last executing test programs: 18.459124427s ago: executing program 1 (id=1544): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000000340)={0xfdc9836a894b8ab8, 0x0, 0x0, 0xfffb}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)) r2 = gettid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x30, r4, 0xc11, 0x0, 0x0, {0x5}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x30}}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_gettime(0x0, &(0x7f00000010c0)={0x0}) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={r5}, 0x1) 15.531895056s ago: executing program 3 (id=1549): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x48) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x1, 0x7800, 0xe008, 0x8, {{0xa, 0x4, 0x1, 0x7, 0x28, 0x65, 0x0, 0x20, 0x2f, 0x0, @multicast2, @rand_addr=0x64010102, {[@ssrr={0x89, 0x13, 0x0, [@dev={0xac, 0x14, 0x14, 0x33}, @local, @broadcast, @private=0xa010102]}]}}}}}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="f1aa24e101339a5a1f32c6f7049185589a3e9052c0624403cce9b2ef403177cdbe56c596fb4143bcab1945724b1f77bb3b39b459ce152a82f27617a9c98739ed3827d8fa2b374941d339642b61b0e75d57b1b2f24176c5d4fb17a84b1872a75caf621688fd0e408b40f18e3eae825b168829f28bfc33ef91326f9ee175931e8ed555259f1e94adf9feac4197ccf5a0f3d11d31ae832b7ef9d0881ba8c4a8d2d3a56d03d115a917ecc4b25772cdfcfd41f7cb709436f8e36c0030b26161982e6730", @ANYRES16=r1, @ANYRESHEX=r1, @ANYBLOB="25044a6d07d5d2a2aa3f6a327f372d339b0ff36130b3992f3694e62bcb4cedc3499d998f26d62d589d6e527f0cd4232c09ba0f002609e7a8f2943b614f5e279195d6e0124f29732e8b8244c57290da4b94ad70af04846a95dff3f6248027025c0dd44514b7e79ea4ef359dc791075a5190378b175379f075bd9099a5f4b4a2f08e2d6a4146df78c0f4f75a62909e19720d4be7e9adbf8053cc90356df4d66fba639143de4fe787a2ff0a3216a7dcce73", @ANYBLOB="a78900acb8df6a1474d64cee8aa05f9d25d13ff4e86abe5235344c23014ab4cc22ca19d714685c6a3440a42e1d9b3d940552349fd5816d9ab5bc431e4f0655e5385c024261"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='rss_stat\x00', r2}, 0x10) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) ioprio_get$pid(0x2, r3) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0xffffffffffffff9b) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000300), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00\x00\x00']) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) write$FUSE_NOTIFY_INVAL_INODE(r6, &(0x7f00000000c0)={0x28, 0x4}, 0x28) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7}, 0x50) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000040), &(0x7f0000000080)='%pS \x00'}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r8}, 0x10) 15.162145076s ago: executing program 3 (id=1552): open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munmap(&(0x7f0000ba0000/0x2000)=nil, 0x2000) mremap(&(0x7f00009a1000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000fef000/0x4000)=nil) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) mremap(&(0x7f0000e3b000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000fe1000/0x4000)=nil) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c51000/0x2000)=nil) munmap(&(0x7f000031c000/0x6000)=nil, 0x6000) mremap(&(0x7f0000118000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000af4000/0x3000)=nil) r0 = userfaultfd(0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000180)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private1, [@hopopts={0x3a}, @routing]}}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = memfd_create(0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) read(r0, &(0x7f0000000200)=""/183, 0x28) openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000013000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0xfffffeffffff7f7e, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r5, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000008c0)="c2", 0x1}], 0x1}}], 0x1, 0x2000c801) 13.808305856s ago: executing program 1 (id=1545): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000240), 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r5, &(0x7f0000000780)={&(0x7f0000000100)={0x3, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @dev}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@rr={0x7, 0x3, 0x8b}, @noop]}}}], 0x38}, 0x0) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='^.}-].\x00', 0x0) 11.18479921s ago: executing program 3 (id=1558): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000e27b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004"], 0x0, 0x0, 0xfffffffffffffd16, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000580)='qdisc_reset\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 9.778410694s ago: executing program 3 (id=1561): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) (async) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) close(r2) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x100, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) (async) read$FUSE(r1, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x1f}}, 0x50) (async) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000300)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@usrquota}, {@usrquota}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) (async) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_QUOTAON(r7, 0xffffffff80000200, 0x0, 0x0) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000080)='mm_page_alloc\x00', r8}, 0x10) (async) ioctl(r6, 0x7fffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000566000/0x1000)=nil, &(0x7f00001b8000/0x2000)=nil, 0x1000, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) (async) socket$key(0xf, 0x3, 0x2) 9.730669658s ago: executing program 4 (id=1562): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x4, 0x8}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) dup3(r0, r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) shutdown(r0, 0x2) 9.599972458s ago: executing program 0 (id=1563): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000180)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x88}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@resgid}, {@usrquota}, {@data_err_abort}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000001200)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ptrace$ARCH_MAP_VDSO_64(0x1e, r0, 0xfff, 0x2003) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000300)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000ff8e40b8bf5c3f9500000000000000d9c206d0178edd9254be077c249a3a71f610f444483fb8668539464a0d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pipe2$9p(0x0, 0x80) r4 = io_uring_setup(0x488, &(0x7f0000000080)) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)={@map=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, @prog_id}, 0x20) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, r5, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x13, &(0x7f0000000040), 0x2) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) dup(r6) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000800, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000a5}) 9.536271284s ago: executing program 1 (id=1564): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x268, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) 9.505693936s ago: executing program 4 (id=1565): bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001500)={0xffffffffffffffff, &(0x7f0000000500)="f4970e2c0873301b0f5d46eec8427fabe7ea068c0face18b6d966eed077db6af4d14ff9cf780147ce1313cb9674a364a5c247b04a8e21dce3550dd959e7dcd0759ce15a61dd85d12ebc2d3ee0b60ebec8828045c122a5d3095bd1a09ff31c753c3ff6e67eb7ee8b612"}, 0x20) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001b0000000c00018008000100", @ANYRES32=r6], 0x20}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r7, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="01000000", @ANYRES16=r8, @ANYBLOB="00012bbd7000ffdbdf25070000002700070073797374656d5f753a6f626a6563745f723a6d7472725f6465766963655f743a73300000"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x91) syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000074020440fd07010099480102030109021b0001000000000904000001c5b3e30009050b", @ANYRES8=r2, @ANYRESOCT=r2], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r12, 0x1, &(0x7f0000000700)=[&(0x7f0000000440)={0x0, 0x20000000, 0x4, 0x1, 0x0, r11, &(0x7f0000000780)='!', 0x6}]) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$cgroup_int(r11, &(0x7f00000000c0), 0x12) dup3(r11, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqn(r11, 0x0, 0x24, &(0x7f0000000340)={@private=0x8, @loopback, r6}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r13}, 0x10) 9.492177087s ago: executing program 3 (id=1566): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x1, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x1) recvmmsg(r1, &(0x7f0000000740)=[{{&(0x7f00000005c0)=@tipc, 0x80, &(0x7f0000000400)=[{&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000640)=""/251, 0xfb}], 0x2}}], 0x40002db, 0x2, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r3, 0x5452, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x0, &(0x7f0000002180), 0x4) sendto$inet(r3, &(0x7f0000000480)="fbbf0b5044e308cb7bd572aa2b42e9678bcf30eff9f3aed14dc94a114bd2b45956aebe2b108a87e865501a5f9e0383611afdd3f8bac3d5cfd7772a3ab48d0ba4b600731e357e38716c449fae7c28548a4f2105f44b8fd9b33041270ae01f1a405e3f650fc3b0926d481c364fca00000000000000006d3a3ede9fc738b8d86209c060161d5ddb5fcf3d09001117cdb9d055aa2d89fe3458720724853a876448d4a1fe9ef0569ad98a05ab5df763923b4e2c576e00000000000000000000000000000000002090666159e3075f7244cf4ec3d7814c0c934f44e200219e6dd7bc23397d5f2f2c76a5baddd0fd8c340362691ef226f7a0ac51b74b6be5ed6737948514cd466943d08eeb3895b80499da2b209da4f3ec5e3744ce3e863b0e04d0ec2f39edf50b6e08c4b47e448a35414763d687fbe3792ee15c5b9791310a346472723c100bf77a310b0ced8004b5ac6d48c40439f512e8ef34a53d65f55563f68136a577736ca5f6f66e01ef4ec2cdc8db34f6de50713adaa3f70189958263fddc1314f8a28ccdef6e1390c5fbaeadc3035d019f0dc75de307de6c0d010000000000000027083d1d5b4b013c503b863b560688d94de886b6dc73d5da2dfeff4bed1a49a975a6c8dbb480e4415ddca5657a5a8e3b111015499e952bb5e8d8f60de3d688df7802c6e8b27b31fac4e199038b79a3999920e634a5af162a9581b0e6647e410700246548234acacf9cb43ab332a37bbc926c39897395c974fda31536be523bf4260300730ae6136fecae5f0fa6ab2df8d98128b24589e3bbe5230e07dc5e0d65cc397e3f8204d48e59e8e294a6d7008ba8fba28cd5009fe1a7c569ce740078bf1c7389a6ba0f89257f0eac417aac0d2d89b05ee5dafa2f1d936c87264d077b2c0d5abdbc64ce943f895dd4c2e9dd7393543d89b00dc6b3a25045d4ec932366c67dfad087fa8dc104644828440bdf67dd97ebcc", 0x2b5, 0xc000, 0x0, 0x0) recvmsg(r3, &(0x7f00000002c0)={&(0x7f00000003c0)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000002040)=[{&(0x7f0000000f80)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000100)=""/95, 0x5f}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x4, &(0x7f0000001f80)=""/176, 0xb0}, 0x2160) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) 6.219849764s ago: executing program 2 (id=1567): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80070f, &(0x7f0000000a40)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@errors_remount}, {@bsdgroups}, {@oldalloc}, {@oldalloc}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="b8000000", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fddbdf250a0000001801000100010000008000000000000000000000000000aa7c00018014000300fc0200883ff2e7d8752f915752620000000000000000000000000108000b007369700008000b0073697000060002002100000007000600666f0000060001000a00000014000300fe8000000000000000000000000000aa0c0000003b000000140000000000000000000000000800060009000000080006000800"/182], 0xb8}, 0x1, 0x0, 0x0, 0x821}, 0x4040800) socket$nl_route(0x10, 0x3, 0x0) memfd_create(&(0x7f0000000340)='\x13vkoxnet0\x00\xc4\xeb1\xa4\x17\xd5\xf2|\xad\xc8\xde\xc2\xfe\xfad\xf9\xfa\xd2 >\xb85\x1b\f\xc4\xb9\x14^\x88\xd7F0\x99\xb5B\xed\xaa\x92[\x14\xc0\x1a\x8a\x96\x0f\xa8U\xae\xbc\xa4^\x95\xc3\xc5d\x8a\x91\xaa\xfe\x98\xb8\xc7\xc5\xbeRDT`\f/,l\b\xa3\xa6\xbd\x05\xa7 K\x153\x02\x12\xc8Y\xa8\xabB\x18\xc3\b\xe7\x0ei\x98\x1e \x04\xf4\xb7\xd51\xc6\x8c\xc5\xd9.8\x1b\xec/}\xd3M\xef\xc6.\xe8\xf5>.\x9f|\xa4\vF\n\x11I&\x1e\xbd\x06\xa2\xed\x01H\x12~\x9f\x0e\xb0\xf1Y\xda\xc4i\xf8\xae\x1eC\x9bs\xf8E\xee?\xd5;\x80O\x80z\xb9\xc5\x02>\x006\xacgU\xd2\xa8l\x86\xb8\xa0\x96c\xf0\xc2\xe8a\x00\x00\x8fU\xb0\xad\x1e\xf4\x87iU:\xc0\x9c*\xf7&\xb2\xc7\xecpu{3\xd5\x11\xee\xc30=\x8ey\"\xb0\x85)\xd0\xb4\xd7@\xc7\xb6\xc61\xd7z\x02\x8cSq\xe5\x13\x8e\x158\x95\xad\x92\x8aJJ\x9d\x88D]\xc4\xcd\xa3\xe3\xc4\xbc\xd0\x83\x01\xff', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000440)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 5.957795335s ago: executing program 0 (id=1568): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x480, &(0x7f00000000c0), 0x1, 0x765, &(0x7f0000000800)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x10, 0xffffffffffffffff, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r2, 0x5452, &(0x7f00000034c0)) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000001040)={[{@nombcache}, {@debug}, {@norecovery}, {@grpid}, {@noauto_da_alloc}]}, 0x9, 0x613, &(0x7f0000001580)="$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") r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800100006000000000000000200000018151000", @ANYRES32=r1, @ANYBLOB="000000000000000018140000", @ANYRES32=r0, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x10001, 0xae, &(0x7f00000004c0)=""/174, 0x41100, 0x8, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000340)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000005c0)=[r0, r1, r1, r1, r0], &(0x7f0000000600)=[{0x3, 0x1, 0x5, 0xb}], 0x10, 0x7}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000640)={r4, 0x0, 0x25, 0x10, @void}, 0x10) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = eventfd(0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/138, 0x0}) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000140)={0xc0000001}) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x0, r6}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af22, &(0x7f0000000180)={0x0, r6}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) 5.90084067s ago: executing program 1 (id=1569): open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munmap(&(0x7f0000ba0000/0x2000)=nil, 0x2000) mremap(&(0x7f00009a1000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000fef000/0x4000)=nil) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) mremap(&(0x7f0000e3b000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000fe1000/0x4000)=nil) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c51000/0x2000)=nil) munmap(&(0x7f000031c000/0x6000)=nil, 0x6000) mremap(&(0x7f0000118000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000af4000/0x3000)=nil) r0 = userfaultfd(0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000180)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private1, [@hopopts={0x3a}, @routing]}}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r1 = memfd_create(0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) read(r0, &(0x7f0000000200)=""/183, 0x28) openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000013000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0xfffffeffffff7f7e, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r5, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000008c0)="c2", 0x1}], 0x1}}], 0x1, 0x2000c801) 5.90026871s ago: executing program 4 (id=1570): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x8, 0x3, 0x650, 0x0, 0xa, 0x148, 0x368, 0x10, 0x5b8, 0x2a8, 0x2a8, 0x5b8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2=0xe000000b, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x7a, 0x8000000, 0x0, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x64, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @broadcast, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x1f0, 0x250, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_to_bond\x00'}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x6b0) 5.762199441s ago: executing program 4 (id=1571): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x1, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000240)=0x1) recvmmsg(r2, &(0x7f0000000740)=[{{&(0x7f00000005c0)=@tipc, 0x80, &(0x7f0000000400)=[{&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000640)=""/251, 0xfb}], 0x2}}], 0x40002db, 0x2, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r4, 0x200, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$sock_int(r5, 0x1, 0x0, &(0x7f0000002180), 0x4) sendto$inet(r5, &(0x7f0000000480)="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", 0xfffffea5, 0xc000, 0x0, 0xfffffcef) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r2, @ANYRESOCT=r3], &(0x7f0000000200)='GPL\x00', 0xcb, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4.717591096s ago: executing program 2 (id=1572): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000180), 0xfc, 0x550, &(0x7f0000000340)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000100)={0x1100, 0x0, 0x0, 0x10000}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061000c00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000800000095000000000000009500a5050000000077d8f3b423cdac8d8000000000000020e16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f68a7d06d10bfe150a7487535f7866907dc6751dfb261a0e3ccae669e173a649c1cfd6587d452d46b7c57d77578f4c35235138d5521f9453559c3421eed73d5661cfeecf9c66c54c3b3ffe1b4ce25d7c983c044c03bf3ff03fe3e26e7a23129d6606fd28a7f9105f82317874b33d96b39fa4e045469989d552af6200000003a00000000000000abecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd5234712596b696418f1623ed38ae89d24e14b40234756ddcebfba2f87925bfacba83109753f543ad027edd68149ee99eebc6f7d6dd4aed4afe1f44ccb19e810879b70a70900000000000000000000d7900a820b6327944e9a217b9800e02a92895614cd50cbf83a1ed25268816b004519c9c5cff097d8000000000009d27d753a30a147b24a48435bd8a568669596e9e08679b3ce48e90defb6670c3d6209000000c773713a66b223fa8b148871c8d31d24000025449f106b99893ed20fa7a050fbbef90327e827e513e9606800000000e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e69ee52b59d13182e1f24ed208ada12f7a1525320e71666f472a972d5eb1affb87ba55b2d72078e9f40b4ae7dc3b2aeb0d11cd22c35d32940f19dff00ffffffff080000ff003853e59de7621e348955735264f34b1046a1813668297a7edad187ef106ae7fcbb25090f17d0baadeb8ae190a1fb5a315f8347fb0379659500000000000000000000000000000000000000002fdf0193ec79c90ed210ebc2fbed6d4216770c1b0dec886b388d138c2b69c6aacb714e7264093061c660a5100b7cc165889eb94c8d7c77b6fa06f1a4d8e4a6b6cb37e319c5c22f276b03cae853f42b07ca0b03b1eb32a6b1a81cd511fd0b59d57a11c6a3ebf9731464ad21f07f618efc31023ac60007426162b57e803519954d7c952197b0a508c0e16fda392fa84be38e937d36af1c35138e05a9e8d6dc0272de72c41500000000304402e22af23437126f330f8eb4075daaeae3134ece35cd86d95bd9836bd186c4b6565e967a4e3e86f299b7400994ba136b4eccf3b0f001a266c0d160b3ce1182001d64b52a5ce7f506295d59eea6903b84ffbabf5a5b91c1d6ecce8728a224aec66c610e3becd60a35e848c224f8251947eed20e2b612cb099bfe8924d33ba7f0691fed04a43e9c64b7a1e3165e86cdb9871c678a6bbb14821f441c6c14d1bd78d8ffdfea12c19ea04264335d60b6b7a7da6fb83f33101db32f6ab137d943dd3c1e8db9f3e1263573dc721ae82fe0bc63598751a5092c9f7dbfc39d564834e3703492c2a651643d8ce5c36d97a4812cf73fc8ea0d6"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0xb) r2 = syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) getresuid(&(0x7f0000000440), &(0x7f0000000480)=0x0, &(0x7f00000004c0)=0x0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000001000)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)=ANY=[@ANYRESOCT=r7, @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESOCT=r2, @ANYBLOB=',privport,access=', @ANYRESOCT=r6]) lstat(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000d80)) 