last executing test programs: 10.641491848s ago: executing program 3 (id=1411): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x9, 0x2a8, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8020}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000008000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r0, @ANYRES32=r3, @ANYBLOB="0000010000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = dup3(r7, r8, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000000c0)=@setlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_FLAGS={0x6}]}}}]}, 0x40}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000074020440fd07010099480102030109021b0001000000000904"], 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000001200)=ANY=[@ANYBLOB="180000000000000000000000000000006111bc00000000009500000000000000880286694df7704ab1034a798606776d9fc3635831b799f67480999062f3ca0bb174846af3f269bb3471f21aca54d639fb79388914740cd76755ec5d05e35777cd7b734d78540cab8e2667e523bb90aa5400bdbb8649a2b3c6fc265634433c03f750efca"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096}, 0x70) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}, 0x0) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000000c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r13}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000001c0)='kfree\x00', r14}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='objagg_obj_parent_assign\x00', r12}, 0x10) 8.037862234s ago: executing program 3 (id=1416): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='\x00', 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000001240)=ANY=[@ANYBLOB="8500000061000000350000000000002085000000070000009500000000000000f4670880271e3503200ffa95b2c8c037c5a142c9a8d76287066c51adde96fcc309926fa3b4b87b3e0cc7444a2391511c97fabd5f9810e81ee0b737136ea6f7be39cd34d5ae35de38dde54704d25c79949c00a7c09cc28d7673294f42a5f0a8761b30d64b741a226de7bad76402320e13822c45c0f8612c10b1f3c075ff1ebb755a2dd5760903000000000000006c6386d7ec7209d031f40f3012e9576e51a7f578602f5807785b92e544fc46c744aeeee4418d6af3e4195cc03710212436a4ff3274cac948d85cec074c6949e1298901ebb39522f6649dd76d067a82f5fe47fe5f17f99ab1e394ab800f4104dbffff0000000000005c6d1d224b64be6c4d7f47ef21eb7e46f9aa4a9779f8555eaea768c1f2c221c410ef4b253d110ee282ab94de93d928cf95846be6277c04b4c5324812696aa89e393c941d9541c86238d0703394a90231ccca9c3499c9a4cd3cd8a4f8070000000b1b2d2747c45b0c52087b5efabf84960ba0e3c4c00322de328c10752a42dca52fb98c1452b6518a6ef7297f7b2744419a2f238f173d0cd46daf2fcb5500f53e7309ecc07d8d3c76e65760ff000000b78863e629b3b200000000000000000000000000008b0000000a449c810d3174c87ee545867a3126af7a8b20744ea9875b9cba735b9594aa904e5a4bb2c3dfa8ea63e3e7000860000000004a2147c1128c697d9966b3c9f0e9e203911a3fac929a4fc6e625247510bc24e20ad88d4fe6a3ae2f7967546c4aae83352106057ab9cd4b3442a5d10451b95e22f30a85f5681ca3000000000000000000000396e7b6e1aa007018f6d93e79fce95d405b809238cca421c82c96f10dfa978bee51f581d124216e8bd9b1855f77138e438bdc037861f07f98c068be4c6155ec27365410866059475714844a3ea4cbe37e0000000000ef6dc4dd63bb928ff58b3bd2a600089d172a884dcdb8b9f9050297815a371deec595838e38068b5e438cbcd585a8cf37c496a8d2dab79d4242a353917ebdf2dc7926d80260898d4e1ca5e3a833f8f65429845bc3c3092af2bc4ee7263d3cbd9cab24eafd961a2d0c7bbfca952475c7e6158bfbb32f187d18f977117101076bad4167d5559ac12ff1c14fab5ccf7117a25a25933bfe309a040034b0cc8f69074670efc8101b89477d23823605dfa8e5945c71a0225b50d18a010ecf3c349cbac4d5191c3d78726b9ab4bff5e05027ca5b338a62e955e514da8ca2846919b7b56c192bb43f7032e485cc664921b7f9133bdbc2ba3cd845997b0dd103c784a53ad0243624566e0dacfe4029ffbe59e7e7751b3a9e619107bde39bfa81791ff0e4577055528aef46891c3c49afda8137d03cf6893db7b0f1fe95f8a096159869db71853b6bb5c08ce5fc61353f1e659d7ac53f54a7e2c94cba21994930a423ac7f84ed873a76b0dda0a4b4c5f87eef3164a0c03bc2a7f08290ddf300b298de3fd9167fb8b9c2f26e27f97cf5e90586ea50b85eb5b420eebe171893782b8326148ef5f5174e7ea5dd7f1caa699e4a241291c2f43e9edbf44c0ffb8ee32a18b6e8f0b61836146e2eab9a767800c2c91190c96cf88466adf775b4cf517dc5e39be99c4ab471f381c3915203cd2f27466c8943a80ba03150699c787696de272affa4e4940e59d8b7c69f804d6d3fa7543176a4df033532e5053d72521d097dda0c7a70bd1278c61513c1b87b01d9a9ec4d5ef793096dab53d3224f245fd5d87984d58dc09d11ba0094ba8c39942be41f362e29bba1cdcf8068a4d8d67d2d6d79aa2d089bc4d475097d7523860ec41dab4fa4b0cfe674c1"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x18000000000002a0, 0xd, 0x0, &(0x7f0000000100)="ff0303076044238cb89e14f086", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdir(0x0, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_freeze_timeout', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000020000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x1c, 0x20, 0x301}, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x20e, 0x122, 0x0, &(0x7f00000004c0)="b9180bb7600a070c009e40f086dd1fff310005e03300fd010010ac14142ee0080001c699da153f0ae0e6e380f60115f683317585d7473be0ab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866cadcbe3ce52505e992818cc452bee339d9ab076f484020eaa348a21d7911e4c44905256ec2cc54cca47a198b00c10aff62a4bed43a2ebcad92743fb22c593f28fd4bb7c703cde9cae0569d4c8d9a823f2c12863f7a6c0cf88ed22aae4f6f084508833b61429a25773eedf63dd9f33d430f2a0a30a7761db16fe0f743b95ded898c28aac1256ce2751b3d738899b8b19d9052b", 0x0, 0x31, 0x6000000000000000}, 0x50) 7.343585239s ago: executing program 0 (id=1403): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe4, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(r0, 0xd, &(0x7f00000001c0)={0xfffffffffffffff6, 0xffff}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000005c0)={'syztnl0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500"], 0x20}}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x1a, r6, 0x1, 0x7}, 0x14) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r7, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) ioctl$sock_bt_hci(r7, 0x400448df, &(0x7f0000000180)="710ef706d70c1c83c5eeea5833a0c749b3355058276d3117e55e45cc177b") 7.039823063s ago: executing program 2 (id=1418): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) io_setup(0x9, &(0x7f0000003080)=0x0) io_getevents(r2, 0x0, 0x0, 0x0, 0x0) 6.82189552s ago: executing program 2 (id=1420): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x5, 0x0, 0x8, 0x80007f}, 0xfffffffffffffe7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000005c0)={r0, &(0x7f00000007c0)='x', &(0x7f0000000200)=""/166}, 0x20) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) ioctl$TUNSETOFFLOAD(r1, 0x40047451, 0x2000000c) pselect6(0x0, 0x0, &(0x7f0000000380)={0x5, 0x9149, 0x2d5, 0xffffffffffffffff, 0x2, 0x6, 0x0, 0x6}, 0x0, &(0x7f0000000440), 0x0) 6.70653153s ago: executing program 2 (id=1421): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x0, 0xc, &(0x7f0000000f40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000fdffffff0000b7080000000000007b8af8ff00000000bfa203000008000000b7040000f66f63bb8500000043000000950000000000000056187cd2d85ebfb168421d3bb4f284a95de1be0f1acaf901bbf228610333f5542ff31528f26be575505f6b00000000000000802fe9a6190b0f7b2c5ddeee52540500de78c60045e4571e20f0aa143600010000eeaed72e7eaa3c38dd5d12ec715a7af5cad916b327e638ddd8da08956d06cc4ecb6322f684bfc7d78d1139e0cb4ff309f7971682b3e049a30c54b5066ccdb42d1350d61b0b3a9e035e0ddb355a3db1dbfcc2a1c9376510b3f7f729af7acb04737b9464b896d9b1bf080f3180bfc77bac302d98831e1307eb1c17c112616266549a918314d8ceaaba83c34e9079de529a97f7aef3b314e3f398702445b191b342bdce3c332de506d45c7518014a8ecc12669358caabafa591997d520bb5fcde8e14ce69d87e8c6bc4b060f48a1aa1a494de2895224ba08fa8e84ce45d21931b0c9eb258246e51bb938e2d1579d208caf7000fa554c35151fecab632703ca927a92a7824c68c1f94de962749aa88f02cacc7b7e279e84a1173338c877443b40363b7567a000ab534bcc608b1d529df68726cba3d06368d67dca513162718d68cb5870d97513ec0b4b77441f3572a218938a6566e53249784b7b2fc5c6564b21e4ebbbdedf6cc3f39cd1995164f032ae6d4acc42b4bca2600739d54012e0b7c53c0f4ab54d81ee1ad9cbe38813227cd03706e76615fd5c1b9d85966d743fc8f7e08050b30e6bb5238218d87cecd673541789a14ecf5219f5677d4f472f0d0495b"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000580)='ext4_request_inode\x00', r1}, 