] usb 1-1: Manufacturer: syz [ 1463.798964][T27021] usb 1-1: SerialNumber: syz [ 1463.804253][T27021] usb 1-1: config 0 descriptor?? [ 1463.871049][T27021] uvcvideo: Found UVC 0.00 device syz (8086:0b03) [ 1463.877765][T27021] uvcvideo: No valid video chain found. [ 1464.060294][T27021] usb 1-1: USB disconnect, device number 39 [ 1464.111580][T26998] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1464.218330][T26571] usb 2-1: Using ep0 maxpacket: 16 [ 1464.378653][T26571] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1464.388728][T26571] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1464.401411][T26571] usb 2-1: New USB device found, idVendor=056a, idProduct=00f0, bcdDevice= 0.00 [ 1464.410167][T26571] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1464.418647][T26571] usb 2-1: config 0 descriptor?? [ 1464.475161][T26571] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1464.496229][T26998] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 1464.507488][T26998] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 1464.518610][T26998] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1464.527388][T26998] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1464.549633][ T2391] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 1465.470441][T26998] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 1465.613017][T26998] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input138 [ 1465.625021][ T2421] netlink: 'syz.0.9873': attribute type 28 has an invalid length. [ 1465.625546][T26998] usb 4-1: USB disconnect, device number 61 [ 1465.949482][T26571] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1466.398173][T26571] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1466.408989][T26571] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1466.417852][T26571] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1466.426573][T26571] usb 5-1: config 0 descriptor?? [ 1466.660677][T22818] usb 2-1: USB disconnect, device number 70 [ 1466.669338][ T2438] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2438 comm=syz.2.9878 [ 1468.729320][ T2475] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9888'. [ 1468.791691][T26571] usbhid 5-1:0.0: can't add hid device: -71 [ 1468.819365][T26571] usbhid: probe of 5-1:0.0 failed with error -71 [ 1468.915299][T26571] usb 5-1: USB disconnect, device number 60 [ 1469.838594][ T2602] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1469.967955][ T2499] netlink: 'syz.2.9891': attribute type 4 has an invalid length. [ 1469.976730][ T2499] netlink: 'syz.2.9891': attribute type 4 has an invalid length. [ 1471.527141][ T2602] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1471.545947][ T2602] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1471.669820][ T2602] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1471.745339][ T2530] device ip6_vti0 entered promiscuous mode [ 1471.754942][ T2602] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1471.761880][ T2530] device vlan2 entered promiscuous mode [ 1471.763943][ T2602] usb 2-1: config 0 descriptor?? [ 1471.773123][ T2530] device ip6_vti0 left promiscuous mode [ 1472.061099][T26571] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1472.210685][ T2602] usbhid 2-1:0.0: can't add hid device: -71 [ 1472.216708][ T2602] usbhid: probe of 2-1:0.0 failed with error -71 [ 1472.223877][ T2602] usb 2-1: USB disconnect, device number 71 [ 1472.360221][T26571] usb 1-1: Using ep0 maxpacket: 16 [ 1472.595360][T26571] usb 1-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 1472.603879][T26571] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1472.612760][T26571] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA6, skipping [ 1472.623175][ T2602] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1472.630518][T26571] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 1472.641255][T26571] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 1472.651781][T26571] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1065, setting to 64 [ 1472.662464][T26571] usb 1-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 1472.672689][T26571] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1472.683141][T26571] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1472.693566][T26571] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1472.703789][T26571] usb 1-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 1472.768693][ T2552] syz.4.9911[2552] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1472.768737][ T2552] syz.4.9911[2552] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1472.931442][ T2554] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9911'. [ 1473.081490][T26571] usb 1-1: New USB device found, idVendor=10a0, idProduct=e1fb, bcdDevice=70.eb [ 1473.090411][T26571] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1473.098161][T26571] usb 1-1: Product: ᰉ [ 1473.102125][T26571] usb 1-1: Manufacturer: ʬ鉍迤냙େ숤໐軈⁢䢰繛螦枢藮䒮㈩猭乫횷䢯뮷䩳辕㝠滣톆䞣쐀祴 [ 1473.114846][T26571] usb 1-1: SerialNumber: ဌꌮ裕瘯䣪Თꪍ⹎止뾶攷볚ጁ鳎祦窚蔃 [ 1473.124238][T26571] usb 1-1: config 0 descriptor?? [ 1473.236488][ T2602] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1473.247276][ T2602] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1473.257160][ T2602] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1473.393364][ T2602] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1473.473122][ T2602] usb 2-1: config 0 descriptor?? [ 1474.166225][ T2602] hid (null): bogus close delimiter [ 1474.179383][ T2571] netlink: 'syz.2.9916': attribute type 12 has an invalid length. [ 1474.500978][ T2602] usb 2-1: string descriptor 0 read error: -22 [ 1474.713056][ T24] audit: type=1326 audit(1401.193:9620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2578 comm="syz.4.9918" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faa8ef38bd9 code=0x0 [ 1474.786744][ T2602] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0123/input/input139 [ 1474.799765][ T2602] uclogic 0003:256C:006D.0123: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 1475.002511][ T2546] udc-core: couldn't find an available UDC or it's busy [ 1475.012272][T26571] usb 1-1: USB disconnect, device number 40 [ 1475.018366][ T2546] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1475.028752][T27031] usb 2-1: USB disconnect, device number 72 [ 1475.544306][T26571] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1475.765404][ T2617] FAULT_INJECTION: forcing a failure. [ 1475.765404][ T2617] name failslab, interval 1, probability 0, space 0, times 0 [ 1475.781083][ T2617] CPU: 1 PID: 2617 Comm: syz.4.9925 Tainted: G W 5.10.218-syzkaller-00638-g3feee789f446 #0 [ 1475.792173][ T2617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1475.802060][ T2617] Call Trace: [ 1475.805205][ T2617] dump_stack_lvl+0x1e2/0x24b [ 1475.809707][ T2617] ? bfq_pos_tree_add_move+0x43b/0x43b [ 1475.814999][ T2617] ? __kasan_check_read+0x11/0x20 [ 1475.819856][ T2617] ? preempt_schedule_irq+0xe7/0x140 [ 1475.824994][ T2617] dump_stack+0x15/0x17 [ 1475.828978][ T2617] should_fail+0x3c6/0x510 [ 1475.833230][ T2617] ? security_inode_alloc+0x29/0x120 [ 1475.838344][ T2617] __should_failslab+0xa4/0xe0 [ 1475.842946][ T2617] should_failslab+0x9/0x20 [ 1475.847285][ T2617] kmem_cache_alloc+0x3d/0x2e0 [ 1475.851880][ T2617] security_inode_alloc+0x29/0x120 [ 1475.856829][ T2617] inode_init_always+0x767/0x9f0 [ 1475.861600][ T2617] ? fat_get_block_bmap+0x470/0x470 [ 1475.866633][ T2617] new_inode_pseudo+0x93/0x220 [ 1475.871232][ T2617] new_inode+0x28/0x1c0 [ 1475.875226][ T2617] ? mutex_lock+0x60/0x110 [ 1475.879483][ T2617] fat_build_inode+0x1f7/0x3d0 [ 1475.884078][ T2617] vfat_lookup+0x368/0x5c0 [ 1475.888331][ T2617] ? setup+0xf0/0xf0 [ 1475.892062][ T2617] ? irqentry_exit+0x4f/0x60 [ 1475.896494][ T2617] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 1475.901960][ T2617] __lookup_slow+0x2b9/0x400 [ 1475.906385][ T2617] ? lookup_one_len+0x2c0/0x2c0 [ 1475.911069][ T2617] ? lookup_fast+0x340/0x7d0 [ 1475.915499][ T2617] ? full_name_hash+0xa0/0xf0 [ 1475.920013][ T2617] ? handle_dots+0x1030/0x1030 [ 1475.924615][ T2617] lookup_slow+0x5a/0x80 [ 1475.928690][ T2617] walk_component+0x48c/0x610 [ 1475.933204][ T2617] ? nd_alloc_stack+0xf0/0xf0 [ 1475.937719][ T2617] ? handle_lookup_down+0x130/0x130 [ 1475.942753][ T2617] path_lookupat+0x16d/0x450 [ 1475.947176][ T2617] filename_lookup+0x26a/0x6f0 [ 1475.951780][ T2617] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 1475.957331][ T2617] ? hashlen_string+0x120/0x120 [ 1475.962038][ T2617] ? getname_flags+0x1fd/0x520 [ 1475.966628][ T2617] user_path_at_empty+0x40/0x50 [ 1475.971306][ T2617] do_sys_truncate+0xa3/0x190 [ 1475.975821][ T2617] ? locks_verify_truncate+0x170/0x170 [ 1475.981115][ T2617] ? __kasan_check_read+0x11/0x20 [ 1475.985977][ T2617] __x64_sys_truncate+0x5b/0x70 [ 1475.990660][ T2617] do_syscall_64+0x34/0x70 [ 1475.994916][ T2617] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1476.000641][ T2617] RIP: 0033:0x7faa8ef38bd9 [ 1476.004898][ T2617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1476.024335][ T2617] RSP: 002b:00007faa8e1ba048 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 1476.032581][ T2617] RAX: ffffffffffffffda RBX: 00007faa8f0c6f60 RCX: 00007faa8ef38bd9 [ 1476.040391][ T2617] RDX: 0000000000000000 RSI: 0000000000000401 RDI: 0000000020000300 [ 1476.048203][ T2617] RBP: 00007faa8e1ba0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1476.056016][ T2617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1476.063913][ T2617] R13: 000000000000000b R14: 00007faa8f0c6f60 R15: 00007ffe2f1ed758 [ 1476.094407][ T2623] syz.1.9927[2623] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1476.094478][ T2623] syz.1.9927[2623] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1476.345791][T26571] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1476.367586][T26571] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1476.377392][T26571] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1476.603616][T27031] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1476.677055][T22803] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1476.684466][T26571] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1476.691114][ T2638] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 1476.694608][T26571] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1476.707099][ T2638] EXT4-fs error (device loop3): __ext4_iget:4958: inode #11: block 1: comm syz.3.9931: invalid block [ 1476.710666][T26571] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1476.721793][ T2638] EXT4-fs (loop3): Remounting filesystem read-only [ 1476.737898][ T2638] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.9931: couldn't read orphan inode 11 (err -117) [ 1476.749840][ T2638] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,errors=continue,max_dir_size_kb=0x0000000000000009,data_err=abort,errors=remount-ro,noinit_itable,mblk_io_submit,i_version,acl, [ 1476.869233][T27031] usb 2-1: Using ep0 maxpacket: 16 [ 1477.382558][T27031] usb 2-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 1477.391349][T27031] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1477.401850][T27031] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA6, skipping [ 1477.407367][T26571] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1477.421115][T26571] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1477.426727][T27031] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 1477.428872][T26571] usb 1-1: Product: syz [ 1477.439793][T27031] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 1477.443427][T26571] usb 1-1: Manufacturer: syz [ 1477.454373][T27031] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1065, setting to 64 [ 1477.458503][T26571] usb 1-1: SerialNumber: syz [ 1477.469352][T27031] usb 2-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 1477.484116][T27031] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1477.494388][T27031] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1477.504776][T27031] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1477.514945][T27031] usb 2-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 1477.638686][T22803] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1477.646123][T22803] usb 5-1: can't read configurations, error -61 [ 1477.679335][ T2657] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9937'. [ 1477.688902][ T2657] udc-core: couldn't find an available UDC or it's busy [ 1477.696366][ T2657] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1477.713496][T27031] usb 2-1: New USB device found, idVendor=10a0, idProduct=e1fb, bcdDevice=70.eb [ 1477.722518][T27031] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1477.736686][T27031] usb 2-1: Product: ᰉ [ 1477.740668][T27031] usb 2-1: Manufacturer: ʬ鉍迤냙େ숤໐軈⁢䢰繛螦枢藮䒮㈩猭乫횷䢯뮷䩳辕㝠滣톆䞣쐀祴 [ 1477.753454][T27031] usb 2-1: SerialNumber: ဌꌮ裕瘯䣪Თꪍ⹎止뾶攷볚ጁ鳎祦窚蔃 [ 1477.766974][T27031] usb 2-1: config 0 descriptor?? [ 1477.798865][T26571] cdc_ncm 1-1:1.0: bind() failure [ 1477.804678][T26571] cdc_ncm 1-1:1.1: bind() failure [ 1477.810497][T22803] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1477.823624][T26571] usb 1-1: USB disconnect, device number 41 [ 1478.743383][ T2671] tipc: Failed to remove local publication {66,1,1}/1273814776 [ 1478.751249][ T2671] tipc: Failed to remove local publication {66,1,1}/1273814776 [ 1478.824685][T22803] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1478.832375][T22803] usb 5-1: can't read configurations, error -61 [ 1478.838633][T22803] usb usb5-port1: attempt power cycle [ 1478.955025][ T2676] xt_CT: No such helper "netbios-ns" [ 1479.819955][T27031] usb 2-1: USB disconnect, device number 73 [ 1480.651701][T22803] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 1480.715909][T27031] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1480.736588][ T2714] xt_CT: No such helper "netbios-ns" [ 1480.993463][ T2723] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 1481.015006][T27031] usb 2-1: Using ep0 maxpacket: 8 [ 1481.143403][T26998] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1481.154595][T27031] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1481.166346][T27031] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 1481.177887][T27031] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 33 [ 1481.201515][T27031] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3264, bcdDevice= 0.00 [ 1481.211469][T27031] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1481.247843][T27031] usb 2-1: config 0 descriptor?? [ 1481.410408][T26998] usb 1-1: Using ep0 maxpacket: 16 [ 1481.498737][ T24] audit: type=1326 audit(1407.548:9621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2733 comm="syz.3.9963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faed6998bd9 code=0x7ffc0000 [ 1481.521661][ T24] audit: type=1326 audit(1407.548:9622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2733 comm="syz.3.9963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faed6998bd9 code=0x7ffc0000 [ 1481.521679][ T24] audit: type=1326 audit(1407.548:9623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2733 comm="syz.3.9963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7faed6998bd9 code=0x7ffc0000 [ 1481.521693][ T24] audit: type=1326 audit(1407.548:9624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2733 comm="syz.3.9963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faed6998bd9 code=0x7ffc0000 [ 1481.521707][ T24] audit: type=1326 audit(1407.548:9625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2733 comm="syz.3.9963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faed6998bd9 code=0x7ffc0000 [ 1481.521722][ T24] audit: type=1326 audit(1407.548:9626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2733 comm="syz.3.9963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faed6998bd9 code=0x7ffc0000 [ 1481.521737][ T24] audit: type=1326 audit(1407.548:9627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2733 comm="syz.3.9963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faed6998bd9 code=0x7ffc0000 [ 1481.521752][ T24] audit: type=1326 audit(1407.548:9628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2733 comm="syz.3.9963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faed6998bd9 code=0x7ffc0000 [ 1481.521766][ T24] audit: type=1326 audit(1407.548:9629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2733 comm="syz.3.9963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faed6998bd9 code=0x7ffc0000 [ 1481.521779][ T24] audit: type=1326 audit(1407.548:9630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2733 comm="syz.3.9963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faed6998bd9 code=0x7ffc0000 [ 1481.569400][ T2706] overlayfs: missing 'lowerdir' [ 1481.636907][T22803] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1481.727603][T26998] usb 1-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 1481.756113][T26998] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1481.770297][T26998] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA6, skipping [ 1481.781922][T26998] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 1481.793848][T27031] usb 2-1: string descriptor 0 read error: -71 [ 1481.795013][T22803] usb 5-1: not running at top speed; connect to a high speed hub [ 1481.806484][T27031] usb 2-1: USB disconnect, device number 74 [ 1481.822189][T26998] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 1481.842720][T26998] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1065, setting to 64 [ 1481.862028][T26998] usb 1-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 1481.876882][T26998] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1481.887203][T26998] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1481.897506][T26998] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1481.907753][T26998] usb 1-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 1481.912706][T22803] usb 5-1: config 0 has no interfaces? [ 1481.948083][ T2755] udc-core: couldn't find an available UDC or it's busy [ 1481.954912][ T2755] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1481.965642][ T2755] udc-core: couldn't find an available UDC or it's busy [ 1481.967053][ T2753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9967'. [ 1481.972831][ T2755] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1482.083561][T22818] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1482.201443][T26998] usb 1-1: New USB device found, idVendor=10a0, idProduct=e1fb, bcdDevice=70.eb [ 1482.211049][T26998] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1482.221934][T26998] usb 1-1: Product: ᰉ [ 1482.226856][T26998] usb 1-1: Manufacturer: ʬ鉍迤냙େ숤໐軈⁢䢰繛螦枢藮䒮㈩猭乫횷䢯뮷䩳辕㝠滣톆䞣쐀祴 [ 1482.240754][T26998] usb 1-1: SerialNumber: ဌꌮ裕瘯䣪Თꪍ⹎止뾶攷볚ጁ鳎祦窚蔃 [ 1482.310121][T26998] usb 1-1: config 0 descriptor?? [ 1482.315982][T22803] usb 5-1: New USB device found, idVendor=0b05, idProduct=1866, bcdDevice= 0.40 [ 1482.324920][T22803] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1482.332656][T22803] usb 5-1: Product: syz [ 1482.336605][T22803] usb 5-1: Manufacturer: syz [ 1482.341058][T22803] usb 5-1: SerialNumber: syz [ 1482.346547][T22803] usb 5-1: config 0 descriptor?? [ 1482.611166][T26571] usb 5-1: USB disconnect, device number 64 [ 1482.946620][T22818] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 1482.978010][T22818] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 1482.992715][T22818] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1483.004153][T22818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1483.018495][ T2787] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1408 sclass=netlink_route_socket pid=2787 comm=syz.2.9974 [ 1483.034528][ T2752] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1483.443767][T22818] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 1483.454724][ T2795] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.9976: bg 0: block 248: padding at end of block bitmap is not set [ 1483.470978][ T2795] EXT4-fs error (device loop4): ext4_acquire_dquot:6219: comm syz.4.9976: Failed to acquire dquot type 1 [ 1483.471839][T22818] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input140 [ 1483.495538][ T2795] EXT4-fs (loop4): 1 truncate cleaned up [ 1483.501033][ T2795] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1483.631092][T22818] usb 4-1: USB disconnect, device number 62 [ 1483.670512][ T2804] netlink: 220 bytes leftover after parsing attributes in process `syz.2.9978'. [ 1483.671638][ T2805] syz.4.9977[2805] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1483.679554][ T2805] syz.4.9977[2805] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1483.680019][ T2804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9978'. [ 1483.710633][ T2804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9978'. [ 1484.144602][T26998] usb 1-1: USB disconnect, device number 42 [ 1484.663269][ T2842] netlink: 'syz.0.9990': attribute type 27 has an invalid length. [ 1484.728680][ T2842] bridge0: port 2(bridge_slave_1) entered disabled state [ 1484.735642][ T2842] bridge0: port 1(bridge_slave_0) entered disabled state [ 1484.833712][ T2844] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9990'. [ 1485.054028][T22803] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1485.120660][ T2851] syz.4.9993[2851] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1485.120726][ T2851] syz.4.9993[2851] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1485.280590][ T2854] netlink: 'syz.1.9992': attribute type 4 has an invalid length. [ 1485.492022][T22818] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1485.630967][T22803] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1485.780450][T22818] usb 4-1: Using ep0 maxpacket: 16 [ 1485.823351][T22803] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1485.832395][T22803] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1485.855189][T22803] usb 1-1: Product: syz [ 1485.859247][T22803] usb 1-1: Manufacturer: syz [ 1485.863670][T22803] usb 1-1: SerialNumber: syz [ 1485.870055][T22803] usb 1-1: config 0 descriptor?? [ 1486.026357][T22818] usb 4-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 1486.035015][T22818] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1486.067515][T22818] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA6, skipping [ 1486.079504][T22818] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 1486.090356][T22818] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 1486.103305][T22818] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1065, setting to 64 [ 1486.114175][T22818] usb 4-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 1486.124731][T22818] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1486.135264][T22818] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1486.152296][T22818] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1486.175897][T22803] snd-usb-audio: probe of 1-1:0.0 failed with error -2 [ 1486.183066][T22818] usb 4-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 1486.192479][T22803] usb 1-1: USB disconnect, device number 43 [ 1486.378935][T22818] usb 4-1: New USB device found, idVendor=10a0, idProduct=e1fb, bcdDevice=70.eb [ 1486.391225][T22818] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1486.407072][T22818] usb 4-1: Product: ᰉ [ 1486.414724][T22818] usb 4-1: Manufacturer: ʬ鉍迤냙େ숤໐軈⁢䢰繛螦枢藮䒮㈩猭乫횷䢯뮷䩳辕㝠滣톆䞣쐀祴 [ 1486.439820][T22818] usb 4-1: SerialNumber: ဌꌮ裕瘯䣪Თꪍ⹎止뾶攷볚ጁ鳎祦窚蔃 [ 1486.459251][T22818] usb 4-1: config 0 descriptor?? [ 1487.568405][ T2886] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 1487.576329][ T2886] System zones: 1-12 [ 1487.580616][ T2886] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1487.587319][ T2886] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.10002: bg 0: block 328: padding at end of block bitmap is not set [ 1487.601833][ T2886] EXT4-fs error (device loop4) in ext4_mb_clear_bb:5646: Corrupt filesystem [ 1487.610551][ T2886] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #13: comm syz.4.10002: invalid indirect mapped block 65280 (level 0) [ 1487.624357][ T2886] EXT4-fs error (device loop4): ext4_clear_blocks:880: inode #13: comm syz.4.10002: attempt to clear invalid blocks 33619980 len 1 [ 1487.637943][ T2886] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #13: comm syz.4.10002: invalid indirect mapped block 1819239214 (level 0) [ 1487.708834][ T2886] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #13: comm syz.4.10002: invalid indirect mapped block 1819239214 (level 1) [ 1487.803778][ T2886] EXT4-fs (loop4): 1 orphan inode deleted [ 1487.809713][ T2886] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 1488.009171][ T24] kauditd_printk_skb: 27 callbacks suppressed [ 1488.009184][ T24] audit: type=1400 audit(1413.631:9656): avc: denied { read } for pid=78 comm="acpid" name="mouse4" dev="devtmpfs" ino=4470 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 1488.023436][ T2909] netlink: 220 bytes leftover after parsing attributes in process `syz.1.10011'. [ 1488.038427][ T24] audit: type=1400 audit(1413.631:9657): avc: denied { open } for pid=78 comm="acpid" path="/dev/input/mouse4" dev="devtmpfs" ino=4470 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 1488.045041][ T2909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10011'. [ 1488.067392][ T24] audit: type=1400 audit(1413.631:9658): avc: denied { ioctl } for pid=78 comm="acpid" path="/dev/input/mouse4" dev="devtmpfs" ino=4470 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 1488.369854][ T2918] syz.3.10013[2918] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1488.369969][ T2918] syz.3.10013[2918] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1488.421938][T22818] usb 4-1: USB disconnect, device number 63 [ 1488.639975][ T2924] syz.2.10015[2924] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1488.640043][ T2924] syz.2.10015[2924] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1488.941345][ T2938] device ip6tnl0 entered promiscuous mode [ 1488.958715][ T2938] device vlan2 entered promiscuous mode [ 1488.965810][ T2938] device ip6tnl0 left promiscuous mode [ 1489.274416][T22818] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1489.530867][T22818] usb 4-1: Using ep0 maxpacket: 16 [ 1489.744600][T22818] usb 4-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 1489.757588][T22818] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1489.769707][T22818] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA6, skipping [ 1489.785550][T22818] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 1489.802806][T22818] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 1489.820008][T22818] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1065, setting to 64 [ 1489.837220][T22818] usb 4-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 1489.855248][T22818] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1489.865562][T22818] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1489.875862][T22818] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1489.886093][T22818] usb 4-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 1489.958464][ T2970] udc-core: couldn't find an available UDC or it's busy [ 1489.985265][ T2970] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1490.088360][T22818] usb 4-1: New USB device found, idVendor=10a0, idProduct=e1fb, bcdDevice=70.eb [ 1490.099092][T22818] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1490.118487][T22818] usb 4-1: Product: ᰉ [ 1490.122555][T22818] usb 4-1: Manufacturer: ʬ鉍迤냙େ숤໐軈⁢䢰繛螦枢藮䒮㈩猭乫횷䢯뮷䩳辕㝠滣톆䞣쐀祴 [ 1490.150545][T22818] usb 4-1: SerialNumber: ဌꌮ裕瘯䣪Თꪍ⹎止뾶攷볚ጁ鳎祦窚蔃 [ 1490.168044][ T2984] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2984 comm=syz.0.10037 [ 1490.180691][T22818] usb 4-1: config 0 descriptor?? [ 1490.191545][ T24] audit: type=1400 audit(1415.671:9659): avc: denied { mounton } for pid=2969 comm="syz.2.10032" path="/176/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 1490.356468][ T2990] netlink: 104 bytes leftover after parsing attributes in process `syz.0.10038'. [ 1491.265570][ T3011] xt_bpf: check failed: parse error [ 1491.603744][T26998] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1491.860188][T26998] usb 1-1: Using ep0 maxpacket: 16 [ 1491.988470][T26998] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 1491.996328][T26998] usb 1-1: config 0 has no interface number 0 [ 1492.073151][ T3025] netlink: 'syz.4.10048': attribute type 7 has an invalid length. [ 1492.080899][ T3025] netlink: 'syz.4.10048': attribute type 8 has an invalid length. [ 1492.170071][T26998] usb 1-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= f.88 [ 1492.179034][T26998] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1492.187385][T26998] usb 1-1: Product: syz [ 1492.224614][T26998] usb 1-1: Manufacturer: syz [ 1492.230663][T26998] usb 1-1: SerialNumber: syz [ 1492.236411][T26998] usb 1-1: config 0 descriptor?? [ 1492.246687][ T3033] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1492.299745][T22818] usb 4-1: USB disconnect, device number 64 [ 1492.448406][ T3048] exfat: Deprecated parameter 'utf8' [ 1492.453584][ T3048] exfat: Deprecated parameter 'namecase' [ 1492.459104][ T3048] exfat: Deprecated parameter 'namecase' [ 1492.464638][ T3048] exfat: Deprecated parameter 'utf8' [ 1492.472066][ T3048] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0x822ffc2e, utbl_chksum : 0xe619d30d) [ 1492.494123][ T24] audit: type=1326 audit(1417.833:9660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3020 comm="syz.0.10047" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f882f8c1bd9 code=0x0 [ 1492.604136][ T24] audit: type=1326 audit(1417.936:9661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3020 comm="syz.0.10047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f882f8c1bd9 code=0x7ffc0000 [ 1492.628892][ T24] audit: type=1326 audit(1417.936:9662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3020 comm="syz.0.10047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f882f8c1bd9 code=0x7ffc0000 [ 1492.652446][T26998] snd-usb-audio: probe of 1-1:0.2 failed with error -2 [ 1492.659977][T26998] usb 1-1: USB disconnect, device number 44 [ 1492.667850][ T24] audit: type=1326 audit(1417.936:9663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3020 comm="syz.0.10047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f882f8c1bd9 code=0x7ffc0000 [ 1492.690954][ T24] audit: type=1326 audit(1417.964:9664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3020 comm="syz.0.10047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f882f8c1bd9 code=0x7ffc0000 [ 1492.714070][ T24] audit: type=1326 audit(1417.964:9665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3020 comm="syz.0.10047" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f882f8c1bd9 code=0x7ffc0000 [ 1493.417383][ T3062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10061'. [ 1493.427823][ T3062] device bridge3 entered promiscuous mode [ 1493.457507][ T3065] udc-core: couldn't find an available UDC or it's busy [ 1493.464692][ T3065] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1493.472497][ T3065] udc-core: couldn't find an available UDC or it's busy [ 1493.479346][ T3065] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1493.487818][ T24] kauditd_printk_skb: 27 callbacks suppressed [ 1493.487831][ T24] audit: type=1400 audit(1418.769:9693): avc: denied { listen } for pid=3063 comm="syz.2.10062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1493.740717][T26998] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1493.879767][ T3074] netlink: 'syz.1.10065': attribute type 4 has an invalid length. [ 1494.039939][T26998] usb 4-1: too many configurations: 65, using maximum allowed: 8 [ 1494.694402][ T3087] netlink: 172 bytes leftover after parsing attributes in process `syz.0.10068'. [ 1494.755815][T26998] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 1494.773029][T26998] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1494.986336][ T24] audit: type=1400 audit(1420.164:9694): avc: denied { connect } for pid=3093 comm="syz.2.10072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1495.010091][ T24] audit: type=1400 audit(1420.192:9695): avc: denied { write } for pid=3093 comm="syz.2.10072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1495.322314][T26998] uvcvideo: Found UVC 0.00 device (046d:08c1) [ 1495.330544][T26998] uvcvideo: No valid video chain found. [ 1495.464581][ T24] audit: type=1400 audit(1420.613:9696): avc: denied { create } for pid=3109 comm="syz.2.10078" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1496.329936][ T24] audit: type=1400 audit(1421.418:9697): avc: denied { read } for pid=3109 comm="syz.2.10078" name="file0" dev="tmpfs" ino=1000 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1496.352109][ T24] audit: type=1400 audit(1421.418:9698): avc: denied { open } for pid=3109 comm="syz.2.10078" path="/185/file0" dev="tmpfs" ino=1000 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1496.374628][ T24] audit: type=1400 audit(1421.418:9699): avc: denied { ioctl } for pid=3109 comm="syz.2.10078" path="/185/file0" dev="tmpfs" ino=1000 ioctlcmd=0x1279 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1496.473196][ T3124] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 1496.514478][ T24] audit: type=1400 audit(1421.596:9700): avc: denied { unlink } for pid=1070 comm="syz-executor" name="file0" dev="tmpfs" ino=1000 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1497.279389][T27031] usb 4-1: USB disconnect, device number 65 [ 1497.790358][T26998] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1498.036622][ T24] audit: type=1400 audit(1423.028:9701): avc: denied { mounton } for pid=3173 comm="syz.3.10097" path="/58/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1498.057413][T26998] usb 1-1: Using ep0 maxpacket: 16 [ 1498.089995][ T3174] blk_update_request: I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 1498.101602][ T3174] EXT4-fs (loop3): unable to read superblock [ 1498.271367][T26998] usb 1-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 1498.281031][T26998] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1498.433435][T26998] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA6, skipping [ 1498.446735][T26998] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 1498.460695][T26998] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 1498.471787][T26998] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1065, setting to 64 [ 1498.482717][T26998] usb 1-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 1498.493854][T26998] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1498.504573][T26998] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1498.514963][T26998] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1498.525201][T26998] usb 1-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 1498.698605][T26998] usb 1-1: New USB device found, idVendor=10a0, idProduct=e1fb, bcdDevice=70.eb [ 1498.710908][T26998] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1498.718761][T26998] usb 1-1: Product: ᰉ [ 1498.722791][T26998] usb 1-1: Manufacturer: ʬ鉍迤냙େ숤໐軈⁢䢰繛螦枢藮䒮㈩猭乫횷䢯뮷䩳辕㝠滣톆䞣쐀祴 [ 1498.735477][T26998] usb 1-1: SerialNumber: ဌꌮ裕瘯䣪Თꪍ⹎止뾶攷볚ጁ鳎祦窚蔃 [ 1498.745130][T26998] usb 1-1: config 0 descriptor?? [ 1499.243452][T27031] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1499.361131][T27027] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1499.639205][T27031] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1499.650627][T27031] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1499.662320][T27031] usb 2-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 1499.672876][T27031] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1499.685762][T27031] usb 2-1: config 0 descriptor?? [ 1499.777739][T27027] usb 4-1: too many endpoints for config 0 interface 0 altsetting 16: 255, using maximum allowed: 30 [ 1499.788570][T27027] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1499.799482][T27027] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1499.809087][T27027] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1499.821972][T27027] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1499.828452][T27027] usb 4-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 1499.837328][T27027] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1499.845720][T27027] usb 4-1: config 0 descriptor?? [ 1500.218709][ T24] audit: type=1326 audit(1425.068:9702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3195 comm="syz.1.10101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f992afd3bd9 code=0x7ffc0000 [ 1500.241626][ T24] audit: type=1326 audit(1425.068:9703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3195 comm="syz.1.10101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f992afd3bd9 code=0x7ffc0000 [ 1500.264881][ T24] audit: type=1326 audit(1425.068:9704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3195 comm="syz.1.10101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f992afd3bd9 code=0x7ffc0000 [ 1500.288049][ T24] audit: type=1326 audit(1425.068:9705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3195 comm="syz.1.10101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f992afd3bd9 code=0x7ffc0000 [ 1500.310999][ T24] audit: type=1326 audit(1425.068:9706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3195 comm="syz.1.10101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f992afd3bd9 code=0x7ffc0000 [ 1500.313591][T27031] waltop 0003:172F:0501.0124: hidraw0: USB HID v0.00 Device [HID 172f:0501] on usb-dummy_hcd.1-1/input0 [ 1500.344884][ T24] audit: type=1326 audit(1425.068:9707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3195 comm="syz.1.10101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f992afd3bd9 code=0x7ffc0000 [ 1500.373425][ T24] audit: type=1326 audit(1425.068:9708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3195 comm="syz.1.10101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f992afd3bd9 code=0x7ffc0000 [ 1500.396486][ T24] audit: type=1326 audit(1425.068:9709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3195 comm="syz.1.10101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f992afd3bd9 code=0x7ffc0000 [ 1500.420770][ T24] audit: type=1326 audit(1425.068:9710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3195 comm="syz.1.10101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f992afd3bd9 code=0x7ffc0000 [ 1500.443775][ T24] audit: type=1326 audit(1425.068:9711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3195 comm="syz.1.10101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f992afd3bd9 code=0x7ffc0000 [ 1500.675243][T27027] usbhid 4-1:0.0: can't add hid device: -71 [ 1500.681122][T27027] usbhid: probe of 4-1:0.0 failed with error -71 [ 1500.688273][T27027] usb 4-1: USB disconnect, device number 66 [ 1500.817625][T26998] usb 1-1: USB disconnect, device number 45 [ 1501.139062][ T3231] bridge0: port 1(bridge_slave_0) entered blocking state [ 1501.146207][ T3231] bridge0: port 1(bridge_slave_0) entered disabled state [ 1501.153385][ T3231] device bridge_slave_0 entered promiscuous mode [ 1501.160421][ T3231] bridge0: port 2(bridge_slave_1) entered blocking state [ 1501.167289][ T3231] bridge0: port 2(bridge_slave_1) entered disabled state [ 1501.174404][ T3231] device bridge_slave_1 entered promiscuous mode [ 1501.209405][T26998] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1501.223292][ T3231] bridge0: port 2(bridge_slave_1) entered blocking state [ 1501.230123][ T3231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1501.237294][ T3231] bridge0: port 1(bridge_slave_0) entered blocking state [ 1501.244134][ T3231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1501.267324][T22818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1501.274853][T22818] bridge0: port 1(bridge_slave_0) entered disabled state [ 1501.281914][T22818] bridge0: port 2(bridge_slave_1) entered disabled state [ 1501.291494][T27031] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1501.299632][T27031] bridge0: port 1(bridge_slave_0) entered blocking state [ 1501.306489][T27031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1501.317085][T22818] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1501.325171][T22818] bridge0: port 2(bridge_slave_1) entered blocking state [ 1501.332033][T22818] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1501.349220][T26571] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1501.356962][T26571] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1501.373933][ T3231] device veth0_vlan entered promiscuous mode [ 1501.381634][T22818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1501.389821][T22818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1501.398346][T22818] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1501.405759][T22818] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1501.420757][ T3231] device veth1_macvtap entered promiscuous mode [ 1501.428141][T26571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1501.442764][T27027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1501.451393][T27027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1501.552378][T23363] device bridge_slave_1 left promiscuous mode [ 1501.558459][T23363] bridge0: port 2(bridge_slave_1) entered disabled state [ 1501.569270][T23363] device bridge_slave_0 left promiscuous mode [ 1501.580245][T23363] bridge0: port 