last executing test programs: 8.906912465s ago: executing program 2 (id=155): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0xe, &(0x7f0000000200)={[{@nogrpid}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@noquota}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") inotify_init1(0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000002c0)={0x3f}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f00000020c0), 0x1, 0x514, &(0x7f0000006ec0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000200)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000041}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@ipv6_newnexthop={0x28, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @ILA_ATTR_CSUM_MODE={0x5}}, @NHA_FDB={0x4}]}, 0x28}}, 0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r4, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="9000000000010104000000000000000002000000240001801400018008000100e000000208000200ac1414000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000208000200e000000208000740000000002c000e801400018008000100e000000208000200000000000c00028005000100000000ef050003"], 0x90}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000000c0)) r5 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, &(0x7f0000000180)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000006c0)={'#! ', './file1', [{0x20, 'ext6\x00J\xa9\xf41sU\xc2\xd3rqyK\x02aF[\x04\x8aI]\xca0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r0, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000100)=',*\xf3!\x00'}, 0x30) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r3, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e26, 0x80000, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000b00)=[@dstopts_2292={{0x18}}, @dstopts_2292={{0x18}}], 0x30}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f0000000140)) r6 = syz_open_procfs(0x0, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r6, 0xc020660b, &(0x7f0000000180)={@desc={0x1, 0x0, @auto="e2c3cb017721575b"}}) 7.532583277s ago: executing program 2 (id=166): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f000076e000/0x4000)=nil, 0x400000, 0x0, 0x2}) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000312"], 0x0, 0x0}, 0x0) 7.36577255s ago: executing program 3 (id=168): setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='htcp\x00', 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r4}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000700)=ANY=[@ANYBLOB="3801"], 0x138) write$FUSE_DIRENTPLUS(r7, &(0x7f0000000300)={0x120, 0x0, 0x0, [{{}, {0x0, 0x0, 0x74, 0x0, '\xcdSu\xbe`h\xbehM\x16>\x87\xba\x01#\xcb\xc2\x00I\xb3\xdf\xdfSt;rO\xa6\xac\xddo\xfd\xd5\xb58kz\xdb\xaf\x95\xfca\xde\xa9N\x0f\x921\xa50}I\xc0\xec\xdf\xac%\"\xeb,\xe5\xd1w0\xa8\xa0z\xfb\xf0\xad\xa66\x84d\xd3\xe6\xe7\xee\x14\x9dK\xa6\xd6T\xac\xe7\xc7\v\xeb\x84\xc9:\\\x89A\x9a\xe8\xb5pe\x16\xaf\x0fS\xe4\v\x8ea\xe0\xb1\xde\xed\x8a\a\x9f\xb9'}}]}, 0x120) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) lgetxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)=ANY=[@ANYBLOB='user.t'], 0x0, 0x300) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.298728486s ago: executing program 1 (id=169): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0xe, &(0x7f0000000200)={[{@nogrpid}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@noquota}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") inotify_init1(0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000002c0)={0x3f}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f00000020c0), 0x1, 0x514, &(0x7f0000006ec0)="$eJzs3UFvI1cdAPD/eOPE2abNtvQACGhoixa0WifxtlHVA5QTQqgSokeQtiHxRlHsOIqd0oQ9pN8BiUqc4MgH4NwTdy4IblzKAalABGoqcTCa8Th1s3biNokdxb+fNJp5743n/17W8579vPYLYGItRMRhRExHxNsRMZ/nJ/kWb3S29LyPjx6vHR89Xkui3X7rX0lWnuZFz2NST+XXLEXET34Q8fPkybjN/YOt1VqtuttJzi626juLzf2D+5v11Y3qRnW7UllZXll67cGrlUtr6wv16fzo6x/+6fA7v0yrNZfn9Lbjs5LoU/2hdR5bPImTmoqIH13gmtfJrbw90+OuCF9IISKei4gXs/t/Pm5l/5oAwE3Wbs9He743DQDcdIVsDiwplPO5gLkoFMrlzhze83G7UGs0W/ceNfa21ztzZXeiWHi0Wasu5XOFd6KYpOnl7PjTdOVU+kFEPBsRv5qZzdLltUZtfZwvfABggj11avz/70xn/AcAbrjSuCsAAIyc8R8AJk/v+F8YYz0AgNHx/h8AJo/xHwAmj/EfACaP8R8AJsqP33wz3drH+e9fr7+zv7fVeOf+erW5Va7vrZXXGrs75Y1GYyP7zZ76ederNRo7y6/E3rt3vrvTbC029w8e1ht7262H2e96P6wWR9IqAOAsz77wwV+TiDh8fTbbomctB2M13Gy+7gOT69a4KwCMjdW+YHJd4D2+6QG4Ic5b47YUEbOnM9vtdvvqqgRcsbtf+Vzz/wujrR1wlXrm//0vYJgw5v9hcpn/h8nVbifDrvkfw54IAFxvPsQHBnz+/1y+/33+4cDP1k+f8f5V1goAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACut+76v+V8LfC5KBTK5YinI+JOFJNHm7XqUkQ8ExF/mSnOpOnlMdcZALiowj+SfP2vu/Mvz50unU4+mcn2EfGL37z163dXW63dP6f5/z7Jb72f51fGUX8A4DzdcTrb97yR//jo8Vp3G2V9Pvp+RJQ68Y+PpuP4JP5UTGX7UhQj4vZ/kjzdkfTMXVzE4XsR8eV+7U9iLpsD6ax8ejp+GvvpkcYvfCZ+ISvr7NO/xZcuoS4waT5I+583+t1/hVjI9v3v/1LWQ11c3v+ll1o7zvrAT+N3+79bA/q/hWFjvPLHH3aOZp8sey/iq1MR3djHPf1PN34y2z/+y0PG/9vXvvHioLL2byPuRv/4vbEWW/Wdxeb+wf3N+upGdaO6XamsLK8svfbg1cpiNke9OHg0+Ofr954ZVJa2//aA+KVu+wf8/b81ZPt/97+3f/rNM+J/+6V+8Qvx/Bnxiy8NGTwiVm//oTSoLI2/PqD9U2fET/PuDRn/w78fPLFsOAAwPs39g63VWq26e0kHH+XXPfPk7guJywrq4BofTF/o4cX8qZLnnPvUGuPB90YVazqGPnkmtlbb7S8Ua1CPcRmzbsB1cHLTR8Qn464MAAAAAAAAAAAAAADQ1yi+sTTuNgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBz/T8AAP//q3jHtg==") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000200)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000041}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@ipv6_newnexthop={0x28, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @ILA_ATTR_CSUM_MODE={0x5}}, @NHA_FDB={0x4}]}, 0x28}}, 0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r4, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="9000000000010104000000000000000002000000240001801400018008000100e000000208000200ac1414000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000208000200e000000208000740000000002c000e801400018008000100e000000208000200000000000c00028005000100000000ef050003"], 0x90}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000000c0)) r5 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, &(0x7f0000000180)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r5, 0x7, 0x0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000006c0)={'#! ', './file1', [{0x20, 'ext6\x00J\xa9\xf41sU\xc2\xd3rqyK\x02aF[\x04\x8aI]\xca0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x8, &(0x7f0000000100)=[{}, {}], 0x10, 0x10, &(0x7f00000001c0), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a00)={r0, 0xe0, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000006c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000000c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0x0, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x40) getsockname$packet(r7, &(0x7f0000001b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000050423eeffffffffffff02000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newqdisc={0x50, 0x24, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0x10}, {0x0, 0xa}}, [@TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x3, 0x3ff, 0x1, 0x2, 0x8, 0x4, 0x3}}, {0xa, 0x2, [0xfff7, 0x8000, 0x1e2]}}]}]}, 0x50}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r10}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) clock_adjtime(0x0, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x10, 0x7ffffffd, 0x2, 0x202, r2, 0x0, '\x00', r3, r4, 0x4, 0x3, 0x4, 0x6}, 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000500)={0x0, &(0x7f0000000040)=""/12, &(0x7f00000003c0), &(0x7f0000000440), 0x801, r11, 0x0, 0x21bf000000000000}, 0x38) 6.780530818s ago: executing program 1 (id=171): mkdir(&(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r4}, 0x10) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 6.616433141s ago: executing program 1 (id=172): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000b40)='kmem_cache_free\x00'}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) mlock(&(0x7f0000a38000/0x1000)=nil, 0x1000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB="697f08000fbf56a355"], 0x44}}, 0x0) 6.526158789s ago: executing program 3 (id=174): setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='htcp\x00', 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000700)=ANY=[@ANYBLOB="3801"], 0x138) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000300)={0x120, 0x0, 0x0, [{{}, {0x0, 0x0, 0x74, 0x0, '\xcdSu\xbe`h\xbehM\x16>\x87\xba\x01#\xcb\xc2\x00I\xb3\xdf\xdfSt;rO\xa6\xac\xddo\xfd\xd5\xb58kz\xdb\xaf\x95\xfca\xde\xa9N\x0f\x921\xa50}I\xc0\xec\xdf\xac%\"\xeb,\xe5\xd1w0\xa8\xa0z\xfb\xf0\xad\xa66\x84d\xd3\xe6\xe7\xee\x14\x9dK\xa6\xd6T\xac\xe7\xc7\v\xeb\x84\xc9:\\\x89A\x9a\xe8\xb5pe\x16\xaf\x0fS\xe4\v\x8ea\xe0\xb1\xde\xed\x8a\a\x9f\xb9'}}]}, 0x120) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) lgetxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)=ANY=[@ANYBLOB='user.t'], 0x0, 0x300) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.101909253s ago: executing program 3 (id=175): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000002ec0)=ANY=[@ANYRES32=0x0], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) lseek(r1, 0x100000000, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f00000003c0)=ANY=[@ANYBLOB="600000006800980029bd7000fedbdf250200000000000008000016000000000004000b003c800200000000007000000001000003ff000000010000008100000000000000010000070100000000000001000000"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x24040881) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={r2, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x8, &(0x7f0000000100)=[{}, {}], 0x10, 0x10, &(0x7f00000001c0), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a00)={r0, 0xe0, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000006c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000000c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0x0, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x40) getsockname$packet(r7, &(0x7f0000001b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000050423eeffffffffffff02000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newqdisc={0x50, 0x24, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0x10}, {0x0, 0xa}}, [@TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x3, 0x3ff, 0x1, 0x2, 0x8, 0x4, 0x3}}, {0xa, 0x2, [0xfff7, 0x8000, 0x1e2]}}]}]}, 0x50}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r10}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) clock_adjtime(0x0, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x10, 0x7ffffffd, 0x2, 0x202, r2, 0x0, '\x00', r3, r4, 0x4, 0x3, 0x4, 0x6}, 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000500)={0x0, &(0x7f0000000040)=""/12, &(0x7f00000003c0), &(0x7f0000000440), 0x801, r11, 0x0, 0x21bf000000000000}, 0x38) 5.954460885s ago: executing program 3 (id=176): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48) 5.935403257s ago: executing program 3 (id=177): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x2, 0xc}, 0x73) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYRES32=r1], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@delnexthop={0x38, 0x69, 0x1, 0x0, 0x0, {}, [{0xd}, {0xfffffffffffffe13}, {0x8}, {0x8}]}, 0x38}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000312"], 0x0, 0x0}, 0x0) 5.53403775s ago: executing program 1 (id=180): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xbc1f31509cec8d82}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 4.974206865s ago: executing program 0 (id=183): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8e}, 0x0) syz_clone(0x80, &(0x7f0000000000)="b2acc68c3ff28bb10bdd093288c9a1e6deb2ba921ce3537282d4cad30b7272b7f57a0aebd1543d34a1e540e7d4b9bcd760b311a8351d868032e1b77346beddf6531bb540b17f8153295da7bfe083b6af9cadccdaf1e0791bbdba2ead529ae6b913cde71bd07cd315425dbdad48843b8cd3b20423ca85cd2e22f00ac463556f008b8dd76e110f854edc87e8fa4636ee73d0796e00c7b0f133a33369c55ab5a7a2dc3d7849c62cd32cd553941d0cd405cc84ba9552a88085", 0xb7, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000340)="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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x24000044, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r2}, 0x20) sendmmsg$inet(r2, &(0x7f0000000580), 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c000703000000000000000007000000", @ANYRES32=r6, @ANYBLOB="4000cc000a000200aaaaaaaaaa0c"], 0x28}}, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7e12ddc5a89047bf00"}) r9 = syz_open_pts(r8, 0x0) dup2(r9, r8) 4.709998377s ago: executing program 0 (id=186): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000b40)='kmem_cache_free\x00'}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) mlock(&(0x7f0000a38000/0x1000)=nil, 0x1000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB="697f08000fbf56a355"], 0x44}}, 0x0) 4.404501961s ago: executing program 2 (id=188): creat(&(0x7f0000000280)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b70300000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x3, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x20000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000e80)='free_extent_state\x00', r5}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@name={0x1e, 0x2, 0x2, {{0x42, 0x2}, 0x4}}, 0x10) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) sendmmsg$inet(r0, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) close(0xffffffffffffffff) socket(0x18, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) syz_emit_ethernet(0x6a, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffff12abaaaaaaaa0086dd602e5cea00343c00fc000000000000000000000000000000ff0200000000000000000000000000010003"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 3.654278033s ago: executing program 0 (id=190): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r7 = fcntl$getown(r6, 0x9) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r7, &(0x7f0000000340), 0x4003) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000500)={'fscrypt:', @desc1}, 0x0, 0x0, 0xfffffffffffffffd) bpf$MAP_CREATE(0x0, 0x0, 0x0) r8 = syz_io_uring_setup(0x5bb8, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0)) syz_io_uring_setup(0xbe2, &(0x7f0000000240), 0x0, 0x0) syz_io_uring_setup(0x10278e, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f0000000200), &(0x7f00000000c0)) io_uring_enter(r8, 0xfffffdfc, 0x0, 0x0, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r9}, 0x10) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.292885002s ago: executing program 2 (id=191): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xbc1f31509cec8d82}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 3.278590103s ago: executing program 3 (id=192): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xbc1f31509cec8d82}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 3.115103407s ago: executing program 4 (id=193): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000000000004000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f000000c280)="897c6500ff3035465c7acb4e06980b05687c1480c7aafe631c0543db2bf0d6f529506e8782da06c1ca018774d72e9e5a3418ab66ee78dad68457b17ec9d47bf7d8272d607c1c0a4bd906f0cee7f8451828d2458596bdd6a459ba18ebaf61b38f5d66c27fa8a024ad7832a85e58689a4c254c94cbcf7208fce6e61d9566459789d15a6f91dd7db7c54cc3a94da956fb290a8a15f849270bc459d9d9f47801be86dd5c9d18382081a993b7bfde5c28adca4c71329afd6be743b076033b5859891703eb65fa256d6f47450b6edacbd05a9bd8b372e90cfc30f32826566dac6c48e6ef001881cbc30482f9ec469e476a101da496b8c0785eaf875d3608b0c49e9d39baaa1041f903a805f0f24aa63722fa2d87b98595fa5cfaf8b79c458de43ee39904e7cac7540a934b4108957785d58807abff186949f1b94cd21b724aff34ac45c7066dcdbd68ea7b766af9d045cd7fafeafc5c5a0c3400ef4e0c71a6fdd5b8d68a6f317644cda9d2fd2c839a82b97b3d909b54c672227bef573c9de1991d65a63017f724d1f7f1575e69db53318a7fd7065b303e751518c8eef04f642dbd4dfa349040a7b5401050ffc2b4ef62803a7c8eaba99e011dfac24d81b2b61e0b0581e53bf520f623eca17f0545c5e59ff15b527475f970f589894ae589145fa4283f7225088ccfeba1d72e9128f8c223ae1840f2edae3dbcdf7e560d5cdf4f71c9ada1931c0f8312c000101b264aaddb9fab166ba8d8903d6098eca20935ca607ea79e936798b3dfb22a7e159abb234cf21f3733dbf263a8ff116092f251659108892b2e21e1b428fd225096a5040270b2d70347013eaa1fd8e452942200283aab092c4ffc5b8b427b5d691a5a773e09da20539ff0f8214331c5d84107ae8aedfffffffe22d7a079e446f1dfb07510377799bfdc7ee59cabcd76af0fe8a427ac8258ff33bbad5a8061f1cfdfbf375d73d676cc7916d6658ce46a0b17ad6350150f98e3512b513e25ca73f5f5df0a1fb9582ace7906c493fe1fd2889d9aac0b7c29c2b6c205537627bad64df433336a5ace32ca871e51b4dab0fbb00886a1fa81a98b74de0a26cebf65723515ebb807fc3c161ed42d1a7b6b55717613577ea437f3a2967c66ce45ff85a6a35b7cd40625fc575b107d7394e3d2db51d58347276c33e21f50b5a6b5672bf9fda63139bb75aead1fe4ee9a4064af5a5958466aa39faa6d821489fa415224c8d69d3b5922236832c2b1e4f6b8863b32f9aea83fb522a2de081d674502b48f73ce6db98d84136059b4a6676bc85ac6b7626329afa9bc7d3f9f2caa3c4d872744e0a8e02d72a75c6c545b8ec8e15b6fb0fe4185bd0d154960e6fef05ba40e5fe2968eb1301dcc52a03337179e74ba1522af93d77827845f8941c69ed8bb84567e3c63f1cc378a542f1de7007b688ff0a9c69d5861f0b85402c30a2fd391c52bafbe65f8e82135fd38361d7c0b43c982b2f3e7cb09c40c7e215114f4243d670cd576bcd93c1e959345170c75d6c3cf89cf8c2c70dc792e646e7c649d4c5f36bb016c7acd466ad58473d40dfef36394e581065a8581ab852250403cf372ac0065bf757fa3f445424ac0d82aec1938a2ea116bdfd306baa1cb06c62a4a97d66ab1b9489469cb8ba842da12e310caed02c5ef05c0be1e1e8c9c8b87d6871c94c57d164d08672b205c948086a06a545b266b7ad902a908681eb188bc51b6190b5cb9d8ca59b8c4c6e7369c00d6f6119fd5d437239e3d3c89cb81e09e560fb817590106015f08e7b09f1e1e65bfab3b8489fa058e24081978b9e25463d9945bfbca81c08885d4b6d4c62e217bd9e19460762f36c66bc948fe31cde089626fbb310e3c78a8d3f2eac21d374d9b58d887235d3a95721168e4b9475849071d60ecfe7ea5d6c4bf60da3747612ef59bb651270f326c0af31bc8c71361f851de34ccb3c8071b96f1128d7ee79b41246e566edd0272dbd3ccfe472b38e5e03d3ef83218bd498e6de8b4d92cb6f82716449ede7ba845028eccdb9137be8a622ac88ac53118fbc39637fa7a93cd3abc6f7671c7804420d66e94720acbcac916950f9baca77fef4217155ccc2cd0507339a0486f9f468eb28772986ee768c63eba671bf8c52e48a2a5dc2cc24fe925368706c2d712dd1064692b0fb2a32ddfbd4a0ffcf9c2abcedaae6e527bc1d42637aff2a275b76a7a7f010e42e1cc1d27141f6c3585a2bf58c6c5789ce61551d10118a000e3764631ec0b7f4b1a6f22a678133a30940b79dc76f863dd9f6e0d7776300898c97cef286c731c2050928c492439256e481652bff0d202db3cfdc54c9816ceea7895357bfa0362fad79afd09ed55189294d6ead7e898ac091cddbe7efcedb314bc02a18dd5bbddc42e089124758bb491fd1536aab27c5c124567bc325e7028bced5a179a011d1cb9a5ffb61d7af863e91ec8e60495561188b74d158ba1418228d44e92915a22eb1c166ef7d6179e84381ed950ffd747f13e24172942d922ca3109fb8b1e4e6264fa4a4eec75ad0d0e22579d90f45d6cd157300e38ae665eb56457202e25a8dd5877ba99725de288660badd2704345d9bad208c903ba27ea167dd45a77f77b6502b525b2973270582858183c784c324c1366fbba8d410c38bf75b41e067f6a9a017c56595161db4fc5639393fdafb1f148d3f416c1adc5fe1ab9cebe4689855c9b4bda6dcba5d5fa858a1b87d2ad23cdf54dbdf4d14aa4462da0b6f1107f4afa0091c2643508861a4d9f133ba77751941bb8fb756abf1a104205b80d47a3b4a59724d959c8b5833da4f56fb6613231f230a9378c9af741e94fd2c7213ac1d7625559b3f032f6c8df3ab441929720fe43d7c548cc661eed5b3c62b3c61f538ea3228376e2a18c6da2ad906322f64fb4865cde8e1889a8e5237fd6a39bbd6662f1dedc22fbd74e4376fa610cd710703dbd3924a38beae69783d1d5abf36122cbb87129ba719042748f060f4303a3199c5891c5040fd8cdb9761b006bf64cdcb65e5cc50a29994b8c1c34b83760ece12ed9ed7c3d2a7f8911cdf23a1afe0d7db1bf342aa0123dd5cd31339f5c8e160c4efef882602b3eccbe76fb690162b8bfb8a31910bcdf9a4a5dde76c2ac2fcd8678add7a000cfdcab398eb2171c026313eb6eb56b4b87bf8ef93f7f8a1c0bcc3775b681d4229ea561cb52281d8ba4315c3694ed08433596884d5a7ce3a8b1f82359846b7136726e2fe37bf4f7b7e2206cdcdb0705ced9f0dcaaa2ed3a78ea70d2cfeab668eb321400fc955e9aeb7bbcf86cd03f02dd443503a1480d9d9f899f53bd747a95293786798fc59fceb09e686a9328da4f929b6201841bbbefaffcf3386abdf69540e3b46a643ec10f0acf21f27c0053dc13f18485dbc898729dfbeaaa4887b58cd442d7ffa941808cd9658595be8650a815b088621278d89f0d8a4252566b923df3a3cd65c0e4af08fad385927251b31d35f75eaf25e6cf13a579aeeb0bcc0a14ca4a20a6831d532be0b2af3821792a2df95131b7fafef245aa19b214053342aa820c35858d13f84e496294529411015c41ed447b5b51dc44a45d52552a2be1abfc157f3ace7bfa32d5b931421d5a152dd66b7bf549311b08325e5a7201f793037b38990bedeca8a647c08d2478670f8fc2b4e8983ea18bcd514daeeeeb9d7a778f783c76edf01bd4beda4b77b612cd2e865c2e4f58ca7ae06147bf66ae6aee221cf9b9505dc07e6fb6cf4f82dc8c406c78e270210c11cf2531011ed678d9dfe1f49c9a69a95a9f3b0e5b624d9c2664d787ab911b75a4a38d63e9d6c353f8aaf433ff961fe5e34d84936ead0d0bc7954caf84e541f5c6f3f20c9eed21eb0316b82c0dc5182540e63a0af25565496792153d6395adc2b8d68b8bcd93dd110ff5685879db4384ec390d44b89663d43a5de3bdc0e103b7c1b355dc5f6fe3518c93628780ba03f156badea65d1d0af8433c9e8a975fdd19453da662a33fa9f0f5fa15fdb216b483fb48370a967246e0b763df8b3bc7924a6c76c4b114f803dbfa3b312e6815b4eb67be167283a9e482d9a5beac250089d069d4c386b7fda5fc228404a0f58b12ca4dc131c381b49b42b570bcfc0dd663f24afaf65a26a21f6d92f52c9f8de36cb76bacbaa0eef98ba6b7dbbc2629a03bb2b6f83fc5adaf20c217bc8d0f0d2421e01472532bcb546aeb2d483c8f95011a3ba1d2fd8086a717cb015dd53064ef4a80b6d6fdc12d9069223fdf2aa9b192a0e0bdb38436f49d9eedfef3665815633fee4344aff11162526362b70b18e1dbedbb5d8c4698860beccf667851878a25a1e766caae2861f2e23404aac859e62fdfeac06a6057554828d7035806e8ab3ee2fa6d711e5811db61231a22f4672f6a11b27641f350bcab78792362e6ebc1c054a643bbbf2746678c14dc567d1f73e37005c8ab6374c4d8d3106384a2d32c5fcf05cb9ba97cb7fa1aff11505a701bead543e555f3901ef3b693d5b9ebf49518c3509af042b7e84b1b867c22b7e08725220e4338fd074edce428212e6a3563a08e2ccd8ab71910256532904542e93d5c7deb5bf5d49beb3202d4da4f643649e55edbb91188cdcf0883a40c6ed6b8a086fb5c50dc08fee00308420121d4c7431b3cfb80f9c1e099423ac451d67b12e930d9e391d0a799c7d4b54a0d56ea0aae00c1d009e21fb5459416b464b227d66ccc1a68da59d64c1583dee54bbcd7d61ffe541fd0fb7452adba91906918966a7d58019ad1f8fdebeceeed7018837b6e4272eefeec8385abe7207fb2d7061fa6cdc478165a98971f9729b818a73edefed976d5c7c0a651c091cfd1174c020e39330a79144271fe4cbc61ea0ffa274d0d87d06dd08c1d5f8a0364d46ef7b54426bc286330c75fa257afeb2715c2ae511ff53b1189cc59ab80b1325fbdcedfdb8f36ed71f70091116e16b52188b794e637755027caac8db8554f8674b844964c710cacd7a9d6b06baf6fef76159a380e639b0d3e66080a7cf7f86baac01dbe47fe687fcef2f3bfbf6f8fba045181dee688360a11ee56e5fc73ed31c0e2924ae57f0cc93c63a30662a65c5d5f17123ae28cc5b74dd13ed81b03dc7fa61dc575668868c0df12d3553269f04ba79084d070abcdbd4745de80e90e4e3e524f27249b5c4a2f2d4c8b331b0cb6d4efe62a298daacc6eacdfe008c1f912795dbdc37098c42db860953120fda709baa6d46f52eaba781505e68561ca0f281e850532ef8e7c779883e312806e1c357bdef8d0dda005e710cfa6eb8686e8bf3bff036b3fcdc4036541d93530ce6f598442c24170b307ef05f23c93aa0ec96831b532d8120402214a940d1fa01ed649061a4a71308be189cffd729a196754fb8a75f23851189589be1b819f0612cad3dc94ccee88f4ab9ef6ac9c7daad8cf94f5ed9496c4c824e5b4f66ce32a80e7a6ef069a32f6812e656aa5f5742bd432afdf026c86e8f28212c1139dad47d7fc07e5c1a83e993daaa4a4bb5f0c9435ccab2a10f867ffe259dba7a1d9168619b1e3048860a5122e4a5d0b00372eaae861a0cc88549852fffa76e6d78739b654d67df15ea97a9a46b7c382d83191a673aa619b4a10ec05bc681379b0d6df824cb6fe158e9d89ae5dd1ef66976f67972b553db52eb6feef836dca6026293f83a61e117754a7424a3da63bd82d017f87f0603e2a9b8fc550aae611681935ae91f7ca2b5341b05a25208bd28f1a202a7f2a213b1d7411ffb557470aec00c4d13c70163f22a038a189710dd19a47e8db4a87c3fd329a63abca172a9810edad2d8e19ef85b57ea4287cfb3d740d7ea3fa9c80d06e1aa84b317f678ddb3c147ba5e0db432125f59ca4944c8e9050281ca82a3ecf67b2a5df678697a52a7297af1ecb03c586af7b91d74e881964ed95f7be12fa07e2a4e71aab8b913a13996fa33e915144bf00e49b8e7adec5b2c4b8165f54ba3155230e241ee023af77a295ab87c40f63f6092ccee05cb08a265abe8f57c9919bf45064b6c2240ba8011db223a283a4e2292d9b59df8c9a4fdc763f0631007db9976f351717db0e6b5f9c6e5f227c2efa1ae5fe0be1af0b22fc164f9f9678a01fe8b059749fe8a2972455732da1989c609d191544ef9fbb3e58da93ec4a582430523f260b776e4d747312747d18a9bae14740f5dcd35fd1072f8a4d81573b5882203be856b62d7e1d87081a9e431872c9d68864197bbc61f15dd8aeae950d34d6ce97182deebd2ad64cabd1c723baf512acfc7e94675b31369bd60e155af79b97bb734312569f736dcd5b5a78223ffaa0f7e93e1a112cb9f6a5b88fe3cf12c30024c16c6b8380fdf086c662665d3751c11617cc4dbd5b8bc7543301a23fbc90ba8d060193cdc2b68c31c734d516707b759f7db009c8f06e69b40154e1cd8ae444afb28134acdf871136b4fd78bd86d7faaaf618afb25e92d1ee37cdff0595278f9565f5eb109e181e9cacec2f22e32e9f34774ee223fdb992febcc5dbc5cceeda16cbcf1434730d859e7e03d36ff17636a7a7e66956b515894da114f3040909f90ce3cfbb2d7d46e37049c0fb124e0683d662eb427cd7b851ada229451e6e3aaee64b9964ced3036bde5d9d80eb062474f96ecfb9b65fcafc719494ac12ab7df245475f2a5e7f85ca4789833ca373e6214d39176c8f51dde87a4cfe5414a20f68bb9f34709979b99533ba3435c4aa56e525195e10ffd00f8e41aee30a909c07b973bbf733d45500b539ebe2206d438216690998d9e256db1b7ac6bef3e810785e1986985c945a2b820323a592721fcfa444934d0faf8aa439d5efca5dcd77b72d1eb91b3790d50d0a7483e354c415f81d99c133d648c1293e795b3c43f9b47e23ef982e10072ea5baafb0df675e69af1807b225afa0cec3eafbde8535d3ecaa0ea6ddbffe4465207425bb003670320324df0aeeb16b38a043f9c0e85673b36def332fd68b2b1e6edda621d0cadebbced8c7fc8f890489115b457249e8d8103676b3207a472804d33e0fe511ac56cd8dc5333b2333892f87b455940ada78fcf5075c358fce990e6f65f095eb416d876ce6f120b8b02cfa6b176ee269c942f881247c3e464cce2aa65c39137607c585aeb4b5f24f5f8e058c9c8b48003c1809da3e8aad1bee7955c3a976d43fe132e2b16f4758a0a9884e51d13b930675a4361ff366b0fed190ad7b2a00385528951e39cd44ea06d8921b9d613d7626221154cf86249a550198fe4e5b05ad3052b474291da0a0a2f701759859bc0392adf243ad5eca89e6d18e28dff99ef95743bcabe75504be8c715cd6360facf3bb06cb97c29989d4f6ff5083573cefe6ef0b39a252a2678112fa88e5b06c9a6bfc9597cc96e5a49710c4fc120fb0da4945b9d94e46de1e9989d0fc3d8d20df23d815b660c799a903f651b0d013f7fe158f1d297f7fcb6a48780ca5525f1d081ada0aafa83552318b848783306549750b6254cf676c7b934cf7fdab992717f0cdc089b34278f3fb151cadde14d0d3250e85a4b0ff2a2778a219aa40563d3ef575285484424b6d0e7cc8392342e4848c6fc8cb20fa1b450cc4c1fea19f3bbdd9e342e6c49cd7ac893b1eda2e93d1d74d20969465946b398fbc733757741ac822c4a118632cd242a439fc37512cf79b7c629504ccc1e7f2f11798955c3262b5e9695625ba74d8050e20f51d4769e1ab938f487f1bc4b55b5abcaa3ec079c2d0972b2ae9bfb7c5423b959119292ea05f1d79d35afe47e49d97c946b193bffc0a8f607f18a6845cecbbdd98cd351db2b2dce05a4848ba84a6a497b4618950130cb7e76c03d0976eb2fb41d3a42a1430063ed8e5b8c67e80fd4fc1148911958babbcbff33a6505de209b0d9320017fd736fd027a16564008ab2e1f48a6dd66c9256730e9fda0a606875d0871b2b9b0bc2ed4e1b696dbf0283c8dc72cf4338e595266f5390bc3a21f988353118f2948fc75d050ea076b73508d9ed89bade0ba305c1f4e5daf9d40d2f5e7ababed8d1b1d919c61a6d3fb149c1a9b44e38585a2fe322f83d73a3aecb44da3f0e82942d75d62ed3f91eb44f3411df014f88839e4cb1e21b9b259d4eb4adaf6b0be433d0ed4c87ec77dde5ee9d566e3dd8d928fc1875c63af26c59daba5ae267d9bd5da72b99a03e6a33cc48ed961ab484ff4a46c2d5fa597e626e00b530d7b9a9705e4e08d03f3a7f2a5a5233ad6340e3b5c89db81ca713b6d7d855c6324955f85109b204566f50178cd88abe3fcba25de905e8ea0b75ad51831761ed9b1af2470f976f05ec73bf74d137c207270cfd614170518cdc449aeeb663e114359c8124eaf2499d8cf5dc84a0872301db2e57b50bd285060ec4390d99d4ae3674ca3bb8679c1b08e566ba4f30daec8684a980055eb43cb5a1306c4b52a154682aa96637e06c869278aa2f74ef7345632c11265ef8ac97e953745302556881ba0cb590fef271c0abb193fb84d18ee3f24d9976ae816b857d6f68d1fdfe10b312c799fe014debf875d04bff8b4f387859e97c6bf13f7083c28a2045a0b5eb09c94e781a165965e8617c0efed1701ea9667aeca26d9577ea7b1242e1d91b25d6a66756cc627648a293b9f4345966bc469fafaeddc1118d0972bd5c7751a1f51e5989fd952f314ae10417c97b41e60ebfbc47e496486fa4a89fd16aea7fa1eabebd26eb2a37a3e2b351e0c9d2f67b2e5be0f921adc9b6045b045948e5103af0e5050b9c0799b513c00865deebda730de538f956ceb6164e08bd6f58655a294b4b44fc65309b30f9c00f92ef5bd5b911a3d830f72c258b19521bb8e80db02129954efb61423f518d2c5f36587303890cad9a93fa4f4bcd0e24c67db679c67ea59c1350b8442577632d5e8735833f3daf5a74bc7bd82659a81beba8c889632efe03cd24187aee856cf659e16e195464f52f2b984fc7a299e7b2aa53979a147ebed35705d5e89691666536f2febacfcef9b32d14952f958b72512869e4f6a0a34176918217888b1eb8b89322ebb6bb1dead2b4744e728479880db70e6147edaff6c3f083f18e0696bdbd78cf0bda14d9f42e5c1077ced00041aadff90470aacec0e48e2a5f2a0ed37818a173b96061e8c5bf24c0bde9e09f9e0ddb8e13306ef1d4eb8043ebadde5d7553e5212ecd4691eb426251f9d6720b8276ac543dde02399a35d974b22c1727d4b6df01957cae47443b706d43165e01d6932b136f561ce837431254cfb2a6e7d8070a2d3805aaa15b3c10ccd0cda2e9b418ce9ef380e5d08217752e12b3b892d03a9495c83d78d674612fde5a67738b2d4649ce44606ecce6bf3bd1293eca246a83643e4f1c7ba362b110e07c8479f216e3d4afc4fcb8d0820c8ab702a66d8183e83174597035e92b9b500dee08c80b927b42c3689c7c9617b4112c9e54cbfa51e989b5fd42b80c595d3edd265f138e8128cfbbb0e4f53aa0aa95a2ecda4518b2e564c42d5de7671560843d08103b9bdceac5fdeb0b1266f72f491265dd2b2b80a225a50955167da1812364ea340d82f61535401bae6f3140a8795d7c318a64cee4676627244930957b2f0b227be21b72d90027e6a5a7af3c59470c74dcdb71d1ef090a0f49c91acd604c792385c8f4e085765292822ee5eca03885fd6bfeaca9b3bbbdeac939f7846a487c5a483ed1e4fbf37c93886ea27bb35c812089b900b77c7c924147e97b6a71533610750bc84921012aa8158b213f7601d934a20bdd1f757b0a33042a683af6b9069f3900059d7f80f9fdcc9f33ece8cf7888dc9e24f1fc6ca0ecccf161c5334c60f440feb3acfc3d115011c176dfa05314c5bcf089e3c82bbe7680a3eefdcdbf3ac27265b779db4f49bade0128eda6e29bc5933ef454601db1b49628fd39ab938794fa46a33937a086ece7050d31a21524e2f0cacb307ed4412a2078636f9cc8e11c5c31cc0f9edd7be6d1e31a1513a58e25215f5a24245cb988589e6d5e5119f4f6557c697fad7d1c3a7e3bae064db4382701e33e48c5b6a52fe9141a385ef2325c6f7781134607e98bfd02c43d6deefaa861700388b40d98e941cfb2ddec209f977e8b9f93d29fdbf85e3010ce7cd622e8c75ce3df535e392052b6d65d5042d2a6e78bbfe5ee146e8b18d4bc7fb024dbba57cbe0402205593766a313950cb719d00c67bb6b3bcaa1015b89e820f11475afce655947113a7c3dcbb52427f090df994fbf076db867e0ab3f6125fb8884c1d13ff3e99fab5fa8b9f0b72cb44db4d0a48d9ec17f9733764e213c40a15ad821ec60e4a88cb2fd9dd9a4f35e6a708f4b74067f4be3f03a95261f6b191df53fa5bb5164e4a164630ad9ce39087aa950ad9e60cd2c44fa2237c49abf858c97737fd21180fd0b9542767150fbed3f39a29e6c3484d9437e15d2439f2a54b2a1ac7e63e6c436658abc3f1dd52d984f6c6901768a8cf2ec98ebf44e90e0fc0c24f8957c62e05d8eacecaf25b178fd710af609a8a1bc4d7955b5f0cb4f48a37685e6304ea5843573a1abff37b5106916c83c8f23f939a0dc43aea8d196191ed6e18dd793990d1f37d7de0bf8fac6f469843724eaab86be8a483be281b8ecf4aa29d9c571951cde8cd8c2aaf4d597ac2cb48f23fad145916920a55d655924940573b64dbd42a280cddc4810434f930183fdbbdc72db1491a4c9d44daf9b1bc2fecd855508648063040faeb125da0e68e6cd2002181118eecff0be1dd8eae726af5d451630cd65119c52abd6dded97f931202f186a18c4ba34bc2c3f6d765e2d8f445e959f26ffb55827cf3ff2cc0289f17b82c8caa5a2d3d54306a300f0ef42bbe4ea9e32c5d4b1173942745cdcfe4f5d1619eefaf8dc600afbc9171d516f7f4b35331d0b9be005132ffad5e9df59710278b842afb626a78b8b8b37fc3a894dc705b2d4e0940cb264e9dc87eaa148e6faf78125462f28a0f1d7b3c65a291b85713fa71ffc478f6601e8716c35489f4a54ed0c70bcfd5502cc91374dc3c982075c5180398bc6b195b36e79dcc4087cb990cc9d964a150e0dcc887d496bdd27c3f298736b9ad8345ba2df46021964cf43c38f9d2e94b77bee2b7bf059e0870ff9f17b9ef1320c0aa88a2fa9781e9017ab64643de9a3df9ed4b8cfd8fa080a2e494409520b795eb1517d224a05e450c4c8ae0e9fd29c0e72d3a592cce55f6dd5107f21214e1a3f9a5448384de06149f959ec0c92790f0ff229ab4971171f1c528ae6d095ec007bf5e7f55d623a68194e9ea8edc3af418075338328f24e7504341c22bef72c2963fc9c3237ba990d29c2c8aa3007395f6d96e95b40ee1b18dbad550bf39d0d98268cb74dde76d987c3169c9067495fb1b88508bbb7e94cbb7dfc15c03b1d5b163132c8a468906f02d422a8cf98d0b432b5779dd962074b72dd27439b2e94312f573435e5aa84664432c1914839cd6e172186ce93eeb1d7cb0659696d9d550eb3b185f8c6ee16e53f78233cbe709f99d2879d63d93f7d0ed133241d2f1ab1eb2c56605ca0f0e01c39ab0ba2370fe5c4e68de0561b517ff9a10023c386236398372c7176e35443e2cf5dd6cbed9f23395f231e6a54f65626cb5860a8b72122c34664119e7c47204ef4a70583a", 0x2000, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x4}}, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000000380)={0x50, 0x0, r3}, 0x50) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') 3.114796057s ago: executing program 4 (id=194): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x0, 0x80000, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000b00)=[@dstopts_2292={{0x18}}, @dstopts_2292={{0x18}}], 0x30}, 0x0) 3.114450377s ago: executing program 4 (id=195): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r7 = fcntl$getown(r6, 0x9) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r7, &(0x7f0000000340), 0x4003) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000500)={'fscrypt:', @desc1}, 0x0, 0x0, 0xfffffffffffffffd) bpf$MAP_CREATE(0x0, 0x0, 0x0) r8 = syz_io_uring_setup(0x5bb8, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0)) syz_io_uring_setup(0xbe2, &(0x7f0000000240), 0x0, 0x0) syz_io_uring_setup(0x10278e, &(0x7f0000000000)={0x0, 0x0, 0x10}, &(0x7f0000000200), &(0x7f00000000c0)) io_uring_enter(r8, 0xfffffdfc, 0x0, 0x0, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r9}, 0x10) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.775665814s ago: executing program 0 (id=196): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_clone(0x80, &(0x7f0000000000)="b2acc68c3ff28bb10bdd093288c9a1e6deb2ba921ce3537282d4cad30b7272b7f57a0aebd1543d34a1e540e7d4b9bcd760b311a8351d868032e1b77346beddf6531bb540b17f8153295da7bfe083b6af9cadccdaf1e0791bbdba2ead529ae6b913cde71bd07cd315425dbdad48843b8cd3b20423ca85cd2e22f00ac463556f008b8dd76e110f854edc87e8fa4636ee73d0796e00c7b0f133a33369c55ab5a7a2dc3d7849c62cd32cd553941d0cd405cc84ba9552a88085", 0xb7, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000340)="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") prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x24000044, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r3, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r2}, 0x20) sendmmsg$inet(r2, &(0x7f0000000580), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c000703000000000000000007000000", @ANYRES32=r5, @ANYBLOB="4000cc000a000200aaaaaaaaaa0c"], 0x28}}, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7e12ddc5a89047bf00"}) r8 = syz_open_pts(r7, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000200)=0x2) dup2(r8, r7) 2.558270662s ago: executing program 0 (id=197): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = dup3(r5, r6, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 2.159575425s ago: executing program 1 (id=198): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f000076e000/0x4000)=nil, 0x400000, 0x0, 0x2}) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000312"], 0x0, 0x0}, 0x0) 2.148773755s ago: executing program 4 (id=199): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x8a, &(0x7f0000000300)={[{@jqfmt_vfsold}, {@usrjquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@noload}, {@nombcache}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@noacl}, {@data_err_abort}]}, 0xfe, 0x451, &(0x7f00000016c0)="$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") memfd_create(&(0x7f00000004c0)='\xf3e\t\x05\x00\vty\x01sen\x01C\x1f\xc6\xcf\x12\xd3A\xbbZ%\xb2\xc8<\xf8\xff\xff\xff\xe2\x8e\x9a:\x1c\xec\x87\x87\xcf\x83\xcf\x14\xb0\xfcK\xb9\x1a\xa9\xec{\xb7bn`\xbb\x0e_\bm\x1f\xb1x\x05;,\xf1h\x8cwR-\x81^T\xa8\x90\x17\x03B\x99\x85\x93scH\xe4\xfb\xda\xe7\xaa\x93ZY\xe4\xa0\x040\x8cw#\xfd\x12\xddi \xf62\xee\xe5\x92u\xd8\x06H\xbb*xN\x8c\xe1a\xe8\xcf\x99\x8f\xbe\xbe\aaC\xb0\x9d\x19*3_\xc4\xf9\xecEunE\xfa\xe82\x9f\x8d\xd4\x1d\xfeD\xba*\xef\xdb\xa4U\xfd4v\x8ei\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa7L\xbf\x9c\xe6\x89\xe1Vij\xd1yy\xefg\x8cn\xb2N\xc8Sc\x9cbF[\xecM\x15Z\xbe\xdf\x00+\x89\xcc/.