0x10) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000680)={'syztnl2\x00', &(0x7f0000000600)={'ip6gre0\x00', 0x0, 0x2f, 0xfe, 0x0, 0xf60, 0x3c, @empty, @mcast1, 0x8000, 0x10, 0x5, 0x9}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x8, 0x3, 0x650, 0x0, 0xa, 0x148, 0x368, 0x10, 0x5b8, 0x2a8, 0x2a8, 0x5b8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2=0xe000000b, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x7a, 0x8000000, 0x0, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x64, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @broadcast, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x1f0, 0x250, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_to_bond\x00'}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x6b0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f00000011c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r4, 0x81, 0x0, &(0x7f00000006c0)) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000380)={0x0, &(0x7f00000000c0)}) open(&(0x7f0000000400)='./bus\x00', 0x402100, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x8, 0xb}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fcffffff000000000000210085000000360000009500070000000000b83f3584230b8f5ec8921327291cf4880dd3a91af830f8a476ba1b51d4eb67103b000000000000000000000000000000640f9922d207e93470686f20ad"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{r5}, &(0x7f00000002c0), &(0x7f0000000300)='%pS \x00'}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r7 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYRESDEC, @ANYRESHEX=r7]) 6.361813277s ago: executing program 3 (id=1422): sched_setscheduler(0x0, 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000e80), 0x0, 0x2041, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x3) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000019000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000283d0020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001100)={&(0x7f0000001500)='mm_page_alloc\x00', r1}, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={0x0, 0x144}, 0x1, 0x0, 0x0, 0x400c0}, 0x4000005) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000000)='B') 6.266632414s ago: executing program 4 (id=1423): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x204410, &(0x7f0000000740), 0xfe, 0x4a1, &(0x7f00000001c0)="$eJzs3M1vVFUbAPDn3mnLN+3Li6h8SBWNjR8tLags3Gh0p4mJLnBjUttCKgM1tCRCiFZjcGlI3BvdGKJ/gSvdGHVl4lb3hoQoMQFdmDF35t4yU2ZKW6YdcH6/5JZz5p7pOc+ce+499x6mAXStwexHErE1In6JiP5atrHAYO2f61fPT/x19fxEEpXKq78n1XLXrp6fKIoW79uSZ4bSiPTDJK+k0ezZcyfGy+Wp03l+ZO7k2yOzZ889OX1y/PjU8alTY0eOHD40+szTY0+1Jc4srmu7353Zm/S8fvHliaMX3/zhqzQidu2r7a+P47akWxaSg1ngf1SqFhd7pC2V3Tm21aWTng42hBUpRUTWXb3V8d8fpbjRef3x4gcdbRywprJr04bWu+crwH9YEp1uAdAZxYU+u/8ttnWaetwRrjxXuwHK4r6eb7U9PZHmZXrXsP77IuLo/N+fZlvk/fDP1jWsEADoet9k858nms3/0thVV257voYyEBH/i4gdEfH/iNgZEfdEVMvem89nVqK2NFRayN88/0wvrzq4Zcjmf8/ma1uN879i9hcDpTy3rRp/b3Jsujx1MP9MhqJ3Q5YfXaKOb1/4+eNW+wbr5n/ZltVfzAXzdlzuWfSAbnJ8brxdk9Ir70fs7mkWf7KwEpBExP0RsXtlv3p7kZh+7NLeVoVuHf8S2rDOVPks4tFa/8/HovgLydLrkyMbozx1cKQ4Km72408XXmle+8bbi78Nsv7f3Hj8LyrR/2dSv147u/I6Lvz6Uct7ytUe/33Ja9Ux2Ze/9s743Nzp0Yi+5KVqvuH1sRvvLfJF+Sz+oQPNx/+O/D1Z/HsiIjuI90XEAxGxP2/7gxHxUEQcWCL+759/+K0VxT+9vv0/2fT8t3D8DzT2/8oTpRPffd2q/jz+4mTbov8PV1ND+SvV898ttG5OlKciKpVVH80AAABw98luvLdGkg4vpNN0eLj2f/h3xua0PDM79/ixmTOnJmvfERiI3rR40tWfPw/N7rZHk/n8N9aej47lz4qL56WH8ufGn5Q2VfPDEzPlyQ7HDt1uS4vxn/mt1OnWAWvO97Wgey0e/2mH2gGsP9d/6F7GP3Qv4x+6V934//LMhT3VxHvVn/sXdjRdC1jiL4cAd4dF1/9Ln3eqIcC6M/+H7mX8Q/cy/qEr3c73+juT2JS3/FaF+zrf1NUlvuidLWXx1e1KeiI637DGRKRLlXkjmu8ajIg1aljcER9LuxPJMg715SaOHc+HznIKd/KsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0D7/BgAA//9ajd4t") open(&(0x7f0000000680)='./bus\x00', 0x2a27e, 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) open(&(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200582, 0x5) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/fib_trie\x00') preadv(r5, &(0x7f0000000480)=[{&(0x7f0000000540)=""/115, 0x200005b3}], 0x1, 0x0, 0x0) stat(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000006c0)='./file1\x00', &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x2, &(0x7f0000000700)=[r6, r7]) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 6.189969701s ago: executing program 1 (id=1424): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000040ffff097b01000800395032303030"], 0x15) r1 = dup(r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0}, 0x10) write$FUSE_BMAP(r1, 0x0, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="b0"], 0xb0) r2 = socket$packet(0x11, 0x3, 0x300) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x0, 0x0, 0x7) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000012000000000000000095000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, 0x0) 5.652916213s ago: executing program 1 (id=1425): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x4508, &(0x7f0000000c40)={[{@nodelalloc}, {@block_validity}, {@sysvgroups}]}, 0xa, 0x4e4, &(0x7f0000001400)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000f000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 5.095136997s ago: executing program 4 (id=1426): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8000000, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 5.06338282s ago: executing program 0 (id=1427): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000107d1e502d0000ecff000109022400010000300009040000010300020009210700b90122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x9}, 0x10}, 0x90) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xb9ff}) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x17) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="0000070000000700cb030f47"], 0x0, 0x0, 0x0, 0x0}, 0x0) 4.805652341s ago: executing program 4 (id=1428): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0xe4}, 0x48) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)=0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) timer_settime(0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x1000407, &(0x7f0000000000)={[{@grpjquota}, {@auto_da_alloc}, {@orlov}, {@norecovery}]}, 0x4, 0x5e5, &(0x7f0000000e00)="$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") r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r5, 0x0, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f00000001c0)=r2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001d40)={{r1}, &(0x7f0000001cc0), &(0x7f0000001d00)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) r7 = creat(0x0, 0x0) r8 = socket$key(0xf, 0x3, 0x2) ioctl$SIOCGETMIFCNT_IN6(r7, 0x89e0, &(0x7f0000000040)={0x1}) sendmsg$key(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="0213000002"], 0x10}}, 0x0) 4.184367489s ago: executing program 1 (id=1429): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x18) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x2d, 0x10000000000000, 0xa, 0x0, 