1(bridge_slave_0) entered disabled state [ 1501.590540][T23363] device veth1_macvtap left promiscuous mode [ 1501.596771][T23363] device veth0_vlan left promiscuous mode [ 1501.608134][T26998] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1501.626298][T26998] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1501.636191][T26998] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1501.649547][T26998] usb 1-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice= 0.00 [ 1501.679571][T26998] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1501.688877][T26998] usb 1-1: config 0 descriptor?? [ 1502.153849][T27031] usb 2-1: USB disconnect, device number 75 [ 1502.709413][ T3268] udc-core: couldn't find an available UDC or it's busy [ 1502.716808][ T3268] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1504.108887][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 1504.116309][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 1504.123910][ T3301] device bridge_slave_0 entered promiscuous mode [ 1504.136018][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 1504.144206][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 1504.151329][T26998] usbhid 1-1:0.0: can't add hid device: -71 [ 1504.152801][ T3301] device bridge_slave_1 entered promiscuous mode [ 1504.157119][T26998] usbhid: probe of 1-1:0.0 failed with error -71 [ 1504.253137][T26998] usb 1-1: USB disconnect, device number 46 [ 1504.803984][ T3323] udc-core: couldn't find an available UDC or it's busy [ 1504.837957][ T3323] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1504.840433][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 1504.852180][ T3301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1504.859508][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 1504.866370][ T3301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1504.914624][T22852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1504.924431][T22852] bridge0: port 1(bridge_slave_0) entered disabled state [ 1504.932122][T22852] bridge0: port 2(bridge_slave_1) entered disabled state [ 1504.947708][T26998] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1504.956398][T26998] bridge0: port 1(bridge_slave_0) entered blocking state [ 1504.963262][T26998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1504.978814][T22852] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1504.987353][T22852] bridge0: port 2(bridge_slave_1) entered blocking state [ 1504.994209][T22852] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1505.008313][T22818] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1505.022992][T26998] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1505.040720][T22818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1505.060452][T26998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1505.069143][T26998] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1505.076416][T26998] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1505.086055][ T3301] device veth0_vlan entered promiscuous mode [ 1505.102479][ T3301] device veth1_macvtap entered promiscuous mode [ 1505.135214][T26998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1505.141244][ T3332] syz.3.10139[3332] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1505.149143][ T3333] syz.3.10139[3333] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1505.153255][ T3332] syz.3.10139[3332] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1505.160556][ T3333] syz.3.10139[3333] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1505.187553][T27027] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1505.207249][T27027] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1505.215436][T27027] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1505.224350][T27027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1505.376571][T22852] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1505.385075][T23363] device bridge_slave_1 left promiscuous mode [ 1505.391295][T23363] bridge0: port 2(bridge_slave_1) entered disabled state [ 1505.398978][T23363] device bridge_slave_0 left promiscuous mode [ 1505.404912][T23363] bridge0: port 1(bridge_slave_0) entered disabled state [ 1505.413147][T23363] device veth1_macvtap left promiscuous mode [ 1505.418970][T23363] device veth0_vlan left promiscuous mode [ 1505.440945][T22803] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1505.590331][T27027] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1505.985734][T27027] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1505.996656][T27027] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1506.006243][T27027] usb 4-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 1506.007128][T22852] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 1506.015638][T27027] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1506.026152][T22803] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1506.034963][T27027] usb 4-1: config 0 descriptor?? [ 1506.060369][T22803] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1506.069923][T22803] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1506.082832][T22852] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 1506.094094][T22852] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1506.102929][T22852] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1506.111036][T22803] usb 1-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 1506.120456][T22803] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1506.130080][T22803] usb 1-1: config 0 descriptor?? [ 1506.156649][ T3329] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1506.306896][ T3353] netlink: 'syz.3.10142': attribute type 7 has an invalid length. [ 1506.314628][ T3353] netlink: 'syz.3.10142': attribute type 8 has an invalid length. [ 1506.378389][T27027] a4tech 0003:09DA:022B.0125: unknown main item tag 0x0 [ 1506.397833][T22818] hid-generic 0000:0000:0000.0126: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1506.457566][T27027] a4tech 0003:09DA:022B.0125: hidraw1: USB HID v0.00 Device [HID 09da:022b] on usb-dummy_hcd.3-1/input0 [ 1506.618210][ T3359] overlayfs: failed to resolve './file1': -2 [ 1506.760667][T27027] usb 4-1: USB disconnect, device number 67 [ 1506.812582][T22852] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 1506.838807][T22852] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input141 [ 1506.849837][T22852] usb 2-1: USB disconnect, device number 76 [ 1507.674920][T27027] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1507.962297][T27027] usb 4-1: Using ep0 maxpacket: 16 [ 1508.090601][T27027] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 1508.099466][T27027] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 1508.108897][T27027] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 1508.118366][T27027] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1508.127888][T27027] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 1508.137417][T27027] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1508.143876][T27027] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1508.152698][T27027] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1508.197873][T27027] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 1508.625058][T22803] usbhid 1-1:0.0: can't add hid device: -71 [ 1508.631328][T22803] usbhid: probe of 1-1:0.0 failed with error -71 [ 1508.641419][T22803] usb 1-1: USB disconnect, device number 47 [ 1508.797200][T27027] scsi host1: usb-storage 4-1:1.0 [ 1509.663058][ T3406] netlink: 'syz.0.10158': attribute type 1 has an invalid length. [ 1509.672586][ T3406] netlink: 216 bytes leftover after parsing attributes in process `syz.0.10158'. [ 1509.681852][ T3406] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10158'. [ 1509.961007][T27009] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 1510.552327][ T3425] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10164'. [ 1510.696802][ T3442] 9pnet: p9_errstr2errno: server reported unknown error @hQItekKzExBAblpΆvx*D}ْ;5ǖ3OŲ"`Ͷ [ 1510.843883][ T24] kauditd_printk_skb: 38 callbacks suppressed [ 1510.843894][ T24] audit: type=1400 audit(1435.007:9750): avc: denied { read } for pid=3448 comm="syz.1.10172" name="/" dev="configfs" ino=13387 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1510.872688][ T24] audit: type=1400 audit(1435.007:9751): avc: denied { open } for pid=3448 comm="syz.1.10172" path="/172/file0" dev="configfs" ino=13387 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1510.895094][ T24] audit: type=1400 audit(1435.007:9752): avc: denied { relabelfrom } for pid=3448 comm="syz.1.10172" name="NETLINK" dev="sockfs" ino=175885 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1510.919150][ T24] audit: type=1400 audit(1435.007:9753): avc: denied { relabelto } for pid=3448 comm="syz.1.10172" name="NETLINK" dev="sockfs" ino=175885 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 1510.954052][T26571] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1510.997030][ T3455] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 1511.306679][T27027] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1511.392219][T26571] usb 1-1: config 0 has an invalid interface number: 204 but max is 1 [ 1511.400223][T26571] usb 1-1: config 0 has no interface number 1 [ 1511.446370][T22803] usb 4-1: USB disconnect, device number 68 [ 1511.456406][ T3388] sddr09: could not read card info [ 1511.461462][T31715] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 1511.468687][T31715] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 1511.474409][T31715] sd 1:0:0:0: [sdb] Write Protect is off [ 1511.479961][T31715] sd 1:0:0:0: [sdb] Asking for cache data failed [ 1511.486118][T31715] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 1511.496078][T31715] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 1511.511443][ T3462] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 1511.584548][T26571] usb 1-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf [ 1511.593443][T26571] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1511.601781][T26571] usb 1-1: Product: syz [ 1511.605752][T26571] usb 1-1: Manufacturer: syz [ 1511.605941][T27027] usb 2-1: too many configurations: 65, using maximum allowed: 8 [ 1511.610165][T26571] usb 1-1: SerialNumber: syz [ 1511.610843][T26571] usb 1-1: config 0 descriptor?? [ 1511.628914][ T3469] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 1511.639985][ T3469] EXT4-fs (loop3): barriers disabled [ 1511.645165][ T3469] JBD2: no valid journal superblock found [ 1511.650798][ T3469] EXT4-fs (loop3): error loading journal [ 1511.660316][T26571] snd-usb-audio: probe of 1-1:0.204 failed with error -22 [ 1511.702086][T27027] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 1511.755057][ T3474] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3474 comm=syz.3.10180 [ 1511.768294][ T3474] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10180'. [ 1511.787543][T27027] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 1511.875805][ T3480] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x38db593b, utbl_chksum : 0xe619d30d) [ 1511.886642][T22803] usb 1-1: USB disconnect, device number 48 [ 1511.887718][T27027] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 1511.979879][T27027] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 1512.151202][T27027] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 1512.257677][T27027] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 1512.343191][T27027] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 1512.428671][T27027] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 1512.438973][T27027] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 1512.448095][T27027] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1514.158141][T26571] usb 2-1: USB disconnect, device number 77 [ 1514.269917][ T3497] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10186'. [ 1515.078460][T26571] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1515.226319][ T3511] Unknown ioctl 35085 [ 1515.388392][T26571] usb 2-1: too many configurations: 160, using maximum allowed: 8 [ 1515.473788][T27021] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1515.527278][T26571] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1515.534691][T26571] usb 2-1: can't read configurations, error -61 [ 1515.719548][T26571] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1515.858521][T27021] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 1515.869604][T27021] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 1515.880656][T27021] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1515.889406][T27021] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1515.911980][ T3507] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1516.040842][T26571] usb 2-1: too many configurations: 160, using maximum allowed: 8 [ 1516.108492][ T3518] udc-core: couldn't find an available UDC or it's busy [ 1516.115765][ T3518] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1516.124053][ T3518] netlink: 652 bytes leftover after parsing attributes in process `syz.2.10194'. [ 1516.134748][ T3518] udc-core: couldn't find an available UDC or it's busy [ 1516.141711][ T3518] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1516.170493][ T3518] fuse: Bad value for 'fd' [ 1516.175980][ T24] audit: type=1400 audit(1439.995:9754): avc: denied { create } for pid=3517 comm="syz.2.10194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1516.195109][T26571] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1516.202626][T26571] usb 2-1: can't read configurations, error -61 [ 1516.219583][T26571] usb usb2-port1: attempt power cycle [ 1516.227186][ T3523] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1516.234438][ T3523] EXT4-fs (loop3): 1 orphan inode deleted [ 1516.240472][ T3523] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 1516.377330][ T3529] overlayfs: failed to resolve './file1': -2 [ 1516.403731][T27021] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 1516.420474][T27021] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input142 [ 1516.476971][T27021] usb 1-1: USB disconnect, device number 49 [ 1516.488827][ C1] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1516.596828][ T3533] EXT4-fs warning (device loop3): read_mmp_block:115: Error -117 while reading MMP block 64 [ 1516.702679][ T3536] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 1516.846499][T26571] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1517.140234][ T3544] bridge0: port 1(bridge_slave_0) entered blocking state [ 1517.148508][T26571] usb 2-1: too many configurations: 160, using maximum allowed: 8 [ 1517.156374][ T3544] bridge0: port 1(bridge_slave_0) entered disabled state [ 1517.163769][ T3544] device bridge_slave_0 entered promiscuous mode [ 1517.170791][ T3544] bridge0: port 2(bridge_slave_1) entered blocking state [ 1517.177850][ T3544] bridge0: port 2(bridge_slave_1) entered disabled state [ 1517.185104][ T3544] device bridge_slave_1 entered promiscuous mode [ 1517.523677][ T3544] bridge0: port 2(bridge_slave_1) entered blocking state [ 1517.530538][ T3544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1517.537672][ T3544] bridge0: port 1(bridge_slave_0) entered blocking state [ 1517.544408][ T3544] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1517.573257][T27021] bridge0: port 1(bridge_slave_0) entered disabled state [ 1517.581769][T27021] bridge0: port 2(bridge_slave_1) entered disabled state [ 1517.589156][T27021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1517.589646][T26571] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1517.596933][T27021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1517.609157][T26571] usb 2-1: can't read configurations, error -71 [ 1517.656277][T27027] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1517.667792][T27027] bridge0: port 1(bridge_slave_0) entered blocking state [ 1517.674646][T27027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1517.730759][T27027] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1517.741241][T27027] bridge0: port 2(bridge_slave_1) entered blocking state [ 1517.748069][T27027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1517.817077][T27009] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1517.824963][T27009] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1517.838131][T27009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1517.850310][T22812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1517.859586][T22812] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1517.866964][T22812] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1517.876085][ T3544] device veth0_vlan entered promiscuous mode [ 1517.899094][T22812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1517.909016][ T3544] device veth1_macvtap entered promiscuous mode [ 1517.926626][T27009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1517.938304][T22812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1518.113607][ T2413] device bridge_slave_1 left promiscuous mode [ 1518.119631][ T2413] bridge0: port 2(bridge_slave_1) entered disabled state [ 1518.129904][ T2413] device bridge_slave_0 left promiscuous mode [ 1518.136763][ T2413] bridge0: port 1(bridge_slave_0) entered disabled state [ 1518.148771][T26571] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1518.158858][ T2413] device veth1_macvtap left promiscuous mode [ 1518.165075][ T2413] device veth0_vlan left promiscuous mode [ 1518.297626][T22812] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1518.476351][T26571] usb 2-1: Using ep0 maxpacket: 32 [ 1518.625950][T26571] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1518.635620][T26571] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1518.743421][T27027] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1518.807739][T26571] usb 2-1: New USB device found, idVendor=0b54, idProduct=62a0, bcdDevice=a0.56 [ 1518.816697][T26571] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1518.824468][T26571] usb 2-1: Product: syz [ 1518.828474][T26571] usb 2-1: Manufacturer: syz [ 1518.832910][T26571] usb 2-1: SerialNumber: syz [ 1518.845902][T26571] usb 2-1: config 0 descriptor?? [ 1518.850950][T22812] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 216, changing to 11 [ 1518.856983][ T3577] bridge0: port 3(vlan2) entered blocking state [ 1518.862124][T22812] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24840, setting to 1024 [ 1518.868243][ T3577] bridge0: port 3(vlan2) entered disabled state [ 1518.879095][T22812] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1518.879108][T22812] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1518.893881][T22812] usb 5-1: config 0 descriptor?? [ 1518.913149][ T3578] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10212'. [ 1518.968335][ T3582] netlink: 220 bytes leftover after parsing attributes in process `syz.3.10214'. [ 1518.977385][ T3582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10214'. [ 1518.987889][ T3582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10214'. [ 1519.022483][ T3587] 9pnet: Insufficient options for proto=fd [ 1519.063911][T27027] usb 1-1: device descriptor read/64, error -71 [ 1519.123947][ T3562] udc-core: couldn't find an available UDC or it's busy [ 1519.130881][ T3562] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1519.140463][T22852] usb 2-1: USB disconnect, device number 81 [ 1519.468664][ T3607] fuse: Bad value for 'fd' [ 1519.480747][T27027] usb 1-1: device descriptor read/64, error -71 [ 1519.534135][T22812] usbhid 5-1:0.0: can't add hid device: -71 [ 1519.539959][T22812] usbhid: probe of 5-1:0.0 failed with error -71 [ 1519.547346][T22812] usb 5-1: USB disconnect, device number 65 [ 1519.801007][T27027] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1520.163176][T22812] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1520.378222][T27027] usb 1-1: device descriptor read/64, error -71 [ 1520.571267][T22812] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1520.762901][T22812] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1520.771742][T22812] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1520.784189][T22812] usb 5-1: Product: syz [ 1520.788236][T22812] usb 5-1: Manufacturer: syz [ 1520.792666][T22812] usb 5-1: SerialNumber: syz [ 1520.826992][T27027] usb 1-1: device descriptor read/64, error -71 [ 1520.901845][ T3639] 9pnet: Insufficient options for proto=fd [ 1520.956612][T27027] usb usb1-port1: attempt power cycle [ 1521.190171][ T3642] netlink: 104 bytes leftover after parsing attributes in process `syz.2.10232'. [ 1521.252264][ T3644] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10233'. [ 1521.268130][ T3646] netlink: 236 bytes leftover after parsing attributes in process `syz.3.10234'. [ 1521.277594][ T3646] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10234'. [ 1521.286775][ T3646] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10234'. [ 1521.403910][T27027] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1521.633914][T27027] usb 1-1: device descriptor read/8, error -71 [ 1521.927655][T27027] usb 1-1: device descriptor read/8, error -71 [ 1522.046306][ T3661] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=6 sclass=netlink_xfrm_socket pid=3661 comm=syz.0.10238 [ 1522.100145][ T3662] __nla_validate_parse: 1 callbacks suppressed [ 1522.100202][ T3662] netlink: 104 bytes leftover after parsing attributes in process `syz.1.10237'. [ 1522.452639][ T3609] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 1522.750270][T22812] cdc_ncm 5-1:1.0: bind() failure [ 1522.771876][T22812] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 1522.793030][T22812] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 1522.809874][T22812] usb 5-1: USB disconnect, device number 66 [ 1523.488155][ T3696] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 1523.527575][ T3696] EXT4-fs error (device loop4): __ext4_iget:4958: inode #11: block 1: comm syz.4.10248: invalid block [ 1523.573741][ T3696] EXT4-fs (loop4): Remounting filesystem read-only [ 1523.585232][ T3696] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.10248: couldn't read orphan inode 11 (err -117) [ 1523.616012][ T3696] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,errors=continue,max_dir_size_kb=0x0000000000000009,data_err=abort,errors=remount-ro,noinit_itable,mblk_io_submit,i_version,acl, [ 1523.656661][ T3700] udc-core: couldn't find an available UDC or it's busy [ 1523.743850][ T3700] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1523.942689][ T3705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10249'. [ 1523.978210][ T3705] device veth2 entered promiscuous mode [ 1524.669790][ T3727] syz.0.10257[3727] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1524.669858][ T3727] syz.0.10257[3727] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1524.814958][T27031] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1525.608628][ T3742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10261'. [ 1525.678396][T27031] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1525.726917][T27031] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 1525.812187][ T3749] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.10263: bg 0: block 248: padding at end of block bitmap is not set [ 1525.826822][ T3749] Quota error (device loop4): write_blk: dquota write failed [ 1525.834142][ T3749] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1525.844652][ T3749] EXT4-fs error (device loop4): ext4_acquire_dquot:6219: comm syz.4.10263: Failed to acquire dquot type 1 [ 1525.856764][ T3749] EXT4-fs (loop4): 1 truncate cleaned up [ 1525.862439][ T3749] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,noload,,errors=continue [ 1525.923707][T27031] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1525.946787][T27031] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1525.990478][T27031] usb 4-1: Product: syz [ 1525.994733][T27031] usb 4-1: Manufacturer: syz [ 1525.999526][T27031] usb 4-1: SerialNumber: syz [ 1526.071612][ T3769] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3769 comm=syz.2.10270 [ 1526.169433][T26571] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1526.810562][T26571] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1526.821436][T26571] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1526.831033][T26571] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1526.840027][T26571] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1526.848650][T26571] usb 2-1: config 0 descriptor?? [ 1526.962670][ T3785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10276'. [ 1527.116658][ T3789] udc-core: couldn't find an available UDC or it's busy [ 1527.123537][ T3789] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1527.238162][ T3791] loop4: p3 < > p4 < > [ 1527.242204][ T3791] loop4: partition table partially beyond EOD, truncated [ 1527.249284][ T3791] loop4: p3 start 4284289 is beyond EOD, truncated [ 1527.337843][ T3754] udc-core: couldn't find an available UDC or it's busy [ 1527.345079][ T3754] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1527.367092][T26571] hid-multitouch 0003:1FD2:6007.0127: unknown main item tag 0x0 [ 1527.368890][ T3712] erofs: (device loop3): mounted with root inode @ nid 36. [ 1527.375687][T26571] hid-multitouch 0003:1FD2:6007.0127: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 1527.421103][ T3712] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -1027 in[4096, 0] out[4096] [ 1527.451631][T27031] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1527.457971][T27031] cdc_ncm 4-1:1.0: dwNtbInMaxSize=3 is too small. Using 2048 [ 1527.465144][T27031] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 1527.583229][T26571] usb 2-1: USB disconnect, device number 82 [ 1527.669986][ T24] audit: type=1400 audit(1450.758:9755): avc: denied { bind } for pid=3711 comm="syz.3.10252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1527.716711][T27031] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM, 42:42:42:42:42:42 [ 1527.743230][T27031] usb 4-1: USB disconnect, device number 69 [ 1527.762467][T27031] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM [ 1528.402523][ T3814] tipc: Started in network mode [ 1528.407218][ T3814] tipc: Own node identity 00000000000000000000000000000001, cluster identity 4711 [ 1528.416359][ T3814] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 1528.424400][ T3814] tipc: Enabled bearer , priority 10 [ 1528.498716][T27031] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1528.765874][T27031] usb 2-1: Using ep0 maxpacket: 16 [ 1528.810621][ T24] audit: type=1400 audit(1451.825:9756): avc: denied { append } for pid=3823 comm="syz.0.10287" path="socket:[178249]" dev="sockfs" ino=178249 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1528.854441][ T3829] bridge0: port 1(bridge_slave_0) entered disabled state [ 1528.867250][ T3829] device bridge_slave_0 left promiscuous mode [ 1528.873444][ T3829] bridge0: port 1(bridge_slave_0) entered disabled state [ 1528.881587][ T3831] all: renamed from team_slave_0 [ 1528.894152][T27031] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 1528.903023][T27031] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 1528.912860][T27031] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 1528.922658][T27031] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1528.932806][T27031] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 1528.932915][ T24] audit: type=1326 audit(1451.937:9757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3832 