\x95\x11\x97\xade\x9eZvM\x1c\xd0\xc2\x89j\x1e\xe1\xee\xf7J\x17.\xfdl\x99\x82\xf1\x05\xd9C\x1b\xceK\r\xcc', 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r0, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000100)=',*\xf3!\x00'}, 0x30) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r3, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e26, 0x80000, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000b00)=[@dstopts_2292={{0x18}}, @dstopts_2292={{0x18}}], 0x30}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f0000000140)={0x0, 0x0}) syz_open_procfs(r6, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc020660b, &(0x7f0000000180)={@desc={0x1, 0x0, @auto="e2c3cb017721575b"}}) 1.677991444s ago: executing program 0 (id=200): ptrace(0x10, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000003cc0)=ANY=[@ANYBLOB="121500003d55b8"], 0x0) 1.289512445s ago: executing program 4 (id=201): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x8a, &(0x7f0000000300)={[{@jqfmt_vfsold}, {@usrjquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@noload}, {@nombcache}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@noacl}, {@data_err_abort}]}, 0xfe, 0x451, &(0x7f00000016c0)="$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") memfd_create(&(0x7f00000004c0)='\xf3e\t\x05\x00\vty\x01sen\x01C\x1f\xc6\xcf\x12\xd3A\xbbZ%\xb2\xc8<\xf8\xff\xff\xff\xe2\x8e\x9a:\x1c\xec\x87\x87\xcf\x83\xcf\x14\xb0\xfcK\xb9\x1a\xa9\xec{\xb7bn`\xbb\x0e_\bm\x1f\xb1x\x05;,\xf1h\x8cwR-\x81^T\xa8\x90\x17\x03B\x99\x85\x93scH\xe4\xfb\xda\xe7\xaa\x93ZY\xe4\xa0\x040\x8cw#\xfd\x12\xddi \xf62\xee\xe5\x92u\xd8\x06H\xbb*xN\x8c\xe1a\xe8\xcf\x99\x8f\xbe\xbe\aaC\xb0\x9d\x19*3_\xc4\xf9\xecEunE\xfa\xe82\x9f\x8d\xd4\x1d\xfeD\xba*\xef\xdb\xa4U\xfd4v\x8ei\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa7L\xbf\x9c\xe6\x89\xe1Vij\xd1yy\xefg\x8cn\xb2N\xc8Sc\x9cbF[\xecM\x15Z\xbe\xdf\x00+\x89\xcc/.\x95\x11\x97\xade\x9eZvM\x1c\xd0\xc2\x89j\x1e\xe1\xee\xf7J\x17.\xfdl\x99\x82\xf1\x05\xd9C\x1b\xceK\r\xcc', 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r0, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000100)=',*\xf3!\x00'}, 0x30) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r3, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e26, 0x80000, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000b00)=[@dstopts_2292={{0x18}}, @dstopts_2292={{0x18}}], 0x30}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f0000000140)={0x0, 0x0}) r7 = syz_open_procfs(r6, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r7, 0xc020660b, &(0x7f0000000180)={@desc={0x1, 0x0, @auto="e2c3cb017721575b"}}) 387.111538ms ago: executing program 4 (id=202): creat(&(0x7f0000000280)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b70300000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x3, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x20000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000e80)='free_extent_state\x00', r5}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@name={0x1e, 0x2, 0x2, {{0x42, 0x2}, 0x4}}, 0x10) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) sendmmsg$inet(r0, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="15b26f226e2966667482d50903b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5d07d691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6bea1764fbde5500fa30c5f2459cff4d7f123ab94cfd5762d586ec7a28abc2f8c9e608f8f964b96ecb0883d60d444f317834a3d734cb304051a60d1a084a84da8f9a23a1b9d4951c0a81985c63ae193f40e9deb358b2f08553324fd6086be9e70e5061568abefebcda50e70f4dab2e4dc0cf6d85aced044d7005326922886194895267165f7f592036ebe11dcf1cad98f5cda766eaea90fb4cb5e793525126c7594f8599055192d63a81d3cd26aadd50983f1c3f1d4655c1b5f59e80f733e3abc4792b760729fd26298ef15141cf76cc4", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) close(0xffffffffffffffff) socket(0x18, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) syz_emit_ethernet(0x6a, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffff12abaaaaaaaa0086dd602e5cea00343c00fc000000000000000000000000000000ff0200000000000000000000000000010003"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 0s ago: executing program 2 (id=203): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000001c0)) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.8' (ED25519) to the list of known hosts. [ 22.664767][ T30] audit: type=1400 audit(1720637148.131:66): avc: denied { integrity } for pid=281 comm="syz-executor" lockdown_reason="debugfs access" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lockdown permissive=1 [ 22.668245][ T281] cgroup: Unknown subsys name 'net' [ 22.686913][ T30] audit: type=1400 audit(1720637148.141:67): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.714283][ T30] audit: type=1400 audit(1720637148.141:68): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.714463][ T281] cgroup: Unknown subsys name 'devices' [ 22.736135][ T30] audit: type=1400 audit(1720637148.161:69): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.878094][ T281] cgroup: Unknown subsys name 'hugetlb' [ 22.883610][ T281] cgroup: Unknown subsys name 'rlimit' [ 23.044166][ T30] audit: type=1400 audit(1720637148.511:70): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.067132][ T30] audit: type=1400 audit(1720637148.511:71): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.067538][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 23.091892][ T30] audit: type=1400 audit(1720637148.511:72): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 23.123047][ T30] audit: type=1400 audit(1720637148.581:73): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.148243][ T30] audit: type=1400 audit(1720637148.581:74): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.199566][ T30] audit: type=1400 audit(1720637148.671:75): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.224924][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.808268][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.815113][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.822452][ T290] device bridge_slave_0 entered promiscuous mode [ 23.829339][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.836180][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.843549][ T290] device bridge_slave_1 entered promiscuous mode [ 23.850007][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.857150][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.864209][ T292] device bridge_slave_0 entered promiscuous mode [ 23.871837][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.878761][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.885762][ T292] device bridge_slave_1 entered promiscuous mode [ 23.950136][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.957005][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.964091][ T293] device bridge_slave_0 entered promiscuous mode [ 23.982546][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.989513][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.996685][ T293] device bridge_slave_1 entered promiscuous mode [ 24.039686][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.046579][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.053767][ T294] device bridge_slave_0 entered promiscuous mode [ 24.060550][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.067394][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.074611][ T294] device bridge_slave_1 entered promiscuous mode [ 24.098438][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.105281][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.112489][ T291] device bridge_slave_0 entered promiscuous mode [ 24.119053][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.125885][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.133268][ T291] device bridge_slave_1 entered promiscuous mode [ 24.219627][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.226481][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.233566][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.240369][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.258999][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.265845][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.272974][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.279750][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.309168][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.316008][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.323123][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.329909][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.374004][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.381506][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.388591][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.395522][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.402710][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.409770][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.417683][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.424824][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.449857][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.457802][ T302] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.464621][ T302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.472056][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.480008][ T302] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.486845][ T302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.494367][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.502132][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.509294][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.516434][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.524407][ T302] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.531243][ T302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.538425][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.546322][ T302] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.553079][ T302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.579188][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.587067][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.600288][ T290] device veth0_vlan entered promiscuous mode [ 24.614392][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.622092][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.630956][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.638776][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.645881][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.653146][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.660977][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.668911][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.675729][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.682917][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.690814][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.697564][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.704684][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.728409][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.735880][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.743917][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.751875][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.758707][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.766029][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.773999][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.780821][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.788009][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.795894][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.802656][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.809977][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.817938][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.824757][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.832548][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.839957][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.856194][ T294] device veth0_vlan entered promiscuous mode [ 24.863561][ T290] device veth1_macvtap entered promiscuous mode [ 24.876518][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.884377][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.892936][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.900786][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.908492][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.916503][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.924502][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.932133][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.939772][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.947589][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.955207][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.962957][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.970636][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.978474][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.986117][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.993937][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.010622][ T292] device veth0_vlan entered promiscuous mode [ 25.018373][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.025605][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.032864][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.041026][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.049129][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.056832][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.064461][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.072521][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.080713][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.087958][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.099739][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.107758][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.120759][ T292] device veth1_macvtap entered promiscuous mode [ 25.132624][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.141080][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.149079][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.161210][ T293] device veth0_vlan entered promiscuous mode [ 25.173041][ T294] device veth1_macvtap entered promiscuous mode [ 25.188652][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.190634][ T317] loop3: detected capacity change from 0 to 512 [ 25.197008][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.212272][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.219909][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.227566][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.235560][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.243718][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.251598][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.259519][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.266836][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.274733][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.282763][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.290791][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.298877][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.306440][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.314388][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.321595][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.328851][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.329897][ T317] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 25.329897][ T317] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 25.329897][ T317] [ 25.336079][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.362164][ T291] device veth0_vlan entered promiscuous mode [ 25.372652][ T317] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 25.384725][ T317] EXT4-fs (loop3): 1 truncate cleaned up [ 25.390502][ T317] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 25.418393][ T293] device veth1_macvtap entered promiscuous mode [ 