4.132071244s ago: executing program 3 (id=1573): r0 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010008020d00000904010102020d0000090582020002000000090503020002000000bc94ef907df247d46eaa274c8f51e61fb4cfc6664d5c9315a37e6e4eae4cdd654f17856753d01b00310244243631e819a05df18c7f"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000007c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x401}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000080)='./file2\x00', 0x100080d, &(0x7f0000000a80)=ANY=[@ANYRES32=0x0, @ANYBLOB="de60d8dc536d5258d6a94ad55604a34dc65b7ef79c1a1754e4cadfe21823d0c10a15d53dba5f2d2bc67ef2477d0412534e2f5151c7a60c8f5d6c634d173fecb5de9207a7090d302229cd3f210d34e4584c824c9dda7d35e0d7a06cd667bf9cced32944ca27d8a80e62cf6310db869ee250fb65467e3b11ad5042d600c6b8f18454d57df621e578fef0a3a93c14609231", @ANYRES8, @ANYRESDEC, @ANYBLOB="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", @ANYRESOCT, @ANYRESOCT=0x0, @ANYRES32, @ANYRESDEC, @ANYRESOCT, @ANYRES64, @ANYRES8, @ANYBLOB="3dea3f"], 0xff, 0x1fc, &(0x7f0000002c80)="$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") stat(&(0x7f0000005280)='./file0\x00', 0x0) dup(0xffffffffffffffff) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000071122700000000009500c9df00000000de54efd337d35285c161c5277edb8ebb15b58f91a5ee2dfc464680aaeda509f80db720be849cfad349052a513d731f3e1ab1616de782ebeab3fad78b022a9488de94c51041787406824c841f2e132d053e63230d79544561215df07865865ca3b1d4cd0ca39c621b8bcb16c583a7d45d18615d25d7189e29edf825cc4555d6357089204333610ca3ad8e0bd555a1a819abd1c3df59e861ad355c8b4c483a06d01b"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x11}}}, 0x1e) connect$pptp(r2, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000380)={0x14, &(0x7f00000006c0)={0x40, 0xd, 0xe7, {0xe7, 0x6, "173f3627f5404b6e6b6c7a5fe4db5a83630cce986a9b1b8a213f109c098e8fa8145a0c4d58bc15a92772afcb3cfa4d7e2a7522c1533c1654ae91d1ed9de1c4490488ed11953d195bfb6fd8238a0181bbcfe27e1ecaa79793ff27645914aaafa1312a1815193dcd7af2a7e1384c1c2b6a67c06d1bfd5e0591667a0e0cde45d7c90c09c32d950001ec07e82416c5f44e5e3746131bdd4e6fc9fcf839363c206f78edd1af9a3f17023f8844259347671b4826d8ab8d8fda1b2f6e5a420cf6744f519e6dbc730ec5c9d4f667f6b22dd1f256194a5f8a1e65342d2a3c38064047d914f2a96d173e"}}, &(0x7f0000000340)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000009c0)={0x44, &(0x7f0000000840)={0x20, 0x15, 0x98, "84bc90b51cd0cb9125a6e7ba8536532aa552e796d0962066dee140dc9098b68befdd1267ba1f3eb407d3414e363973a826bb58e6efa2124724fd15d9afcd8dc6ac33773032108a40e2ffca9b1cf6684a798b15c0a0e93352db7d01990f426d36904824d54395d1de1f39c411d16c7ff82b9709c5fa556c756296de1b1eb5c358f36ef7a5742a2f18151234126a99b7bdf4488555dff410dd"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000500)={0x20, 0x80, 0x1c, {0x7, 0x8a, 0x0, 0x3, 0x5, 0x1, 0x80, 0xa455, 0x400, 0xb6, 0xffff, 0x8}}, &(0x7f0000000640)={0x20, 0x85, 0x4, 0xffffffc0}, &(0x7f0000000900)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000940)={0x20, 0x87, 0x2, 0x3bf3}, &(0x7f0000000980)={0x20, 0x89, 0x2}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0}, 0x90) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) writev(r4, &(0x7f0000000680)=[{&(0x7f00000002c0)="2614", 0xf00}], 0x1) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000000)={0x1, 0x40, 0xeb, 0x101, 0x1a, "3e450f5726b4412a3327c17f177f7b72f19409"}) 4.081378668s ago: executing program 1 (id=1574): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b0001110000000904000001", @ANYRES32], 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000080000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000040008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) syz_usb_disconnect(r0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) 3.940255309s ago: executing program 2 (id=1575): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x4, 0x8}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) dup3(r0, r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) shutdown(r0, 0x2) 3.886243834s ago: executing program 0 (id=1576): syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b0001110000000904000001", @ANYRES32], 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000080000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000040008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_usb_disconnect(0xffffffffffffffff) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) 3.827442779s ago: executing program 2 (id=1577): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe21, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r1 = syz_open_dev$usbfs(0x0, 0x0, 0x4a0600) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f0000000100)=ANY=[@ANYBLOB="73ad00001500000002880b860e02878f0a8806450c83050b818f0000"]) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$HIDIOCSUSAGES(r2, 0x501c4814, &(0x7f0000000740)={{0x2, 0x2, 0x6, 0x81, 0x5, 0xffffffff}, 0x281, [0xfd28, 0x2, 0x1, 0x0, 0x4, 0x3, 0x100000, 0x3ff, 0x401, 0x3, 0x0, 0x2, 0x7, 0x94c, 0x3, 0x1, 0x0, 0x0, 0xfffffff8, 0x0, 0x101, 0x0, 0x3, 0x3f, 0x7, 0x6a2, 0x3, 0x0, 0x9cf3, 0x1, 0x8, 0x9135, 0x4, 0x852, 0x5a68, 0x9, 0x7, 0x7, 0x0, 0x5, 0x4, 0x4c, 0x1, 0x0, 0x56a7, 0x81, 0xb8, 0x6, 0x0, 0x40, 0x8, 0x6, 0x8, 0x1e6, 0xe7d, 0x200, 0x400, 0x0, 0xbe2d, 0x7853, 0x3, 0x800, 0x6, 0x1, 0x800, 0x40, 0x7, 0x1, 0x3, 0x2, 0x200, 0x3, 0xa58, 0x2, 0x100, 0x4, 0x1, 0x8000, 0x6, 0x7, 0x8001, 0x6, 0x7, 0x2, 0x2b66, 0x1, 0x0, 0xffffffff, 0x5, 0x13c59b9d, 0x5, 0x4, 0x1, 0x7, 0xd61, 0xfffff801, 0x0, 0x888, 0x5d, 0xfffffffc, 0x4, 0x8, 0x2, 0x10000, 0x3, 0x339, 0x0, 0x83, 0x8000, 0x0, 0x100, 0x9, 0x3, 0x0, 0xfffff001, 0xd303329, 0x983e, 0x36e, 0xda, 0x9, 0x1, 0x40, 0x0, 0xfffffffd, 0x6, 0xc90, 0x9, 0x1, 0x10000, 0xffffff7f, 0x9e, 0x1, 0xfff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8, 0x66, 0x4, 0x4, 0x7, 0x3b73, 0x2, 0x1, 0x6, 0xfa, 0x0, 0x800, 0x7, 0x2, 0x7f, 0x9, 0x9, 0x9, 0x9, 0x9, 0x80000000, 0x1, 0xfffffd8b, 0x0, 0x9, 0x101, 0xff, 0x7, 0x10000, 0x100, 0xa4, 0x7, 0x0, 0xfffffffe, 0x0, 0x7, 0x7, 0x6, 0x3, 0x80000000, 0x0, 0x101, 0x20, 0xc00, 0x5, 0x5, 0x401, 0x6, 0x4, 0xff, 0xfffff360, 0x1ff, 0xf02, 0x6, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x80000000, 0x2, 0x0, 0x6, 0x905, 0x8, 0x4, 0x7, 0x7, 0x1f, 0x0, 0x8000, 0x4, 0x6, 0x7, 0x7fff, 0x10001, 0x40, 0x407fff, 0xfffff734, 0x3, 0x0, 0x0, 0xde, 0xffffff80, 0x2, 0x6, 0x10001, 0x7ff, 0x7, 0x4, 0x2, 0x4, 0x6, 0x0, 0x4, 0x200, 0xff, 0x3, 0x5, 0x0, 0x6, 0x9, 0x1ff, 0x10000, 0x1f, 0x23a5, 0x8, 0x8, 0x5, 0x9, 0xfffffffd, 0x3, 0x9, 0x7, 0x3, 0x400, 0x9, 0x9, 0xaaa, 0x100, 0x0, 0x8f73, 0x80000001, 0x0, 0x10000, 0x0, 0x1, 0x6, 0x9, 0x4, 0x5a, 0x0, 0x20, 0x40, 0x8001, 0x0, 0x41242303, 0x6, 0x0, 0x8, 0x9, 0x8, 0xf2, 0x7fff, 0x0, 0x8001, 0x14a, 0x0, 0x800, 0xffffffff, 0x3, 0x3, 0x49, 0x8001, 0x1, 0x2, 0x0, 0x5, 0x1ff, 0x5, 0xa3a0, 0x16, 0x7fffffff, 0x2, 0x6, 0x8, 0x7ff, 0x0, 0x9, 0x8, 0x5, 0x2, 0x1, 0x9, 0x3, 0x0, 0x1, 0x0, 0x8, 0x1, 0x0, 0x231, 0xc0000, 0x3, 0x80000000, 0x6, 0xffffff12, 0x5, 0x8000, 0x8001, 0x57, 0x2, 0x5, 0xce, 0x9, 0x7, 0x401, 0x1, 0x0, 0x7, 0x6, 0x40000000, 0x7, 0x0, 0x4, 0x7, 0x6, 0xfff, 0xfffffffa, 0x2, 0x6, 0x2, 0x0, 0x5b8, 0x80000001, 0xb9, 0x8001, 0xfda, 0xffffbe5f, 0x100, 0x20, 0x0, 0xfff, 0x0, 0x5, 0x2, 0x80, 0x1000, 0x81, 0x0, 0x40, 0x7, 0xffff, 0x8, 0x2, 0x80, 0x2, 0x0, 0x1, 0x2e8f, 0x5713, 0x4, 0x5, 0x6, 0x2, 0xfffffffd, 0x80000000, 0x0, 0x80000000, 0x1ff, 0x10001, 0x0, 0x7fff, 0xa9, 0x1, 0x200, 0x100, 0x10001, 0x226d, 0x800, 0x7, 0x3f, 0x3, 0x4b, 0x5, 0x5, 0x4, 0x80000000, 0x4, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x8, 0x7, 0x1000000, 0x6, 0x1f, 0x8f, 0x304, 0x9, 0x81, 0xd438, 0x1000, 0x9, 0x1, 0x101, 0xb0, 0x3ff, 0x80, 0xbd, 0x1, 0x9, 0x5, 0x2, 0x9, 0xd5e6, 0x4, 0x80, 0x401, 0x5, 0x0, 0x0, 0x0, 0x589c, 0x40000, 0x2, 0x7ff, 0x9, 0xbe, 0xfff, 0x2, 0x0, 0x6, 0x5, 0x4, 0x7fff, 0x100, 0x40000007, 0xffff, 0x1, 0x900000, 0x7fffffff, 0x200, 0x100, 0x2, 0x2, 0x4, 0x0, 0x0, 0x28, 0x3f, 0x47a3, 0x0, 0x1, 0xf2, 0x0, 0x4, 0x1000, 0x2, 0x4, 0x1f, 0x9e, 0x3, 0x621a, 0xfffffff8, 0x8, 0x1e8, 0x65ebcef6, 0x6, 0x1, 0x4, 0xd6, 0xff, 0x1, 0x0, 0x1, 0x0, 0x5, 0x3, 0x800, 0x9, 0x356, 0x4, 0x9, 0x7, 0x9, 0x4, 0x0, 0x44, 0x7fffffff, 0x6, 0xfff, 0xfffffb55, 0x1, 0x3, 0x37, 0x3, 0x1a93, 0x5, 0x0, 0x8, 0x1, 0x4, 0xa7a, 0x201, 0x1, 0x7, 0x6, 0x0, 0x0, 0x6, 0x0, 0xfffff215, 0x0, 0x6, 0x4, 0x401, 0x5201, 0x5af, 0x1, 0x6, 0x5, 0x401, 0x78, 0x100, 0x7, 0x8, 0xffff, 0x9d, 0x1, 0x6, 0x8000, 0x81, 0x0, 0x3, 0x800, 0xfffffff7, 0x7fffffff, 0xfffff000, 0x1000, 0x0, 0x6, 0x8, 0x7, 0x41, 0x8, 0x1, 0x100, 0x401, 0x4000000, 0x6, 0x532, 0xfffffffb, 0x1, 0x4, 0x3, 0xa3b, 0x5, 0x10000, 0x4, 0x100, 0x8, 0x401, 0x7f, 0x7, 0x3, 0x4, 0x0, 0x9, 0xffff, 0x0, 0x6, 0x8000, 0x7f, 0x4, 0x2, 0x4, 0x6, 0x2, 0x9, 0xfff, 0x80000001, 0x1f, 0x0, 0x5, 0x7fffffff, 0x4, 0x5, 0x1, 0x9, 0x1, 0x9de, 0x2ca, 0x5, 0x0, 0x7ff, 0x3, 0x5, 0x4, 0x4, 0x0, 0x1, 0x7f, 0x7, 0x8, 0x1f, 0x100, 0x7f, 0x0, 0x9, 0x0, 0x6, 0x5, 0x2, 0xbadf5ed, 0x0, 0x10001, 0x9, 0x7f, 0x36, 0x1f1dcc9a, 0x100, 0x20, 0x3, 0x0, 0xffffff7f, 0x0, 0x100, 0xffffffff, 0x3f, 0x0, 0x9, 0x3376, 0x600, 0x2, 0x7, 0x1, 0x8, 0x7, 0x9, 0x2, 0x2, 0xffffffff, 0x3000, 0x6, 0x7aa, 0x0, 0x3, 0x6, 0x1, 0x4, 0x0, 0x2, 0x4, 0x1ff, 0x1, 0x1, 0x80, 0xb7f, 0x5, 0x2, 0x0, 0x9, 0xffffffff, 0xfffffff8, 0x3ff, 0xffffff7f, 0x7, 0x0, 0x6, 0x1, 0x3, 0x8000, 0x3, 0x4, 0x4, 0x0, 0x35, 0x8001, 0x6, 0x10000, 0x80000001, 0xcec, 0x40, 0x0, 0x0, 0x200, 0x80000001, 0x1000, 0x3c, 0x0, 0x7, 0xffffffff, 0x4, 0x5, 0x80000000, 0x4, 0x40, 0x1cce9f1, 0x5, 0x56, 0x101, 0x2, 0x0, 0x5, 0x8, 0x8de3, 0x400, 0x6, 0x8000, 0x1, 0x83cb, 0x1, 0xffffffff, 0x7, 0x0, 0x7, 0x0, 0x100, 0x3, 0x8, 0x4b, 0x7ff, 0x1ff, 0x0, 0x7, 0x0, 0x8, 0x5, 0xffffffff, 0x8, 0xe6ea, 0x40, 0x5, 0xdac, 0xfffffffc, 0x8, 0x0, 0x0, 0x8, 0xfffffc00, 0x6, 0x7fff, 0x1, 0x4, 0x5, 0x6, 0x4, 0x4, 0x80000000, 0x8, 0x3, 0x6, 0xefe, 0x0, 0xb8, 0x400, 0x2, 0x9, 0x35c, 0x6, 0x8, 0x3, 0xfffffffd, 0x1f, 0x3450, 0x9, 0x5, 0x3, 0x0, 0x0, 0x1, 0x1000, 0x800, 0x6, 0x200, 0x3, 0x0, 0x7, 0x4, 0x400, 0x19, 0x917, 0x10000, 0x4, 0x2, 0x9ed5, 0x9, 0x6, 0x0, 0x0, 0x4, 0x1, 0x68, 0xfffffffe, 0x5, 0x2, 0x3f, 0x1ff, 0x4, 0x3, 0x101, 0x9, 0x1, 0x1, 0xfffffffa, 0x0, 0x0, 0xe1, 0x200, 0xd8e, 0xa3bbf3e4, 0x40, 0x9, 0x3470, 0x7ff, 0x1f, 0x7, 0xfffff269, 0x7f, 0x0, 0x7fff, 0x8, 0x65, 0x0, 0x1, 0x0, 0x2, 0x0, 0x19, 0x0, 0x5, 0x81, 0x0, 0x0, 0x4, 0xd911, 0x0, 0x9, 0x80000001, 0x320352c8, 0x8000, 0x8000, 0x5, 0x5, 0x8, 0x800, 0x10, 0x8, 0xb5, 0x4, 0x7fffffff, 0x3, 0x6, 0x0, 0x62, 0x3, 0x6, 0xfff, 0x6, 0x6e08, 0x0, 0x0, 0x8001, 0x7, 0x8001, 0x0, 0xfffff000, 0x3, 0x8299, 0x43b0000, 0xce, 0x3ff, 0x1, 0x0, 0x2, 0x6ca7, 0x7ff, 0x3, 0x4, 0xff, 0xffffff80, 0xc000000, 0x10000, 0x800, 0x4, 0x0, 0x1f, 0x9, 0x1, 0x3bc, 0x0, 0x1, 0x5, 0x7fff, 0x3ff, 0x9, 0x0, 0xcdf8, 0x4c9, 0x2, 0x8, 0x5, 0xffffff80, 0x6, 0x1ff, 0x7f, 0x800, 0xffffffff, 0x0, 0xedc5e6f, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0x80, 0x0, 0x7, 0x7, 0x8df9, 0x401, 0x4, 0x3, 0x200, 0x7, 0x59, 0x1, 0x5d, 0x765, 0xfffffff7, 0xfffffffc, 0x8, 0x3, 0x20, 0x408, 0x0, 0x8001, 0x800, 0x9, 0xfffffff9, 0x10001, 0xc3, 0x1ff, 0xd15, 0x101, 0x400, 0x6, 0x400000, 0xff, 0x0, 0x5, 0xffff8001, 0x7fff, 0x1f, 0x2, 0xe3b2, 0x6, 0x3f, 0x3ff, 0x1, 0x8, 0x3e, 0x9, 0x50c, 0x5, 0x0, 0x42, 0x9, 0x4, 0x2, 0x0, 0x1, 0x401, 0x0, 0x4, 0x59, 0x7, 0x1b58332b, 0x6, 0x7ff, 0x0, 0x4, 0x5, 0x80000001, 0x8, 0x8, 0x0, 0xffff, 0xffffffff, 0x0, 0x3, 0x40, 0x1, 0x1, 0x9, 0x7fff, 0x401, 0x9, 0x9, 0xe575, 0x64]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r6}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0/../file0/../file0\x00', 0x0, 0x1210020, &(0x7f0000000000)={[{@uid, 0x41}]}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x4, 0x3, 0x8, 0xff, 0x44, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, 0x10, 0x10, 0x50b76428, 0x40}}) 2.308569522s ago: executing program 2 (id=1578): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f0000007fc0)='./bus\x00', 0x60142, 0x0) open(&(0x7f0000000380)='./file1\x00', 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001740)={0x9c02}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x80) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x0, 0x10000}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') r4 = open(&(0x7f0000000300)='./bus\x00', 0x169042, 0x0) ftruncate(r4, 0x88801) r5 = socket$inet6(0xa, 0x1, 0x0) r6 = dup(r5) bind$inet6(r5, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback, 0x7}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x20040008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000080)='sit0\x00', 0x10) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x0) read$FUSE(r3, &(0x7f0000004180)={0x2020}, 0x2020) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.346937361s ago: executing program 0 (id=1579): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x4508, &(0x7f0000000c40)={[{@nodelalloc}, {@block_validity}, {@sysvgroups}]}, 0xa, 0x4e4, &(0x7f0000001400)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) open(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) io_setup(0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000340)=@framed={{}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0x72}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) mount$incfs(&(0x7f0000000240)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) 1.149104097s ago: executing program 2 (id=1580): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x268, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) 970.486271ms ago: executing program 1 (id=1581): r0 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010008020d00000904010102020d0000090582020002000000090503020002000000bc94ef907df247d46eaa274c8f51e61fb4cfc6664d5c9315a37e6e4eae4cdd654f17856753d01b00310244243631e819a05df18c7f"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000007c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x401}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000080)='./file2\x00', 0x100080d, &(0x7f0000000a80)=ANY=[@ANYRES32=0x0, @ANYBLOB="de60d8dc536d5258d6a94ad55604a34dc65b7ef79c1a1754e4cadfe21823d0c10a15d53dba5f2d2bc67ef2477d0412534e2f5151c7a60c8f5d6c634d173fecb5de9207a7090d302229cd3f210d34e4584c824c9dda7d35e0d7a06cd667bf9cced32944ca27d8a80e62cf6310db869ee250fb65467e3b11ad5042d600c6b8f18454d57df621e578fef0a3a93c14609231", @ANYRES8, @ANYRESDEC, @ANYBLOB="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", @ANYRESOCT, @ANYRESOCT=0x0, @ANYRES32, @ANYRESDEC, @ANYRESOCT, @ANYRES64, @ANYRES8, @ANYBLOB="3dea3f"], 0xff, 0x1fc, &(0x7f0000002c80)="$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") stat(&(0x7f0000005280)='./file0\x00', 0x0) dup(0xffffffffffffffff) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000071122700000000009500c9df00000000de54efd337d35285c161c5277edb8ebb15b58f91a5ee2dfc464680aaeda509f80db720be849cfad349052a513d731f3e1ab1616de782ebeab3fad78b022a9488de94c51041787406824c841f2e132d053e63230d79544561215df07865865ca3b1d4cd0ca39c621b8bcb16c583a7d45d18615d25d7189e29edf825cc4555d6357089204333610ca3ad8e0bd555a1a819abd1c3df59e861ad355c8b4c483a06d01b"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x11}}}, 0x1e) connect$pptp(r2, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000380)={0x14, &(0x7f00000006c0)={0x40, 0xd, 0xe7, {0xe7, 0x6, "173f3627f5404b6e6b6c7a5fe4db5a83630cce986a9b1b8a213f109c098e8fa8145a0c4d58bc15a92772afcb3cfa4d7e2a7522c1533c1654ae91d1ed9de1c4490488ed11953d195bfb6fd8238a0181bbcfe27e1ecaa79793ff27645914aaafa1312a1815193dcd7af2a7e1384c1c2b6a67c06d1bfd5e0591667a0e0cde45d7c90c09c32d950001ec07e82416c5f44e5e3746131bdd4e6fc9fcf839363c206f78edd1af9a3f17023f8844259347671b4826d8ab8d8fda1b2f6e5a420cf6744f519e6dbc730ec5c9d4f667f6b22dd1f256194a5f8a1e65342d2a3c38064047d914f2a96d173e"}}, &(0x7f0000000340)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000009c0)={0x44, &(0x7f0000000840)={0x20, 0x15, 0x98, "84bc90b51cd0cb9125a6e7ba8536532aa552e796d0962066dee140dc9098b68befdd1267ba1f3eb407d3414e363973a826bb58e6efa2124724fd15d9afcd8dc6ac33773032108a40e2ffca9b1cf6684a798b15c0a0e93352db7d01990f426d36904824d54395d1de1f39c411d16c7ff82b9709c5fa556c756296de1b1eb5c358f36ef7a5742a2f18151234126a99b7bdf4488555dff410dd"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000500)={0x20, 0x80, 0x1c, {0x7, 0x8a, 0x2, 0x0, 0x5, 0x1, 0x80, 0xa455, 0x400, 0xb6, 0xffff, 0x8}}, &(0x7f0000000640)={0x20, 0x85, 0x4, 0xffffffc0}, &(0x7f0000000900)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000940)={0x20, 0x87, 0x2, 0x3bf3}, &(0x7f0000000980)={0x20, 0x89, 0x2}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0}, 0x90) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) writev(r4, &(0x7f0000000680)=[{&(0x7f00000002c0)="2614", 0xf00}], 0x1) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000000)={0x1, 0x40, 0xeb, 0x101, 0x1a, "3e450f5726b4412a3327c17f177f7b72f19409"}) 330.371373ms ago: executing program 4 (id=1582): r0 = io_uring_setup(0x0, &(0x7f0000000300)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000380), 0x8, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000080850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='signal_generate\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) shutdown(r4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 231.726891ms ago: executing program 4 (id=1583): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000002000000000ff000000850000000f000000850000000500000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="28b3edf09f53aeca037d9ca0d2328785e48bdb7e505e162d45603ae210532daed97dcdbaaee8260bb1ce651d6411ca697c327a1b"], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={0x0}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x0, &(0x7f0000000200)=0x6) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x60000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040028bd7000ffdbdf2505000000080009000400000005000600000000000800050081ffffff0500060003000000050007000500000005000200010000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x24048081}, 0x20048801) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0xff, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x400}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) bind$netlink(r3, 0x0, 0x0) setsockopt$sock_int(r6, 0x1, 0x8, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x13) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r7, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000068f204002cbd7000fcdbdf250a0006001e000000060007000300000008000500", @ANYRES32=r9, @ANYBLOB="14000600fe880000000000000000000000000001"], 0x3c}}, 0x0) 108.648472ms ago: executing program 0 (id=1584): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x1, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x1) recvmmsg(r1, &(0x7f0000000740)=[{{&(0x7f00000005c0)=@tipc, 0x80, &(0x7f0000000400)=[{&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000640)=""/251, 0xfb}], 0x2}}], 0x40002db, 0x2, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r3, 0x5452, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x0, &(0x7f0000002180), 0x4) sendto$inet(r3, &(0x7f0000000480)="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", 0x2b5, 0xc000, 0x0, 0x0) recvmsg(r3, &(0x7f00000002c0)={&(0x7f00000003c0)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000002040)=[{&(0x7f0000000f80)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000100)=""/95, 0x5f}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x4, &(0x7f0000001f80)=""/176, 0xb0}, 0x2160) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) 0s ago: executing program 0 (id=1585): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x82400, 0x0, 