comm="syz.0.10290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f882f8c1bd9 code=0x7ffc0000 [ 1528.942631][T27031] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1528.972124][T27031] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1528.982087][T27031] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1528.986544][ T24] audit: type=1326 audit(1451.975:9758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3832 comm="syz.0.10290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f882f8c1bd9 code=0x7ffc0000 [ 1529.013035][ T24] audit: type=1326 audit(1451.984:9759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3832 comm="syz.0.10290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7f882f8c1bd9 code=0x7ffc0000 [ 1529.036626][ T24] audit: type=1326 audit(1451.984:9760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3832 comm="syz.0.10290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f882f8c1bd9 code=0x7ffc0000 [ 1529.036697][T27031] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 1529.059608][ T24] audit: type=1326 audit(1451.984:9761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3832 comm="syz.0.10290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f882f8c1bd9 code=0x7ffc0000 [ 1529.068524][ T3835] EXT4-fs (loop4): Ignoring removed orlov option [ 1529.096226][ T3835] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1529.121638][ T3835] EXT4-fs (loop4): mounted filesystem without journal. Opts: orlov,noquota,barrier=0x0000000000000002,jqfmt=vfsv1,block_validity,dioread_nolock,noquota,min_batch_time=0x0000000000000008,delalloc,user_xattr,quota,,errors=continue [ 1529.257895][T27031] scsi host1: usb-storage 2-1:1.0 [ 1529.370479][ T3850] 9pnet: Insufficient options for proto=fd [ 1529.406923][T27021] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1529.530116][T27031] usb 2-1: USB disconnect, device number 83 [ 1529.550246][T22816] tipc: 32-bit node address hash set to 1000000 [ 1529.591237][ T3858] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18c08, utbl_chksum : 0xe619d30d) [ 1529.823684][T27021] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1529.834541][T27021] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 1530.016064][T27021] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1530.025004][T27021] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1530.032928][T27021] usb 1-1: Product: syz [ 1530.036881][T27021] usb 1-1: Manufacturer: syz [ 1530.041339][T27021] usb 1-1: SerialNumber: syz [ 1530.110413][ T3865] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3865 comm=syz.1.10299 [ 1530.251014][T26998] usb 5-1: new full-speed USB device number 67 using dummy_hcd [ 1530.307750][ T3880] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1530.678621][T26998] usb 5-1: not running at top speed; connect to a high speed hub [ 1530.763894][T26998] usb 5-1: config 2 has an invalid interface number: 76 but max is 1 [ 1530.771838][T26998] usb 5-1: config 2 has an invalid interface number: 198 but max is 1 [ 1530.780354][T26998] usb 5-1: config 2 has an invalid descriptor of length 36, skipping remainder of the config [ 1530.790479][T26998] usb 5-1: config 2 has no interface number 0 [ 1530.796428][T26998] usb 5-1: config 2 has no interface number 1 [ 1530.802400][T26998] usb 5-1: config 2 interface 76 altsetting 9 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 1530.813176][T26998] usb 5-1: config 2 interface 76 altsetting 9 has a duplicate endpoint with address 0x4, skipping [ 1530.823612][T26998] usb 5-1: config 2 interface 76 altsetting 9 has a duplicate endpoint with address 0x7, skipping [ 1530.834216][T26998] usb 5-1: config 2 interface 76 altsetting 9 has a duplicate endpoint with address 0x3, skipping [ 1530.844664][T26998] usb 5-1: config 2 interface 76 altsetting 9 has a duplicate endpoint with address 0x3, skipping [ 1530.855163][T26998] usb 5-1: config 2 interface 76 altsetting 9 has a duplicate endpoint with address 0x7, skipping [ 1530.865674][T26998] usb 5-1: config 2 interface 198 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1530.878505][T26998] usb 5-1: config 2 interface 76 has no altsetting 0 [ 1530.885014][T26998] usb 5-1: config 2 interface 198 has no altsetting 0 [ 1531.052853][T26998] usb 5-1: New USB device found, idVendor=12d1, idProduct=c457, bcdDevice=98.6a [ 1531.062364][T26998] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1531.070447][T26998] usb 5-1: Product: င [ 1531.127216][T26998] usb 5-1: Manufacturer: М [ 1531.131545][T26998] usb 5-1: SerialNumber: ࠾ [ 1531.234879][ T3894] netlink: 220 bytes leftover after parsing attributes in process `syz.1.10306'. [ 1531.490530][T27021] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1531.497932][T27021] cdc_ncm 1-1:1.0: dwNtbInMaxSize=3 is too small. Using 2048 [ 1531.508586][T27021] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 1531.727169][T27021] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 1531.737326][T26998] usb 5-1: USB disconnect, device number 67 [ 1531.745415][T27021] usb 1-1: USB disconnect, device number 54 [ 1531.751474][T27021] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM [ 1532.110935][ T3907] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1532.117542][ T3907] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 1532.126425][ T3907] EXT4-fs (loop3): 1 truncate cleaned up [ 1532.132018][ T3907] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,nojournal_checksum,barrier,barrier,test_dummy_encryption,nomblk_io_submit,,errors=continue [ 1532.276733][ T3913] EXT4-fs warning (device loop4): dx_probe:844: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1532.288104][ T3913] EXT4-fs warning (device loop4): dx_probe:847: Enable large directory feature to access it [ 1532.298363][ T3913] EXT4-fs warning (device loop4): dx_probe:945: inode #2: comm syz.4.10314: Corrupt directory, running e2fsck is recommended [ 1532.311938][ T3913] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 1532.320304][ T3913] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2204: inode #15: comm syz.4.10314: corrupted in-inode xattr [ 1532.332703][ T3913] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.10314: couldn't read orphan inode 15 (err -117) [ 1532.344937][ T3913] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,abort,init_itable,stripe=0x00000000000001f5,grpjquota=.nouid32,nolazytime,jqfmt=vfsv1,grpid,,,errors=continue [ 1532.375593][ T3921] netlink: 'syz.3.10313': attribute type 4 has an invalid length. [ 1532.443602][ T24] audit: type=1400 audit(1455.222:9762): avc: denied { block_suspend } for pid=3912 comm="syz.4.10314" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1532.503002][ T3913] EXT4-fs error (device loop4): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 1532.614280][T27021] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1532.890302][T27021] usb 1-1: Using ep0 maxpacket: 16 [ 1532.892391][ T3936] EXT4-fs error (device loop4): ext4_ext_check_inode:500: inode #4: comm syz.4.10320: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 1532.913412][ T3936] EXT4-fs error (device loop4): ext4_quota_enable:6426: comm syz.4.10320: Bad quota inode: 4, type: 1 [ 1532.924626][ T3936] EXT4-fs warning (device loop4): ext4_enable_quotas:6467: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1532.940796][ T3936] EXT4-fs (loop4): mount failed [ 1533.018457][T27021] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1533.029272][T27021] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 1533.038880][T27021] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1533.115979][ T3947] udc-core: couldn't find an available UDC or it's busy [ 1533.122825][ T3947] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1533.136547][T27021] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1533.145859][T27021] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1533.153795][T27021] usb 1-1: SerialNumber: syz [ 1533.264729][ T3919] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1533.288222][T27021] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 1533.328031][T26998] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1533.370719][T27021] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 1533.403100][T27031] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1533.563351][ T3957] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10324'. [ 1533.755794][T26998] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1533.766611][T26998] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1533.776176][T26998] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1533.785125][T26998] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1533.793635][T26998] usb 2-1: config 0 descriptor?? [ 1534.098780][T27021] usb 1-1: USB disconnect, device number 55 [ 1534.538318][ T3942] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10321'. [ 1535.063082][ T3977] fuse: Bad value for 'fd' [ 1535.424509][ T3998] EXT4-fs warning (device loop4): dx_probe:844: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1535.435926][ T3998] EXT4-fs warning (device loop4): dx_probe:847: Enable large directory feature to access it [ 1535.445907][ T3998] EXT4-fs warning (device loop4): dx_probe:945: inode #2: comm syz.4.10335: Corrupt directory, running e2fsck is recommended [ 1535.458918][ T3998] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 1535.468101][ T3998] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2204: inode #15: comm syz.4.10335: corrupted in-inode xattr [ 1535.481730][ T3998] EXT4-fs (loop4): Remounting filesystem read-only [ 1535.489106][ T3998] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.10335: couldn't read orphan inode 15 (err -117) [ 1535.502498][ T3998] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,abort,init_itable,auto_da_alloc,grpjquota=.norecovery,errors=remount-ro,jqfmt=vfsv1,grpid,, [ 1535.604103][T27021] Bluetooth: hci0: command 0x1003 tx timeout [ 1535.610215][ T3955] Bluetooth: hci0: sending frame failed (-49) [ 1536.124020][T26998] usb 2-1: USB disconnect, device number 84 [ 1536.512742][ T4020] 9pnet: Insufficient options for proto=fd [ 1537.320165][ T4048] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0003 with DS=0x1 [ 1537.330278][ T4048] udc-core: couldn't find an available UDC or it's busy [ 1537.337363][ T4048] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1537.979938][T26998] Bluetooth: hci0: command 0x1001 tx timeout [ 1538.007304][ T3955] Bluetooth: hci0: sending frame failed (-49) [ 1538.325320][ T4063] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4063 comm=syz.0.10353 [ 1538.467751][T27021] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1538.734821][T27021] usb 5-1: Using ep0 maxpacket: 16 [ 1538.948602][T27021] usb 5-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 1538.957186][T27031] usb 4-1: device descriptor read/64, error -110 [ 1538.963349][T27021] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1538.972042][T27021] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA6, skipping [ 1538.982316][T27021] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 1538.993037][T27021] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 1539.003611][T27021] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1065, setting to 64 [ 1539.014291][T27021] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 1539.024616][T27021] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1539.034867][T27021] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 1539.045172][T27021] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1539.055431][T27021] usb 5-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 1539.214184][ T24] audit: type=1400 audit(1461.559:9763): avc: denied { getattr } for pid=4085 comm="syz.1.10358" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1539.235861][T27021] usb 5-1: New USB device found, idVendor=10a0, idProduct=e1fb, bcdDevice=70.eb [ 1539.245345][T27021] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1539.253309][T27021] usb 5-1: Product: ᰉ [ 1539.257340][T27021] usb 5-1: Manufacturer: ʬ鉍迤냙େ숤໐軈⁢䢰繛螦枢藮䒮㈩猭乫횷䢯뮷䩳辕㝠滣톆䞣쐀祴 [ 1539.293836][T27021] usb 5-1: SerialNumber: ဌꌮ裕瘯䣪Თꪍ⹎止뾶攷볚ጁ鳎祦窚蔃 [ 1539.305082][T27021] usb 5-1: config 0 descriptor?? [ 1539.311758][T27031] usb 4-1: device descriptor read/64, error -32 [ 1539.613317][T27031] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1540.059708][T27031] usb 4-1: device descriptor read/64, error -32 [ 1540.198603][T22816] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1540.219988][T26998] Bluetooth: hci0: command 0x1009 tx timeout [ 1540.433984][T27031] usb 4-1: device descriptor read/64, error -32 [ 1540.455016][T22816] usb 1-1: Using ep0 maxpacket: 32 [ 1540.562034][T27031] usb usb4-port1: attempt power cycle [ 1540.594066][T22816] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 7 [ 1540.604522][T22816] usb 1-1: can't read configurations, error -22 [ 1541.059165][T22816] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1541.149579][T27031] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1541.165518][ T4131] syz.2.10372[4131] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1541.165564][ T4131] syz.2.10372[4131] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1541.266877][ T4132] xt_hashlimit: max too large, truncated to 1048576 [ 1541.267160][T27031] usb 4-1: device descriptor read/8, error -32 [ 1541.341878][T22816] usb 1-1: Using ep0 maxpacket: 32 [ 1541.395399][T26571] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1541.460921][T27021] usb 5-1: USB disconnect, device number 68 [ 1541.491600][T22816] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 7 [ 1541.499912][T22816] usb 1-1: can't read configurations, error -22 [ 1541.506122][T22816] usb usb1-port1: attempt power cycle [ 1541.512875][T27031] usb 4-1: device descriptor read/8, error -32 [ 