25.428672][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.436772][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.444920][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.453266][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.461409][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.469447][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.477418][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.484832][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.492821][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.517357][ T291] device veth1_macvtap entered promiscuous mode [ 25.536808][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.544371][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.557337][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.619834][ T327] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 25.753407][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.761572][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.786518][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.794601][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.802993][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.811242][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.836619][ T39] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 26.204122][ T39] usb 1-1: Using ep0 maxpacket: 16 [ 26.586603][ T39] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 26.595479][ T39] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.603528][ T39] usb 1-1: Product: syz [ 26.607672][ T39] usb 1-1: Manufacturer: syz [ 26.612092][ T39] usb 1-1: SerialNumber: syz [ 26.618876][ T39] r8152-cfgselector 1-1: config 0 descriptor?? [ 26.756545][ T20] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 27.035463][ T323] loop0: detected capacity change from 0 to 512 [ 27.056099][ T323] ======================================================= [ 27.056099][ T323] WARNING: The mand mount option has been deprecated and [ 27.056099][ T323] and is ignored by this kernel. Remove the mand [ 27.056099][ T323] option from the mount to silence this warning. [ 27.056099][ T323] ======================================================= [ 27.098005][ T323] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 27.119685][ T323] EXT4-fs error (device loop0): __ext4_iget:4892: inode #11: block 1: comm syz.0.1: invalid block [ 27.130415][ T323] EXT4-fs (loop0): Remounting filesystem read-only [ 27.139580][ T323] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.1: couldn't read orphan inode 11 (err -117) [ 27.167926][ T323] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,errors=continue,max_dir_size_kb=0x0000000000000009,data_err=abort,errors=remount-ro,noinit_itable,mblk_io_submit,i_version,acl,. Quota mode: none. [ 27.216509][ T20] usb 2-1: Using ep0 maxpacket: 32 [ 27.692869][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 27.713250][ T30] audit: type=1400 audit(1720637153.141:120): avc: denied { name_bind } for pid=322 comm="syz.0.1" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 27.819446][ T30] audit: type=1400 audit(1720637153.141:121): avc: denied { node_bind } for pid=322 comm="syz.0.1" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 28.206860][ T63] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 28.271122][ T376] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 28.288034][ T30] audit: type=1400 audit(1720637153.731:122): avc: denied { create } for pid=373 comm="syz.3.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 28.308389][ T30] audit: type=1400 audit(1720637153.731:123): avc: denied { write } for pid=373 comm="syz.3.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 28.327997][ T30] audit: type=1400 audit(1720637153.741:124): avc: denied { read } for pid=375 comm="syz.2.13" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 28.355113][ T30] audit: type=1400 audit(1720637153.741:125): avc: denied { open } for pid=375 comm="syz.2.13" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 28.378033][ T30] audit: type=1400 audit(1720637153.741:126): avc: denied { ioctl } for pid=375 comm="syz.2.13" path="/dev/kvm" dev="devtmpfs" ino=82 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 28.418898][ T20] usb 2-1: unable to get BOS descriptor or descriptor too short [ 28.436395][ T382] loop3: detected capacity change from 0 to 512 [ 28.482530][ T382] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 28.482530][ T382] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 28.482530][ T382] [ 28.501527][ T382] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 28.510548][ T382] EXT4-fs (loop3): 1 truncate cleaned up [ 28.516028][ T382] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 28.550526][ T20] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 28.561281][ T20] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 28.571588][ T20] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 28.582688][ T30] audit: type=1400 audit(1720637154.021:127): avc: denied { execute } for pid=375 comm="syz.2.13" path="/4/cgroup.stat" dev="tmpfs" ino=39 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 28.676734][ T63] usb 5-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 28.685638][ T63] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.705012][ T63] usb 5-1: config 0 descriptor?? [ 28.946569][ T20] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 28.971145][ T20] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.979151][ T20] usb 2-1: Product: syz [ 28.983165][ T20] usb 2-1: Manufacturer: syz [ 28.987594][ T20] usb 2-1: SerialNumber: syz [ 29.186611][ T20] usb 2-1: 0:2 : does not exist [ 29.194282][ T20] usb 2-1: USB disconnect, device number 2 [ 29.537994][ T39] r8152-cfgselector 1-1: Unknown version 0x0000 [ 29.570632][ T39] r8152-cfgselector 1-1: Unknown version 0x0000 [ 29.577148][ T39] r8152-cfgselector 1-1: USB disconnect, device number 2 [ 29.925648][ T302] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 31.196517][ T26] usb 5-1: USB disconnect, device number 2 [ 31.217672][ T30] audit: type=1400 audit(1720637156.691:128): avc: denied { confidentiality } for pid=415 comm="syz.3.22" lockdown_reason="use of bpf to read kernel RAM" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lockdown permissive=1 [ 31.775978][ T424] loop0: detected capacity change from 0 to 512 [ 31.785570][ T30] audit: type=1400 audit(1720637157.251:129): avc: denied { create } for pid=421 comm="syz.1.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 31.804784][ T424] EXT4-fs (loop0): Mount option "noacl" will be removed by 3.5 [ 31.804784][ T424] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 31.804784][ T424] [ 31.823613][ T424] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 31.832377][ T424] EXT4-fs (loop0): 1 truncate cleaned up [ 31.837951][ T424] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 31.876587][ T302] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.887429][ T302] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.897014][ T302] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 31.921316][ T302] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.929284][ T313] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 31.940558][ T302] usb 3-1: config 0 descriptor?? [ 31.954631][ T424] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 32.179971][ T433] loop2: detected capacity change from 0 to 512 [ 32.216573][ T313] usb 4-1: device descriptor read/64, error -71 [ 32.307231][ T302] usbhid 3-1:0.0: can't add hid device: -71 [ 32.315714][ T302] usbhid: probe of 3-1:0.0 failed with error -71 [ 32.331429][ T302] usb 3-1: USB disconnect, device number 2 [ 32.370409][ T433] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 32.370409][ T433] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 32.370409][ T433] [ 32.396053][ T433] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 32.404686][ T433] EXT4-fs (loop2): 1 truncate cleaned up [ 32.410195][ T433] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 32.436520][ T39] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 32.616507][ T313] usb 4-1: device descriptor read/64, error -71 [ 32.707159][ T441] loop1: detected capacity change from 0 to 512 [ 32.766886][ T441] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 32.779798][ T441] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 32.790937][ T441] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 32.803872][ T441] EXT4-fs (loop1): 1 truncate cleaned up [ 32.809415][ T441] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,noquota,nombcache,quota,,errors=continue. Quota mode: writeback. [ 32.828935][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.833693][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 32.833704][ T30] audit: type=1400 audit(1720637158.301:133): avc: denied { ioctl } for pid=440 comm="syz.1.29" path="/dev/uinput" dev="devtmpfs" ino=166 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 32.839655][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.839687][ T39] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 32.882656][ T30] audit: type=1400 audit(1720637158.351:134): avc: denied { create } for pid=440 comm="syz.1.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 32.888616][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.908481][ T313] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 32.920992][ T441] netlink: 'syz.1.29': attribute type 3 has an invalid length. [ 32.931038][ T30] audit: type=1400 audit(1720637158.381:135): avc: denied { write } for pid=440 comm="syz.1.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 32.951774][ T39] usb 1-1: config 0 descriptor?? [ 32.960400][ T30] audit: type=1400 audit(1720637158.431:136): avc: denied { ioctl } for pid=440 comm="syz.1.29" path="socket:[14356]" dev="sockfs" ino=14356 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 32.989369][ T441] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback. [ 33.406314][ T313] usb 4-1: device descriptor read/64, error -71 [ 33.420117][ T63] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 33.566572][ T302] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 33.636865][ T39] hid (null): bogus close delimiter [ 33.786557][ T63] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.797317][ T63] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.806850][ T63] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 33.815644][ T63] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.824560][ T63] usb 5-1: config 0 descriptor?? [ 33.836539][ T313] usb 4-1: device descriptor read/64, error -71 [ 33.842707][ T302] usb 2-1: Using ep0 maxpacket: 16 [ 33.856596][ T39] usb 1-1: language id specifier not provided by device, defaulting to English [ 33.967265][ T313] usb usb4-port1: attempt power cycle [ 34.281346][ T429] UDC core: couldn't find an available UDC or it's busy: -16 [ 34.288706][ T429] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 34.396594][ T302] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 34.405489][ T302] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.413265][ T302] usb 2-1: Product: syz [ 34.417318][ T302] usb 2-1: Manufacturer: syz [ 34.422879][ T302] usb 2-1: SerialNumber: syz [ 34.428086][ T302] r8152-cfgselector 2-1: config 0 descriptor?? [ 34.526676][ T63] hid (null): bogus close delimiter [ 34.566525][ T313] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 34.669105][ T447] loop1: detected capacity change from 0 to 512 [ 34.736555][ T39] uclogic 0003:256C:006D.0001: failed retrieving string descriptor #100: -71 [ 34.745166][ T39] uclogic 0003:256C:006D.0001: failed retrieving pen parameters: -71 [ 34.753317][ T63] usb 5-1: language id specifier not provided by device, defaulting to English [ 34.767577][ T313] usb 4-1: device descriptor read/8, error -71 [ 34.773341][ T39] uclogic 0003:256C:006D.0001: failed probing pen v1 parameters: -71 [ 34.781882][ T39] uclogic 0003:256C:006D.0001: failed probing parameters: -71 [ 34.789183][ T39] uclogic: probe of 0003:256C:006D.0001 failed with error -71 [ 34.797988][ T39] usb 1-1: USB disconnect, device number 3 [ 34.815706][ T447] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 34.825811][ T447] EXT4-fs error (device loop1): __ext4_iget:4892: inode #11: block 1: comm syz.1.31: invalid block [ 34.837614][ T447] EXT4-fs (loop1): Remounting filesystem read-only [ 34.843955][ T447] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.31: couldn't read orphan inode 11 (err -117) [ 34.855729][ T447] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,errors=continue,max_dir_size_kb=0x0000000000000009,data_err=abort,errors=remount-ro,noinit_itable,mblk_io_submit,i_version,acl,. Quota mode: none. [ 35.196533][ T313] usb 4-1: device descriptor read/8, error -71 [ 35.476948][ T63] uclogic 0003:256C:006D.0002: failed retrieving string descriptor #100: -71 [ 35.485971][ T63] uclogic 0003:256C:006D.0002: failed retrieving pen parameters: -71 [ 35.495451][ T63] uclogic 0003:256C:006D.0002: failed probing pen v1 parameters: -71 [ 35.510572][ T63] uclogic 0003:256C:006D.0002: failed probing parameters: -71 [ 35.518947][ T63] uclogic: probe of 0003:256C:006D.0002 failed with error -71 [ 35.539717][ T63] usb 5-1: USB disconnect, device number 3 [ 35.586742][ T313] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 35.698958][ T474] loop2: detected capacity change from 0 to 512 [ 35.747064][ T474] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 35.747064][ T474] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 35.747064][ T474] [ 35.765406][ T474] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 35.773369][ T313] usb 4-1: device descriptor read/8, error -71 [ 35.773954][ T474] EXT4-fs (loop2): 1 truncate cleaned up [ 35.784864][ T474] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 35.844313][ T474] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 35.921135][ T30] audit: type=1400 audit(1720637161.391:137): avc: denied { write } for pid=476 comm="syz.2.37" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 35.942277][ T30] audit: type=1400 audit(1720637161.391:138): avc: denied { add_name } for pid=476 comm="syz.2.37" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 35.963212][ T30] audit: type=1400 audit(1720637161.391:139): avc: denied { associate } for pid=476 comm="syz.2.37" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 36.066579][ T313] usb 4-1: device descriptor read/8, error -71 [ 36.364349][ T313] usb usb4-port1: unable to enumerate USB device [ 36.416537][ T302] r8152-cfgselector 2-1: Unknown version 0x0000 [ 36.436960][ T302] r8152-cfgselector 2-1: Unknown version 0x0000 [ 36.437325][ T488] loop0: detected capacity change from 0 to 512 [ 36.443108][ T302] r8152-cfgselector 2-1: bad CDC descriptors [ 36.459958][ T488] EXT4-fs (loop0): Mount option "noacl" will be removed by 3.5 [ 36.459958][ T488] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 36.459958][ T488] [ 36.478825][ T302] r8152-cfgselector 2-1: Unknown version 0x0000 [ 36.485793][ T302] r8152-cfgselector 2-1: USB disconnect, device number 3 [ 36.494535][ T488] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 36.503865][ T488] EXT4-fs (loop0): 1 truncate cleaned up [ 36.509744][ T488] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 36.535129][ T394] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 36.896600][ T394] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.907475][ T394] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.917428][ T394] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 36.927421][ T394] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.938959][ T394] usb 5-1: config 0 descriptor?? [ 37.397222][ T479] UDC core: couldn't find an available UDC or it's busy: -16 [ 37.420366][ T479] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 37.438518][ T30] audit: type=1400 audit(1720637162.911:140): avc: denied { create } for pid=478 comm="syz.4.38" dev="anon_inodefs" ino=15371 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 37.466553][ T30] audit: type=1400 audit(1720637162.911:141): avc: denied { ioctl } for pid=478 comm="syz.4.38" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=15371 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 37.570524][ T505] fuse: Bad value for 'fd' [ 37.686553][ T314] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 37.709312][ T394] hid (null): bogus close delimiter [ 38.076552][ T394] usb 5-1: string descriptor 0 read error: -71 [ 38.096582][ T394] uclogic 0003:256C:006D.0003: failed retrieving string descriptor #200: -71 [ 38.096586][ T314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.096610][ T314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.105220][ T394] uclogic 0003:256C:006D.0003: failed retrieving pen parameters: -71 [ 38.115982][ T314] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 38.125727][ T394] uclogic 0003:256C:006D.0003: failed probing pen v2 parameters: -71 [ 38.133561][ T314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.142302][ T394] uclogic 0003:256C:006D.0003: failed probing parameters: -71 [ 38.153105][ T314] usb 2-1: config 0 descriptor?? [ 38.165206][ T394] uclogic: probe of 0003:256C:006D.0003 failed with error -71 [ 38.205868][ T30] audit: type=1400 audit(1720637163.671:142): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 38.208376][ T394] usb 5-1: USB disconnect, device number 4 [ 38.257788][ T292] syz-executor (292) used greatest stack depth: 20784 bytes left [ 38.312211][ T511] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.319140][ T511] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.326319][ T511] device bridge_slave_0 entered promiscuous mode [ 38.333092][ T511] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.339961][ T511] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.347264][ T511] device bridge_slave_1 entered promiscuous mode [ 38.388190][ T511] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.395061][ T511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.402242][ T511] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.409024][ T511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.428429][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 38.435688][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.442780][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.451175][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.459316][ T394] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.466132][ T394] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.476097][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 38.484109][ T330] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.490957][ T330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.507251][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 38.515433][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.531499][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.543552][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.551298][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 38.558507][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 38.566656][ T511] device veth0_vlan entered promiscuous mode [ 38.575829][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.586385][ T511] device veth1_macvtap entered promiscuous mode [ 38.595245][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 38.616024][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 38.629863][ T30] audit: type=1400 audit(1720637164.101:143): avc: denied { mounton } for pid=511 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=362 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 38.656759][ T314] hid (null): bogus close delimiter [ 38.677751][ T521] loop2: detected capacity change from 0 to 512 [ 38.717079][ T369] device bridge_slave_1 left promiscuous mode [ 38.722989][ T369] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.730305][ T369] device bridge_slave_0 left promiscuous mode [ 38.736213][ T369] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.743644][ T521] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 38.743644][ T521] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 38.743644][ T521] [ 38.761283][ T369] device veth1_macvtap left promiscuous mode [ 38.762443][ T521] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 38.767841][ T369] device veth0_vlan left promiscuous mode [ 38.775554][ T521] EXT4-fs (loop2): 1 truncate cleaned up [ 38.785967][ T521] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 38.826521][ T313] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 38.876576][ T314] usb 2-1: language id specifier not provided by device, defaulting to English [ 38.936528][ T63] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 38.988739][ T525] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 39.085866][ T502] UDC core: couldn't find an available UDC or it's busy: -16 [ 39.094706][ T502] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 39.306564][ T63] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.317396][ T63] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 39.326552][ T313] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 39.327305][ T63] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 39.346447][ T63] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.354907][ T63] usb 1-1: config 0 descriptor?? [ 39.496597][ T313] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 39.505503][ T313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.523250][ T313] usb 5-1: Product: syz [ 39.527336][ T313] usb 5-1: Manufacturer: syz [ 39.531659][ T313] usb 5-1: SerialNumber: syz [ 39.556588][ T314] uclogic 0003:256C:006D.0004: failed retrieving string descriptor #100: -71 [ 39.565185][ T314] uclogic 0003:256C:006D.0004: failed retrieving pen parameters: -71 [ 39.573509][ T314] uclogic 0003:256C:006D.0004: failed probing pen v1 parameters: -71 [ 39.581353][ T314] uclogic 0003:256C:006D.0004: failed probing parameters: -71 [ 39.589066][ T314] uclogic: probe of 0003:256C:006D.0004 failed with error -71 [ 39.603225][ T314] usb 2-1: USB disconnect, device number 4 [ 39.836679][ T63] hid (null): bogus close delimiter [ 39.866518][ T394] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 40.052652][ T531] loop1: detected capacity change from 0 to 512 [ 40.066636][ T63] usb 1-1: language id specifier not provided by device, defaulting to English [ 40.106504][ T394] usb 3-1: Using ep0 maxpacket: 16 [ 40.126941][ T531] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 40.126941][ T531] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 40.126941][ T531] [ 40.145210][ T531] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 40.153627][ T531] EXT4-fs (loop1): 1 truncate cleaned up [ 40.159132][ T531] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 40.329510][ T534] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 40.506561][ T394] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 40.515438][ T394] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.523261][ T394] usb 3-1: Product: syz [ 40.527249][ T394] usb 3-1: Manufacturer: syz [ 40.531623][ T394] usb 3-1: SerialNumber: syz [ 40.536814][ T394] r8152-cfgselector 3-1: config 0 descriptor?? [ 40.676587][ T313] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 40.682844][ T313] cdc_ncm 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 40.690529][ T313] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 40.696537][ T63] uclogic 0003:256C:006D.0005: failed retrieving string descriptor #100: -71 [ 40.705199][ T63] uclogic 0003:256C:006D.0005: failed retrieving pen parameters: -71 [ 40.713069][ T63] uclogic 0003:256C:006D.0005: failed probing pen v1 parameters: -71 [ 40.721055][ T63] uclogic 0003:256C:006D.0005: failed probing parameters: -71 [ 40.728378][ T63] uclogic: probe of 0003:256C:006D.0005 failed with error -71 [ 40.737293][ T63] usb 1-1: USB disconnect, device number 4 [ 40.779192][ T528] loop2: detected capacity change from 0 to 512 [ 40.826860][ T528] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 40.834684][ T528] EXT4-fs error (device loop2): __ext4_iget:4892: inode #11: block 1: comm syz.2.52: invalid block [ 40.845453][ T528] EXT4-fs (loop2): Remounting filesystem read-only [ 40.852072][ T528] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.52: couldn't read orphan inode 11 (err -117) [ 40.863933][ T528] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,errors=continue,max_dir_size_kb=0x0000000000000009,data_err=abort,errors=remount-ro,noinit_itable,mblk_io_submit,i_version,acl,. Quota mode: none. [ 40.896593][ T313] cdc_ncm 5-1:1.0: setting tx_max = 184 [ 40.904340][ T313] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM, 42:42:42:42:42:42 [ 40.917784][ T313] usb 5-1: USB disconnect, device number 5 [ 40.923669][ T313] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM [ 40.932204][ T30] audit: type=1400 audit(1720637166.411:144): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 40.991498][ T30] audit: type=1400 audit(1720637166.451:145): avc: denied { create } for pid=537 comm="syz.1.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 41.015260][ T30] audit: type=1400 audit(1720637166.451:146): avc: denied { connect } for pid=537 comm="syz.1.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 41.031814][ T538] netlink: 'syz.1.54': attribute type 27 has an invalid length. [ 41.037253][ T30] audit: type=1400 audit(1720637166.451:147): avc: denied { write } for pid=537 comm="syz.1.54" laddr=fe80::16 lport=43085 faddr=fe80:: scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 41.065148][ T30] audit: type=1400 audit(1720637166.541:148): avc: denied { read } for pid=138 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 41.108205][ T538] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.115213][ T538] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.160360][ T538] syz.1.54 (538) used greatest stack depth: 20656 bytes left [ 41.239357][ T546] loop0: detected capacity change from 0 to 512 [ 41.307321][ T546] EXT4-fs (loop0): Mount option "noacl" will be removed by 3.5 [ 41.307321][ T546] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 41.307321][ T546] [ 41.326440][ T546] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 41.335067][ T546] EXT4-fs (loop0): 1 truncate cleaned up [ 41.340577][ T546] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 41.373672][ T547] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.380648][ T547] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.388037][ T547] device bridge_slave_0 entered promiscuous mode [ 41.395231][ T547] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.403745][ T547] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.412218][ T547] device bridge_slave_1 entered promiscuous mode [ 41.461914][ T547] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.468786][ T547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.475882][ T547] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.479703][ T554] loop4: detected capacity change from 0 to 512 [ 41.482681][ T547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.528752][ T554] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 41.528752][ T554] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 41.528752][ T554] [ 41.549684][ T556] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 41.630914][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.640772][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.653948][ T554] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 41.663754][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.675377][ T554] EXT4-fs (loop4): 1 truncate cleaned up [ 41.681013][ T554] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 41.707370][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.748406][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.755278][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.762834][ T554] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 41.777122][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.785521][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.792378][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.817676][ T547] device veth0_vlan entered promiscuous mode [ 41.829430][ T547] device veth1_macvtap entered promiscuous mode [ 41.840198][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.848562][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.856381][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.896018][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.914389][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.922468][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.930208][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.943113][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.952734][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 41.960861][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.041848][ T562] fuse: Bad value for 'fd' [ 42.199020][ T369] device bridge_slave_1 left promiscuous mode [ 42.263652][ T369] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.300813][ T369] device bridge_slave_0 left promiscuous mode [ 42.325477][ T369] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.334222][ T369] device veth1_macvtap left promiscuous mode [ 42.340117][ T369] device veth0_vlan left promiscuous mode [ 42.523904][ T30] audit: type=1400 audit(1720637167.991:149): avc: denied { read } for pid=572 comm="syz.0.62" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 42.549482][ T30] audit: type=1400 audit(1720637167.991:150): avc: denied { open } for pid=572 comm="syz.0.62" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 42.578323][ T30] audit: type=1400 audit(1720637168.051:151): avc: denied { append } for pid=82 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 42.616537][ T302] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 42.656577][ T394] r8152-cfgselector 3-1: Unknown version 0x0000 [ 42.676524][ T394] r8152-cfgselector 3-1: Unknown version 0x0000 [ 42.693043][ T394] r8152-cfgselector 3-1: bad CDC descriptors [ 42.786544][ T394] r8152-cfgselector 3-1: Unknown version 0x0000 [ 42.794220][ T394] r8152-cfgselector 3-1: USB disconnect, device number 3 [ 42.984427][ T581] 9pnet: Insufficient options for proto=fd [ 43.006567][ T302] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.024119][ T302] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.068310][ T302] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 43.077389][ T579] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.087385][ T579] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.201728][ T579] device bridge_slave_0 entered promiscuous mode [ 43.305974][ T579] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.323591][ T302] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.332077][ T302] usb 2-1: config 0 descriptor?? [ 43.337512][ T579] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.346559][ T579] device bridge_slave_1 entered promiscuous mode [ 43.349125][ T591] loop3: detected capacity change from 0 to 512 [ 43.400882][ T591] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 43.400882][ T591] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 43.400882][ T591] [ 43.419718][ T591] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 43.436566][ T591] EXT4-fs (loop3): 1 truncate cleaned up [ 43.442141][ T591] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 43.483257][ T579] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.490170][ T579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.497244][ T579] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.504005][ T579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.541444][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.549090][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.557498][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.564772][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.592684][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.601236][ T526] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.608094][ T526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.617152][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.631017][ T595] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 43.695865][ T526] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.702759][ T526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.754992][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.763188][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.771266][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.782465][ T579] device veth0_vlan entered promiscuous mode [ 43.788676][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.796358][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.803731][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.816636][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.825241][ T369] device bridge_slave_1 left promiscuous mode [ 43.831259][ T369] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.840319][ T369] device bridge_slave_0 left promiscuous mode [ 43.846311][ T369] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.861280][ T369] device veth1_macvtap left promiscuous mode [ 43.868948][ T369] device veth0_vlan left promiscuous mode [ 43.869963][ T569] UDC core: couldn't find an available UDC or it's busy: -16 [ 43.883459][ T569] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 43.946709][ T302] hid (null): bogus close delimiter [ 43.959676][ T579] device veth1_macvtap entered promiscuous mode [ 43.968791][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.982390][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.990468][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.146601][ T394] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 44.244231][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 44.244245][ T30] audit: type=1400 audit(1720637169.711:155): avc: denied { create } for pid=606 comm="syz.3.