0x2c}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f00000000c0)={[{@none}, {@subsystem='rlimit'}]}) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r5}, &(0x7f0000001780)=0x4, &(0x7f00000017c0)='%-010d \x00'}, 0x20) r8 = userfaultfd(0x1) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000300)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x2}) ioctl$UFFDIO_COPY(r8, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000bfd000/0x400000)=nil, &(0x7f0000bd1000/0x2000)=nil, 0x400000}) r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 4.088486327s ago: executing program 4 (id=1430): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1e7d, 0x2c24, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000540)={0x2c, 0xf, 0x0, 0x18}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, r5, 0x5, 0x2, 0x1}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='sched_kthread_stop_ret\x00', r6}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000002180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) 4.004089874s ago: executing program 2 (id=1431): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040e704300000000000d1de779d6917f700010902240001ccb83ac357e14b97000000f108040000010300000009210000007981030000000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r1}, 0x10) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000700000007000047fc6b"], 0x0, 0x0, 0x0, 0x0}, 0x0) 3.80067725s ago: executing program 3 (id=1432): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='sched_kthread_stop_ret\x00', r1}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff0000003f0000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) 3.610167215s ago: executing program 3 (id=1433): syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_getscheduler(0xffffffffffffffff) sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x0, 0x0, 0xffffff6a, 0x180, 0x0, 0x2d8, 0x258, 0x258, 0x2d8, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [0x0, 0xfeffff7f], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x9}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'vxcan1\x00', 'team0\x00'}, 0x0, 0x118, 0x158, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@dst={{0x48}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x3d6}, {0x28}}}}, 0x408) 3.267112032s ago: executing program 1 (id=1434): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180800000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, 0x0, 0x0) write(r3, &(0x7f0000000080)="240000001a007f0214f9f4070009040803000000000000050002000008000f40fe00000e", 0x24) 2.123768243s ago: executing program 0 (id=1435): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000040ffff097b01000800395032303030"], 0x15) r1 = dup(r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0}, 0x10) write$FUSE_BMAP(r1, 0x0, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="b0"], 0xb0) r2 = socket$packet(0x11, 0x3, 0x300) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x0, 0x0, 0x7) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000012000000000000000095000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, 0x0) 1.727144854s ago: executing program 3 (id=1436): r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) r2 = dup3(r1, r0, 0x0) read$FUSE(r2, &(0x7f0000000900)={0x2020}, 0x2020) r3 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x200c8804, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}}, 0x1c) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000080), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="1806000000000000000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000540)={0x2c, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000001440)={0xfffffffffffffd87, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "741cb976"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000001840)={0x24, 0x0, &(0x7f0000001740)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000300)={0x24, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) syz_usb_control_io$hid(r4, &(0x7f0000000000)={0x24, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0xf0}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="000312"], 0x0, 0x0}, 0x0) 1.552946868s ago: executing program 1 (id=1437): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe4, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(r0, 0xd, &(0x7f00000001c0)={0xfffffffffffffff6, 0xffff}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000005c0)={'syztnl0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500"], 0x20}}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x1a, r6, 0x1, 0x7}, 0x14) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r7, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) ioctl$sock_bt_hci(r7, 0x400448df, &(0x7f0000000180)="710ef706d70c1c83c5eeea5833a0c749b3355058276d3117e55e45cc177b7cfe427a2ef326204a6e186abc5ad8") 1.476927884s ago: executing program 4 (id=1438): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0x40}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0x1, 0x803, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1810714, &(0x7f0000000340)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7}}, {@grpjquota_path}, {@bh}, {@prjquota}, {@usrjquota}, {@mblk_io_submit}, {@prjquota}, {@data_ordered}]}, 0xff, 0x485, &(0x7f0000001200)="$eJzs3M9vFFUcAPDvTLcFQWlFREGQKpo0/mhpQeVgYjSaeNDERA94rG0hSKGG1kRIo9UYPBoS78ajiX+BJ09GOZl4xaOJISFKTEAvrJmdmW277LZUtmzT/XySpe/Nm33vfXfmzb6dt0sAXWsw+yeJuDciLkdEf55dvsNg/ufGtfmJf67NTyRRrb79Z1Lb7/q1+YlqoXze9qLOoTQi/TwpGonepdXOnjt/anx6eupskR+ZO/3ByOy588+ePD1+YurE1Jmxo0ePHB594fmx55r0+veLa40zi+/63o9n9u15/d2Lb04cu/jez99l/d29Py/P4lhrnasZzAL/K39tGsuebHdjHXazuhhnUul0b7hdPRFRKQbn5eiPnlg8eP3x2mcd7RywrrJr9pbWxQtVYBNLotM9ADqjfKPPPv+Wj7s09dgQrr6cfwDK4r5RPPKSSqTFPr3r2P5gRBxb+Pfr7BEN9yGqTe4bAADcqR+y+c8zzeZ/aexest+OYm1oICLuj4idEfFAROyKiAcjavs+FBEPr7H9wYb8rfPP9Mr/Cuw2ZfO/F4u1reXzv3L2FwM9Re6+Wvy9yfGT01OHitdkKHq3ZPnRZpWXVbz665et2i/nfzcu5fms/XIuWFRypZLfoNtabpkcnxtv16T06qcReyvN4k/qKwFJROyJiL1rq3pHmTj51Lf7Wu20dP5bex1uiX8FbVhnqn5TVjK/EA3xl5KV1ydHtsb01KGR8qy41aVfLrxVb6+h7I7ib4Ps+G9bfv437NH/d7J0vXa2XvDS7bZx4bcvWn6mrKwaf/38r8vO/77kndqabl+x7aPxmDs7GtGXvFHLL26fmzs7tvjcMl/7O5rHP3Sw+fjfWTwni/+RiMhO4v0R8WhEHCiO3WMR8XhEHFwh/p9eeeL9VmUb4fhPNr3+1c//geXHf+2JnlM/ft+q/dXjz47/kVpqqNhSu/6tonV3ystow9kMAAAAm1ha+258kg7X02k6PJx/h39XbEunZ2bnnj4+8+GZyfw79APRm5Z3uvqX3A8dTRaKGvP8WHGvuCw/XNw3/qrnnlp+eGJmerLDsUO3295i/Gf+6Ol074B15/da0L0ax3/aoX4Ad5/3f+hexj90L+Mfulez8f9JQ95aAGxG1f5O9wDoHPN/6F7GP3St9fz/rYCN605+179eicoKv96X2CiJSGuJm9Vqte1N9G2EANeYOLCBRlOlDaO7wxcmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACANvkvAAD//6AU+GU=") r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) fsetxattr(r2, &(0x7f0000000100)=@known='security.selinux\x00', &(0x7f00000001c0)='\x00\x00o;\xc8\xdd1\xa4lB&\xa9\xb6\x06\x06\x99\t\xf5\x10\x17\'\xcaV\xab\\rw9+\xba\tl|\xde\x93\xea\x95A}\x89\x82\x8c\nN\x97\xbf\xab\xa4_\xc2\x17\xe7+\xc5\xfe\x16-\xdd\xa7\x00\xfe\xa0\xa2\xbdUw\x01\x80\x92\xea\x15\xc2opg\xee\xbd\t\xba\x9d\x98\x983\xfd\v\xc1\xbd\x1e\xd5h\xc3@\xda\xee\x97\xd5~\xee\xd6$\xc6\x8c\x01l\x1e\xd3\x1f\xe4<\xee\b\xe4\x16\xc3Ku\x84\xcd\x89\xb8\x1bF\xcd\r\xbc\xc0\xbb\xf5Q\x06\xb71>\xcd\xdb\x0f\x8c\x14\xc5\t\x92m/u,^\xe6\xc7V\xca|;j\xc1\xf4$\xe1A\x17\xeb\xf1M\x8c\x82\\\x89\x89\x00\x98\xadr\xd4\x86;\xed+\x899\x8a\xe9\x18\xb4]a\xd2\x15\x93\x84\x8b\x85\xae\'\xf4\xc9\xcb\x8c\'\x88\xff\x02\b\xaf\xe9vc\x9au\xba\xce]\x85\x98>\xa6\xe1\xc0)\xff`\xdepJ\x95E\x98\xa6pu\xbdh\xa2\xe3\x9d\x85\x19El\xf4aO\xb7\xcd\x15', 