1541.683855][T26571] usb 2-1: Using ep0 maxpacket: 16 [ 1541.801402][T27031] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1541.822852][T26571] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 1541.831726][T26571] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 1541.833394][T27021] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1541.841320][T26571] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 1541.858112][T26571] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1541.867638][T26571] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 1541.877225][T26571] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1541.883646][T26571] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1541.892876][T26571] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1541.918941][T27031] usb 4-1: device descriptor read/8, error -32 [ 1541.940646][T26571] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 1541.961695][T22816] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1542.068608][T22816] usb 1-1: Using ep0 maxpacket: 32 [ 1542.087321][ T4141] udc-core: couldn't find an available UDC or it's busy [ 1542.094469][ T4141] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1542.103067][ T4141] udc-core: couldn't find an available UDC or it's busy [ 1542.109833][ T4141] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1542.143635][T27031] usb 4-1: device descriptor read/8, error -32 [ 1542.156983][ T24] audit: type=1400 audit(1464.319:9764): avc: denied { map } for pid=4128 comm="syz.1.10371" path="socket:[178894]" dev="sockfs" ino=178894 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1542.180189][ T24] audit: type=1400 audit(1464.319:9765): avc: denied { read } for pid=4128 comm="syz.1.10371" path="socket:[178894]" dev="sockfs" ino=178894 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1542.218169][T22816] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 7 [ 1542.226517][T22816] usb 1-1: can't read configurations, error -22 [ 1542.228816][T27021] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 4 [ 1542.242644][T27021] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1542.271660][T27031] usb usb4-port1: unable to enumerate USB device [ 1542.335716][T27021] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1542.344799][T27021] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1542.352659][T27021] usb 5-1: SerialNumber: syz [ 1542.378412][ T4135] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1542.399776][T22816] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1542.581453][T22816] usb 1-1: device descriptor read/8, error -71 [ 1542.829650][ T4151] udc-core: couldn't find an available UDC or it's busy [ 1542.836534][ T4151] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1542.868312][ T4149] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1542.944699][T22816] usb 1-1: device descriptor read/8, error -71 [ 1543.073039][T22816] usb usb1-port1: unable to enumerate USB device [ 1543.590056][ T4154] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10378'. [ 1543.618405][ T4149] EXT4-fs (loop4): unsupported inode size: 255 [ 1543.624451][ T4149] EXT4-fs (loop4): blocksize: 1024 [ 1544.199016][T23363] tipc: Disabling bearer [ 1544.204243][T23363] tipc: Left network mode [ 1544.216801][ T4159] bridge0: port 1(bridge_slave_0) entered blocking state [ 1544.223638][ T4159] bridge0: port 1(bridge_slave_0) entered disabled state [ 1544.230976][ T4159] device bridge_slave_0 entered promiscuous mode [ 1544.237996][ T4159] bridge0: port 2(bridge_slave_1) entered blocking state [ 1544.244819][ T4159] bridge0: port 2(bridge_slave_1) entered disabled state [ 1544.252128][ T4159] device bridge_slave_1 entered promiscuous mode [ 1544.293048][ T4159] bridge0: port 2(bridge_slave_1) entered blocking state [ 1544.299896][ T4159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1544.307124][ T4159] bridge0: port 1(bridge_slave_0) entered blocking state [ 1544.313870][ T4159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1544.351874][ T4166] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10381'. [ 1544.367342][T26571] ums-sddr09: probe of 2-1:1.0 failed with error -22 [ 1544.370674][T27031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1544.378731][T26571] usb 2-1: USB disconnect, device number 85 [ 1544.387168][T27031] bridge0: port 1(bridge_slave_0) entered disabled state [ 1544.394651][T27031] bridge0: port 2(bridge_slave_1) entered disabled state [ 1544.403678][ T4168] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10382'. [ 1544.466578][T27009] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1544.475123][T27009] bridge0: port 1(bridge_slave_0) entered blocking state [ 1544.482034][T27009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1544.489950][T27009] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1544.498195][T27009] bridge0: port 2(bridge_slave_1) entered blocking state [ 1544.505041][T27009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1544.512269][T27009] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1544.520125][T27009] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1544.589593][ T4176] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10385'. [ 1544.690763][T27009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1544.739687][T27009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1544.752186][T27009] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1544.759689][T27009] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1544.769299][ T4159] device veth0_vlan entered promiscuous mode [ 1544.780826][T22816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1544.790566][ T4159] device veth1_macvtap entered promiscuous mode [ 1544.802737][T27031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1544.816459][T22816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1545.038966][T26571] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1545.047114][T23363] device bridge_slave_1 left promiscuous mode [ 1545.053434][T23363] bridge0: port 2(bridge_slave_1) entered disabled state [ 1545.060877][T23363] device bridge_slave_0 left promiscuous mode [ 1545.066809][T23363] bridge0: port 1(bridge_slave_0) entered disabled state [ 1545.074666][T23363] device veth1_macvtap left promiscuous mode [ 1545.080508][T23363] device veth0_vlan left promiscuous mode [ 1545.124622][T27009] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1545.423529][T27009] usb 4-1: Using ep0 maxpacket: 8 [ 1545.552293][T27009] usb 4-1: config index 0 descriptor too short (expected 804, got 36) [ 1545.560506][T27009] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1545.572602][T27009] usb 4-1: config 0 has no interfaces? [ 1545.578995][T27009] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 1545.589397][T27009] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1545.618159][T27009] usb 4-1: config 0 descriptor?? [ 1545.652625][T26571] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1545.663463][T26571] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1545.673077][T26571] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1545.685731][T26571] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 1545.694609][T26571] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1545.702933][T26571] usb 2-1: config 0 descriptor?? [ 1546.075413][T26571] usbhid 2-1:0.0: can't add hid device: -71 [ 1546.083492][T26571] usbhid: probe of 2-1:0.0 failed with error -71 [ 1546.096468][T26571] usb 2-1: USB disconnect, device number 86 [ 1546.641619][T22803] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1546.962327][T27021] cdc_ether: probe of 5-1:1.0 failed with error -71 [ 1546.969839][T27021] usb 5-1: USB disconnect, device number 69 [ 1547.004782][ T24] audit: type=1326 audit(1468.849:9766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4213 comm="syz.2.10395" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f41525b9bd9 code=0x0 [ 1547.047754][T22803] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1547.057635][T22803] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1547.143898][T22803] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1547.154968][T22803] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1547.167142][T22803] usb 1-1: SerialNumber: syz [ 1547.433596][ T4210] netlink: 'syz.0.10393': attribute type 3 has an invalid length. [ 1547.454225][T22803] usb 1-1: 0:2 : does not exist [ 1547.459006][T22803] usb 1-1: unit 5 not found! [ 1547.480297][ T4220] netlink: 6 bytes leftover after parsing attributes in process `syz.4.10396'. [ 1547.774286][T27021] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1547.833002][ T4226] netlink: 'syz.2.10399': attribute type 12 has an invalid length. [ 1547.857418][ T4228] netlink: 64 bytes leftover after parsing attributes in process `syz.1.10400'. [ 1547.926650][ T4235] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4235 comm=syz.2.10403 [ 1548.030666][T27021] usb 5-1: Using ep0 maxpacket: 16 [ 1548.060566][T27031] usb 4-1: USB disconnect, device number 74 [ 1548.362237][T27021] usb 5-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 1548.372058][T27021] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1548.380887][T27021] usb 5-1: Product: syz [ 1548.386299][T27021] usb 5-1: Manufacturer: syz [ 1548.390980][T27021] usb 5-1: SerialNumber: syz [ 1548.402539][T27021] usb 5-1: config 0 descriptor?? [ 1548.789369][T27021] uvcvideo: Found UVC 0.00 device syz (045e:0721) [ 1548.795685][T27021] uvcvideo: No valid video chain found. [ 1548.802419][T27021] usb 5-1: USB disconnect, device number 70 [ 1549.388370][ T4275] FAT-fs (loop4): bogus logical sector size 65535 [ 1549.397015][ T4275] FAT-fs (loop4): Can't find a valid FAT filesystem [ 1549.560463][T22852] usb 1-1: USB disconnect, device number 60 [ 1549.772312][T27009] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1549.796806][ T24] audit: type=1400 audit(1471.468:9767): avc: denied { search } for pid=4301 comm="syz.0.10425" name="/" dev="configfs" ino=13387 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1549.847101][T26571] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1550.085662][ T4310] binder_alloc: 4303: binder_alloc_buf, no vma [ 1550.214783][ T4311] netlink: 'syz.2.10427': attribute type 4 has an invalid length. [ 1550.445533][T27009] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1550.456512][T27009] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1550.466069][T27009] usb 5-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 1550.475317][T27009] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1550.483219][T26571] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1550.495386][T27009] usb 5-1: config 0 descriptor?? [ 1550.692278][T26571] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1550.701508][T26571] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1550.709439][T26571] usb 4-1: Product: syz [ 1550.713459][T26571] usb 4-1: Manufacturer: syz [ 1550.717844][T26571] usb 4-1: SerialNumber: syz [ 1550.745874][ T4332] udc-core: couldn't find an available UDC or it's busy [ 1550.756414][ T4332] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1550.952031][ T4341] netlink: 'syz.0.10439': attribute type 30 has an invalid length. [ 1551.134327][ T4342] syz.1.10438[4342] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1551.134398][ T4342] syz.1.10438[4342] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1551.207696][ T4278] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10414'. [ 1551.397900][T27009] logitech-hidpp-device 0003:046D:C086.0129: hidraw0: USB HID v0.00 Device [HID 046d:c086] on usb-dummy_hcd.4-1/input0 [ 1551.611357][T22816] usb 5-1: USB disconnect, device number 71 [ 1551.973360][T27009] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1552.135848][ T4284] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 1552.155346][T27031] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1552.209302][ T4358] EXT4-fs (loop4): Ignoring removed nobh option [ 1552.215522][ T4358] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1552.228126][ T4358] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1552.229813][T27009] usb 1-1: Using ep0 maxpacket: 16 [ 1552.239757][ T4358] EXT4-fs (loop4): 1 truncate cleaned up [ 1552.248160][ T4358] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nobh,dioread_nolock,nodelalloc,init_itable=0x0000000000000004,acl,,errors=continue [ 1552.263616][T26571] cdc_ncm 4-1:1.0: bind() failure [ 1552.283491][T26571] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 1552.315838][T26571] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 1552.323113][T26571] usb 4-1: USB disconnect, device number 75 [ 1552.372805][ T3544] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /39/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1552.394535][ T3544] EXT4-fs error (device loop4): ext4_empty_dir:3069: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 1552.414681][ T3544] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /39/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1552.436291][ T3544] EXT4-fs error (device loop4): ext4_empty_dir:3069: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 1552.456106][ T3544] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /39/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1552.477741][ T3544] EXT4-fs error (device loop4): ext4_empty_dir:3069: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 1552.497792][ T3544] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /39/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1552.519213][ T3544] EXT4-fs error (device loop4): ext4_empty_dir:3069: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 1552.539259][ T3544] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /39/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 