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 44.269318][ T30] audit: type=1400 audit(1720637169.721:156): avc: denied { write } for pid=606 comm="syz.3.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 44.366554][ T313] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 44.466382][ T612] fuse: Bad value for 'fd' [ 44.550620][ T394] usb 1-1: Using ep0 maxpacket: 16 [ 44.566583][ T302] usb 2-1: string descriptor 0 read error: -71 [ 44.586625][ T302] uclogic 0003:256C:006D.0006: failed retrieving string descriptor #200: -71 [ 44.595206][ T302] uclogic 0003:256C:006D.0006: failed retrieving pen parameters: -71 [ 44.603277][ T302] uclogic 0003:256C:006D.0006: failed probing pen v2 parameters: -71 [ 44.611219][ T302] uclogic 0003:256C:006D.0006: failed probing parameters: -71 [ 44.618492][ T302] uclogic: probe of 0003:256C:006D.0006 failed with error -71 [ 44.627115][ T302] usb 2-1: USB disconnect, device number 5 [ 44.746755][ T313] usb 3-1: Using ep0 maxpacket: 16 [ 44.826748][ T394] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 44.835683][ T394] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.843468][ T394] usb 1-1: Product: syz [ 44.847498][ T394] usb 1-1: Manufacturer: syz [ 44.851825][ T394] usb 1-1: SerialNumber: syz [ 44.856760][ T394] r8152-cfgselector 1-1: config 0 descriptor?? [ 44.949553][ T617] netlink: 'syz.4.76': attribute type 27 has an invalid length. [ 44.964366][ T617] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.971354][ T617] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.004027][ T619] loop4: detected capacity change from 0 to 512 [ 45.036784][ T313] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 45.045666][ T313] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.053450][ T313] usb 3-1: Product: syz [ 45.057468][ T313] usb 3-1: Manufacturer: syz [ 45.061840][ T313] usb 3-1: SerialNumber: syz [ 45.067022][ T619] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 45.069624][ T313] r8152-cfgselector 3-1: config 0 descriptor?? [ 45.082192][ T619] EXT4-fs (loop4): 1 truncate cleaned up [ 45.088205][ T619] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,noquota,nombcache,quota,,errors=continue. Quota mode: writeback. [ 45.100020][ T598] loop0: detected capacity change from 0 to 512 [ 45.119515][ T619] netlink: 'syz.4.77': attribute type 3 has an invalid length. [ 45.134511][ T619] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback. [ 45.150810][ T598] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 45.159136][ T598] EXT4-fs error (device loop0): __ext4_iget:4892: inode #11: block 1: comm syz.0.70: invalid block [ 45.166511][ T63] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 45.170003][ T598] EXT4-fs (loop0): Remounting filesystem read-only [ 45.183333][ T598] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.70: couldn't read orphan inode 11 (err -117) [ 45.200330][ T598] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,errors=continue,max_dir_size_kb=0x0000000000000009,data_err=abort,errors=remount-ro,noinit_itable,mblk_io_submit,i_version,acl,. Quota mode: none. [ 45.337312][ T604] loop2: detected capacity change from 0 to 512 [ 45.424889][ T604] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 45.441681][ T604] EXT4-fs error (device loop2): __ext4_iget:4892: inode #11: block 1: comm syz.2.72: invalid block [ 45.690893][ T604] EXT4-fs (loop2): Remounting filesystem read-only [ 45.697362][ T604] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.72: couldn't read orphan inode 11 (err -117) [ 45.709090][ T63] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.725529][ T625] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.727647][ T604] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,errors=continue,max_dir_size_kb=0x0000000000000009,data_err=abort,errors=remount-ro,noinit_itable,mblk_io_submit,i_version,acl,. Quota mode: none. [ 45.732548][ T625] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.760634][ T63] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.770194][ T63] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 45.779009][ T63] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.789517][ T625] device bridge_slave_0 entered promiscuous mode [ 45.795979][ T63] usb 2-1: config 0 descriptor?? [ 45.799462][ T625] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.800905][ T526] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 45.807763][ T625] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.822575][ T625] device bridge_slave_1 entered promiscuous mode [ 45.885875][ T625] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.892745][ T625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.899828][ T625] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.906623][ T625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.925443][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.932823][ T26] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.940024][ T26] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.948215][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.956147][ T302] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.962997][ T302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.978345][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.986618][ T302] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.993447][ T302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.000841][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.008611][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.033388][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.050447][ T625] device veth0_vlan entered promiscuous mode [ 46.058045][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.066064][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.091977][ T625] device veth1_macvtap entered promiscuous mode [ 46.100721][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.108730][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.116317][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.124919][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.135009][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.162180][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.170514][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.180241][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.188806][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.200893][ T369] device bridge_slave_1 left promiscuous mode [ 46.208937][ T369] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.216554][ T526] usb 5-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 46.217169][ T369] device bridge_slave_0 left promiscuous mode [ 46.229718][ T526] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.231615][ T369] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.248391][ T369] device veth1_macvtap left promiscuous mode [ 46.254522][ T526] usb 5-1: config 0 descriptor?? [ 46.259174][ T369] device veth0_vlan left promiscuous mode [ 46.286762][ T63] hid (null): bogus close delimiter [ 46.816520][ T63] usb 2-1: string descriptor 0 read error: -71 [ 46.836573][ T63] uclogic 0003:256C:006D.0007: failed retrieving string descriptor #200: -71 [ 46.845215][ T63] uclogic 0003:256C:006D.0007: failed retrieving pen parameters: -71 [ 46.853189][ T63] uclogic 0003:256C:006D.0007: failed probing pen v2 parameters: -71 [ 46.861098][ T63] uclogic 0003:256C:006D.0007: failed probing parameters: -71 [ 46.868367][ T63] uclogic: probe of 0003:256C:006D.0007 failed with error -71 [ 46.876992][ T63] usb 2-1: USB disconnect, device number 6 [ 46.906597][ T394] r8152-cfgselector 1-1: Unknown version 0x0000 [ 46.926519][ T394] r8152-cfgselector 1-1: Unknown version 0x0000 [ 46.932634][ T394] r8152-cfgselector 1-1: bad CDC descriptors [ 46.956564][ T394] r8152-cfgselector 1-1: Unknown version 0x0000 [ 46.967487][ T394] r8152-cfgselector 1-1: USB disconnect, device number 5 [ 47.012204][ T647] loop0: detected capacity change from 0 to 512 [ 47.096910][ T647] EXT4-fs (loop0): Mount option "noacl" will be removed by 3.5 [ 47.096910][ T647] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 47.096910][ T647] [ 47.115243][ T647] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 47.123670][ T647] EXT4-fs (loop0): 1 truncate cleaned up [ 47.129294][ T647] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 47.293563][ T654] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 47.486534][ T313] r8152-cfgselector 3-1: Unknown version 0x0000 [ 47.506594][ T313] r8152-cfgselector 3-1: Unknown version 0x0000 [ 47.512862][ T313] r8152-cfgselector 3-1: bad CDC descriptors [ 47.537128][ T313] r8152-cfgselector 3-1: Unknown version 0x0000 [ 47.547652][ T313] r8152-cfgselector 3-1: USB disconnect, device number 4 [ 47.594777][ T657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.85'. [ 47.604712][ T657] device gretap1 entered promiscuous mode [ 47.896714][ T313] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 47.905903][ T663] netlink: 'syz.0.88': attribute type 27 has an invalid length. [ 47.922875][ T663] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.929830][ T663] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.981197][ T668] loop0: detected capacity change from 0 to 512 [ 48.066879][ T668] EXT4-fs (loop0): Mount option "noacl" will be removed by 3.5 [ 48.066879][ T668] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 48.066879][ T668] [ 48.086277][ T668] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 48.094927][ T668] EXT4-fs (loop0): 1 truncate cleaned up [ 48.100589][ T668] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 48.453968][ T674] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 48.962910][ T313] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.984471][ T526] usb 5-1: USB disconnect, device number 6 [ 49.448984][ T686] loop0: detected capacity change from 0 to 512 [ 49.519165][ T686] EXT4-fs (loop0): Mount option "noacl" will be removed by 3.5 [ 49.519165][ T686] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 49.519165][ T686] [ 49.543396][ T686] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 49.555230][ T686] EXT4-fs (loop0): 1 truncate cleaned up [ 49.561378][ T686] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 49.587031][ T313] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 49.596818][ T313] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.604677][ T313] usb 3-1: Product: syz [ 49.608929][ T313] usb 3-1: Manufacturer: syz [ 49.613380][ T313] usb 3-1: SerialNumber: syz [ 49.626506][ T394] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 50.156548][ T394] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 50.165437][ T394] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.173956][ T394] usb 4-1: config 0 descriptor?? [ 50.216502][ T687] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 50.425916][ T703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.99'. [ 50.436272][ T703] device gretap1 entered promiscuous mode [ 50.596634][ T687] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.607413][ T687] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.616925][ T687] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 50.625745][ T687] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.634357][ T687] usb 5-1: config 0 descriptor?? [ 50.786563][ T313] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 50.792923][ T313] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 50.800430][ T313] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 51.082357][ T313] cdc_ncm 3-1:1.0: setting tx_max = 184 [ 51.089049][ T313] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 51.100445][ T313] usb 3-1: USB disconnect, device number 5 [ 51.107565][ T313] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM [ 51.116686][ T687] hid (null): bogus close delimiter [ 51.192319][ T710] netlink: 'syz.0.101': attribute type 27 has an invalid length. [ 51.200004][ T710] device gretap1 left promiscuous mode [ 51.486287][ T526] usb 4-1: USB disconnect, device number 6 [ 51.596597][ T687] usb 5-1: string descriptor 0 read error: -71 [ 52.025066][ T687] uclogic 0003:256C:006D.0008: failed retrieving string descriptor #200: -71 [ 52.033791][ T687] uclogic 0003:256C:006D.0008: failed retrieving pen parameters: -71 [ 52.041977][ T687] uclogic 0003:256C:006D.0008: failed probing pen v2 parameters: -71 [ 52.050551][ T687] uclogic 0003:256C:006D.0008: failed probing parameters: -71 [ 52.057990][ T687] uclogic: probe of 0003:256C:006D.0008 failed with error -71 [ 52.066088][ T687] usb 5-1: USB disconnect, device number 7 [ 52.296648][ T526] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 52.536073][ T738] loop0: detected capacity change from 0 to 512 [ 52.621715][ T738] EXT4-fs (loop0): Mount option "noacl" will be removed by 3.5 [ 52.621715][ T738] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 52.621715][ T738] [ 52.789657][ T738] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 52.798540][ T738] EXT4-fs (loop0): 1 truncate cleaned up [ 52.804189][ T738] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 52.931036][ T526] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 52.940427][ T526] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.950515][ T526] usb 4-1: config 0 descriptor?? [ 53.478475][ T749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.110'. [ 53.498452][ T749] device gretap1 entered promiscuous mode [ 53.535155][ T756] netlink: 'syz.0.113': attribute type 27 has an invalid length. [ 53.572040][ T759] netlink: 8 bytes leftover after parsing attributes in process `syz.4.112'. [ 53.598058][ T759] device gretap1 entered promiscuous mode [ 53.607387][ T30] audit: type=1400 audit(1720637179.081:157): avc: denied { remove_name } for pid=82 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.607831][ T761] loop0: detected capacity change from 0 to 512 [ 53.629740][ T30] audit: type=1400 audit(1720637179.081:158): avc: denied { rename } for pid=82 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 53.657612][ T30] audit: type=1400 audit(1720637179.081:159): avc: denied { create } for pid=82 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 53.697085][ T761] EXT4-fs (loop0): Mount option "noacl" will be removed by 3.5 [ 53.697085][ T761] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 53.697085][ T761] [ 53.715981][ T761] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 53.724582][ T761] EXT4-fs (loop0): 1 truncate cleaned up [ 53.730153][ T761] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 53.820785][ T30] audit: type=1400 audit(1720637179.291:160): avc: denied { create } for pid=763 comm="syz.2.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 53.840293][ T30] audit: type=1400 audit(1720637179.291:161): avc: denied { setopt } for pid=763 comm="syz.2.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 53.849675][ T764] mmap: syz.2.115 (764) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 53.914186][ T767] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 53.997850][ T30] audit: type=1400 audit(1720637179.291:162): avc: denied { create } for pid=763 comm="syz.2.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 54.027404][ T30] audit: type=1400 audit(1720637179.291:163): avc: denied { ioctl } for pid=763 comm="syz.2.115" path="socket:[16154]" dev="sockfs" ino=16154 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 54.051687][ T30] audit: type=1400 audit(1720637179.291:164): avc: denied { write } for pid=763 comm="syz.2.