0x7c8, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x4, 0x3, 0x1, 0x1004, 0xa0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000020000080008000d000000", 0x24) 1.063286687s ago: executing program 2 (id=1439): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x72}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES16=r1, @ANYRES16], 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x1de, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) dup(r3) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3810744, &(0x7f0000000700)={[{@noauto_da_alloc}, {@minixdf}, {@nogrpid}, {@data_err_abort}, {@grpquota}, {@usrjquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400000}}, {@i_version}, {@acl}]}, 0xff, 0x451, &(0x7f0000000d00)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x28040d3, 0x0, 0xbc, 0x0, &(0x7f00000000c0)) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r5 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x2004000, &(0x7f0000001180), 0x2, 0x506, &(0x7f00000011c0)="$eJzs3U9sI1cZAPBvJn/sTdMmhR4AFbqUwoJWayfeNqp6oZwqhCoheuSwDYkTRbHjKHZKE/aQPXJHohInOHHmgMQBqSfuSBzgxqUckAqsQA0SByOP7V3njzfWbmzvxr+fNJo38+L53tvRvGd91s4LYGJdj4ijiJiNiPcjYqFzPuls8XZ7a/3dZ/fvrh3fv7uWRLP53j+TrL51Lno+0/Jc55r5iPjBOxE/Sk4F/VNE/eBwe7VSKe91ThUb1d1i/eDw1lZ1dbO8Wd4plVaWV5bevP1G6dL6+kr1N59ei4jf/+7Ln/zx6Fs/aTVrvlPX24/L1O76zIM4LdMR8b1hBBuDqU5/Zh/nw4/1IS5TGhGfi4hXs+d/Iaayu3nSydv07RG2DgAYhmZzIZoLvccAwFWXZjmwJC10cgHzkaaFQjuH91LMpZVavXFzo7a/s97OlS3GTLqxVSkvdXKFizGTbGxNl5ezcve4Ui6dOr4dES9GxM9y17Ljwlqtsj7OLz4AMMGeOzX//yfXnv8BgCsu/7CYG2c7AIDRyY+7AQDAyJn/AWDymP8BYPKY/wFg8pj/AWDymP8BYKJ8/913W1vzuPP+6/UPDva3ax/cWi/XtwvV/bXCWm1vt7BZq21m7+ypXnS9Sq22u/x67H9YbJTrjWL94PBOtba/07iTvdf7TnlmJL0CAB7lxVc+/ksSEUdvXcu26Hnf/4Vz9cvDbh0wTOm4GwCMzdS4GwCMzdnVvoBJIR8P9CzRe6/ndP5M4bSPBrp8at1QePrc+OIT5P+BZ5r8P0yux8v/+y4PV4H8P0yuZjOx5j8ATBg5fiC5oL739/+lZs/BQL//G2UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4muazLUkLnbXA5yNNC4WI5yNiMWaSja1KeSkiXoiIP+dmcq3jZSt6AMAzLv170ln/68bCa/Ona2dz/81l+4j48S/e+/mHq43G3nLEbPKvB+cbH3XOl8bRfgDgIt15ujuPd312/+5adxtlez79Tntx0Vbc487WrpmO6Wyfz3INc/9OOsdtre8rU5cQ/+heRHzhvP4nWW5ksbPy6en4rdjPjzR+eiJ+mtW1961/i89fQltg0nzcGn/ePu/5S+N6tj//+c9nI9ST645/x2fGv/TB+DfVZ/y7PmiM1//w3TMnmwvtunsRX5qOOO5evGf86cZP+sR/bcD4f335K6/2q2v+MuJGnNf/5ESsYqO6W6wfHN7aqq5uljfLO6XSyvLK0pu33ygVsxx1sZupPusfb918oV/8Vv/n+sTPX9D/rw/Y/1/97/0ffvUR8b/5tfPv/0uPiN+aE78xYPzVud/m+9W14q/36f9F9//mgPE/+dvh+oB/CgCMQP3gcHu1UinvDbuQDj9EVkgijkbQnXYh9+ufvjOqWEMsxNPRjGEVZuOpaMYzVhj3yAQM28OHftwtAQAAAAAAAAAAAAAA+hnFfycadx8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4uv4fAAD//8sX06E=") ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)) 1.042217568s ago: executing program 0 (id=1440): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='ufshcd_uic_command\x00', r0}, 0xffffffffffffffc8) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/95, 0x5f}], 0x1}, 0x40000000) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 465.730094ms ago: executing program 1 (id=1441): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x0, 0xc, &(0x7f0000000f40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="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"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000580)='ext4_request_inode\x00', r1}, 0x10) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000680)={'syztnl2\x00', &(0x7f0000000600)={'ip6gre0\x00', 0x0, 0x2f, 0xfe, 0x0, 0xf60, 0x3c, @empty, @mcast1, 0x8000, 0x10, 0x5, 0x9}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x8, 0x3, 0x650, 0x0, 0xa, 0x148, 0x368, 0x10, 0x5b8, 0x2a8, 0x2a8, 0x5b8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2=0xe000000b, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x7a, 0x8000000, 0x0, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x64, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @broadcast, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x1f0, 0x250, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_to_bond\x00'}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x6b0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f00000011c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r4, 0x81, 0x77, &(0x7f00000006c0)="b9425b446512d23236973599b76c4705397f00466eb0ef01e208e7f49ad068c4ffce4c6b81fdb183acf730ddbf395346f7fd23f2e107b224e7ea1deb33c65c884689393c15d155a710eb972acd778cd33d3a8a9cf9000000003da8dd3898c315943f48ff06761880b65af57bfd7dea10c0dce889c610bd") prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000380)={0x0, &(0x7f00000000c0)}) open(&(0x7f0000000400)='./bus\x00', 0x402100, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x8, 0xb}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fcffffff000000000000210085000000360000009500070000000000b83f3584230b8f5ec8921327291cf4880dd3a91af830f8a476ba1b51d4eb67103b000000000000000000000000000000640f9922d207e93470686f20ad"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x1800000000000060, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{r5}, &(0x7f00000002c0), &(0x7f0000000300)='%pS \x00'}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r7 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYRESDEC, @ANYRESHEX=r7]) 447.547855ms ago: executing program 4 (id=1442): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$ARCH_SHSTK_UNLOCK(0x1e, 0x0, 0x0, 0x5004) open(0x0, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014001100b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="2c00ec0ef1254500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r7, 0x11, 0x66, &(0x7f0000000100)=0xc6, 0x4) setsockopt$inet6_udp_encap(r7, 0x11, 0x64, &(0x7f0000000780)=0x2, 0x4) bind$inet6(r7, &(0x7f0000000200)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffbfff00000000000086dd600489f1009c1100fc010000000000000025030000000000ff02000000000000000000000000000100000e22"], 0x0) r8 = memfd_create(&(0x7f0000000300), 0x0) write(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 143.985959ms ago: executing program 0 (id=1443): clock_adjtime(0x0, &(0x7f00000006c0)={0x7fff, 0x0, 0x0, 0x0, 0x0, 0x2c43, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2902, 0x0, 0x0, 0x800000000000000}) 37.647648ms ago: executing program 0 (id=1444): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x18) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x2d, 0x10000000000000, 0xa, 0x0, 0x2c}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f00000000c0)={[{@none}, {@subsystem='rlimit'}]}) bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r5}, &(0x7f0000001780)=0x4, &(0x7f00000017c0)='%-010d \x00'}, 0x20) r8 = userfaultfd(0x1) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000300)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x2}) ioctl$UFFDIO_COPY(r8, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000bfd000/0x400000)=nil, &(0x7f0000bd1000/0x2000)=nil, 0x400000}) r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 0s ago: executing program 2 (id=1445): r0 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000020000202505a1a440000000010109024400010100009e090400001202060000052406000005248000000d240f01000000000000ffffffffffffffff03000000090582020004000000090503024000000000"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00'}, 0x80) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (rerun: 64) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000bb75c62d"], &(0x7f0000000000)='syzkaller\x00'}, 