1552.539832][T27009] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=d8.08 [ 1552.560781][ T3544] EXT4-fs error (device loop4): ext4_empty_dir:3069: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 1552.569375][T27031] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1552.599373][T27009] usb 1-1: New USB device strings: Mfr=40, Product=98, SerialNumber=3 [ 1552.608334][T27009] usb 1-1: Product: syz [ 1552.612430][T27009] usb 1-1: Manufacturer: syz [ 1552.616921][T27031] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1552.626628][T27009] usb 1-1: SerialNumber: syz [ 1552.631582][T27031] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1552.640796][T27009] usb 1-1: config 0 descriptor?? [ 1552.645777][T27031] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1552.654416][T27031] usb 2-1: config 0 descriptor?? [ 1552.678995][T27009] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 1552.686559][T27009] usb 1-1: Detected FT-X [ 1552.837098][ T4365] bridge0: port 1(bridge_slave_0) entered blocking state [ 1552.844251][ T4365] bridge0: port 1(bridge_slave_0) entered disabled state [ 1552.851486][ T4365] device bridge_slave_0 entered promiscuous mode [ 1552.859848][ T4365] bridge0: port 2(bridge_slave_1) entered blocking state [ 1552.866921][ T4365] bridge0: port 2(bridge_slave_1) entered disabled state [ 1552.874285][ T4365] device bridge_slave_1 entered promiscuous mode [ 1552.957573][ T4370] netlink: 'syz.3.10447': attribute type 34 has an invalid length. [ 1552.985192][ T4372] udc-core: couldn't find an available UDC or it's busy [ 1552.992725][T27009] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1553.013267][ T4372] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1553.148788][T27009] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 1553.151502][ T4365] bridge0: port 2(bridge_slave_1) entered blocking state [ 1553.155945][T27009] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1553.162078][ T4365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1553.162173][ T4365] bridge0: port 1(bridge_slave_0) entered blocking state [ 1553.162190][ T4365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1553.172402][T27031] hid (null): bogus close delimiter [ 1553.197115][T27009] usb 1-1: USB disconnect, device number 61 [ 1553.203684][T27009] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1553.213813][T27009] ftdi_sio 1-1:0.0: device disconnected [ 1553.220087][T26571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1553.227698][T26571] bridge0: port 1(bridge_slave_0) entered disabled state [ 1553.235539][T26571] bridge0: port 2(bridge_slave_1) entered disabled state [ 1553.246162][T27021] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1553.254265][T27021] bridge0: port 1(bridge_slave_0) entered blocking state [ 1553.261108][T27021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1553.277668][T26571] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1553.285699][T26571] bridge0: port 2(bridge_slave_1) entered blocking state [ 1553.292541][T26571] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1553.300317][T26571] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1553.308185][T26571] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1553.325381][ T4365] device veth0_vlan entered promiscuous mode [ 1553.331661][T22852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1553.339769][T22852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1553.348295][T22852] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1553.356221][T22852] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1553.370260][T22852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1553.379387][ T4365] device veth1_macvtap entered promiscuous mode [ 1553.389505][T22852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1553.394512][T27031] usb 2-1: language id specifier not provided by device, defaulting to English [ 1553.413900][T22816] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1553.502159][ T2413] device bridge_slave_1 left promiscuous mode [ 1553.508152][ T2413] bridge0: port 2(bridge_slave_1) entered disabled state [ 1553.515795][ T2413] device veth1_macvtap left promiscuous mode [ 1553.586825][T27009] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1553.695598][ T4384] bridge0: port 3(vlan2) entered blocking state [ 1553.701658][ T4384] bridge0: port 3(vlan2) entered disabled state [ 1553.715037][T26998] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1553.740505][ T4384] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10452'. [ 1553.971721][T27009] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1553.982714][T26998] usb 5-1: Using ep0 maxpacket: 32 [ 1553.987780][T27009] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1553.997387][T27009] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1554.006305][T27009] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1554.014727][T27009] usb 1-1: config 0 descriptor?? [ 1554.088988][T22852] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1554.089084][T27031] uclogic 0003:256C:006D.012A: failed retrieving string descriptor #100: -71 [ 1554.105038][T27031] uclogic 0003:256C:006D.012A: failed retrieving pen parameters: -71 [ 1554.113097][T26998] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1554.125967][T27031] uclogic 0003:256C:006D.012A: failed probing pen v1 parameters: -71 [ 1554.133880][T26998] usb 5-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 1554.142714][T27031] uclogic 0003:256C:006D.012A: failed probing parameters: -71 [ 1554.150018][T27031] uclogic: probe of 0003:256C:006D.012A failed with error -71 [ 1554.157343][T26998] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1554.166404][T27031] usb 2-1: USB disconnect, device number 87 [ 1554.173338][T26998] usb 5-1: config 0 descriptor?? [ 1554.217779][T26998] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1554.445285][ T4397] 9pnet: Insufficient options for proto=fd [ 1554.527199][T22852] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1554.527360][T27009] hid (null): bogus close delimiter [ 1554.537223][T22852] usb 4-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 1554.551507][T22852] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1554.559974][T22852] usb 4-1: config 0 descriptor?? [ 1554.571485][ T4401] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,max_batch_time=0x0000000000000101,,errors=continue [ 1554.588862][ T4405] EXT4-fs error (device loop4): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1554.603412][T22852] rndis_host 4-1:0.0: skipping garbage [ 1554.608675][T22852] usb 4-1: bad CDC descriptors [ 1554.619761][ T2413] ------------[ cut here ]------------ [ 1554.625322][ T2413] kernel BUG at fs/ext4/inode.c:2749! [ 1554.630531][ T2413] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 1554.636399][ T2413] CPU: 0 PID: 2413 Comm: kworker/u4:5 Tainted: G W 5.10.218-syzkaller-00638-g3feee789f446 #0 [ 1554.647673][ T2413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1554.657577][ T2413] Workqueue: writeback wb_workfn (flush-7:4) [ 1554.663393][ T2413] RIP: 0010:ext4_writepages+0x3bdf/0x3c00 [ 1554.669121][ T2413] Code: 51 8c ff 31 ff 89 de e8 df 51 8c ff 45 84 f6 75 27 e8 45 4f 8c ff 49 be 00 00 00 00 00 fc ff df e9 0e f7 ff ff e8 31 4f 8c ff <0f> 0b e8 2a 4f 8c ff e8 11 24 22 ff eb 9b e8 1e 4f 8c ff e8 05 24 [ 1554.688576][ T2413] RSP: 0018:ffffc900013f70a0 EFLAGS: 00010293 [ 1554.694455][ T2413] RAX: ffffffff81de5b4f RBX: 0000008000000000 RCX: ffff8881214b4f00 [ 1554.702265][ T2413] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 1554.710079][ T2413] RBP: ffffc900013f7490 R08: ffffffff81de25c3 R09: ffffed10278a7bdb [ 1554.717889][ T2413] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 1554.725711][ T2413] R13: ffffc900013f77d0 R14: 000000c410000000 R15: ffffc900013f7360 [ 1554.733515][ T2413] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1554.742280][ T2413] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1554.748872][ T2413] CR2: 00000000ffffffff CR3: 000000012914d000 CR4: 00000000003526b0 [ 1554.756652][ T2413] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1554.764450][ T2413] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1554.772261][ T2413] Call Trace: [ 1554.775401][ T2413] ? __die_body+0x62/0xb0 [ 1554.779553][ T2413] ? die+0x88/0xb0 [ 1554.783113][ T2413] ? do_trap+0x1a4/0x310 [ 1554.787195][ T2413] ? ext4_writepages+0x3bdf/0x3c00 [ 1554.792153][ T2413] ? handle_invalid_op+0x95/0xc0 [ 1554.796913][ T2413] ? ext4_writepages+0x3bdf/0x3c00 [ 1554.801861][ T2413] ? exc_invalid_op+0x32/0x50 [ 1554.806374][ T2413] ? asm_exc_invalid_op+0x12/0x20 [ 1554.811234][ T2413] ? ext4_writepages+0x653/0x3c00 [ 1554.816217][ T2413] ? ext4_writepages+0x3bdf/0x3c00 [ 1554.821596][ T2413] ? ext4_writepages+0x3bdf/0x3c00 [ 1554.826546][ T2413] ? dev_hard_start_xmit+0x5b8/0x620 [ 1554.831667][ T2413] ? __local_bh_enable_ip+0x53/0x80 [ 1554.836696][ T2413] ? local_bh_enable+0x1f/0x30 [ 1554.841294][ T2413] ? __dev_queue_xmit+0x165d/0x28e0 [ 1554.846332][ T2413] ? ext4_readpage+0x230/0x230 [ 1554.850929][ T2413] ? dev_queue_xmit+0x20/0x20 [ 1554.855443][ T2413] ? kfree+0xc3/0x270 [ 1554.859300][ T2413] ? ____kasan_slab_free+0x12c/0x160 [ 1554.864394][ T2413] ? __kasan_slab_free+0x11/0x20 [ 1554.869162][ T2413] ? slab_free_freelist_hook+0xc0/0x190 [ 1554.874542][ T2413] ? dev_queue_xmit+0x17/0x20 [ 1554.879055][ T2413] ? neigh_connected_output+0x417/0x450 [ 1554.884438][ T2413] ? ext4_readpage+0x230/0x230 [ 1554.889034][ T2413] do_writepages+0x12e/0x270 [ 1554.893463][ T2413] ? __writepage+0x130/0x130 [ 1554.897887][ T2413] ? __kasan_check_write+0x14/0x20 [ 1554.902921][ T2413] ? _raw_spin_lock+0xa4/0x1b0 [ 1554.907518][ T2413] ? __kasan_check_write+0x14/0x20 [ 1554.912467][ T2413] ? _raw_spin_lock+0xa4/0x1b0 [ 1554.917069][ T2413] __writeback_single_inode+0xd7/0xac0 [ 1554.922450][ T2413] writeback_sb_inodes+0x99c/0x16b0 [ 1554.927484][ T2413] ? _raw_spin_lock+0xa4/0x1b0 [ 1554.932091][ T2413] ? queue_io+0x520/0x520 [ 1554.936265][ T2413] ? writeback_sb_inodes+0x16b0/0x16b0 [ 1554.941557][ T2413] ? queue_io+0x3d3/0x520 [ 1554.945717][ T2413] wb_writeback+0x404/0xc60 [ 1554.950053][ T2413] ? wb_io_lists_depopulated+0x180/0x180 [ 1554.955518][ T2413] ? set_worker_desc+0x158/0x1c0 [ 1554.960288][ T2413] ? update_load_avg+0x541/0x1690 [ 1554.965239][ T2413] ? __kasan_check_write+0x14/0x20 [ 1554.970185][ T2413] wb_workfn+0x3d9/0x1110 [ 1554.974353][ T2413] ? inode_wait_for_writeback+0x280/0x280 [ 1554.979907][ T2413] ? __this_cpu_preempt_check+0x13/0x20 [ 1554.985286][ T2413] ? tracing_record_taskinfo_sched_switch+0x84/0x390 [ 1554.991806][ T2413] ? _raw_spin_unlock_irq+0x4e/0x70 [ 1554.996830][ T2413] ? finish_task_switch+0x130/0x5a0 [ 1555.001865][ T2413] ? __switch_to_asm+0x34/0x60 [ 1555.006463][ T2413] ? __kasan_check_read+0x11/0x20 [ 1555.011323][ T2413] ? read_word_at_a_time+0x12/0x20 [ 1555.016268][ T2413] ? strscpy+0x9c/0x260 [ 1555.020264][ T2413] process_one_work+0x6dc/0xbd0 [ 1555.024952][ T2413] worker_thread+0xaea/0x1510 SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 1555.029472][ T2413] kthread+0x34b/0x3d0 [ 1555.033368][ T2413] ? worker_clr_flags+0x180/0x180 [ 1555.038229][ T2413] ? kthread_blkcg+0xd0/0xd0 [ 1555.042660][ T2413] ret_from_fork+0x1f/0x30 [ 1555.046904][ T2413] Modules linked in: [ 1555.061296][ T24] audit: type=1400 audit(1476.381:9768): avc: denied { write } for pid=271 comm="syz-executor" path="pipe:[13731]" dev="pipefs" ino=13731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1555.068352][ T4386] udc-core: couldn't find an available UDC or it's busy [ 1555.104685][T27009] usb 1-1: string descriptor 0 read error: -71 [ 1555.110821][ T4386] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1555.125491][T27009] uclogic 0003:256C:006D.012B: failed retrieving string descriptor #200: -71 [ 1555.134085][T27009] uclogic 0003:256C:006D.012B: failed retrieving pen parameters: -71 [ 1555.146603][ T4386] udc-core: couldn't find an available UDC or it's busy [ 1555.168127][T27009] uclogic 0003:256C:006D.012B: failed probing pen v2 parameters: -71 [ 1555.176030][T27009] uclogic 0003:256C:006D.012B: failed probing parameters: -71 [ 1555.183377][ T4386] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1555.185018][ T2413] ---[ end trace 9bb63f93f6f38c66 ]--- [ 1555.196739][ T2413] RIP: 0010:ext4_writepages+0x3bdf/0x3c00 [ 1555.202473][ T2413] Code: 51 8c ff 31 ff 89 de e8 df 51 8c ff 45 84 f6 75 27 e8 45 4f 8c ff 49 be 00 00 00 00 00 fc ff df e9 0e f7 ff ff e8 31 4f 8c ff <0f> 0b e8 2a 4f 8c ff e8 11 24 22 ff eb 9b e8 1e 4f 8c ff e8 05 24 [ 1555.206669][T27009] uclogic: probe of 0003:256C:006D.012B failed with error -71 [ 1555.232220][ T2413] RSP: 0018:ffffc900013f70a0 EFLAGS: 00010293 [ 1555.237960][T27009] usb 1-1: USB disconnect, device number 62 [ 1555.238173][ T2413] RAX: ffffffff81de5b4f RBX: 0000008000000000 RCX: ffff8881214b4f00 [ 1555.252282][ T2413] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 1555.260503][ T2413] RBP: ffffc900013f7490 R08: ffffffff81de25c3 R09: ffffed10278a7bdb [ 1555.271112][ T2413] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 1555.278988][ T2413] R13: ffffc900013f77d0 R14: 000000c410000000 R15: ffffc900013f7360 [ 1555.302399][ T2413] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1555.315420][ T2413] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1555.322112][ T2413] CR2: 00000000ffffffff CR3: 00000001195dc000 CR4: 00000000003526b0 [ 1555.330156][ T2413] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1555.337942][ T2413] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1555.345944][ T2413] Kernel panic - not syncing: Fatal exception [ 1555.352040][ T2413] Kernel Offset: disabled [ 1555.356162][ T2413] Rebooting in 86400 seconds..