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 54.647037][ T526] usb 4-1: USB disconnect, device number 7 [ 54.660684][ T784] loop4: detected capacity change from 0 to 512 [ 54.678540][ T784] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 54.678540][ T784] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 54.678540][ T784] [ 54.887527][ T784] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 54.913887][ T784] EXT4-fs (loop4): 1 truncate cleaned up [ 55.068343][ T784] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 55.220613][ T302] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 55.315716][ T798] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 55.553275][ T800] loop2: detected capacity change from 0 to 512 [ 55.583433][ T800] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 55.583433][ T800] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 55.583433][ T800] [ 55.611315][ T802] loop4: detected capacity change from 0 to 512 [ 55.642324][ T800] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 55.657069][ T800] EXT4-fs (loop2): 1 truncate cleaned up [ 55.666581][ T800] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 55.749019][ T802] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 55.749019][ T802] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 55.749019][ T802] [ 55.916553][ T295] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 55.966521][ T802] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 56.003508][ T802] EXT4-fs (loop4): 1 truncate cleaned up [ 56.025008][ T802] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 56.106618][ T302] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.396752][ T816] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 56.406350][ T295] usb 4-1: Using ep0 maxpacket: 16 [ 56.926534][ T302] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 56.935390][ T302] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.961616][ T302] usb 1-1: Product: syz [ 56.975726][ T302] usb 1-1: Manufacturer: syz [ 56.980399][ T302] usb 1-1: SerialNumber: syz [ 57.116548][ T295] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 57.125462][ T526] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 57.132738][ T295] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.140536][ T295] usb 4-1: Product: syz [ 57.144486][ T295] usb 4-1: Manufacturer: syz [ 57.148985][ T295] usb 4-1: SerialNumber: syz [ 57.153942][ T295] r8152-cfgselector 4-1: config 0 descriptor?? [ 57.286496][ T313] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 57.326529][ T394] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 57.398948][ T806] loop3: detected capacity change from 0 to 512 [ 57.476835][ T806] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 57.484484][ T806] EXT4-fs error (device loop3): __ext4_iget:4892: inode #11: block 1: comm syz.3.125: invalid block [ 57.495175][ T526] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.495258][ T806] EXT4-fs (loop3): Remounting filesystem read-only [ 57.505918][ T526] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.512270][ T806] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.125: couldn't read orphan inode 11 (err -117) [ 57.522306][ T526] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 57.533657][ T806] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,errors=continue,max_dir_size_kb=0x0000000000000009,data_err=abort,errors=remount-ro,noinit_itable,mblk_io_submit,i_version,acl,. Quota mode: none. [ 57.542142][ T526] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.576372][ T526] usb 3-1: config 0 descriptor?? [ 57.696557][ T313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.707285][ T313] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.716982][ T394] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.734017][ T313] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 57.759530][ T313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.776701][ T313] usb 5-1: config 0 descriptor?? [ 57.896633][ T394] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 57.905502][ T394] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.913323][ T394] usb 2-1: Product: syz [ 57.917421][ T394] usb 2-1: Manufacturer: syz [ 57.921728][ T394] usb 2-1: SerialNumber: syz [ 58.056638][ T526] hid (null): bogus close delimiter [ 58.116526][ T302] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 58.122803][ T302] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 58.129981][ T302] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 58.326533][ T302] cdc_ncm 1-1:1.0: setting tx_max = 184 [ 58.332977][ T302] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 58.345939][ T302] usb 1-1: USB disconnect, device number 6 [ 58.352480][ T302] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM [ 58.476528][ T313] usb 5-1: language id specifier not provided by device, defaulting to English [ 58.516562][ T526] usb 3-1: string descriptor 0 read error: -71 [ 58.536515][ T526] uclogic 0003:256C:006D.0009: failed retrieving string descriptor #200: -71 [ 58.545088][ T526] uclogic 0003:256C:006D.0009: failed retrieving pen parameters: -71 [ 58.553039][ T526] uclogic 0003:256C:006D.0009: failed probing pen v2 parameters: -71 [ 58.560917][ T526] uclogic 0003:256C:006D.0009: failed probing parameters: -71 [ 58.568211][ T526] uclogic: probe of 0003:256C:006D.0009 failed with error -71 [ 58.576890][ T526] usb 3-1: USB disconnect, device number 6 [ 58.848571][ T859] loop0: detected capacity change from 0 to 512 [ 58.917715][ T295] r8152-cfgselector 4-1: Unknown version 0x0000 [ 58.936520][ T295] r8152-cfgselector 4-1: Unknown version 0x0000 [ 58.942701][ T295] r8152-cfgselector 4-1: bad CDC descriptors [ 58.949282][ T859] EXT4-fs (loop0): Mount option "noacl" will be removed by 3.5 [ 58.949282][ T859] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 58.949282][ T859] [ 58.966729][ T295] r8152-cfgselector 4-1: Unknown version 0x0000 [ 58.967535][ T295] r8152-cfgselector 4-1: USB disconnect, device number 8 [ 58.973030][ T313] uclogic 0003:256C:006D.000A: interface is invalid, ignoring [ 59.066800][ T394] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 59.075148][ T394] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 59.082435][ T394] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 59.084158][ T859] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 59.096072][ T859] EXT4-fs (loop0): 1 truncate cleaned up [ 59.101545][ T859] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 59.534409][ T394] cdc_ncm 2-1:1.0: setting tx_max = 184 [ 59.541281][ T394] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42 [ 59.552656][ T394] usb 2-1: USB disconnect, device number 7 [ 59.558562][ T394] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM [ 59.682948][ T870] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 59.727716][ T295] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 59.883312][ T873] process 'syz.2.135' launched './file1' with NULL argv: empty string added [ 59.892140][ T30] audit: type=1400 audit(1720637185.371:165): avc: denied { execute_no_trans } for pid=872 comm="syz.2.135" path="/29/file1" dev="tmpfs" ino=186 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 60.436672][ T295] usb 4-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 60.438723][ T885] loop1: detected capacity change from 0 to 512 [ 60.448847][ T295] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.462116][ T885] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 60.462116][ T885] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 60.462116][ T885] [ 60.476914][ T295] usb 4-1: config 0 descriptor?? [ 60.510805][ T885] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 60.520503][ T885] EXT4-fs (loop1): 1 truncate cleaned up [ 60.526158][ T885] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 60.659245][ T295] usb 5-1: USB disconnect, device number 8 [ 61.225626][ T894] loop4: detected capacity change from 0 to 512 [ 61.696362][ T894] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 61.696362][ T894] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 61.696362][ T894] [ 61.739828][ T894] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 61.751129][ T894] EXT4-fs (loop4): 1 truncate cleaned up [ 61.757498][ T894] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 61.906491][ T687] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 61.990733][ T905] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 62.650954][ T63] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 62.689857][ T526] usb 4-1: USB disconnect, device number 9 [ 62.900226][ T912] loop4: detected capacity change from 0 to 512 [ 62.908688][ T912] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 62.908688][ T912] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 62.908688][ T912] [ 63.006589][ T687] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 63.015628][ T687] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.037319][ T912] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 63.045557][ T687] usb 3-1: config 0 descriptor?? [ 63.051084][ T912] EXT4-fs (loop4): 1 truncate cleaned up [ 63.056675][ T912] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 63.086744][ T63] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.476774][ T920] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 63.490239][ T921] loop0: detected capacity change from 0 to 512 [ 63.596724][ T63] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 63.624836][ T63] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.633062][ T63] usb 2-1: Product: syz [ 63.637300][ T63] usb 2-1: Manufacturer: syz [ 63.641746][ T63] usb 2-1: SerialNumber: syz [ 63.651204][ T921] EXT4-fs (loop0): Mount option "noacl" will be removed by 3.5 [ 63.651204][ T921] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 63.651204][ T921] [ 63.674040][ T921] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 63.682741][ T921] EXT4-fs (loop0): 1 truncate cleaned up [ 63.690019][ T921] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 63.901444][ T927] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 64.113484][ T30] audit: type=1400 audit(1720637189.581:166): avc: denied { write } for pid=928 comm="syz.3.149" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 64.649267][ T26] usb 3-1: USB disconnect, device number 7 [ 64.672720][ T941] loop2: detected capacity change from 0 to 512 [ 64.698035][ T945] loop4: detected capacity change from 0 to 512 [ 64.737444][ T945] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 64.737444][ T945] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 64.737444][ T945] [ 64.756564][ T945] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 64.764470][ T941] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 64.764470][ T941] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 64.764470][ T941] [ 64.783298][ T945] EXT4-fs (loop4): 1 truncate cleaned up [ 64.788967][ T945] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 64.794901][ T941] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 64.832549][ T941] EXT4-fs (loop2): 1 truncate cleaned up [ 64.838869][ T941] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 64.966488][ T687] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 65.411268][ T955] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 65.546532][ T63] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 65.559113][ T63] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 65.597548][ T63] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 65.766530][ T63] cdc_ncm 2-1:1.0: setting tx_max = 184 [ 65.773606][ T63] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42 [ 65.786556][ T63] usb 2-1: USB disconnect, device number 8 [ 65.793486][ T63] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM [ 65.796008][ T961] fuse: Invalid rootmode [ 65.810641][ T959] loop2: detected capacity change from 0 to 512 [ 65.823244][ T959] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 65.834512][ T959] EXT4-fs (loop2): 1 truncate cleaned up [ 65.840033][ T959] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,noquota,nombcache,quota,,errors=continue. Quota mode: writeback. [ 65.879110][ T959] netlink: 'syz.2.155': attribute type 3 has an invalid length. [ 65.890640][ T959] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback. [ 65.899580][ T30] audit: type=1400 audit(1720637191.371:167): avc: denied { create } for pid=958 comm="syz.2.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.910305][ T959] Zero length message leads to an empty skb [ 65.927243][ T30] audit: type=1400 audit(1720637191.371:168): avc: denied { write } for pid=958 comm="syz.2.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.950042][ T30] audit: type=1400 audit(1720637191.421:169): avc: denied { read } for pid=958 comm="syz.2.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.206560][ T687] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.221125][ T971] loop2: detected capacity change from 0 to 512 [ 66.226465][ T687] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.246483][ T687] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 66.265474][ T687] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.279906][ T968] 9pnet: Insufficient options for proto=fd [ 66.286213][ T687] usb 1-1: config 0 descriptor?? [ 66.296996][ T971] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 66.296996][ T971] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 66.296996][ T971] [ 66.335575][ T971] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 66.344300][ T971] EXT4-fs (loop2): 1 truncate cleaned up [ 66.349758][ T971] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 66.482431][ T978] loop1: detected capacity change from 0 to 512 [ 66.541438][ T980] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 66.689728][ T978] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 66.689728][ T978] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 66.689728][ T978] [ 66.708470][ T978] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 66.721657][ T978] EXT4-fs (loop1): 1 truncate cleaned up [ 66.727178][ T978] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 66.820417][ T983] 9pnet: Insufficient options for proto=fd [ 66.846899][ T687] hid (null): bogus close delimiter [ 66.915086][ T989] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 67.096606][ T687] usb 1-1: language id specifier not provided by device, defaulting to English [ 67.111611][ T992] loop4: detected capacity change from 0 to 512 [ 67.161605][ T992] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 67.161605][ T992] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 67.161605][ T992] [ 67.180032][ T992] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 67.188724][ T992] EXT4-fs (loop4): 1 truncate cleaned up [ 67.194223][ T992] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 67.200081][ T997] fuse: Invalid rootmode [ 67.296936][ T943] UDC core: couldn't find an available UDC or it's busy: -16 [ 67.304233][ T943] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 67.639824][ T1004] loop1: detected capacity change from 0 to 512 [ 67.681828][ T1004] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 67.703794][ T1004] EXT4-fs (loop1): 1 truncate cleaned up [ 67.709684][ T1004] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,noquota,nombcache,quota,,errors=continue. Quota mode: writeback. [ 67.748011][ T1004] netlink: 'syz.1.169': attribute type 3 has an invalid length. [ 67.756322][ T1004] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback. [ 67.776495][ T394] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 67.822999][ T1009] netlink: 12 bytes leftover after parsing attributes in process `syz.1.170'. [ 67.835599][ T30] audit: type=1326 audit(1720637193.301:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1008 comm="syz.1.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a335e4bd9 code=0x7ffc0000 [ 67.858683][ T687] uclogic 0003:256C:006D.000B: failed retrieving string descriptor #100: -71 [ 67.867471][ T30] audit: type=1326 audit(1720637193.301:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1008 comm="syz.1.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a335e4bd9 code=0x7ffc0000 [ 67.868537][ T687] uclogic 0003:256C:006D.000B: failed retrieving pen parameters: -71 [ 67.891839][ T30] audit: type=1326 audit(1720637193.311:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1008 comm="syz.1.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f6a335e4bd9 code=0x7ffc0000 [ 67.899368][ T687] uclogic 0003:256C:006D.000B: failed probing pen v1 parameters: -71 [ 67.922009][ T30] audit: type=1326 audit(1720637193.311:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1008 comm="syz.1.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a335e4bd9 code=0x7ffc0000 [ 67.929602][ T687] uclogic 0003:256C:006D.000B: failed probing parameters: -71 [ 67.962439][ T687] uclogic: probe of 0003:256C:006D.000B failed with error -71 [ 67.974791][ T30] audit: type=1326 audit(1720637193.311:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1008 comm="syz.1.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a335e4bd9 code=0x7ffc0000 [ 67.998002][ T30] audit: type=1326 audit(1720637193.311:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1008 comm="syz.1.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f6a335e4bd9 code=0x7ffc0000 [ 68.006255][ T687] usb 1-1: USB disconnect, device number 7 [ 68.025284][ T30] audit: type=1326 audit(1720637193.311:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1008 comm="syz.1.