0xfc, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB, @ANYRESHEX=r6, @ANYBLOB, @ANYRESHEX=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB=',fowner=', @ANYBLOB=',ob']) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000300)=0x4) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r8, 0x400448ca, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)) kernel console output (not intermixed with test programs): oduct=0268, bcdDevice= 0.00 [ 492.382715][ T1669] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.406474][ T1669] usb 2-1: config 0 descriptor?? [ 492.549787][ T5252] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1184'. [ 492.559422][ T5252] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1184'. [ 492.884709][ T1669] sony 0003:054C:0268.0013: unknown main item tag 0xd [ 492.895846][ T1669] sony 0003:054C:0268.0013: item fetching failed at offset 4/5 [ 492.903915][ T1669] sony 0003:054C:0268.0013: parse failed [ 492.909612][ T1669] sony: probe of 0003:054C:0268.0013 failed with error -22 [ 492.958580][ T28] audit: type=1400 audit(1719971610.947:330): avc: denied { watch } for pid=5255 comm="syz.2.1186" path="/1" dev="tmpfs" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 493.053838][ T5258] device syzkaller0 entered promiscuous mode [ 493.062348][ T1670] syzkaller0: tun_net_xmit 48 [ 493.069690][ T5258] syzkaller0: tun_net_xmit 1280 [ 493.075007][ T5258] syzkaller0: create flow: hash 3621484549 index 1 [ 493.082704][ T301] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 493.090237][ T5257] syzkaller0: delete flow: hash 3621484549 index 1 [ 493.095240][ T828] usb 2-1: USB disconnect, device number 37 [ 493.292502][ T1669] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 493.362586][ T301] usb 4-1: too many configurations: 65, using maximum allowed: 8 [ 493.802542][ T1669] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 493.814249][ T1669] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 493.824236][ T1669] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 493.833487][ T1669] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.843407][ T1669] usb 1-1: config 0 descriptor?? [ 493.879162][ T28] audit: type=1400 audit(1719971611.867:331): avc: denied { ioctl } for pid=5283 comm="syz.1.1198" path="socket:[35729]" dev="sockfs" ino=35729 ioctlcmd=0x6616 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 494.242496][ T301] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 494.251809][ T301] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.752717][ T301] usb 4-1: Found UVC 0.00 device (046d:08c1) [ 494.759723][ T301] usb 4-1: No valid video chain found. [ 494.782430][ T1670] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 494.956314][ T301] usb 4-1: USB disconnect, device number 46 [ 495.062625][ T1669] uclogic 0003:256C:006D.0014: interface is invalid, ignoring [ 495.162447][ T1670] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.182345][ T1670] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 495.202342][ T1670] usb 3-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 495.211309][ T1670] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.242517][ T1670] usb 3-1: config 0 descriptor?? [ 495.570037][ T1669] usb 1-1: USB disconnect, device number 27 [ 495.611277][ T28] audit: type=1400 audit(1719971613.597:332): avc: denied { name_bind } for pid=5316 comm="syz.3.1213" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 495.612132][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Dropping request. Check SNMP counters. [ 495.725552][ T1670] sony 0003:054C:0268.0015: unknown main item tag 0xd [ 495.749667][ T1670] sony 0003:054C:0268.0015: item fetching failed at offset 4/5 [ 495.758781][ T1670] sony 0003:054C:0268.0015: parse failed [ 495.765268][ T1670] sony: probe of 0003:054C:0268.0015 failed with error -22 [ 495.844895][ T5333] loop4: detected capacity change from 0 to 512 [ 495.881450][ T5333] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 495.924958][ T1669] usb 3-1: USB disconnect, device number 29 [ 495.932738][ T5333] EXT4-fs (loop4): 1 truncate cleaned up [ 495.953373][ T5333] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 495.963819][ T28] audit: type=1400 audit(1719971613.957:333): avc: denied { write } for pid=5338 comm="syz.0.1221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 496.036890][ T28] audit: type=1400 audit(1719971613.977:334): avc: denied { map } for pid=5338 comm="syz.0.1221" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 496.097864][ T5170] EXT4-fs warning (device loop4): __ext4fs_dirhash:270: inode #2: comm syz-executor: Siphash requires key [ 496.135356][ T5170] EXT4-fs (loop4): unmounting filesystem. [ 496.412547][ T1669] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 496.734187][ T5356] loop2: detected capacity change from 0 to 2048 [ 496.741106][ T5356] EXT4-fs: Ignoring removed mblk_io_submit option [ 496.780153][ T5356] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 496.793002][ T1669] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 496.814386][ T1669] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 496.862422][ T1669] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 496.897887][ T8] device bridge_slave_1 left promiscuous mode [ 496.906494][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.914508][ T1669] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 496.932425][ T1669] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.947396][ T8] device bridge_slave_0 left promiscuous mode [ 496.952417][ T1669] usb 1-1: config 0 descriptor?? [ 496.980239][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.024649][ T8] device veth1_macvtap left promiscuous mode [ 497.044292][ T8] device veth0_vlan left promiscuous mode [ 497.434807][ T1669] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 497.452542][ T1669] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 497.480371][ T1669] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 497.502430][ T1669] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 497.509737][ T1669] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 497.537583][ T1669] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 497.557771][ T1669] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 497.565116][ T1669] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 497.592429][ T1669] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 497.614740][ T5196] EXT4-fs (loop2): unmounting filesystem. [ 497.617864][ T1669] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 497.639465][ T1669] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 497.654241][ T1669] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 497.663345][ T1669] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 497.670611][ T1669] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 497.686107][ T1669] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 497.698134][ T1669] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 497.756992][ T1669] plantronics 0003:047F:FFFF.0016: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 497.782564][ T5352] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.789468][ T5352] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.817027][ T1669] usb 1-1: USB disconnect, device number 28 [ 497.841427][ T5352] device bridge_slave_0 entered promiscuous mode [ 497.873782][ T5352] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.895805][ T5352] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.915119][ T5352] device bridge_slave_1 entered promiscuous mode [ 497.983391][ T1670] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 498.161664][ T5352] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.168608][ T5352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 498.175833][ T5352] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.182744][ T5352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 498.272806][ T1669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 498.281844][ T1669] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.293130][ T1669] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.313590][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 498.321928][ T301] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.328859][ T301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 498.337041][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 498.342561][ T3189] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 498.345907][ T301] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.359109][ T301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 498.372540][ T1670] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 498.394926][ T1670] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 498.408048][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 498.417563][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 498.423406][ T1670] usb 3-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 498.447131][ T1670] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.462144][ T1669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 498.474800][ T1670] usb 3-1: config 0 descriptor?? [ 498.489332][ T1669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 498.498765][ T1669] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 498.507611][ T1669] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 498.517642][ T5352] device veth0_vlan entered promiscuous mode [ 498.540440][ T1669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 498.552196][ T5352] device veth1_macvtap entered promiscuous mode [ 498.574213][ T1669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 498.593206][ T1669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 498.640617][ T3189] usb 2-1: Using ep0 maxpacket: 32 [ 498.711111][ T28] audit: type=1400 audit(1719971616.697:335): avc: denied { audit_write } for pid=5381 comm="syz.4.1236" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 498.732521][ T301] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 498.755388][ T28] audit: type=1107 audit(1719971616.697:336): pid=5381 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 498.772454][ T3189] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 498.788774][ T3189] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 498.807604][ T3189] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 498.822250][ T5384] loop4: detected capacity change from 0 to 1024 [ 498.828778][ T3189] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.845745][ T3189] usb 2-1: config 0 descriptor?? [ 498.864109][ T5384] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 498.873194][ T5370] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 498.903767][ T3189] hub 2-1:0.0: USB hub found [ 498.969259][ T1670] sony 0003:054C:0268.0017: unknown main item tag 0x0 [ 498.980091][ T1670] sony 0003:054C:0268.0017: unknown main item tag 0x0 [ 498.996137][ T1670] sony 0003:054C:0268.0017: unknown main item tag 0x0 [ 499.012292][ T1670] sony 0003:054C:0268.0017: unknown main item tag 0x0 [ 499.028836][ T1670] sony 0003:054C:0268.0017: unknown main item tag 0x0 [ 499.067437][ T1670] sony 0003:054C:0268.0017: hiddev96,hidraw0: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.2-1/input0 [ 499.088179][ T1670] sony 0003:054C:0268.0017: failed to claim input [ 499.112529][ T3189] hub 2-1:0.0: 2 ports detected [ 499.242618][ T301] usb 4-1: config 0 has no interfaces? [ 499.325760][ T1669] usb 3-1: USB disconnect, device number 30 [ 499.433011][ T301] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 499.472530][ T3780] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 499.506154][ T301] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.585887][ T301] usb 4-1: Product: syz [ 499.609699][ T301] usb 4-1: Manufacturer: syz [ 499.697537][ T301] usb 4-1: SerialNumber: syz [ 499.765886][ T301] usb 4-1: config 0 descriptor?? [ 499.872853][ T3780] usb 5-1: config 0 has an invalid interface number: 156 but max is 1 [ 499.881048][ T3780] usb 5-1: config 0 has no interface number 1 [ 499.887402][ T3780] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 499.897548][ T3780] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 499.939628][ T3780] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 499.949466][ T3780] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 499.959923][ T3780] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 499.970251][ T3780] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.979983][ T3780] usb 5-1: config 0 descriptor?? [ 500.024475][ T3780] usb 5-1: MIDIStreaming interface descriptor not found [ 500.042518][ T3539] udevd[3539]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.156/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 500.059761][ T3780] snd-usb-audio: probe of 5-1:0.156 failed with error -12 [ 500.075981][ T5401] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1241'. [ 500.129767][ T1670] usb 4-1: USB disconnect, device number 47 [ 500.486629][ T5424] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1253'. [ 500.531781][ T28] audit: type=1400 audit(1719971618.517:337): avc: denied { ioctl } for pid=5426 comm="syz.2.1255" path="socket:[37308]" dev="sockfs" ino=37308 ioctlcmd=0x48cc scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 500.716835][ T5435] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1256'. [ 500.809224][ T28] audit: type=1400 audit(1719971618.797:338): avc: denied { read } for pid=5436 comm="syz.3.1257" name="rtc0" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 500.880252][ T28] audit: type=1400 audit(1719971618.797:339): avc: denied { open } for pid=5436 comm="syz.3.1257" path="/dev/rtc0" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 500.912600][ T28] audit: type=1400 audit(1719971618.797:340): avc: denied { ioctl } for pid=5436 comm="syz.3.1257" path="/dev/rtc0" dev="devtmpfs" ino=171 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 501.116540][ T5445] loop0: detected capacity change from 0 to 8192 [ 501.122858][ T3780] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 501.172951][ T5445] loop0: p1 p3 p4 [ 501.178285][ T5445] loop0: p1 size 3523149824 extends beyond EOD, truncated [ 501.191351][ T5445] loop0: p3 start 4294901760 is beyond EOD, truncated [ 501.200577][ T5445] loop0: p4 size 50331648 extends beyond EOD, truncated [ 501.212921][ T101] loop0: p1 p3 p4 [ 501.221446][ T101] loop0: p1 size 3523149824 extends beyond EOD, truncated [ 501.239781][ T101] loop0: p3 start 4294901760 is beyond EOD, truncated [ 501.247189][ T101] loop0: p4 size 50331648 extends beyond EOD, truncated [ 501.292429][ T3538] udevd[3538]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 501.294430][ T5449] loop0: detected capacity change from 0 to 512 [ 501.323283][ T5449] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 501.340260][ T3538] udevd[3538]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 501.354555][ T5449] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #15: comm syz.0.1262: casefold flag without casefold feature [ 501.394321][ T5449] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #12: comm syz.0.1262: missing EA_INODE flag [ 501.406436][ T5449] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.1262: error while reading EA inode 12 err=-117 [ 501.419229][ T5449] EXT4-fs (loop0): 1 orphan inode deleted [ 501.424989][ T5449] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 501.455164][ T5114] EXT4-fs (loop0): unmounting filesystem. [ 501.483365][ T3780] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.496754][ T3780] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 501.507393][ T3780] usb 3-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 501.516401][ T3780] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.526044][ T3780] usb 3-1: config 0 descriptor?? [ 501.635786][ T1670] usb 2-1: USB disconnect, device number 38 [ 501.742476][ T417] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 501.819043][ T3189] usb 5-1: USB disconnect, device number 35 [ 501.929673][ T5352] EXT4-fs (loop4): unmounting filesystem. [ 501.978974][ T5457] loop4: detected capacity change from 0 to 512 [ 501.982554][ T417] usb 1-1: Using ep0 maxpacket: 16 [ 502.016151][ T5457] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 502.025031][ T3780] sony 0003:054C:0268.0018: unknown main item tag 0x0 [ 502.025097][ T3780] sony 0003:054C:0268.0018: unknown main item tag 0x0 [ 502.033632][ T5457] ext4 filesystem being mounted at /3/bus supports timestamps until 2038 (0x7fffffff) [ 502.067280][ T3780] sony 0003:054C:0268.0018: unknown main item tag 0x0 [ 502.068509][ T5352] EXT4-fs (loop4): unmounting filesystem. [ 502.082519][ T3780] sony 0003:054C:0268.0018: unknown main item tag 0x0 [ 502.089301][ T3780] sony 0003:054C:0268.0018: unknown main item tag 0x0 [ 502.117843][ T3780] sony 0003:054C:0268.0018: hiddev96,hidraw0: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.2-1/input0 [ 502.129881][ T417] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 502.144319][ T28] audit: type=1400 audit(1719971620.137:341): avc: denied { write } for pid=5454 comm="syz.3.1265" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 502.144986][ T5458] 9pnet_fd: Insufficient options for proto=fd [ 502.171775][ T417] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 502.186821][ T3780] sony 0003:054C:0268.0018: failed to claim input [ 502.204661][ T417] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 502.212110][ T28] audit: type=1326 audit(1719971620.197:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5454 comm="syz.3.1265" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fda9d975f19 code=0x10000 [ 502.243805][ T417] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.261271][ T417] usb 1-1: config 0 descriptor?? [ 502.286242][ T3780] usb 3-1: USB disconnect, device number 31 [ 502.396822][ T28] audit: type=1400 audit(1719971620.387:343): avc: denied { setopt } for pid=5468 comm="syz.1.1270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 502.512761][ T28] audit: type=1400 audit(1719971620.507:344): avc: denied { read } for pid=5476 comm="syz.1.1273" name="msr" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 502.735889][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Dropping request. Check SNMP counters. [ 502.754418][ T5479] loop4: detected capacity change from 0 to 8192 [ 502.791094][ T5483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.812880][ T5479] loop4: p1 p2 p3 p4 [ 502.818404][ T5483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.821494][ T5479] loop4: p1 size 108922248 extends beyond EOD, [ 502.836676][ T5484] netlink: 'syz.4.1274': attribute type 4 has an invalid length. [ 502.856314][ T417] hid (null): unknown global tag 0xc [ 502.858354][ T5479] truncated [ 502.865433][ T417] hid (null): report_id 0 is invalid [ 502.885887][ T417] hid-generic 0003:0158:0100.0019: unknown main item tag 0x1 [ 502.886378][ T5479] loop4: p2 start 861536256 is beyond EOD, [ 502.901913][ T417] hid-generic 0003:0158:0100.0019: unexpected long global item [ 502.907087][ T5479] truncated [ 502.909643][ T417] hid-generic: probe of 0003:0158:0100.0019 failed with error -22 [ 502.925535][ T5479] loop4: p3 start 851968 is beyond EOD, truncated [ 502.946087][ T5479] loop4: p4 size 65536 extends beyond EOD, truncated [ 503.079733][ T5483] loop0: detected capacity change from 0 to 512 [ 503.126549][ T5483] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 503.145624][ T5483] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038 (0x7fffffff) [ 503.262443][ T3780] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 503.272613][ T5490] loop2: detected capacity change from 0 to 1024 [ 503.295837][ T5490] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 503.722439][ T3780] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 503.777889][ T3780] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 503.791024][ T5494] loop1: detected capacity change from 0 to 512 [ 503.978839][ T5494] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 504.003098][ T3780] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 504.061585][ T3780] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.159645][ T5494] ext4 filesystem being mounted at /26/bus supports timestamps until 2038 (0x7fffffff) [ 504.179353][ T3780] usb 5-1: Product: syz [ 504.189221][ T3780] usb 5-1: Manufacturer: syz [ 504.213516][ T3780] usb 5-1: SerialNumber: syz [ 504.317288][ T5196] EXT4-fs (loop2): unmounting filesystem. [ 504.326465][ T5069] EXT4-fs (loop1): unmounting filesystem. [ 504.425172][ T5501] loop2: detected capacity change from 0 to 2048 [ 504.451493][ T5501] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 504.515062][ T3189] usb 1-1: USB disconnect, device number 29 [ 504.530950][ T5114] EXT4-fs (loop0): unmounting filesystem. [ 504.692426][ T1670] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 504.702682][ T3780] usb 5-1: MIDIStreaming interface descriptor not found [ 505.102734][ T3780] usb 5-1: USB disconnect, device number 36 [ 505.401124][ T5196] EXT4-fs (loop2): unmounting filesystem. [ 505.499702][ T5514] loop2: detected capacity change from 0 to 2048 [ 505.521960][ T5514] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 505.724109][ T1670] usb 2-1: Using ep0 maxpacket: 32 [ 506.919429][ T5196] EXT4-fs (loop2): unmounting filesystem. [ 507.112613][ T3410] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 507.472650][ T3410] usb 5-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 507.506059][ T3410] usb 5-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 507.532495][ T417] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 507.557446][ T3410] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 507.584018][ T3410] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.892551][ T3410] usb 5-1: string descriptor 0 read error: -71 [ 507.902646][ T417] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 507.914561][ T3410] aiptek 5-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 507.932369][ T417] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 507.958566][ T3410] usb 5-1: USB disconnect, device number 37 [ 507.965469][ T417] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 508.010169][ T417] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.022454][ T1670] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 508.029914][ T1670] usb 2-1: can't read configurations, error -71 [ 508.187233][ T417] usb 3-1: config 0 descriptor?? [ 509.152384][ T1670] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 509.169934][ T5544] loop4: detected capacity change from 0 to 512 [ 509.236686][ T5548] loop3: detected capacity change from 0 to 1024 [ 509.260962][ T5544] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 509.270671][ T5544] ext4 filesystem being mounted at /9/bus supports timestamps until 2038 (0x7fffffff) [ 509.282068][ T5548] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 509.481646][ T5352] EXT4-fs (loop4): unmounting filesystem. [ 509.508017][ T5553] xt_bpf: check failed: parse error [ 509.953198][ T417] uclogic 0003:256C:006D.001A: interface is invalid, ignoring [ 510.343356][ T1670] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 510.345892][ T5007] EXT4-fs (loop3): unmounting filesystem. [ 510.354803][ T1670] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 510.502528][ T1670] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 510.522786][ T1670] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 510.530676][ T1670] usb 2-1: SerialNumber: syz [ 510.592557][ T1670] usb 2-1: can't set config #1, error -71 [ 511.037756][ T5561] loop3: detected capacity change from 0 to 2048 [ 511.231455][ T5561] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 511.432887][ T3780] usb 3-1: USB disconnect, device number 32 [ 511.434719][ T1670] usb 2-1: USB disconnect, device number 40 [ 511.644272][ T5571] loop1: detected capacity change from 0 to 512 [ 511.858390][ T5571] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 512.061682][ T5574] netlink: 'syz.2.1293': attribute type 4 has an invalid length. [ 512.075954][ T5571] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 512.095883][ T5571] EXT4-fs (loop1): 1 truncate cleaned up [ 512.108019][ T5571] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 512.332407][ T5007] EXT4-fs (loop3): unmounting filesystem. [ 512.361115][ T5567] loop2: detected capacity change from 0 to 8192 [ 513.217591][ T5069] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 513.356747][ T5069] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 513.742407][ T5589] xt_bpf: check failed: parse error [ 513.944921][ T5595] loop2: detected capacity change from 0 to 1024 [ 513.972363][ T1670] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 513.974128][ T5597] xt_bpf: check failed: parse error [ 513.987563][ T5595] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 514.978411][ T5069] EXT4-fs (loop1): unmounting filesystem. [ 515.112133][ T5196] EXT4-fs (loop2): unmounting filesystem. [ 515.262535][ T1670] usb 4-1: Using ep0 maxpacket: 32 [ 515.472433][ T1670] usb 4-1: unable to read config index 0 descriptor/all [ 515.483441][ T1670] usb 4-1: can't read configurations, error -71 [ 515.539907][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 515.539943][ T28] audit: type=1400 audit(1719971633.527:346): avc: denied { mounton } for pid=5614 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 515.547496][ T5609] loop0: detected capacity change from 0 to 2048 [ 515.795297][ T5609] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 516.177791][ T305] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 518.289234][ T8] device bridge_slave_1 left promiscuous mode [ 518.297148][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.305775][ T8] device bridge_slave_0 left promiscuous mode [ 518.323720][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.928203][ T8] device veth1_macvtap left promiscuous mode [ 518.974586][ T5114] EXT4-fs (loop0): unmounting filesystem. [ 519.015794][ T8] device veth0_vlan left promiscuous mode [ 520.056863][ T5636] loop2: detected capacity change from 0 to 1024 [ 520.082033][ T5634] loop4: detected capacity change from 0 to 1024 [ 520.149365][ T5636] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 520.272581][ T5634] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 521.688834][ T5196] EXT4-fs (loop2): unmounting filesystem. [ 521.710664][ T5642] loop0: detected capacity change from 0 to 2048 [ 521.726651][ T5642] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 521.833350][ T5656] xt_bpf: check failed: parse error [ 521.962389][ T321] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 522.047570][ T5664] xt_bpf: check failed: parse error [ 522.090973][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.110788][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.121373][ T5614] device bridge_slave_0 entered promiscuous mode [ 522.147164][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.158900][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.169868][ T5114] EXT4-fs (loop0): unmounting filesystem. [ 522.171347][ T5614] device bridge_slave_1 entered promiscuous mode [ 522.279693][ T5670] loop3: detected capacity change from 0 to 2048 [ 522.304623][ T5670] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 522.352625][ T305] usb 3-1: Using ep0 maxpacket: 8 [ 522.437394][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.444375][ T5614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 522.451619][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.458614][ T5614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 522.476336][ T321] usb 5-1: config 0 has an invalid interface number: 156 but max is 1 [ 522.484746][ T321] usb 5-1: config 0 has no interface number 1 [ 522.491106][ T321] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 522.492643][ T305] usb 3-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 522.500844][ T321] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 522.521956][ T321] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 522.531919][ T321] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 522.541077][ T305] usb 3-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 522.542176][ T321] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 522.601222][ T321] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.648905][ T321] usb 5-1: config 0 descriptor?? [ 522.877429][ T1888] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.896565][ T1888] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.198994][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 523.207447][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 523.238230][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 523.257233][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 523.272922][ T1888] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.279867][ T1888] bridge0: port 1(bridge_slave_0) entered forwarding state [ 523.302536][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 523.321496][ T1888] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 523.327521][ T305] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 523.338324][ T305] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.340396][ T5007] EXT4-fs (loop3): unmounting filesystem. [ 523.353584][ T1888] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.360507][ T1888] bridge0: port 2(bridge_slave_1) entered forwarding state [ 523.393228][ T321] usb 5-1: can't set config #0, error -71 [ 523.435625][ T321] usb 5-1: USB disconnect, device number 38 [ 524.311314][ T3410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 524.320127][ T5352] EXT4-fs (loop4): unmounting filesystem. [ 524.321016][ T3410] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 524.336418][ T3410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 524.486331][ T3410] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 524.495843][ T3410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 524.504448][ T3410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 524.522191][ T5614] device veth0_vlan entered promiscuous mode [ 524.533029][ T1669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 524.541226][ T1669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 524.578906][ T1669] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 524.590766][ T1669] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 525.011141][ T1669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 525.061047][ T1669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 525.189421][ T5614] device veth1_macvtap entered promiscuous mode [ 525.304470][ T1670] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 525.312449][ T305] usb 3-1: string descriptor 0 read error: -71 [ 525.319490][ T305] aiptek 3-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 525.328858][ T1670] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 525.339915][ T5691] loop4: detected capacity change from 0 to 1024 [ 525.345548][ T1670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 525.354215][ T305] usb 3-1: USB disconnect, device number 33 [ 525.395222][ T5691] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 525.410190][ T3189] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 525.418849][ T3189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 526.883493][ T5352] EXT4-fs (loop4): unmounting filesystem. [ 526.942123][ T5708] xt_bpf: check failed: parse error [ 526.983314][ T5710] loop4: detected capacity change from 0 to 2048 [ 527.060075][ T5710] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 527.112403][ T321] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 527.252508][ T305] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 527.692785][ T321] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 527.731387][ T321] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 527.972613][ T321] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 528.002020][ T321] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 528.030593][ T321] usb 1-1: SerialNumber: syz [ 528.080309][ T5352] EXT4-fs (loop4): unmounting filesystem. [ 528.163173][ T5723] loop3: detected capacity change from 0 to 8192 [ 528.178717][ T5725] loop4: detected capacity change from 0 to 2048 [ 528.193638][ T305] usb 3-1: Using ep0 maxpacket: 32 [ 528.203476][ T5723] loop3: p1 p2 p3 p4 [ 528.207514][ T5723] loop3: p1 size 108922248 extends beyond EOD, truncated [ 528.218550][ T5725] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 528.227825][ T5723] loop3: p2 start 861536256 is beyond EOD, truncated [ 528.236490][ T5723] loop3: p3 start 851968 is beyond EOD, truncated [ 528.265638][ T5723] loop3: p4 size 65536 extends beyond EOD, truncated [ 528.473408][ T305] usb 3-1: unable to read config index 0 descriptor/all [ 528.481171][ T305] usb 3-1: can't read configurations, error -71 [ 528.494477][ T5723] netlink: 'syz.3.1332': attribute type 4 has an invalid length. [ 528.521354][ T5731] xt_bpf: check failed: parse error [ 528.932724][ T1669] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 529.444842][ T5352] EXT4-fs (loop4): unmounting filesystem. [ 529.454287][ T321] usb 1-1: 0:2 : does not exist [ 529.459078][ T321] usb 1-1: unit 5: unexpected type 0x0b [ 529.495573][ T321] usb 1-1: USB disconnect, device number 30 [ 529.513382][ T3538] udevd[3538]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 529.536295][ T5740] xt_bpf: check failed: parse error [ 529.762471][ T1669] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 529.774650][ T1669] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 529.802421][ T3410] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 529.942504][ T1669] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 529.951472][ T1669] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.960580][ T1669] usb 4-1: Product: syz [ 529.964958][ T1669] usb 4-1: Manufacturer: syz [ 529.970202][ T1669] usb 4-1: SerialNumber: syz [ 529.982412][ T305] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 530.442566][ T3410] usb 5-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 530.523935][ T1669] usb 4-1: MIDIStreaming interface descriptor not found [ 530.549929][ T3410] usb 5-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 530.653412][ T3410] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 530.695223][ T3410] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.781321][ T1669] usb 4-1: USB disconnect, device number 50 [ 531.081454][ T5750] xt_bpf: check failed: parse error [ 531.222457][ T305] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 55, changing to 9 [ 531.254162][ T305] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 8496, setting to 1024 [ 531.268527][ T5723] syz.3.1332 (5723) used greatest stack depth: 20520 bytes left [ 531.302445][ T3410] usb 5-1: string descriptor 0 read error: -71 [ 531.309494][ T3410] aiptek 5-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 531.332700][ T3410] usb 5-1: USB disconnect, device number 39 [ 532.202951][ T5760] 9pnet_fd: Insufficient options for proto=fd [ 532.222488][ T305] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 532.235627][ T305] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.250928][ T305] usb 3-1: Product: syz [ 532.259320][ T305] usb 3-1: Manufacturer: syz [ 532.269117][ T305] usb 3-1: SerialNumber: syz [ 532.286209][ T305] usb 3-1: config 0 descriptor?? [ 532.351689][ T5762] loop3: detected capacity change from 0 to 2048 [ 532.398730][ T5762] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 532.625413][ T5774] loop2: detected capacity change from 0 to 512 [ 532.632066][ T5774] EXT4-fs: Ignoring removed nobh option [ 532.638991][ T5774] EXT4-fs: quotafile must be on filesystem root [ 532.651658][ T305] usb 3-1: USB disconnect, device number 35 [ 532.828523][ T319] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 533.445415][ T5781] xt_bpf: check failed: parse error [ 533.567282][ T5783] syz.2.1346[5783] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 533.567590][ T5783] syz.2.1346[5783] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 533.916849][ T5007] EXT4-fs (loop3): unmounting filesystem. [ 534.561951][ T3539] udevd[3539]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 534.809527][ T5793] xt_bpf: check failed: parse error [ 536.121272][ T5808] xt_bpf: check failed: parse error [ 536.162407][ T319] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 536.180128][ T319] usb 2-1: can't read configurations, error -71 [ 536.252387][ T753] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 536.266407][ T5812] loop0: detected capacity change from 0 to 2048 [ 536.404910][ T5812] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 539.918031][ T5114] EXT4-fs (loop0): unmounting filesystem. [ 539.986866][ T5829] xt_bpf: check failed: parse error [ 539.992876][ T753] usb 4-1: device descriptor read/all, error -71 [ 543.061489][ T5852] loop0: detected capacity change from 0 to 2048 [ 543.285257][ T5852] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 544.045880][ T5870] loop3: detected capacity change from 0 to 512 [ 544.102867][ T5870] EXT4-fs: Ignoring removed nobh option [ 544.127148][ T5870] EXT4-fs: quotafile must be on filesystem root [ 544.156733][ T5872] loop4: detected capacity change from 0 to 2048 [ 544.374324][ T5872] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 544.388815][ T5114] EXT4-fs (loop0): unmounting filesystem. [ 544.490819][ T5876] syz.3.1370[5876] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 544.491566][ T5876] syz.3.1370[5876] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 546.379409][ T5890] xt_bpf: check failed: parse error [ 546.750104][ T5897] loop2: detected capacity change from 0 to 1024 [ 547.134347][ T5897] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 547.851163][ T5906] xt_bpf: check failed: parse error [ 548.376907][ T5352] EXT4-fs (loop4): unmounting filesystem. [ 548.580822][ T5914] xt_bpf: check failed: parse error [ 548.591255][ T5196] EXT4-fs (loop2): unmounting filesystem. [ 551.548314][ T5932] loop3: detected capacity change from 0 to 1024 [ 551.566912][ T5911] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.618668][ T5911] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.627989][ T5932] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 551.654015][ T5911] device bridge_slave_0 entered promiscuous mode [ 551.712040][ T5911] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.871981][ T5911] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.880786][ T5911] device bridge_slave_1 entered promiscuous mode [ 552.798473][ T5007] EXT4-fs (loop3): unmounting filesystem. [ 552.852916][ T5939] xt_bpf: check failed: parse error [ 552.864172][ T5941] xt_bpf: check failed: parse error [ 553.192380][ T1669] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 553.347086][ T5948] loop4: detected capacity change from 0 to 2048 [ 553.376809][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 553.387259][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 553.420583][ T753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 553.429601][ T753] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 553.440802][ T5948] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 553.448469][ T753] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.456019][ T753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 553.463661][ T753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 553.472235][ T753] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 553.481100][ T753] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.488032][ T753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 553.504665][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 553.522871][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 553.531100][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 553.561062][ T753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 553.581375][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 553.614211][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 553.642262][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 553.688827][ T5911] device veth0_vlan entered promiscuous mode [ 553.702446][ T1669] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 55, changing to 9 [ 553.716578][ T1669] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 8496, setting to 1024 [ 553.993086][ T1669] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 554.029457][ T1669] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.103847][ T1669] usb 4-1: Product: syz [ 554.212381][ T1669] usb 4-1: Manufacturer: syz [ 554.216868][ T1669] usb 4-1: SerialNumber: syz [ 554.250117][ T1669] usb 4-1: config 0 descriptor?? [ 554.442808][ T5352] EXT4-fs (loop4): unmounting filesystem. [ 554.452801][ T828] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 554.464821][ T828] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 554.517837][ T5911] device veth1_macvtap entered promiscuous mode [ 554.531173][ T1669] usb 4-1: USB disconnect, device number 53 [ 554.596333][ T5959] loop4: detected capacity change from 0 to 1024 [ 554.630534][ T828] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 554.643727][ T828] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 554.664731][ T5959] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 554.677204][ T828] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 554.887055][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 554.903356][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 555.598347][ T5965] loop1: detected capacity change from 0 to 512 [ 555.668954][ T5352] EXT4-fs (loop4): unmounting filesystem. [ 555.681537][ T5965] EXT4-fs: Ignoring removed nobh option [ 555.704345][ T5965] EXT4-fs: quotafile must be on filesystem root [ 556.135617][ T5974] syz.1.1375[5974] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 556.135896][ T5974] syz.1.1375[5974] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 557.854728][ T2187] device bridge_slave_1 left promiscuous mode [ 557.902156][ T5987] xt_bpf: check failed: parse error [ 557.912686][ T2187] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.936631][ T5988] xt_bpf: check failed: parse error [ 557.957394][ T2187] device bridge_slave_0 left promiscuous mode [ 557.998055][ T2187] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.071237][ T2187] device veth1_macvtap left promiscuous mode [ 558.111994][ T2187] device veth0_vlan left promiscuous mode [ 558.275013][ T5991] loop2: detected capacity change from 0 to 2048 [ 558.383681][ T5991] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 560.729423][ T5196] EXT4-fs (loop2): unmounting filesystem. [ 560.851047][ T6012] loop3: detected capacity change from 0 to 1024 [ 561.025955][ T6012] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 561.192393][ T1670] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 561.353600][ T5997] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.506162][ T5997] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.627644][ T5997] device bridge_slave_0 entered promiscuous mode [ 561.763952][ T5997] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.770873][ T5997] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.834354][ T5997] device bridge_slave_1 entered promiscuous mode [ 561.982776][ T5007] EXT4-fs (loop3): unmounting filesystem. [ 562.142453][ T1670] usb 3-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 562.152751][ T1670] usb 3-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 562.166352][ T1670] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 562.175859][ T1670] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.241828][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 562.251888][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 562.283635][ T1669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 562.293184][ T1669] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 562.301949][ T1669] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.309166][ T1669] bridge0: port 1(bridge_slave_0) entered forwarding state [ 562.316897][ T828] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 562.325487][ T1669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 562.334304][ T1669] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 562.342519][ T319] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 562.342900][ T1669] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.356861][ T1669] bridge0: port 2(bridge_slave_1) entered forwarding state [ 562.376391][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 562.394144][ T1669] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 562.403035][ T1669] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 562.451693][ T753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 562.479894][ T1670] usb 3-1: string descriptor 0 read error: -71 [ 562.480521][ T1669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 562.488277][ T1670] aiptek 3-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 562.508350][ T1669] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 562.517772][ T1669] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 562.520598][ T1670] usb 3-1: USB disconnect, device number 36 [ 562.540218][ T5997] device veth0_vlan entered promiscuous mode [ 562.559831][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 562.570719][ T5997] device veth1_macvtap entered promiscuous mode [ 562.590850][ T1669] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 562.599538][ T1669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 562.615336][ T1669] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 562.624272][ T1669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 562.654914][ T2187] device bridge_slave_1 left promiscuous mode [ 562.660987][ T2187] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.682715][ T828] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 562.694545][ T828] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 562.705566][ T828] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 562.706208][ T2187] device bridge_slave_0 left promiscuous mode [ 562.724627][ T828] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 562.725386][ T2187] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.742393][ T828] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 562.745959][ T319] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 562.754739][ T6036] xt_bpf: check failed: parse error [ 562.765268][ T319] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 562.782762][ T2187] device veth1_macvtap left promiscuous mode [ 562.788759][ T2187] device veth0_vlan left promiscuous mode [ 562.802559][ T319] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 562.832563][ T753] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 562.840107][ T319] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 562.851210][ T319] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 562.924380][ T828] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 562.940332][ T828] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.959231][ T828] usb 5-1: Product: syz [ 563.052562][ T319] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 563.061795][ T319] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.070620][ T319] usb 4-1: Product: syz [ 563.075076][ T319] usb 4-1: Manufacturer: syz [ 563.079544][ T319] usb 4-1: SerialNumber: syz [ 563.112581][ T6032] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 563.119214][ T828] usb 5-1: Manufacturer: syz [ 563.124436][ T828] usb 5-1: SerialNumber: syz [ 563.152515][ T6031] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 564.008796][ T6032] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 564.022922][ T6032] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 564.030093][ T6031] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 564.052508][ T6031] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 564.116736][ T753] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 564.140545][ T6045] loop0: detected capacity change from 0 to 512 [ 564.146841][ T753] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 564.147451][ T6045] EXT4-fs: Ignoring removed nobh option [ 564.172039][ T6045] EXT4-fs: quotafile must be on filesystem root [ 564.322442][ T753] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 564.341685][ T753] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.351790][ T753] usb 2-1: Product: syz [ 564.359784][ T753] usb 2-1: Manufacturer: syz [ 564.369924][ T753] usb 2-1: SerialNumber: syz [ 564.429652][ T753] usb 2-1: config 0 descriptor?? [ 564.530092][ T6050] syz.0.1411[6050] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 564.530888][ T6050] syz.0.1411[6050] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 565.212826][ T6052] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 565.266511][ T6052] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 565.332468][ T6053] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 565.344792][ T753] snd-usb-audio: probe of 2-1:0.0 failed with error -12 [ 565.358151][ T753] usb 2-1: USB disconnect, device number 43 [ 565.360454][ T6053] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 565.404428][ T3539] udevd[3539]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 565.503993][ T6031] loop4: detected capacity change from 0 to 16 [ 565.507571][ T6056] loop0: detected capacity change from 0 to 8192 [ 565.562874][ T6056] loop0: p1 p2 p3 p4 [ 565.565879][ T6032] loop3: detected capacity change from 0 to 16 [ 565.566984][ T6056] loop0: p1 size 108922248 extends beyond EOD, [ 565.573634][ T6031] erofs: (device loop4): mounted with root inode @ nid 36. [ 565.574934][ T6056] truncated [ 565.583926][ T6031] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 36 [ 565.600663][ T6032] erofs: (device loop3): mounted with root inode @ nid 36. [ 565.610150][ T6032] erofs: (device loop3): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 36 [ 565.617367][ T6056] loop0: p2 start 861536256 is beyond EOD, [ 565.623628][ T6031] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 565.625878][ T6056] truncated [ 565.648289][ T6032] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 565.648350][ T6056] loop0: p3 start 851968 is beyond EOD, truncated [ 565.693159][ T6056] loop0: p4 size 65536 extends beyond EOD, truncated [ 565.722486][ T828] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 565.729600][ T828] cdc_ncm 5-1:1.0: dwNtbInMaxSize=3 is too small. Using 2048 [ 565.737924][ T828] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 565.763042][ T319] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 565.770082][ T319] cdc_ncm 4-1:1.0: dwNtbInMaxSize=3 is too small. Using 2048 [ 565.778501][ T319] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 565.960708][ T828] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 565.972826][ T305] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 565.978356][ T828] usb 5-1: USB disconnect, device number 40 [ 565.990252][ T828] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 566.024864][ T319] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 566.064864][ T28] audit: type=1400 audit(1719971684.057:347): avc: denied { read } for pid=139 comm="dhcpcd" name="n22" dev="tmpfs" ino=11617 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 566.095886][ T319] usb 4-1: USB disconnect, device number 54 [ 566.109556][ T319] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 566.123693][ T28] audit: type=1400 audit(1719971684.057:348): avc: denied { open } for pid=139 comm="dhcpcd" path="/run/udev/data/n22" dev="tmpfs" ino=11617 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 566.182359][ T1888] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 566.201119][ T28] audit: type=1400 audit(1719971684.057:349): avc: denied { getattr } for pid=139 comm="dhcpcd" path="/run/udev/data/n22" dev="tmpfs" ino=11617 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 566.396168][ T28] audit: type=1400 audit(1719971684.387:350): avc: denied { create } for pid=6061 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 566.422531][ T305] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 566.437892][ T305] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 566.452165][ T28] audit: type=1400 audit(1719971684.387:351): avc: denied { write } for pid=6061 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.usb0.link" dev="tmpfs" ino=11629 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 566.527639][ T28] audit: type=1400 audit(1719971684.387:352): avc: denied { append } for pid=6061 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" dev="tmpfs" ino=11629 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 566.558920][ T28] audit: type=1400 audit(1719971684.477:353): avc: denied { unlink } for pid=6073 comm="rm" name="resolv.conf.usb0.link" dev="tmpfs" ino=11629 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 566.592905][ T1888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 566.617711][ T1888] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 566.636549][ T6077] xt_bpf: check failed: parse error [ 566.652677][ T305] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 566.676280][ T305] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.706087][ T305] usb 1-1: Product: syz [ 566.723691][ T305] usb 1-1: Manufacturer: syz [ 566.753280][ T305] usb 1-1: SerialNumber: syz [ 566.802611][ T1888] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 566.811651][ T1888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.826105][ T1888] usb 2-1: Product: syz [ 566.830229][ T1888] usb 2-1: Manufacturer: syz [ 566.838441][ T1888] usb 2-1: SerialNumber: syz [ 566.852879][ T1888] usb 2-1: config 0 descriptor?? [ 566.977403][ T6098] xt_bpf: check failed: parse error [ 567.112643][ T305] usb 1-1: MIDIStreaming interface descriptor not found [ 567.144687][ T305] usb 1-1: USB disconnect, device number 31 [ 567.178824][ T1888] snd-usb-audio: probe of 2-1:0.0 failed with error -12 [ 567.187449][ T1888] usb 2-1: USB disconnect, device number 44 [ 567.206231][ T753] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 567.206535][ T641] udevd[641]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 568.261746][ T6113] loop1: detected capacity change from 0 to 512 [ 568.269392][ T6113] EXT4-fs: Ignoring removed nobh option [ 568.275409][ T6113] EXT4-fs: quotafile must be on filesystem root [ 569.522047][ T6116] syz.1.1424[6116] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 569.522417][ T6116] syz.1.1424[6116] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 569.878679][ T6120] xt_bpf: check failed: parse error [ 570.017984][ T6123] xt_bpf: check failed: parse error [ 570.101308][ T753] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 55, changing to 9 [ 570.112502][ T753] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 8496, setting to 1024 [ 570.122389][ T828] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 570.139734][ T6129] xt_bpf: check failed: parse error [ 571.028815][ T753] usb 4-1: string descriptor 0 read error: -71 [ 571.035013][ T753] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 571.044824][ T753] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.068049][ T753] usb 4-1: config 0 descriptor?? [ 571.092530][ T828] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 571.112670][ T753] usb 4-1: can't set config #0, error -71 [ 571.113689][ T828] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 571.127849][ T753] usb 4-1: USB disconnect, device number 55 [ 571.159751][ T828] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 571.201211][ T6133] loop1: detected capacity change from 0 to 8192 [ 571.202389][ T828] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 571.232373][ T828] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 571.252406][ T305] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 571.261353][ T6137] xt_bpf: check failed: parse error [ 571.267843][ T6133] loop1: p1 p2 p3 p4 [ 571.272589][ T6133] loop1: p1 size 108922248 extends beyond EOD, truncated [ 571.285430][ T6133] loop1: p2 start 861536256 is beyond EOD, truncated [ 571.302154][ T6133] loop1: p3 start 851968 is beyond EOD, truncated [ 571.308501][ T6133] loop1: p4 size 65536 extends beyond EOD, truncated [ 571.421379][ T828] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 571.432739][ T828] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.446633][ T6141] loop2: detected capacity change from 0 to 1024 [ 571.452934][ T828] usb 1-1: Product: syz [ 571.452979][ T828] usb 1-1: Manufacturer: syz [ 571.453023][ T828] usb 1-1: SerialNumber: syz [ 571.482024][ T6141] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 571.492696][ T6121] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 571.612381][ T417] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 571.754493][ T6121] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 571.769112][ T6121] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 571.992397][ T417] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 572.003712][ T417] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 572.162811][ T305] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 572.172511][ T417] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 572.173892][ T305] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 572.189666][ T417] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.198784][ T305] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 572.201792][ T417] usb 2-1: Product: syz [ 572.218525][ T417] usb 2-1: Manufacturer: syz [ 572.223442][ T417] usb 2-1: SerialNumber: syz [ 572.223906][ T305] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 572.238898][ T305] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 572.422449][ T305] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 572.431576][ T305] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.432917][ T6121] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 572.440141][ T305] usb 5-1: Product: syz [ 572.450762][ T305] usb 5-1: Manufacturer: syz [ 572.455459][ T305] usb 5-1: SerialNumber: syz [ 572.464295][ T6121] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 572.482426][ T6128] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 572.552773][ T417] usb 2-1: MIDIStreaming interface descriptor not found [ 572.695632][ T6121] loop0: detected capacity change from 0 to 16 [ 572.712076][ T6121] erofs: (device loop0): mounted with root inode @ nid 36. [ 572.719405][ T6128] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 572.721925][ T5196] EXT4-fs (loop2): unmounting filesystem. [ 572.727679][ T6121] erofs: (device loop0): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 36 [ 572.739703][ T417] usb 