0x80) (async) close(0xffffffffffffffff) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="fdffffff0000000000000037b860320000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000004c0)='host1x_channel_submit_complete\x00', r7}, 0x10) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r8, 0x29, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="000a0000000000000730000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000720000000000600000000000000000000000000000000000000fe"], 0x60) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r10}, 0x10) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r11, &(0x7f0000000180), 0x40010) (async) r12 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000001c0)='sched_process_wait\x00', r5}, 0x10) r13 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r12}, 0x8) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r13, r1, 0x0, r13}, 0x10) kernel console output (not intermixed with test programs): V_CHANGE): batadv_slave_1: link becomes ready [ 407.230074][ T2132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 407.496650][ T4829] capability: warning: `syz.1.1130' uses deprecated v2 capabilities in a way that may be insecure [ 407.788819][ T760] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 408.017248][ T760] usb 4-1: Using ep0 maxpacket: 16 [ 408.131664][ T760] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 408.155651][ T760] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 408.265616][ T4840] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 408.281586][ T760] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 408.302290][ T760] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.315471][ T760] usb 4-1: config 0 descriptor?? [ 408.495493][ T760] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 408.675700][ T4849] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 410.472794][ T2131] usb 4-1: USB disconnect, device number 36 [ 411.722924][ T2131] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 411.847095][ T4879] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.1141: Invalid block bitmap block 0 in block_group 0 [ 411.875939][ T4879] __quota_error: 52 callbacks suppressed [ 411.875966][ T4879] Quota error (device loop1): write_blk: dquota write failed [ 411.889526][ T4879] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 411.899895][ T4879] EXT4-fs error (device loop1): ext4_acquire_dquot:6219: comm syz.1.1141: Failed to acquire dquot type 0 [ 411.912059][ T4879] EXT4-fs error (device loop1): ext4_free_blocks:5688: comm syz.1.1141: Freeing blocks not in datazone - block = 0, count = 4096 [ 411.926532][ T4879] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.1141: Invalid inode bitmap blk 0 in block_group 0 [ 411.951813][ T2594] Quota error (device loop1): remove_tree: Getting block too big (0 >= 9) [ 411.971698][ T2594] EXT4-fs error (device loop1): ext4_release_dquot:6242: comm kworker/u4:6: Failed to release dquot type 0 [ 411.999187][ T2131] usb 5-1: Using ep0 maxpacket: 16 [ 412.048558][ T4879] EXT4-fs error (device loop1) in ext4_free_inode:360: Corrupt filesystem [ 412.114530][ T2131] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.121208][ T4879] EXT4-fs (loop1): 1 orphan inode deleted [ 412.133745][ T2131] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 412.147766][ T2131] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 412.158136][ T2131] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.170571][ T4879] EXT4-fs (loop1): mounted filesystem without journal. Opts: €; acl,noload,auto_da_alloc,noload,journal_dev=0x0000000000000004,norecovery,bsddf,bsdgroups,,errors=continue [ 412.178108][ T2131] usb 5-1: config 0 descriptor?? [ 412.510045][ T4891] xt_CT: No such helper "snmp_trap" [ 412.591489][ T4894] FAULT_INJECTION: forcing a failure. [ 412.591489][ T4894] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 412.637340][ T4894] CPU: 0 PID: 4894 Comm: syz.1.1145 Not tainted 5.10.222-syzkaller-01494-gfd58936f3c1f #0 [ 412.647157][ T4894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 412.657184][ T4894] Call Trace: [ 412.660333][ T4894] dump_stack_lvl+0x1e2/0x24b [ 412.664866][ T4894] ? bfq_pos_tree_add_move+0x43b/0x43b [ 412.670243][ T4894] dump_stack+0x15/0x17 [ 412.674249][ T4894] should_fail+0x3c6/0x510 [ 412.678512][ T4894] should_fail_alloc_page+0x52/0x60 [ 412.683536][ T4894] __alloc_pages_nodemask+0x1b3/0xaf0 [ 412.688764][ T4894] ? do_syscall_64+0x34/0x70 [ 412.693262][ T4894] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 412.699260][ T4894] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 412.704728][ T4894] ? avc_has_perm_noaudit+0x117/0x240 [ 412.709927][ T4894] shmem_alloc_page+0x257/0x420 [ 412.714608][ T4894] ? put_page+0xd0/0xd0 [ 412.718611][ T4894] ? slab_post_alloc_hook+0x61/0x2f0 [ 412.723735][ T4894] ? percpu_counter_add_batch+0x13d/0x160 [ 412.729294][ T4894] ? __kasan_check_read+0x11/0x20 [ 412.734132][ T4894] ? __vm_enough_memory+0x119/0x2f0 [ 412.739186][ T4894] ? security_vm_enough_memory_mm+0x94/0xa0 [ 412.744923][ T4894] shmem_alloc_and_acct_page+0x395/0x8e0 [ 412.750577][ T4894] ? shmem_swapin_page+0x1950/0x1950 [ 412.755807][ T4894] ? find_get_entry+0x44c/0x4c0 [ 412.760848][ T4894] ? page_cache_prev_miss+0x410/0x410 [ 412.766051][ T4894] ? pagevec_add_and_need_flush+0x1fe/0x430 [ 412.771787][ T4894] ? __kasan_check_write+0x14/0x20 [ 412.776718][ T4894] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 412.781681][ T4894] ? _raw_spin_lock_irqsave+0x210/0x210 [ 412.787203][ T4894] ? find_lock_entry+0x1df/0x200 [ 412.792064][ T4894] shmem_getpage_gfp+0x891/0x2480 [ 412.797027][ T4894] ? iov_iter_advance+0x258/0xb20 [ 412.801999][ T4894] ? shmem_getpage+0xa0/0xa0 [ 412.806585][ T4894] ? iov_iter_fault_in_readable+0x31f/0x4f0 [ 412.812359][ T4894] shmem_write_begin+0xca/0x1b0 [ 412.817263][ T4894] generic_perform_write+0x2cd/0x570 [ 412.822571][ T4894] ? grab_cache_page_write_begin+0xa0/0xa0 [ 412.828346][ T4894] ? file_remove_privs+0x570/0x570 [ 412.833278][ T4894] ? __kasan_check_write+0x14/0x20 [ 412.838257][ T4894] __generic_file_write_iter+0x23c/0x560 [ 412.843691][ T4894] ? generic_write_checks+0x3b9/0x470 [ 412.848947][ T4894] generic_file_write_iter+0xaf/0x1c0 [ 412.854237][ T4894] vfs_write+0xb4c/0xe70 [ 412.858342][ T4894] ? kernel_write+0x3d0/0x3d0 [ 412.862953][ T4894] ? __fdget_pos+0x209/0x3a0 [ 412.867379][ T4894] ? ksys_write+0x77/0x2c0 [ 412.871712][ T4894] ksys_write+0x199/0x2c0 [ 412.875898][ T4894] ? kvm_sched_clock_read+0x18/0x40 [ 412.880916][ T4894] ? __ia32_sys_read+0x90/0x90 [ 412.885528][ T4894] ? debug_smp_processor_id+0x17/0x20 [ 412.890726][ T4894] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 412.896633][ T4894] ? irqentry_exit_to_user_mode+0x41/0x80 [ 412.902215][ T4894] __x64_sys_write+0x7b/0x90 [ 412.906728][ T4894] do_syscall_64+0x34/0x70 [ 412.910998][ T4894] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 412.916840][ T4894] RIP: 0033:0x7ff08e8414df [ 412.921171][ T4894] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8d 02 00 48 [ 412.934567][ T4868] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 412.940636][ T4894] RSP: 002b:00007ff08d4c1df0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 412.956856][ T4894] RAX: ffffffffffffffda RBX: 0000000000040000 RCX: 00007ff08e8414df [ 412.964650][ T4894] RDX: 0000000000040000 RSI: 00007ff0850a2000 RDI: 0000000000000004 [ 412.972811][ T4894] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000522 [ 412.980617][ T4894] R10: 00000000200014c2 R11: 0000000000000293 R12: 0000000000000004 [ 412.988567][ T4894] R13: 00007ff08d4c1ef0 R14: 00007ff08d4c1eb0 R15: 00007ff0850a2000 [ 412.996543][ T4868] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 413.059123][ T4868] F2FS-fs (loop3): Found nat_bits in checkpoint [ 413.337878][ T4868] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 413.346977][ T4868] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 414.257016][ T2131] usbhid 5-1:0.0: can't add hid device: -71 [ 414.263085][ T2131] usbhid: probe of 5-1:0.0 failed with error -71 [ 414.281032][ T2131] usb 5-1: USB disconnect, device number 44 [ 414.457698][ T4906] EXT4-fs (loop1): Test dummy encryption mode enabled [ 414.498171][ T4906] EXT4-fs error (device loop1): __ext4_iget:4958: inode #11: block 1: comm syz.1.1149: invalid block [ 414.565176][ T4906] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1149: couldn't read orphan inode 11 (err -117) [ 414.625206][ T4906] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000002000,jqfmt=vfsv0,delalloc,usrjquota=,noauto_da_alloc,test_dummy_encryption,,errors=continue [ 414.894568][ T4924] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.1147: casefold flag without casefold feature [ 415.634111][ T4924] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #2: comm syz.3.1147: missing EA_INODE flag [ 416.604683][ T4924] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.1147: error while reading EA inode 2 err=-117 [ 416.934494][ T4924] EXT4-fs (loop3): 1 orphan inode deleted [ 416.940196][ T4924] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 417.285743][ T1254] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 417.558119][ T4950] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 417.697489][ T4950] ext4 filesystem being mounted at /86/wÅü5ÔTÕÔ)­`)YFæ¾nA­½@T<Ÿ3»Ú‚$¢ó×rçcnH³<¿pƒrèñ¹“>ÅwC¾" žð-ùËòöè€Ó8 supports timestamps until 2038 (0x7fffffff) [ 418.114145][ T4950] EXT4-fs error (device loop1) in ext4_do_update_inode:5275: error 27 [ 418.168564][ T4950] EXT4-fs error (device loop1): ext4_dirty_inode:6079: inode #2: comm syz.1.1156: mark_inode_dirty error [ 418.214881][ T4950] EXT4-fs error (device loop1) in ext4_do_update_inode:5275: error 27 [ 418.292766][ T4950] EXT4-fs error (device loop1): __ext4_ext_dirty:182: inode #2: comm syz.1.1156: mark_inode_dirty error [ 418.526281][ T4966] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1161'. [ 419.005237][ T4966] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=34 sclass=netlink_tcpdiag_socket pid=4966 comm=syz.0.1161 [ 419.250793][ T4966] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1161'. [ 419.398779][ T2134] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 419.406475][ T1254] usb 4-1: device not accepting address 37, error -71 [ 419.575676][ T4947] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 419.587652][ T4947] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 419.600862][ T4972] device syzkaller0 entered promiscuous mode [ 419.648044][ T2134] usb 2-1: Using ep0 maxpacket: 16 [ 419.746407][ T4947] F2FS-fs (loop2): Found nat_bits in checkpoint [ 419.953721][ T2134] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 419.981834][ T2134] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.989739][ T2134] usb 2-1: Product: syz [ 420.017778][ T2134] usb 2-1: config 0 descriptor?? [ 420.038984][ T2134] usb 2-1: can't set config #0, error -71 [ 420.061577][ T2134] usb 2-1: USB disconnect, device number 34 [ 420.481212][ T4989] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 420.703236][ T4989] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1047: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 421.116929][ T4989] EXT4-fs (loop4): 1 truncate cleaned up [ 421.122725][ T4989] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,block_validity,sysvgroups,,errors=continue [ 421.251595][ T1254] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 421.806159][ T5003] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=31766 [ 421.816528][ T5003] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=31766 [ 421.830216][ T5003] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=31766 [ 421.841070][ T5003] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=31766 [ 421.851791][ T5003] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=31766 [ 421.862564][ T5003] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=31766 [ 421.873313][ T5003] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=31766 [ 421.883794][ T5003] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=31766 [ 421.894634][ T5003] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=31766 [ 421.905566][ T5003] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=31766 [ 421.916106][ T5003] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=31766 [ 421.926960][ T5003] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=31766 [ 421.937592][ T5003] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=31766 [ 421.982340][ T5003] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=31766 [ 421.993167][ T5003] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=31766 [ 422.003813][ T5003] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=31766 [ 422.014555][ T5003] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=31766 [ 422.025384][ T5003] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=31766 [ 422.035908][ T5003] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=31766 [ 422.046142][ T5003] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=31766 [ 422.056593][ T5003] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=31766 [ 422.067313][ T5003] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=31766 [ 422.162262][ T5003] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=31766 [ 422.171782][ T5003] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=31766 [ 422.181361][ T5003] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=31766 [ 422.190869][ T24] audit: type=1400 audit(1723251273.054:1001): avc: denied { mount } for pid=4996 comm="syz.1.1168" name="/" dev="ramfs" ino=31765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 422.191305][ T5003] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=31766 [ 422.222500][ T5003] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=31766 [ 422.231923][ T5003] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=31766 [ 422.241472][ T5003] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=31766 [ 422.250895][ T5003] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=31766 [ 422.260368][ T5003] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=31766 [ 422.269991][ T5003] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=31766 [ 422.279439][ T5003] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=31766 [ 422.289500][ T5003] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=31766 [ 422.298448][ T24] audit: type=1400 audit(1723251273.180:1002): avc: denied { read } for pid=4996 comm="syz.1.1168" name="file0" dev="overlay" ino=31766 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 422.298996][ T5003] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=31766 [ 422.331036][ T5003] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=31766 [ 422.340769][ T5003] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=31766 [ 422.350307][ T5003] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=31766 [ 422.359796][ T5003] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=31766 [ 422.369188][ T5003] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=31766 [ 422.378579][ T5003] SELinux: inode_doinit_use_xattr: getxattr returned 95 for dev=overlay ino=31766 [ 422.499054][ T1254] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 422.507248][ T1254] usb 4-1: can't read configurations, error -61 [ 422.513801][ T1254] usb usb4-port1: attempt power cycle [ 422.516222][ T24] audit: type=1400 audit(1723251273.905:1003): avc: denied { unmount } for pid=3556 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 422.914115][ T1254] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 423.135263][ T5000] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 423.232758][ T5000] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 423.699696][ T5000] F2FS-fs (loop2): Found nat_bits in checkpoint [ 424.029032][ T5000] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 424.036552][ T1254] usb 4-1: device not accepting address 39, error -71 [ 424.060254][ T5000] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 424.235134][ T20] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 424.811602][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.834536][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 424.869077][ T20] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 424.907967][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.101737][ T20] usb 1-1: config 0 descriptor?? [ 425.153684][ T5032] attempt to access beyond end of device [ 425.153684][ T5032] loop2: rw=2049, want=81920, limit=40427 [ 425.190810][ T5032] attempt to access beyond end of device [ 425.190810][ T5032] loop2: rw=2049, want=53248, limit=40427 [ 425.300204][ T5032] attempt to access beyond end of device [ 425.300204][ T5032] loop2: rw=2049, want=73544, limit=40427 [ 425.348591][ T2841] attempt to access beyond end of device [ 425.348591][ T2841] loop2: rw=2049, want=40968, limit=40427 [ 425.487669][ T289] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 425.519801][ T5037] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 425.539584][ T5037] ext4 filesystem being mounted at /7/wÅü5ÔTÕÔ)­`)YFæ¾nA­½@T<Ÿ3»Ú‚$¢ó×rçcnH³<¿pƒrèñ¹“>ÅwC¾" žð-ùËòöè€Ó8 supports timestamps until 2038 (0x7fffffff) [ 425.578448][ T5037] EXT4-fs error (device loop4) in ext4_do_update_inode:5275: error 27 [ 425.613032][ T5037] EXT4-fs error (device loop4): ext4_dirty_inode:6079: inode #2: comm syz.4.1175: mark_inode_dirty error [ 425.636566][ T5037] EXT4-fs error (device loop4) in ext4_do_update_inode:5275: error 27 [ 425.658920][ T5037] EXT4-fs error (device loop4): __ext4_ext_dirty:182: inode #2: comm syz.4.1175: mark_inode_dirty error [ 425.778430][ T5023] udc-core: couldn't find an available UDC or it's busy [ 425.785846][ T5023] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 425.802151][ T20] usb 1-1: string descriptor 0 read error: -22 [ 425.873409][ T5045] sit: Src spoofed 0.0.0.100/2002::bfd8:a5dd -> 224.0.0.1/2002:c021:42c4:3911:45ba:dd28:fd7f:ffc [ 425.906594][ T289] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.921158][ T289] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 425.932084][ T289] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 425.945205][ T760] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 425.952851][ T289] usb 2-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 425.962454][ T289] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.982527][ T289] usb 2-1: config 0 descriptor?? [ 426.071970][ T20] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0040/input/input62 [ 426.087888][ T20] uclogic 0003:256C:006D.0040: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 426.211374][ T760] usb 5-1: Using ep0 maxpacket: 16 [ 426.264490][ T20] usb 1-1: USB disconnect, device number 41 [ 426.443013][ T289] holtek_mouse 0003:04D9:A070.0041: item fetching failed at offset 1/5 [ 426.451722][ T289] holtek_mouse 0003:04D9:A070.0041: hid parse failed: -22 [ 426.458939][ T289] holtek_mouse: probe of 0003:04D9:A070.0041 failed with error -22 [ 426.497475][ T760] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 426.516473][ T760] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.524368][ T760] usb 5-1: Product: syz [ 426.529033][ T760] usb 5-1: Manufacturer: syz [ 426.533562][ T760] usb 5-1: SerialNumber: syz [ 426.540933][ T760] usb 5-1: config 0 descriptor?? [ 426.632597][ T289] usb 2-1: USB disconnect, device number 35 [ 427.125768][ T760] r8152 5-1:0.0: Unknown version 0x0000 [ 427.133686][ T760] usb 5-1: USB disconnect, device number 45 [ 427.522067][ T5079] netlink: 165 bytes leftover after parsing attributes in process `syz.1.1186'. [ 428.873263][ T5090] syz.2.1188 (5090) used obsolete PPPIOCDETACH ioctl [ 428.884660][ T760] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 429.259828][ T760] usb 4-1: Using ep0 maxpacket: 16 [ 429.271746][ T2131] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 429.393224][ T760] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.404743][ T760] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 429.418999][ T760] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 429.436682][ T760] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.458133][ T760] usb 4-1: config 0 descriptor?? [ 429.783886][ T2131] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.803408][ T2131] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.813638][ T2131] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 429.831302][ T2131] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.842251][ T2131] usb 2-1: config 0 descriptor?? [ 430.395864][ T5111] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1190'. [ 430.507434][ T760] usbhid 4-1:0.0: can't add hid device: -71 [ 430.513561][ T760] usbhid: probe of 4-1:0.0 failed with error -71 [ 431.460664][ T760] usb 4-1: USB disconnect, device number 41 [ 431.755993][ T5126] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 431.765817][ T5126] ext4 filesystem being mounted at /10/wÅü5ÔTÕÔ)­`)YFæ¾nA­½@T<Ÿ3»Ú‚$¢ó×rçcnH³<¿pƒrèñ¹“>ÅwC¾" žð-ùËòöè€Ó8 supports timestamps until 2038 (0x7fffffff) [ 431.836521][ T5126] EXT4-fs error (device loop4) in ext4_do_update_inode:5275: error 27 [ 431.846786][ T5126] EXT4-fs error (device loop4): ext4_dirty_inode:6079: inode #2: comm syz.4.1199: mark_inode_dirty error [ 431.860499][ T5126] EXT4-fs error (device loop4) in ext4_do_update_inode:5275: error 27 [ 431.870140][ T5126] EXT4-fs error (device loop4): __ext4_ext_dirty:182: inode #2: comm syz.4.1199: mark_inode_dirty error [ 432.576743][ T52] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 432.917594][ T52] usb 1-1: Using ep0 maxpacket: 8 [ 432.994057][ T888] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 433.048488][ T5147] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 433.393671][ T888] usb 5-1: Using ep0 maxpacket: 16 [ 433.870234][ T2131] usbhid 2-1:0.0: can't add hid device: -71 [ 433.876266][ T2131] usbhid: probe of 2-1:0.0 failed with error -71 [ 433.898766][ T2131] usb 2-1: USB disconnect, device number 36 [ 433.908239][ T52] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 433.947178][ T52] usb 1-1: config 179 has no interface number 0 [ 433.957431][ T52] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 433.974446][ T52] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 433.985991][ T52] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 