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a335e4bd9 code=0x7ffc0000 [ 68.610924][ T394] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.621663][ T394] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.631201][ T394] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 68.640035][ T394] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.652528][ T394] usb 3-1: config 0 descriptor?? [ 68.664985][ T1025] netlink: 12 bytes leftover after parsing attributes in process `syz.3.175'. [ 68.709461][ T1023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.172'. [ 68.726797][ T1023] device gretap1 entered promiscuous mode [ 69.073834][ T1038] 9pnet: Insufficient options for proto=fd [ 69.116518][ T295] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 69.296633][ T394] hid (null): bogus close delimiter [ 69.376538][ T63] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 69.476519][ T295] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.487256][ T295] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.496898][ T295] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 69.505763][ T295] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.514092][ T295] usb 4-1: config 0 descriptor?? [ 69.638358][ T1043] netlink: 'syz.4.182': attribute type 27 has an invalid length. [ 69.648578][ T1043] device gretap1 left promiscuous mode [ 69.750962][ T63] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.767103][ T394] usb 3-1: string descriptor 0 read error: -71 [ 69.846581][ T394] uclogic 0003:256C:006D.000C: failed retrieving string descriptor #200: -71 [ 69.860567][ T394] uclogic 0003:256C:006D.000C: failed retrieving pen parameters: -71 [ 69.901936][ T394] uclogic 0003:256C:006D.000C: failed probing pen v2 parameters: -71 [ 69.913353][ T1056] loop4: detected capacity change from 0 to 512 [ 69.919651][ T394] uclogic 0003:256C:006D.000C: failed probing parameters: -71 [ 69.930804][ T394] uclogic: probe of 0003:256C:006D.000C failed with error -71 [ 69.936606][ T63] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 69.939418][ T394] usb 3-1: USB disconnect, device number 8 [ 69.958950][ T63] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.972046][ T1056] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 69.986832][ T63] usb 2-1: Product: syz [ 69.990876][ T63] usb 2-1: Manufacturer: syz [ 70.005379][ T63] usb 2-1: SerialNumber: syz [ 70.016695][ T295] hid (null): bogus close delimiter [ 70.025950][ T1056] EXT4-fs (loop4): 1 truncate cleaned up [ 70.055840][ T1056] EXT4-fs (loop4): mounted filesystem without journal. Opts: nogrpid,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,noquota,nombcache,quota,,errors=continue. Quota mode: writeback. [ 70.136105][ T1056] netlink: 'syz.4.185': attribute type 3 has an invalid length. [ 70.174572][ T1056] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback. [ 70.285002][ T1060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.186'. [ 70.357535][ T1064] netlink: 12 bytes leftover after parsing attributes in process `syz.4.187'. [ 70.596509][ T295] usb 4-1: string descriptor 0 read error: -71 [ 70.616579][ T295] uclogic 0003:256C:006D.000D: failed retrieving string descriptor #200: -71 [ 70.625179][ T295] uclogic 0003:256C:006D.000D: failed retrieving pen parameters: -71 [ 70.633564][ T295] uclogic 0003:256C:006D.000D: failed probing pen v2 parameters: -71 [ 70.643199][ T295] uclogic 0003:256C:006D.000D: failed probing parameters: -71 [ 70.703336][ T295] uclogic: probe of 0003:256C:006D.000D failed with error -71 [ 70.711695][ T295] usb 4-1: USB disconnect, device number 10 [ 70.816067][ T1070] syz.4.189[1070] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 70.816379][ T1070] syz.4.189[1070] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 71.502424][ T1083] fuse: Bad value for 'rootmode' [ 71.586502][ T63] cdc_ncm 2-1:1.0: failed to get mac address [ 71.606564][ T63] cdc_ncm 2-1:1.0: bind() failure [ 71.626519][ T295] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 71.634238][ T63] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 71.656694][ T63] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 71.668926][ T63] usb 2-1: USB disconnect, device number 9 [ 71.811606][ T394] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 72.186881][ T295] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.482434][ T295] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 72.491724][ T295] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.498165][ T1101] loop4: detected capacity change from 0 to 512 [ 72.505956][ T295] usb 3-1: Product: syz [ 72.506594][ T394] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.510616][ T295] usb 3-1: Manufacturer: syz [ 72.525061][ T295] usb 3-1: SerialNumber: syz [ 72.577998][ T1101] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 72.577998][ T1101] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 72.577998][ T1101] [ 72.596983][ T1101] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 72.605199][ T1101] EXT4-fs (loop4): 1 truncate cleaned up [ 72.610711][ T1101] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 72.726610][ T394] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 72.735760][ T394] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.743629][ T394] usb 4-1: Product: syz [ 72.796524][ T1107] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 72.914498][ T302] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 72.935602][ T394] usb 4-1: Manufacturer: syz [ 72.940094][ T394] usb 4-1: SerialNumber: syz [ 73.266555][ T20] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 73.366589][ T302] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 73.377428][ T302] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 73.391554][ T302] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 73.400605][ T302] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.400681][ T1112] loop4: detected capacity change from 0 to 512 [ 73.409118][ T302] usb 2-1: config 0 descriptor?? [ 73.420404][ T1112] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 73.420404][ T1112] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 73.420404][ T1112] [ 73.438860][ T1112] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 73.447349][ T1112] EXT4-fs (loop4): 1 truncate cleaned up [ 73.452794][ T1112] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota=,min_batch_time=0x0000000000000001,noload,nombcache,usrjquota="init_itable=0x0000000000000601,noacl,data_err=abort,,errors=continue. Quota mode: writeback. [ 73.566502][ T20] usb 1-1: device descriptor read/64, error -71 [ 73.625350][ T1116] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 73.676776][ T295] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 73.686628][ T295] cdc_ncm 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 73.693888][ T295] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 73.896508][ T295] cdc_ncm 3-1:1.0: setting tx_max = 184 [ 73.903191][ T295] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 73.914819][ T295] usb 3-1: USB disconnect, device number 9 [ 73.916725][ T302] hid (null): bogus close delimiter [ 73.920746][ T295] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM [ 74.016549][ T20] usb 1-1: device descriptor read/64, error -71 [ 74.136577][ T394] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 74.142936][ T394] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 74.150070][ T394] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 74.286502][ T20] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 74.366625][ T394] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 74.374246][ T394] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM, 42:42:42:42:42:42 [ 74.386106][ T394] usb 4-1: USB disconnect, device number 11 [ 74.391931][ T302] usb 2-1: string descriptor 0 read error: -71 [ 74.399531][ T394] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM [ 74.416717][ T302] uclogic 0003:256C:006D.000E: failed retrieving string descriptor #200: -71 [ 74.433896][ T302] uclogic 0003:256C:006D.000E: failed retrieving pen parameters: -71 [ 74.551257][ T302] uclogic 0003:256C:006D.000E: failed probing pen v2 parameters: -71 [ 74.596526][ T20] usb 1-1: device descriptor read/64, error -71 [ 74.646831][ T302] uclogic 0003:256C:006D.000E: failed probing parameters: -71 [ 74.654336][ T302] uclogic: probe of 0003:256C:006D.000E failed with error -71 [ 74.666359][ T302] usb 2-1: USB disconnect, device number 10 [ 74.679415][ T687] ================================================================== [ 74.687287][ T687] BUG: KASAN: use-after-free in worker_thread+0xaaa/0x12a0 [ 74.694315][ T687] Read of size 8 at addr ffff888121e24c60 by task kworker/0:6/687 [ 74.701957][ T687] [ 74.704124][ T687] CPU: 0 PID: 687 Comm: kworker/0:6 Not tainted 5.15.151-syzkaller-00415-gdb06c48ab67e #0 [ 74.713845][ T687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 74.723750][ T687] Workqueue: 0x0 (events) [ 74.727998][ T687] Call Trace: [ 74.731116][ T687] [ 74.733893][ T687] dump_stack_lvl+0x151/0x1b7 [ 74.738407][ T687] ? io_uring_drop_tctx_refs+0x190/0x190 [ 74.743877][ T687] ? panic+0x751/0x751 [ 74.747780][ T687] ? __schedule+0xcd4/0x1590 [ 74.752211][ T687] print_address_description+0x87/0x3b0 [ 74.757590][ T687] kasan_report+0x179/0x1c0 [ 74.761938][ T687] ? _raw_spin_lock_irqsave+0x210/0x210 [ 74.767309][ T687] ? worker_thread+0xaaa/0x12a0 [ 74.771997][ T687] ? worker_thread+0xaaa/0x12a0 [ 74.776684][ T687] __asan_report_load8_noabort+0x14/0x20 [ 74.782150][ T687] worker_thread+0xaaa/0x12a0 [ 74.786665][ T687] ? _raw_spin_lock+0x1b0/0x1b0 [ 74.791356][ T687] kthread+0x421/0x510 [ 74.795257][ T687] ? worker_clr_flags+0x180/0x180 [ 74.800127][ T687] ? kthread_blkcg+0xd0/0xd0 [ 74.804559][ T687] ret_from_fork+0x1f/0x30 [ 74.808799][ T687] [ 74.811662][ T687] [ 74.813836][ T687] Allocated by task 394: [ 74.817915][ T687] ____kasan_kmalloc+0xdb/0x110 [ 74.822595][ T687] __kasan_kmalloc+0x9/0x10 [ 74.826933][ T687] __kmalloc+0x13a/0x270 [ 74.831012][ T687] kvmalloc_node+0x1f0/0x4d0 [ 74.835438][ T687] alloc_netdev_mqs+0x8c/0xc90 [ 74.840040][ T687] alloc_etherdev_mqs+0x33/0x40 [ 74.844917][ T687] usbnet_probe+0x1ff/0x2830 [ 74.849343][ T687] usb_probe_interface+0x5b6/0xa90 [ 74.854283][ T687] really_probe+0x28d/0x970 [ 74.858628][ T687] __driver_probe_device+0x1a0/0x310 [ 74.863746][ T687] driver_probe_device+0x54/0x3d0 [ 74.868606][ T687] __device_attach_driver+0x2c5/0x470 [ 74.873813][ T687] bus_for_each_drv+0x183/0x200 [ 74.878499][ T687] __device_attach+0x312/0x510 [ 74.883101][ T687] device_initial_probe+0x1a/0x20 [ 74.887959][ T687] bus_probe_device+0xbe/0x1e0 [ 74.892562][ T687] device_add+0xb60/0xf10 [ 74.896727][ T687] usb_set_configuration+0x190f/0x1e80 [ 74.902022][ T687] usb_generic_driver_probe+0x8b/0x150 [ 74.907315][ T687] usb_probe_device+0x144/0x260 [ 74.912001][ T687] really_probe+0x28d/0x970 [ 74.916341][ T687] __driver_probe_device+0x1a0/0x310 [ 74.921478][ T687] driver_probe_device+0x54/0x3d0 [ 74.926323][ T687] __device_attach_driver+0x2c5/0x470 [ 74.931529][ T687] bus_for_each_drv+0x183/0x200 [ 74.936218][ T687] __device_attach+0x312/0x510 [ 74.940822][ T687] device_initial_probe+0x1a/0x20 [ 74.945676][ T687] bus_probe_device+0xbe/0x1e0 [ 74.950278][ T687] device_add+0xb60/0xf10 [ 74.954447][ T687] usb_new_device+0x1038/0x1c00 [ 74.959133][ T687] hub_event+0x2def/0x4770 [ 74.963385][ T687] process_one_work+0x6bb/0xc10 [ 74.968070][ T687] worker_thread+0xad5/0x12a0 [ 74.972585][ T687] kthread+0x421/0x510 [ 74.976489][ T687] ret_from_fork+0x1f/0x30 [ 74.980751][ T687] [ 74.982920][ T687] Freed by task 394: [ 74.986654][ T687] kasan_set_track+0x4b/0x70 [ 74.991079][ T687] kasan_set_free_info+0x23/0x40 [ 74.995845][ T687] ____kasan_slab_free+0x126/0x160 [ 75.000795][ T687] __kasan_slab_free+0x11/0x20 [ 75.005391][ T687] slab_free_freelist_hook+0xbd/0x190 [ 75.010599][ T687] kfree+0xc8/0x220 [ 75.014258][ T687] kvfree+0x35/0x40 [ 75.017898][ T687] netdev_freemem+0x3f/0x60 [ 75.022230][ T687] netdev_release+0x7f/0xb0 [ 75.026569][ T687] device_release+0x95/0x1c0 [ 75.030996][ T687] kobject_put+0x178/0x260 [ 75.035254][ T687] put_device+0x1f/0x30 [ 75.039243][ T687] free_netdev+0x34f/0x440 [ 75.043496][ T687] usbnet_disconnect+0x245/0x390 [ 75.048272][ T687] usb_unbind_interface+0x1fa/0x8c0 [ 75.053302][ T687] device_release_driver_internal+0x50b/0x7d0 [ 75.059205][ T687] device_release_driver+0x19/0x20 [ 75.064415][ T687] bus_remove_device+0x2f8/0x360 [ 75.069190][ T687] device_del+0x663/0xe90 [ 75.073355][ T687] usb_disable_device+0x380/0x720 [ 75.078215][ T687] usb_disconnect+0x32a/0x890 [ 75.082729][ T687] hub_event+0x1d42/0x4770 [ 75.086977][ T687] process_one_work+0x6bb/0xc10 [ 75.091663][ T687] worker_thread+0xe02/0x12a0 [ 75.096178][ T687] kthread+0x421/0x510 [ 75.100087][ T687] ret_from_fork+0x1f/0x30 [ 75.104337][ T687] [ 75.106521][ T687] Last potentially related work creation: [ 75.112063][ T687] kasan_save_stack+0x3b/0x60 [ 75.116574][ T687] __kasan_record_aux_stack+0xd3/0xf0 [ 75.121782][ T687] kasan_record_aux_stack_noalloc+0xb/0x10 [ 75.127427][ T687] insert_work+0x56/0x320 [ 75.131590][ T687] __queue_work+0x92a/0xcd0 [ 75.135930][ T687] queue_work_on+0x105/0x170 [ 75.140355][ T687] usbnet_link_change+0xeb/0x100 [ 75.145130][ T687] usbnet_probe+0x1dd3/0x2830 [ 75.149642][ T687] usb_probe_interface+0x5b6/0xa90 [ 75.154592][ T687] really_probe+0x28d/0x970 [ 75.158929][ T687] __driver_probe_device+0x1a0/0x310 [ 75.164051][ T687] driver_probe_device+0x54/0x3d0 [ 75.168911][ T687] __device_attach_driver+0x2c5/0x470 [ 75.174119][ T687] bus_for_each_drv+0x183/0x200 [ 75.178805][ T687] __device_attach+0x312/0x510 [ 75.183404][ T687] device_initial_probe+0x1a/0x20 [ 75.188268][ T687] bus_probe_device+0xbe/0x1e0 [ 75.192865][ T687] device_add+0xb60/0xf10 [ 75.197033][ T687] usb_set_configuration+0x190f/0x1e80 [ 75.202328][ T687] usb_generic_driver_probe+0x8b/0x150 [ 75.207620][ T687] usb_probe_device+0x144/0x260 [ 75.212308][ T687] really_probe+0x28d/0x970 [ 75.216647][ T687] __driver_probe_device+0x1a0/0x310 [ 75.221769][ T687] driver_probe_device+0x54/0x3d0 [ 75.226629][ T687] __device_attach_driver+0x2c5/0x470 [ 75.231838][ T687] bus_for_each_drv+0x183/0x200 [ 75.236526][ T687] __device_attach+0x312/0x510 [ 75.241123][ T687] device_initial_probe+0x1a/0x20 [ 75.245984][ T687] bus_probe_device+0xbe/0x1e0 [ 75.250584][ T687] device_add+0xb60/0xf10 [ 75.254749][ T687] usb_new_device+0x1038/0x1c00 [ 75.259437][ T687] hub_event+0x2def/0x4770 [ 75.263690][ T687] process_one_work+0x6bb/0xc10 [ 75.268375][ T687] worker_thread+0xad5/0x12a0 [ 75.272975][ T687] kthread+0x421/0x510 [ 75.276881][ T687] ret_from_fork+0x1f/0x30 [ 75.281135][ T687] [ 75.283305][ T687] The buggy address belongs to the object at ffff888121e24000 [ 75.283305][ T687] which belongs to the cache kmalloc-4k of size 4096 [ 75.297223][ T687] The buggy address is located 3168 bytes inside of [ 75.297223][ T687] 4096-byte region [ffff888121e24000, ffff888121e25000) [ 75.310473][ T687] The buggy address belongs to the page: [ 75.315951][ T687] page:ffffea0004878800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x121e20 [ 75.326010][ T687] head:ffffea0004878800 order:3 compound_mapcount:0 compound_pincount:0 [ 75.334165][ T687] flags: 0x4000000000010200(slab|head|zone=1) [ 75.340076][ T687] raw: 4000000000010200 0000000000000000 0000000100000001 ffff888100043380 [ 75.348492][ T687] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 75.356992][ T687] page dumped because: kasan: bad access detected [ 75.363250][ T687] page_owner tracks the page as allocated [ 75.368797][ T687] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 293, ts 24093444657, free_ts 0 [ 75.386851][ T687] post_alloc_hook+0x1a3/0x1b0 [ 75.391538][ T687] prep_new_page+0x1b/0x110 [ 75.395879][ T687] get_page_from_freelist+0x3550/0x35d0 [ 75.401258][ T687] __alloc_pages+0x27e/0x8f0 [ 75.405692][ T687] new_slab+0x9a/0x4e0 [ 75.409589][ T687] ___slab_alloc+0x39e/0x830 [ 75.414015][ T687] __slab_alloc+0x4a/0x90 [ 75.418182][ T687] kmem_cache_alloc_trace+0x142/0x210 [ 75.423389][ T687] ipv6_add_dev+0x5d3/0x1140 [ 75.427816][ T687] addrconf_notify+0x593/0xdd0 [ 75.432437][ T687] raw_notifier_call_chain+0x8c/0xf0 [ 75.437539][ T687] call_netdevice_notifiers+0x145/0x1b0 [ 75.442919][ T687] register_netdevice+0x1035/0x1390 [ 75.447961][ T687] veth_newlink+0x72e/0xe20 [ 75.452293][ T687] rtnl_newlink+0x1495/0x2050 [ 75.456806][ T687] rtnetlink_rcv_msg+0x951/0xc40 [ 75.461588][ T687] page_owner free stack trace missing [ 75.466788][ T687] [ 75.468960][ T687] Memory state around the buggy address: [ 75.474447][ T687] ffff888121e24b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 75.482325][ T687] ffff888121e24b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 75.490224][ T687] >ffff888121e24c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 75.498119][ T687] ^ [ 75.505152][ T687] ffff888121e24c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 75.513050][ T687] ffff888121e24d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 75.520946][ T687] ================================================================== [ 75.528844][ T687] Disabling lock debugging due to kernel taint [ 75.643685][ T1180] syz.2.203[1180] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.643970][ T1180] syz.2.203[1180] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.996530][ T20] usb 1-1: device descriptor read/64, error -71 [ 76.126533][ T20] usb usb1-port1: attempt power cycle [ 76.536502][ T20] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 76.726514][ T20] usb 1-1: device descriptor read/8, error -71 [ 77.016527][ T20] usb 1-1: device descriptor read/8, error -71 [ 77.306484][ T20] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 77.476528][ T20] usb 1-1: device descriptor read/8, error -71 [ 77.766520][ T20] usb 1-1: device descriptor read/8, error -71 [ 77.886613][ T20] usb usb1-port1: unable to enumerate USB device