2-1: USB disconnect, device number 45 [ 572.745977][ T6128] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 572.755024][ T6121] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 572.932995][ T828] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 572.946328][ T828] cdc_ncm 1-1:1.0: dwNtbInMaxSize=3 is too small. Using 2048 [ 573.081269][ T828] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 573.504963][ T828] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 573.615222][ T6157] xt_bpf: check failed: parse error [ 573.685954][ T828] usb 1-1: USB disconnect, device number 32 [ 573.694246][ T828] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 573.714292][ T28] audit: type=1400 audit(1719971691.707:354): avc: denied { lock } for pid=6159 comm="syz.3.1438" path="socket:[39951]" dev="sockfs" ino=39951 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 573.856167][ T6162] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 574.019262][ T6162] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 574.494465][ T6128] loop4: detected capacity change from 0 to 16 [ 574.504816][ T6165] loop0: detected capacity change from 0 to 512 [ 574.511652][ T6165] EXT4-fs: Ignoring removed nobh option [ 574.514182][ T6128] erofs: (device loop4): mounted with root inode @ nid 36. [ 574.524723][ T6165] EXT4-fs: quotafile must be on filesystem root [ 574.599818][ T6128] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 36 [ 574.634801][ T6128] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 574.712994][ T305] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 574.719311][ T305] cdc_ncm 5-1:1.0: dwNtbInMaxSize=3 is too small. Using 2048 [ 574.719906][ T6170] xt_bpf: check failed: parse error [ 574.730722][ T305] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 574.810080][ T6171] syz.0.1440[6171] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 574.810994][ T6171] syz.0.1440[6171] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 575.654388][ T1670] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 575.683422][ T305] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 575.719574][ T305] usb 5-1: USB disconnect, device number 41 [ 575.722533][ T6179] xt_bpf: check failed: parse error [ 575.754180][ T305] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 575.907940][ T6176] loop2: detected capacity change from 0 to 8192 [ 575.932195][ T6188] loop3: detected capacity change from 0 to 512 [ 575.940179][ T6176] loop2: p1 p2 p3 p4 [ 575.944903][ T6176] loop2: p1 size 108922248 extends beyond EOD, truncated [ 575.982979][ T6188] EXT4-fs: Ignoring removed nobh option [ 575.988466][ T6188] EXT4-fs: quotafile must be on filesystem root [ 576.010237][ T6176] loop2: p2 start 861536256 is beyond EOD, truncated [ 576.034752][ T6176] loop2: p3 start 851968 is beyond EOD, truncated [ 576.072473][ T1670] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 576.082410][ T6176] loop2: p4 size 65536 extends beyond EOD, truncated [ 576.111988][ T1670] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 576.172582][ T753] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 576.332454][ T6203] syz.3.1447[6203] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 576.333228][ T6203] syz.3.1447[6203] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 577.020936][ T1670] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 577.051705][ T1670] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.060330][ T1670] usb 2-1: Product: syz [ 577.064803][ T1670] usb 2-1: Manufacturer: syz [ 577.069334][ T1670] usb 2-1: SerialNumber: syz [ 577.088815][ T1670] usb 2-1: config 0 descriptor?? [ 577.271316][ T6209] loop3: detected capacity change from 0 to 8192 [ 577.292506][ T753] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 577.309854][ T753] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 577.365518][ T6209] loop3: p1 p2 p3 p4 [ 577.370225][ T6209] loop3: p1 size 108922248 extends beyond EOD, truncated [ 577.393462][ T6209] loop3: p2 start 861536256 is beyond EOD, truncated [ 577.399867][ T1670] snd-usb-audio: probe of 2-1:0.0 failed with error -12 [ 577.428961][ T641] udevd[641]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 577.433783][ T6209] loop3: p3 start 851968 is beyond EOD, [ 577.447565][ T1670] usb 2-1: USB disconnect, device number 46 [ 577.532440][ T6209] truncated [ 577.535697][ T6209] loop3: p4 size 65536 extends beyond EOD, truncated [ 577.592580][ T753] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 577.626050][ T753] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.656074][ T753] usb 3-1: Product: syz [ 577.660837][ T753] usb 3-1: Manufacturer: syz [ 577.673004][ T753] usb 3-1: SerialNumber: syz [ 577.702522][ T305] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 578.002800][ T753] usb 3-1: MIDIStreaming interface descriptor not found [ 578.049202][ T753] usb 3-1: USB disconnect, device number 37 [ 578.102467][ T305] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 578.137669][ T305] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 578.175866][ T6228] loop1: detected capacity change from 0 to 2048 [ 578.273730][ T6228] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 578.312534][ T305] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 578.325655][ T305] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.341878][ T305] usb 4-1: Product: syz [ 578.350270][ T305] usb 4-1: Manufacturer: syz [ 578.355043][ T305] usb 4-1: SerialNumber: syz [ 579.256722][ T5911] EXT4-fs (loop1): unmounting filesystem. [ 579.312654][ T305] usb 4-1: MIDIStreaming interface descriptor not found [ 579.341101][ T305] usb 4-1: USB disconnect, device number 56 [ 579.371676][ T3538] udevd[3538]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 579.411372][ T6239] loop1: detected capacity change from 0 to 512 [ 579.436420][ T6239] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 579.490118][ T6243] loop4: detected capacity change from 0 to 512 [ 579.520096][ T6243] EXT4-fs: Ignoring removed nobh option [ 579.527710][ T6243] EXT4-fs: quotafile must be on filesystem root [ 579.539541][ T6239] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 579.555739][ T6239] EXT4-fs (loop1): 1 truncate cleaned up [ 579.561313][ T6239] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 579.892161][ T6250] syz.4.1454[6250] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 579.893390][ T6250] syz.4.1454[6250] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 580.765075][ T6261] xt_bpf: check failed: parse error [ 580.805428][ T6263] loop4: detected capacity change from 0 to 512 [ 580.818540][ T6263] EXT4-fs: Ignoring removed nobh option [ 580.829449][ T6263] EXT4-fs: quotafile must be on filesystem root [ 580.852482][ T828] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 581.069449][ T6267] loop2: detected capacity change from 0 to 512 [ 581.123179][ T6267] EXT4-fs: Ignoring removed oldalloc option [ 581.128959][ T6267] EXT4-fs: Ignoring removed oldalloc option [ 581.150635][ T6267] EXT4-fs (loop2): orphan cleanup on readonly fs [ 581.157756][ T6265] syz.4.1459[6265] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 581.157750][ T6267] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.1460: Parent and EA inode have the same ino 15 [ 581.158117][ T6267] EXT4-fs (loop2): Remounting filesystem read-only [ 581.169042][ T6265] syz.4.1459[6265] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 581.187897][ T6267] EXT4-fs (loop2): 1 orphan inode deleted [ 581.205984][ T6267] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 581.441443][ T6273] loop0: detected capacity change from 0 to 2048 [ 581.469078][ T6273] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 582.292169][ T6277] EXT4-fs error (device loop2): ext4_lookup:1859: inode #2: comm syz.2.1460: deleted inode referenced: 15 [ 582.480166][ T6278] EXT4-fs error (device loop2): ext4_lookup:1859: inode #2: comm syz.2.1460: deleted inode referenced: 15 [ 582.942947][ T828] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 582.982643][ T5196] EXT4-fs (loop2): unmounting filesystem. [ 583.117213][ T828] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 583.164255][ T828] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 583.203702][ T828] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 583.238200][ T828] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 583.359318][ T5997] EXT4-fs (loop0): unmounting filesystem. [ 583.408551][ T5911] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 583.427322][ T5911] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 583.560732][ T5911] EXT4-fs (loop1): unmounting filesystem. [ 584.313770][ T828] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 584.386560][ T828] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.433032][ T1669] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 584.662519][ T828] usb 4-1: can't set config #1, error -71 [ 584.686613][ T6291] loop0: detected capacity change from 0 to 8192 [ 584.687962][ T828] usb 4-1: USB disconnect, device number 57 [ 584.723549][ T6291] loop0: p1 p2 p3 p4 [ 584.727583][ T6291] loop0: p1 size 108922248 extends beyond EOD, truncated [ 584.741531][ T6291] loop0: p2 start 861536256 is beyond EOD, truncated [ 584.752492][ T6291] loop0: p3 start 851968 is beyond EOD, truncated [ 584.759729][ T6291] loop0: p4 size 65536 extends beyond EOD, truncated [ 584.814169][ T6300] xt_bpf: check failed: parse error [ 584.822789][ T1669] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 585.196279][ T1669] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 585.312730][ T6302] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.319742][ T6302] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.327915][ T6302] device bridge_slave_0 entered promiscuous mode [ 585.335985][ T2187] device bridge_slave_1 left promiscuous mode [ 585.342108][ T2187] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.350152][ T2187] device bridge_slave_0 left promiscuous mode [ 585.356317][ T2187] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.362456][ T1669] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 585.372133][ T1669] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.380094][ T1669] usb 1-1: Product: syz [ 585.380692][ T2187] device veth1_macvtap left promiscuous mode [ 585.384173][ T1669] usb 1-1: Manufacturer: syz [ 585.390267][ T2187] device veth0_vlan left promiscuous mode [ 585.394758][ T1669] usb 1-1: SerialNumber: syz [ 585.542345][ T828] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 585.567798][ T6302] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.574914][ T6302] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.583468][ T6302] device bridge_slave_1 entered promiscuous mode [ 585.721477][ T6313] loop4: detected capacity change from 0 to 512 [ 585.722606][ T1669] usb 1-1: MIDIStreaming interface descriptor not found [ 585.728555][ T6313] EXT4-fs: Ignoring removed oldalloc option [ 585.740640][ T6313] EXT4-fs: Ignoring removed oldalloc option [ 585.757498][ T6313] EXT4-fs (loop4): orphan cleanup on readonly fs [ 585.760035][ T1669] usb 1-1: USB disconnect, device number 33 [ 585.769332][ T6313] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.1473: Parent and EA inode have the same ino 15 [ 585.783053][ T6313] EXT4-fs (loop4): Remounting filesystem read-only [ 585.791861][ T6313] EXT4-fs (loop4): 1 orphan inode deleted [ 585.799234][ T3539] udevd[3539]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 585.801148][ T6313] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 585.963045][ T1670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 585.971650][ T1670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 585.998265][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 586.013524][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 586.021765][ T305] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.028668][ T305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 586.032490][ T828] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 586.036119][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 586.046774][ T828] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 586.054610][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 586.153122][ T6316] EXT4-fs error (device loop4): ext4_lookup:1859: inode #2: comm syz.4.1473: deleted inode referenced: 15 [ 586.183120][ T828] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 586.230265][ T828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 586.268166][ T828] usb 4-1: SerialNumber: syz [ 586.780023][ T6319] loop2: detected capacity change from 0 to 512 [ 586.802039][ T305] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.804815][ T5352] EXT4-fs (loop4): unmounting filesystem. [ 586.808972][ T305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 586.815951][ T6319] EXT4-fs: Ignoring removed nobh option [ 586.822423][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 586.840670][ T6319] EXT4-fs: quotafile must be on filesystem root [ 586.893047][ T1669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 587.056802][ T1669] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 587.076990][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 587.089718][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 587.104329][ T828] usb 4-1: 0:2 : does not exist [ 587.109124][ T828] usb 4-1: unit 5: unexpected type 0x0b [ 587.172903][ T6326] syz.2.1474[6326] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 587.173684][ T6326] syz.2.1474[6326] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 587.343949][ T828] usb 4-1: USB disconnect, device number 58 [ 587.762930][ T3538] udevd[3538]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 587.802898][ T3410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 587.821865][ T3410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 587.848429][ T6302] device veth0_vlan entered promiscuous mode [ 587.863842][ T1669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 587.874712][ T1669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 587.921088][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 587.930750][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 587.947324][ T6302] device veth1_macvtap entered promiscuous mode [ 587.956608][ T3410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 587.962443][ T305] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 587.965726][ T3410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 587.983319][ T3410] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 588.049166][ T3410] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 588.066849][ T3410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 588.092464][ T828] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 588.101847][ T828] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 588.322448][ T305] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 55, changing to 9 [ 588.345254][ T305] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 8496, setting to 1024 [ 588.522459][ T305] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 588.534783][ T305] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.551831][ T305] usb 5-1: Product: syz [ 588.561628][ T305] usb 5-1: Manufacturer: syz [ 588.570584][ T305] usb 5-1: SerialNumber: syz [ 588.582847][ T305] usb 5-1: config 0 descriptor?? [ 588.858937][ T305] usb 5-1: USB disconnect, device number 42 [ 588.902364][ T1670] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 588.953693][ T6341] xt_bpf: check failed: parse error [ 589.302417][ T1670] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 589.322456][ T1670] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 589.342549][ T1670] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 589.361741][ T1670] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.387883][ T1670] usb 1-1: config 0 descriptor?? [ 589.711800][ T6353] loop2: detected capacity change from 0 to 8192 [ 589.754249][ T6353] loop2: p1 p2 p3 p4 [ 589.758372][ T6353] loop2: p1 size 108922248 extends beyond EOD, truncated [ 589.778599][ T6353] loop2: p2 start 861536256 is beyond EOD, truncated [ 589.791749][ T6353] loop2: p3 start 851968 is beyond EOD, truncated [ 589.799622][ T6353] loop2: p4 size 65536 extends beyond EOD, truncated [ 589.803036][ T6357] loop4: detected capacity change from 0 to 512 [ 589.827064][ T6358] loop1: detected capacity change from 0 to 2048 [ 589.835788][ T6357] EXT4-fs: Ignoring removed oldalloc option [ 589.841915][ T6357] EXT4-fs: Ignoring removed oldalloc option [ 589.853859][ T6357] EXT4-fs (loop4): orphan cleanup on readonly fs [ 589.864281][ T6357] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.1485: Parent and EA inode have the same ino 15 [ 589.877875][ T6357] EXT4-fs (loop4): Remounting filesystem read-only [ 589.883016][ T1670] hid (null): bogus close delimiter [ 589.884725][ T6357] EXT4-fs (loop4): 1 orphan inode deleted [ 589.895158][ T6357] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 589.904778][ T6358] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 590.091612][ T828] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 590.102684][ T1670] usb 1-1: language id specifier not provided by device, defaulting to English [ 590.225361][ T6365] EXT4-fs error (device loop4): ext4_lookup:1859: inode #2: comm syz.4.1485: deleted inode referenced: 15 [ 590.473363][ T828] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 590.512179][ T828] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 590.611960][ T28] audit: type=1400 audit(1719971708.597:355): avc: denied { connect } for pid=6336 comm="syz.0.1478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 590.772383][ T28] audit: type=1400 audit(1719971708.737:356): avc: denied { write } for pid=6336 comm="syz.0.1478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 590.897187][ T5352] EXT4-fs (loop4): unmounting filesystem. [ 590.903113][ T828] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 590.915402][ T828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.926687][ T6302] EXT4-fs (loop1): unmounting filesystem. [ 590.937593][ T1670] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.001B/input/input50 [ 590.955987][ T828] usb 3-1: Product: syz [ 590.979146][ T828] usb 3-1: Manufacturer: syz [ 590.991228][ T1670] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.001B/input/input51 [ 590.996560][ T828] usb 3-1: SerialNumber: syz [ 591.014116][ T6368] xt_bpf: check failed: parse error [ 591.015122][ T6370] xt_bpf: check failed: parse error [ 591.059425][ T1670] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.001B/input/input52 [ 591.076716][ T1670] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.001B/input/input53 [ 591.118861][ T1670] uclogic 0003:256C:006D.001B: input,hiddev96,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 591.177477][ T1670] usb 1-1: USB disconnect, device number 34 [ 591.402568][ T828] usb 3-1: MIDIStreaming interface descriptor not found [ 592.427618][ T828] usb 3-1: USB disconnect, device number 38 [ 592.500049][ T6372] udevd[6372]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 592.622510][ T305] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 595.601174][ T6400] loop3: detected capacity change from 0 to 512 [ 595.615423][ T6400] EXT4-fs: Ignoring removed oldalloc option [ 595.646360][ T6400] EXT4-fs: Ignoring removed oldalloc option [ 595.659901][ T6400] EXT4-fs (loop3): orphan cleanup on readonly fs [ 595.667284][ T6400] EXT4-fs error (device loop3): ext4_xattr_inode_iget:400: comm syz.3.1497: Parent and EA inode have the same ino 15 [ 595.684275][ T6400] EXT4-fs (loop3): Remounting filesystem read-only [ 595.690836][ T6400] EXT4-fs (loop3): 1 orphan inode deleted [ 595.697039][ T6400] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 595.868059][ T6412] xt_bpf: check failed: parse error [ 596.051302][ T6417] xt_bpf: check failed: parse error [ 596.062481][ T305] usb 2-1: device not accepting address 47, error -71 [ 596.132427][ T828] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 596.149908][ T6415] EXT4-fs error (device loop3): ext4_lookup:1859: inode #2: comm syz.3.1497: deleted inode referenced: 15 [ 597.652489][ T828] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 597.672373][ T828] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 597.712733][ T828] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 597.746028][ T828] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 597.799055][ T828] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 597.945677][ T6429] loop0: detected capacity change from 0 to 8192 [ 597.972464][ T828] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 597.981636][ T828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.001947][ T828] usb 3-1: Product: syz [ 598.006947][ T6429] loop0: p1 p2 p3 p4 [ 598.011586][ T6429] loop0: p1 size 108922248 extends beyond EOD, truncated [ 598.019065][ T828] usb 3-1: Manufacturer: syz [ 598.028837][ T828] usb 3-1: SerialNumber: syz [ 598.039476][ T6429] loop0: p2 start 861536256 is beyond EOD, truncated [ 598.052383][ T6429] loop0: p3 start 851968 is beyond EOD, truncated [ 598.062744][ T6398] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 598.070197][ T6429] loop0: p4 size 65536 extends beyond EOD, truncated [ 598.140324][ T5007] EXT4-fs (loop3): unmounting filesystem. [ 598.192401][ T319] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 598.287143][ T6398] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 598.295616][ T6398] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 598.322518][ T1670] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 598.552655][ T319] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 55, changing to 9 [ 598.564072][ T319] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 8496, setting to 1024 [ 598.702585][ T1670] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 598.712689][ T305] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 598.720131][ T1670] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 598.752519][ T319] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 598.761555][ T319] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.769491][ T319] usb 5-1: Product: syz [ 598.773853][ T319] usb 5-1: Manufacturer: syz [ 598.778328][ T319] usb 5-1: SerialNumber: syz [ 598.784749][ T319] usb 5-1: config 0 descriptor?? [ 598.912435][ T1670] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 598.921391][ T1670] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.929225][ T1670] usb 1-1: Product: syz [ 598.933241][ T1670] usb 1-1: Manufacturer: syz [ 598.937704][ T1670] usb 1-1: SerialNumber: syz [ 598.962690][ T6398] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 598.969801][ T6398] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 599.048747][ T319] usb 5-1: USB disconnect, device number 43 [ 599.102775][ T305] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 599.112826][ T305] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 599.186943][ T6398] loop2: detected capacity change from 0 to 16 [ 599.194722][ T6398] erofs: (device loop2): mounted with root inode @ nid 36. [ 599.207019][ T305] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 599.217081][ T6398] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 36 [ 599.220249][ T305] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 599.239374][ T6398] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 599.241562][ T305] usb 2-1: SerialNumber: syz [ 599.272619][ T1670] usb 1-1: MIDIStreaming interface descriptor not found [ 599.289111][ T1670] usb 1-1: USB disconnect, device number 35 [ 599.301789][ T3539] udevd[3539]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 599.302526][ T828] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 599.363411][ T401] udevd[401]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 599.393121][ T828] cdc_ncm 3-1:1.0: dwNtbInMaxSize=3 is too small. Using 2048 [ 599.419379][ T828] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 601.058332][ T828] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 601.080964][ T828] usb 3-1: USB disconnect, device number 39 [ 601.117942][ T828] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 601.826494][ T305] usb 2-1: 0:2 : does not exist [ 601.847438][ T305] usb 2-1: unit 5: unexpected type 0x0b [ 601.861726][ T305] usb 2-1: USB disconnect, device number 49 [ 601.916290][ T6372] udevd[6372]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 602.134575][ T319] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 602.492537][ T319] usb 4-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 602.502344][ T1669] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 602.510100][ T319] usb 4-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 602.882312][ T319] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 602.891278][ T319] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.963136][ T1669] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 602.984311][ T1669] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 603.009753][ T1669] usb 3-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 603.028688][ T1669] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.058854][ T1669] usb 3-1: config 0 descriptor?? [ 603.172391][ T319] usb 4-1: string descriptor 0 read error: -71 [ 603.200785][ T319] aiptek 4-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 603.270854][ T319] usb 4-1: USB disconnect, device number 59 [ 603.272661][ T6516] xt_bpf: check failed: parse error [ 603.554657][ T1669] sony 0003:054C:0268.001C: unknown main item tag 0xd [ 603.561332][ T1669] sony 0003:054C:0268.001C: item fetching failed at offset 4/5 [ 603.570425][ T1669] sony 0003:054C:0268.001C: parse failed [ 603.582358][ T1669] sony: probe of 0003:054C:0268.001C failed with error -22 [ 603.732315][ T3614] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 603.756727][ T1669] usb 3-1: USB disconnect, device number 40 [ 603.954698][ T6520] loop0: detected capacity change from 0 to 40427 [ 603.969265][ T6520] F2FS-fs (loop0): invalid crc value [ 603.979551][ T6520] F2FS-fs (loop0): Found nat_bits in checkpoint [ 604.094225][ T6529] loop3: detected capacity change from 0 to 256 [ 604.112490][ T3614] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 604.127808][ T3614] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 604.129211][ T6520] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 604.142827][ T6529] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 604.157117][ T6529] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 604.170052][ T28] audit: type=1400 audit(1719971722.157:357): avc: denied { write } for pid=6526 comm="syz.3.1523" path="/81/file2/bus" dev="loop3" ino=1048765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 604.213620][ T28] audit: type=1400 audit(1719971722.197:358): avc: denied { reparent } for pid=6519 comm="syz.0.1522" name="#7" dev="loop0" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 604.259917][ T28] audit: type=1400 audit(1719971722.207:359): avc: denied { rename } for pid=6526 comm="syz.3.1523" name="file1" dev="loop3" ino=1048767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 604.260306][ T5997] syz-executor: attempt to access beyond end of device [ 604.260306][ T5997] loop0: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 604.314015][ T5997] syz-executor: attempt to access beyond end of device [ 604.314015][ T5997] loop0: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 604.382473][ T3614] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 604.395716][ T3614] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.412304][ T3614] usb 5-1: Product: syz [ 604.418922][ T353] kworker/u4:4: attempt to access beyond end of device [ 604.418922][ T353] loop0: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 604.441797][ T3614] usb 5-1: Manufacturer: syz [ 604.447621][ T3614] usb 5-1: SerialNumber: syz [ 604.513397][ T319] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 605.433819][ T6546] xt_bpf: check failed: parse error [ 605.442563][ T3614] usb 5-1: MIDIStreaming interface descriptor not found [ 605.470697][ T3614] usb 5-1: USB disconnect, device number 44 [ 605.525423][ T6549] loop2: detected capacity change from 0 to 512 [ 605.561916][ T6549] EXT4-fs: Ignoring removed oldalloc option [ 605.582434][ T6549] EXT4-fs: Ignoring removed oldalloc option [ 605.601582][ T6549] EXT4-fs (loop2): orphan cleanup on readonly fs [ 605.612893][ T6549] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.1532: Parent and EA inode have the same ino 15 [ 605.642206][ T6549] EXT4-fs (loop2): Remounting filesystem read-only [ 605.648914][ T6549] EXT4-fs (loop2): 1 orphan inode deleted [ 605.654664][ T6549] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 605.692476][ T319] usb 2-1: config 17 has an invalid descriptor of length 255, skipping remainder of the config [ 605.703066][ T319] usb 2-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 605.737011][ T319] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 605.752924][ T353] device bridge_slave_1 left promiscuous mode [ 605.761312][ T353] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.776518][ T319] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.788983][ T353] device bridge_slave_0 left promiscuous mode [ 605.808801][ T353] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.848055][ T353] device veth1_macvtap left promiscuous mode [ 605.865395][ T353] device veth0_vlan left promiscuous mode [ 606.014301][ T6555] EXT4-fs error (device loop2): ext4_lookup:1859: inode #2: comm syz.2.1532: deleted inode referenced: 15 [ 606.635234][ T5196] EXT4-fs (loop2): unmounting filesystem. [ 606.642355][ T319] usb 2-1: string descriptor 0 read error: -71 [ 606.665979][ T319] aiptek 2-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 606.677034][ T319] usb 2-1: USB disconnect, device number 50 [ 606.812474][ T828] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 606.820464][ T6562] loop2: detected capacity change from 0 to 512 [ 606.827293][ T6562] EXT4-fs: Ignoring removed nobh option [ 606.837158][ T6562] EXT4-fs: quotafile must be on filesystem root [ 606.917616][ T6551] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.924824][ T6551] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.934028][ T6551] device bridge_slave_0 entered promiscuous mode [ 606.947051][ T6551] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.954233][ T6551] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.962226][ T6551] device bridge_slave_1 entered promiscuous mode [ 607.137067][ T6560] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.157263][ T6572] syz.2.1536[6572] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 607.158088][ T6572] syz.2.1536[6572] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 607.324238][ T6560] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.423732][ T6560] device bridge_slave_0 entered promiscuous mode [ 607.492624][ T828] usb 5-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 607.555899][ T6560] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.570589][ T828] usb 5-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 607.619612][ T6560] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.849917][ T6560] device bridge_slave_1 entered promiscuous mode [ 607.869542][ T828] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 607.962587][ T828] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.081866][ T6574] _swap_info_get: Bad swap file entry 7800000000000001 [ 608.088656][ T6574] _swap_info_get: Bad swap file entry 7800000000000001 [ 608.095343][ T6574] _swap_info_get: Bad swap file entry 7800000000000001 [ 608.101968][ T6574] _swap_info_get: Bad swap file entry 7800000000000001 [ 608.332412][ T828] usb 5-1: string descriptor 0 read error: -71 [ 608.339528][ T828] aiptek 5-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 608.352201][ T828] usb 5-1: USB disconnect, device number 45 [ 608.548817][ T1669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 608.584173][ T1669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 608.754120][ T1669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 608.812135][ T1669] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 608.878205][ T1669] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.885290][ T1669] bridge0: port 1(bridge_slave_0) entered forwarding state [ 609.134586][ T1669] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 609.143251][ T1669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 609.151807][ T1669] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 609.180651][ T1669] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.187609][ T1669] bridge0: port 2(bridge_slave_1) entered forwarding state [ 609.250267][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 609.258760][ T6571] loop1: detected capacity change from 0 to 40427 [ 609.260068][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 609.273499][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 609.281809][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 609.286716][ T6571] F2FS-fs (loop1): invalid crc value [ 609.306990][ T6571] F2FS-fs (loop1): Found nat_bits in checkpoint [ 609.361332][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 609.370914][ T321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 609.405247][ T828] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 609.413327][ T828] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 609.420947][ T828] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 609.422528][ T6571] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 609.430516][ T828] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 609.444884][ T828] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 609.455038][ T828] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 609.467916][ T828] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.474853][ T828] bridge0: port 1(bridge_slave_0) entered forwarding state [ 609.484671][ T6551] device veth0_vlan entered promiscuous mode [ 609.494811][ T6302] syz-executor: attempt to access beyond end of device [ 609.494811][ T6302] loop1: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 609.509001][ T6302] syz-executor: attempt to access beyond end of device [ 609.509001][ T6302] loop1: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 609.526113][ T1669] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 609.534777][ T1669] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 609.542864][ T1669] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 609.550715][ T1669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 609.559156][ T321] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 609.582341][ T1669] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 609.583924][ T37] kworker/u4:2: attempt to access beyond end of device [ 609.583924][ T37] loop1: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 609.590720][ T1669] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.610858][ T1669] bridge0: port 2(bridge_slave_1) entered forwarding state [ 609.643243][ T353] device bridge_slave_1 left promiscuous mode [ 609.649272][ T353] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.657568][ T353] device bridge_slave_0 left promiscuous mode [ 609.664860][ T353] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.675165][ T353] device veth1_macvtap left promiscuous mode [ 609.681109][ T353] device veth0_vlan left promiscuous mode [ 609.872959][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 609.881609][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 609.892366][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 609.900687][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 609.902573][ T828] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 609.942474][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 609.950859][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 609.961301][ T6551] device veth1_macvtap entered promiscuous mode [ 609.973905][ T321] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 610.002316][ T321] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 610.035709][ T1669] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 610.044145][ T1669] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 610.054117][ T1669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 610.062953][ T1669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 610.071570][ T1669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 610.080903][ T1669] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 610.089575][ T1669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 610.107255][ T6560] device veth0_vlan entered promiscuous mode [ 610.115377][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 610.124049][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 610.136902][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 610.144959][ T397] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 610.172566][ T321] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 610.181677][ T321] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.207223][ T6560] device veth1_macvtap entered promiscuous mode [ 610.214184][ T321] usb 3-1: Product: syz [ 610.218207][ T321] usb 3-1: Manufacturer: syz [ 610.238938][ T6593] xt_bpf: check failed: parse error [ 610.243953][ T321] usb 3-1: SerialNumber: syz [ 610.265096][ T1669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 610.275486][ T1669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 610.287527][ T828] usb 5-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 610.300242][ T1669] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 610.307543][ T828] usb 5-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 610.321176][ T1669] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 610.329375][ T828] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 610.338946][ T1669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 610.346898][ T828] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.352675][ T6597] loop3: detected capacity change from 0 to 128 [ 610.355461][ T1669] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 610.498771][ T1669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 610.529363][ T6596] device veth1_macvtap left promiscuous mode [ 610.535716][ T6596] device macsec0 entered promiscuous mode [ 610.572581][ T321] usb 3-1: MIDIStreaming interface descriptor not found [ 610.604894][ T321] usb 3-1: USB disconnect, device number 41 [ 610.621253][ T6600] loop0: detected capacity change from 0 to 2048 [ 610.642368][ T6596] device veth1_macvtap entered promiscuous mode [ 610.652623][ T6596] device macsec0 left promiscuous mode [ 610.670909][ T6600] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 610.773793][ T828] usb 5-1: string descriptor 0 read error: -71 [ 610.796363][ T6606] loop3: detected capacity change from 0 to 512 [ 610.802509][ T828] aiptek 5-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 610.816782][ T6606] EXT4-fs: Ignoring removed nobh option [ 610.822225][ T6606] EXT4-fs: quotafile must be on filesystem root [ 610.836504][ T828] usb 5-1: USB disconnect, device number 46 [ 611.028445][ T6594] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.074337][ T6594] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.082974][ T6594] device bridge_slave_0 entered promiscuous mode [ 611.095238][ T6594] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.102192][ T6594] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.110990][ T6594] device bridge_slave_1 entered promiscuous mode [ 612.940181][ T6621] loop4: detected capacity change from 0 to 1024 [ 612.984171][ T6621] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 614.166903][ T5352] EXT4-fs (loop4): unmounting filesystem. [ 614.249347][ T6560] EXT4-fs (loop0): unmounting filesystem. [ 614.556150][ T6594] device veth0_vlan entered promiscuous mode [ 614.579816][ T6594] device veth1_macvtap entered promiscuous mode [ 615.053384][ T753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 615.062114][ T753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 615.083461][ T753] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 615.092017][ T753] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 615.155933][ T6645] loop4: detected capacity change from 0 to 512 [ 615.177366][ T6645] EXT4-fs: Ignoring removed nobh option [ 615.183112][ T6645] EXT4-fs: quotafile must be on filesystem root [ 615.594766][ T6650] syz.4.1553[6650] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 615.599330][ T6650] syz.4.1553[6650] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 616.891199][ T753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 616.926573][ T753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 616.973923][ T753] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 616.981703][ T753] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 616.986475][ T6653] loop2: detected capacity change from 0 to 512 [ 616.992090][ T753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 617.003683][ T753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 617.011342][ T753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 617.019717][ T753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 617.032834][ T6653] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 617.054549][ T753] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 617.064862][ T753] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.071783][ T753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 617.079505][ T753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 617.097975][ T753] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 617.114093][ T6653] EXT4-fs (loop2): 1 truncate cleaned up [ 617.120851][ T6653] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 617.133065][ T753] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.140165][ T753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 617.168804][ T828] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 617.191315][ T1670] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 617.286957][ T5196] EXT4-fs (loop2): unmounting filesystem. [ 617.332933][ T353] device bridge_slave_1 left promiscuous mode [ 617.339077][ T353] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.374168][ T353] device bridge_slave_0 left promiscuous mode [ 617.380236][ T353] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.410882][ T353] device veth1_macvtap left promiscuous mode [ 617.429287][ T353] device veth0_vlan left promiscuous mode [ 617.455272][ T6667] loop4: detected capacity change from 0 to 512 [ 617.483333][ T6667] EXT4-fs: Ignoring removed nobh option [ 617.488807][ T6667] EXT4-fs: quotafile must be on filesystem root [ 617.532470][ T828] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 617.700582][ T828] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 617.711680][ T828] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 617.724606][ T828] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 617.735359][ T828] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 618.023412][ T828] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 618.130702][ T828] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.599752][ T828] usb 1-1: Product: syz [ 618.612368][ T828] usb 1-1: Manufacturer: syz [ 618.616851][ T828] usb 1-1: SerialNumber: syz [ 618.843904][ T828] usb 1-1: can't set config #1, error -71 [ 618.853012][ T828] usb 1-1: USB disconnect, device number 36 [ 618.896056][ T6682] loop0: detected capacity change from 0 to 1024 [ 619.185795][ T6682] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 622.117639][ T321] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 622.266837][ T319] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 622.456059][ T6560] EXT4-fs (loop0): unmounting filesystem. [ 622.578946][ T6702] loop2: detected capacity change from 0 to 512 [ 622.619515][ T6702] EXT4-fs: Ignoring removed oldalloc option [ 622.625780][ T6706] xt_bpf: check failed: parse error [ 622.653202][ T6702] EXT4-fs: Ignoring removed oldalloc option [ 622.673309][ T6702] EXT4-fs (loop2): orphan cleanup on readonly fs [ 622.699028][ T6702] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz.2.1567: Parent and EA inode have the same ino 15 [ 622.743051][ T6702] EXT4-fs (loop2): Remounting filesystem read-only [ 622.754020][ T6702] EXT4-fs (loop2): 1 orphan inode deleted [ 622.759671][ T6702] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 623.063536][ T6714] EXT4-fs error (device loop2): ext4_lookup:1859: inode #2: comm syz.2.1567: deleted inode referenced: 15 [ 623.716155][ T5196] EXT4-fs (loop2): unmounting filesystem. [ 623.885373][ T6719] loop0: detected capacity change from 0 to 2048 [ 623.942391][ T6719] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 624.171579][ T6725] loop2: detected capacity change from 0 to 1024 [ 624.265067][ T6725] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 624.473147][ T5196] EXT4-fs (loop2): unmounting filesystem. [ 624.558573][ T6560] EXT4-fs (loop0): unmounting filesystem. [ 624.592458][ T753] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 624.812475][ T319] usb 2-1: device descriptor read/64, error -71 [ 624.952476][ T321] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 625.352828][ T321] usb 1-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 625.377664][ T321] usb 1-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 625.438653][ T321] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 625.556655][ T321] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.692492][ T753] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 625.703684][ T753] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 625.715013][ T753] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 625.728356][ T753] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 625.739646][ T753] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 625.902447][ T753] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 625.911574][ T753] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.920630][ T753] usb 4-1: Product: syz [ 625.925096][ T753] usb 4-1: Manufacturer: syz [ 625.929554][ T753] usb 4-1: SerialNumber: syz [ 625.962456][ T6729] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 625.972579][ T319] usb 2-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 625.986455][ T319] usb 2-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 626.000242][ T319] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 626.009801][ T319] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.152506][ T321] usb 1-1: string descriptor 0 read error: -71 [ 626.162990][ T321] aiptek 1-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 626.183021][ T321] usb 1-1: USB disconnect, device number 37 [ 626.190738][ T6729] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 626.202839][ T6729] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 626.218887][ T6746] loop2: detected capacity change from 0 to 2048 [ 626.272485][ T6746] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 626.312401][ T319] usb 2-1: string descriptor 0 read error: -71 [ 626.319468][ T319] aiptek 2-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 626.334708][ T319] usb 2-1: USB disconnect, device number 51 [ 627.130513][ T6755] loop0: detected capacity change from 0 to 512 [ 627.152073][ T6755] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 627.215248][ T6755] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 627.251313][ T6755] EXT4-fs (loop0): 1 truncate cleaned up [ 627.259974][ T6755] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 627.297421][ T5196] EXT4-fs (loop2): unmounting filesystem. [ 627.333572][ T6729] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 627.340623][ T6729] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 627.433789][ T6758] loop3: detected capacity change from 0 to 16 [ 627.444609][ T6758] erofs: (device loop3): mounted with root inode @ nid 36. [ 627.501095][ T6758] erofs: (device loop3): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 36 [ 627.542418][ T6758] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 628.113331][ T3410] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 628.240412][ T6560] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 628.259214][ T6560] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 628.302486][ T3614] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 628.312675][ T753] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 628.318975][ T753] cdc_ncm 4-1:1.0: dwNtbInMaxSize=3 is too small. Using 2048 [ 628.327319][ T753] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 628.380920][ T6560] EXT4-fs (loop0): unmounting filesystem. [ 628.521478][ T6773] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62056 sclass=netlink_route_socket pid=6773 comm=syz.4.1583 [ 628.569480][ T753] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 628.624485][ T753] usb 4-1: USB disconnect, device number 60 [ 628.630971][ T753] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 628.662409][ T3614] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 628.662449][ T3410] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 628.676354][ T3614] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 628.720606][ T3614] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 628.738903][ T3410] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 628.783416][ T3614] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 628.784679][ T3410] usb 3-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 628.810698][ T3614] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 628.834389][ T319] ================================================================== [ 628.842334][ T319] BUG: KASAN: use-after-free in worker_thread+0xa36/0x1260 [ 628.849504][ T319] Read of size 8 at addr ffff88811811ece0 by task kworker/0:3/319 [ 628.850081][ T3410] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.857139][ T319] [ 628.857166][ T319] CPU: 0 PID: 319 Comm: kworker/0:3 Not tainted 6.1.84-syzkaller-00131-g81e9f0610c73 #0 [ 628.876687][ T319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 628.886579][ T319] Workqueue: 0x0 (events) [ 628.890939][ T319] Call Trace: [ 628.894048][ T319] [ 628.896831][ T319] dump_stack_lvl+0x151/0x1b7 [ 628.901359][ T319] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 628.906634][ T319] ? _printk+0xd1/0x111 [ 628.910637][ T319] ? __virt_addr_valid+0x242/0x2f0 [ 628.915576][ T319] print_report+0x158/0x4e0 [ 628.919914][ T319] ? __virt_addr_valid+0x242/0x2f0 [ 628.924880][ T319] ? kasan_complete_mode_report_info+0x90/0x1b0 [ 628.931051][ T319] ? worker_thread+0xa36/0x1260 [ 628.935739][ T319] kasan_report+0x13c/0x170 [ 628.940077][ T319] ? worker_thread+0xa36/0x1260 [ 628.944770][ T319] __asan_report_load8_noabort+0x14/0x20 [ 628.950232][ T319] worker_thread+0xa36/0x1260 [ 628.954765][ T319] kthread+0x26d/0x300 [ 628.958651][ T319] ? worker_clr_flags+0x1a0/0x1a0 [ 628.963510][ T319] ? kthread_blkcg+0xd0/0xd0 [ 628.967936][ T319] ret_from_fork+0x1f/0x30 [ 628.972206][ T319] [ 628.975052][ T319] [ 628.977225][ T319] Allocated by task 753: SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 628.981307][ T319] kasan_set_track+0x4b/0x70 [ 628.985732][ T319] kasan_save_alloc_info+0x1f/0x30 [ 628.990687][ T319] __kasan_kmalloc+0x9c/0xb0 [ 628.995106][ T319] __kmalloc_node+0xb4/0x1e0 [ 628.999531][ T319] kvmalloc_node+0x221/0x640 [ 629.002912][ T3410] usb 3-1: config 0 descriptor?? [ 629.003953][ T319] alloc_netdev_mqs+0x8c/0xf90 [ 629.013333][ T319] alloc_etherdev_mqs+0x36/0x40 [ 629.018176][ T319] usbnet_probe+0x207/0x27c0 [ 629.022600][ T319] usb_probe_interface+0x5b6/0xa90 [ 629.027558][ T319] really_probe+0x2b8/0x920 [ 629.031887][ T319] __driver_probe_device+0x1a0/0x310 [ 629.037013][ T319] driver_probe_device+0x54/0x3d0 [ 629.041870][ T319] __device_attach_driver+0x2e3/0x490 [ 629.047164][ T319] bus_for_each_drv+0x183/0x200 [ 629.051853][ T319] __device_attach+0x312/0x510 [ 629.056454][ T319] device_initial_probe+0x1a/0x20 [ 629.061314][ T319] bus_probe_device+0xbe/0x1e0 [ 629.065921][ T319] device_add+0xb60/0xf10 [ 629.070077][ T319] usb_set_configuration+0x190f/0x1e80 [ 629.075373][ T319] usb_generic_driver_probe+0x8b/0x150 [ 629.080672][ T319] usb_probe_device+0x144/0x260 [ 629.085363][ T319] really_probe+0x2b8/0x920 [ 629.089698][ T319] __driver_probe_device+0x1a0/0x310 [ 629.094824][ T319] driver_probe_device+0x54/0x3d0 [ 629.099679][ T319] __device_attach_driver+0x2e3/0x490 [ 629.104882][ T319] bus_for_each_drv+0x183/0x200 [ 629.109573][ T319] __device_attach+0x312/0x510 [ 629.114175][ T319] device_initial_probe+0x1a/0x20 [ 629.119032][ T319] bus_probe_device+0xbe/0x1e0 [ 629.123632][ T319] device_add+0xb60/0xf10 [ 629.127794][ T319] usb_new_device+0xf2f/0x1820 [ 629.132403][ T319] hub_event+0x2db1/0x4830 [ 629.136652][ T319] process_one_work+0x73d/0xcb0 [ 629.141349][ T319] worker_thread+0xa60/0x1260 [ 629.145874][ T319] kthread+0x26d/0x300 [ 629.149750][ T319] ret_from_fork+0x1f/0x30 [ 629.154016][ T319] [ 629.156173][ T319] Freed by task 753: [ 629.159915][ T319] kasan_set_track+0x4b/0x70 [ 629.164333][ T319] kasan_save_free_info+0x2b/0x40 [ 629.169284][ T319] ____kasan_slab_free+0x131/0x180 [ 629.174228][ T319] __kasan_slab_free+0x11/0x20 [ 629.178946][ T319] __kmem_cache_free+0x218/0x3b0 [ 629.183711][ T319] kfree+0x7a/0xf0 [ 629.187267][ T319] kvfree+0x35/0x40 [ 629.190915][ T319] netdev_freemem+0x3f/0x60 [ 629.195258][ T319] netdev_release+0x7f/0xb0 [ 629.199596][ T319] device_release+0x95/0x1c0 [ 629.204108][ T319] kobject_put+0x178/0x260 [ 629.208384][ T319] put_device+0x1f/0x30 [ 629.212361][ T319] free_netdev+0x393/0x480 [ 629.216608][ T319] usbnet_disconnect+0x245/0x390 [ 629.221381][ T319] usb_unbind_interface+0x1fa/0x8c0 [ 629.226431][ T319] device_release_driver_internal+0x53e/0x870 [ 629.232317][ T319] device_release_driver+0x19/0x20 [ 629.237263][ T319] bus_remove_device+0x2fa/0x360 [ 629.242040][ T319] device_del+0x663/0xe90 [ 629.246206][ T319] usb_disable_device+0x380/0x720 [ 629.251065][ T319] usb_disconnect+0x32a/0x890 [ 629.255582][ T319] hub_event+0x1ed8/0x4830 [ 629.259833][ T319] process_one_work+0x73d/0xcb0 [ 629.264521][ T319] worker_thread+0xd71/0x1260 [ 629.269032][ T319] kthread+0x26d/0x300 [ 629.272938][ T319] ret_from_fork+0x1f/0x30 [ 629.277193][ T319] [ 629.279365][ T319] Last potentially related work creation: [ 629.284927][ T319] kasan_save_stack+0x3b/0x60 [ 629.289432][ T319] __kasan_record_aux_stack+0xb4/0xc0 [ 629.294639][ T319] kasan_record_aux_stack_noalloc+0xb/0x10 [ 629.300284][ T319] insert_work+0x56/0x310 [ 629.304457][ T319] __queue_work+0x9b6/0xd70 [ 629.308790][ T319] queue_work_on+0x105/0x170 [ 629.313217][ T319] usbnet_link_change+0xeb/0x100 [ 629.317990][ T319] usbnet_probe+0x1dbe/0x27c0 [ 629.322501][ T319] usb_probe_interface+0x5b6/0xa90 [ 629.327452][ T319] really_probe+0x2b8/0x920 [ 629.331789][ T319] __driver_probe_device+0x1a0/0x310 [ 629.336912][ T319] driver_probe_device+0x54/0x3d0 [ 629.341773][ T319] __device_attach_driver+0x2e3/0x490 [ 629.346981][ T319] bus_for_each_drv+0x183/0x200 [ 629.351669][ T319] __device_attach+0x312/0x510 [ 629.356272][ T319] device_initial_probe+0x1a/0x20 [ 629.361128][ T319] bus_probe_device+0xbe/0x1e0 [ 629.365728][ T319] device_add+0xb60/0xf10 [ 629.369896][ T319] usb_set_configuration+0x190f/0x1e80 [ 629.375189][ T319] usb_generic_driver_probe+0x8b/0x150 [ 629.380486][ T319] usb_probe_device+0x144/0x260 [ 629.385172][ T319] really_probe+0x2b8/0x920 [ 629.389512][ T319] __driver_probe_device+0x1a0/0x310 [ 629.394632][ T319] driver_probe_device+0x54/0x3d0 [ 629.399494][ T319] __device_attach_driver+0x2e3/0x490 [ 629.404702][ T319] bus_for_each_drv+0x183/0x200 [ 629.409388][ T319] __device_attach+0x312/0x510 [ 629.413991][ T319] device_initial_probe+0x1a/0x20 [ 629.418852][ T319] bus_probe_device+0xbe/0x1e0 [ 629.423454][ T319] device_add+0xb60/0xf10 [ 629.427617][ T319] usb_new_device+0xf2f/0x1820 [ 629.432216][ T319] hub_event+0x2db1/0x4830 [ 629.436473][ T319] process_one_work+0x73d/0xcb0 [ 629.441159][ T319] worker_thread+0xa60/0x1260 [ 629.445677][ T319] kthread+0x26d/0x300 [ 629.449578][ T319] ret_from_fork+0x1f/0x30 [ 629.453833][ T319] [ 629.456000][ T319] The buggy address belongs to the object at ffff88811811e000 [ 629.456000][ T319] which belongs to the cache kmalloc-4k of size 4096 [ 629.469893][ T319] The buggy address is located 3296 bytes inside of [ 629.469893][ T319] 4096-byte region [ffff88811811e000, ffff88811811f000) [ 629.483174][ T319] [ 629.485340][ T319] The buggy address belongs to the physical page: [ 629.491595][ T319] page:ffffea0004604600 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888118118000 pfn:0x118118 [ 629.503054][ T319] head:ffffea0004604600 order:3 compound_mapcount:0 compound_pincount:0 [ 629.511210][ T319] flags: 0x4000000000010200(slab|head|zone=1) [ 629.517137][ T319] raw: 4000000000010200 ffffea00049bde08 ffffea00045dd408 ffff888100043380 [ 629.525575][ T319] raw: ffff888118118000 0000000000040003 00000001ffffffff 0000000000000000 [ 629.533960][ T319] page dumped because: kasan: bad access detected [ 629.540206][ T319] page_owner tracks the page as allocated [ 629.545756][ T319] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 108, tgid 108 (udevd), ts 9087654932, free_ts 0 [ 629.565202][ T319] post_alloc_hook+0x213/0x220 [ 629.569795][ T319] prep_new_page+0x1b/0x110 [ 629.574134][ T319] get_page_from_freelist+0x27ea/0x2870 [ 629.579518][ T319] __alloc_pages+0x3a1/0x780 [ 629.583946][ T319] alloc_slab_page+0x6c/0xf0 [ 629.588388][ T319] new_slab+0x90/0x3e0 [ 629.592278][ T319] ___slab_alloc+0x6f9/0xb80 [ 629.596704][ T319] __slab_alloc+0x5d/0xa0 [ 629.600869][ T319] __kmem_cache_alloc_node+0x1af/0x250 [ 629.606164][ T319] kmalloc_trace+0x2a/0xa0 [ 629.610430][ T319] uevent_show+0x155/0x310 [ 629.614677][ T319] dev_attr_show+0x56/0xd0 [ 629.618949][ T319] sysfs_kf_seq_show+0x27c/0x3a0 [ 629.623700][ T319] kernfs_seq_show+0x119/0x160 [ 629.628299][ T319] seq_read_iter+0x430/0xd00 [ 629.632899][ T319] kernfs_fop_read_iter+0x145/0x470 [ 629.638020][ T319] page_owner free stack trace missing [ 629.643232][ T319] [ 629.645399][ T319] Memory state around the buggy address: [ 629.650876][ T319] ffff88811811eb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 629.658778][ T319] ffff88811811ec00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 629.666680][ T319] >ffff88811811ec80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 629.674651][ T319] ^ [ 629.681782][ T319] ffff88811811ed00: fb fb fb fb fb fb fb fb fb fb fb fb fb