433.994338][ T888] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 433.997488][ T52] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 434.006518][ T888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.025079][ T888] usb 5-1: Product: syz [ 434.029635][ T888] usb 5-1: Manufacturer: syz [ 434.033166][ T52] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 434.034706][ T888] usb 5-1: SerialNumber: syz [ 434.048968][ T52] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 434.067886][ T888] usb 5-1: config 0 descriptor?? [ 434.075461][ T52] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.098690][ T5131] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 434.122223][ T52] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input63 [ 434.224611][ T1254] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 434.317836][ T2131] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 434.460721][ T1254] usb 4-1: Using ep0 maxpacket: 16 [ 434.508503][ T888] r8152 5-1:0.0: Unknown version 0x0000 [ 434.530817][ T888] usb 5-1: USB disconnect, device number 46 [ 434.575182][ T1254] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.594341][ T1254] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 434.653265][ T1254] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 434.663635][ T1254] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.672095][ T2131] usb 2-1: Using ep0 maxpacket: 16 [ 434.674613][ T5131] udc-core: couldn't find an available UDC or it's busy [ 434.688067][ T5131] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 434.696798][ T1254] usb 4-1: config 0 descriptor?? [ 434.722609][ T2132] usb 1-1: USB disconnect, device number 42 [ 434.728642][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 434.742330][ T2132] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 434.784406][ T2131] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.795579][ T2131] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 434.809448][ T2131] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 434.819372][ T2131] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.838416][ T2131] usb 2-1: config 0 descriptor?? [ 435.198277][ T5152] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 435.282710][ T5152] input: syz0 as /devices/virtual/input/input64 [ 435.447235][ T5155] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 435.512242][ T5155] input: syz0 as /devices/virtual/input/input65 [ 435.736896][ T2132] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 435.861169][ T1254] usbhid 4-1:0.0: can't add hid device: -71 [ 435.867367][ T1254] usbhid: probe of 4-1:0.0 failed with error -71 [ 435.869540][ T5178] xt_CT: No such helper "snmp_trap" [ 435.891811][ T1254] usb 4-1: USB disconnect, device number 42 [ 435.965571][ T2132] usb 3-1: Using ep0 maxpacket: 16 [ 436.061323][ T2131] usbhid 2-1:0.0: can't add hid device: -71 [ 436.067400][ T2131] usbhid: probe of 2-1:0.0 failed with error -71 [ 436.077363][ T2131] usb 2-1: USB disconnect, device number 37 [ 436.083863][ T2132] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.114682][ T2132] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 436.157358][ T2132] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 436.167875][ T2132] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.206559][ T2132] usb 3-1: config 0 descriptor?? [ 436.487582][ T5182] EXT4-fs (loop3): orphan cleanup on readonly fs [ 436.509448][ T5182] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1213: bg 0: block 248: padding at end of block bitmap is not set [ 436.554730][ T5182] Quota error (device loop3): write_blk: dquota write failed [ 436.573047][ T5182] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 436.602137][ T5182] EXT4-fs error (device loop3): ext4_acquire_dquot:6219: comm syz.3.1213: Failed to acquire dquot type 1 [ 436.615985][ T5182] EXT4-fs (loop3): 1 truncate cleaned up [ 436.640881][ T5182] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,noload,,errors=continue [ 436.738090][ T5170] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 436.843076][ T5170] input: syz0 as /devices/virtual/input/input66 [ 436.955244][ T5196] incfs_lookup_dentry err:-14 [ 436.967828][ T5196] incfs: Can't find or create .incomplete dir in ./file0 [ 436.977068][ T24] audit: type=1400 audit(1723251289.093:1004): avc: denied { remove_name } for pid=5194 comm="syz.1.1217" name=".index" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 437.001634][ T5196] incfs: mount failed -14 [ 437.006959][ T24] audit: type=1400 audit(1723251289.093:1005): avc: denied { rmdir } for pid=5194 comm="syz.1.1217" name=".index" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 437.092708][ T5199] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1218'. [ 437.137177][ T1254] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 437.181734][ T5201] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 437.191737][ T5201] ext4 filesystem being mounted at /99/wÅü5ÔTÕÔ)­`)YFæ¾nA­½@T<Ÿ3»Ú‚$¢ó×rçcnH³<¿pƒrèñ¹“>ÅwC¾" žð-ùËòöè€Ó8 supports timestamps until 2038 (0x7fffffff) [ 437.226791][ T5201] EXT4-fs error (device loop1) in ext4_do_update_inode:5275: error 27 [ 437.241899][ T5201] EXT4-fs error (device loop1): ext4_dirty_inode:6079: inode #2: comm syz.1.1219: mark_inode_dirty error [ 437.255015][ T5201] EXT4-fs error (device loop1) in ext4_do_update_inode:5275: error 27 [ 437.264558][ T5201] EXT4-fs error (device loop1): __ext4_ext_dirty:182: inode #2: comm syz.1.1219: mark_inode_dirty error [ 437.394780][ T2132] usbhid 3-1:0.0: can't add hid device: -71 [ 437.406458][ T2132] usbhid: probe of 3-1:0.0 failed with error -71 [ 437.432086][ T2132] usb 3-1: USB disconnect, device number 45 [ 437.489815][ T1254] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 437.502101][ T1254] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 437.512241][ T1254] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 437.521660][ T1254] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.532851][ T1254] usb 4-1: config 0 descriptor?? [ 437.547036][ T760] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 437.651793][ T888] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 437.785212][ T760] usb 2-1: Using ep0 maxpacket: 16 [ 438.023178][ T888] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 438.035750][ T888] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 438.048080][ T888] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 438.054048][ T5193] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1216'. [ 438.058082][ T888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.219321][ T760] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 438.235153][ T760] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.244488][ T760] usb 2-1: Product: syz [ 438.248750][ T760] usb 2-1: Manufacturer: syz [ 438.254458][ T760] usb 2-1: SerialNumber: syz [ 438.261163][ T760] usb 2-1: config 0 descriptor?? [ 438.266425][ T5209] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 438.404029][ T289] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 438.490410][ T888] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 438.500480][ T888] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input67 [ 438.660375][ T888] usb 1-1: USB disconnect, device number 43 [ 438.666589][ C1] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 438.680542][ T760] r8152 2-1:0.0: Unknown version 0x0000 [ 438.702321][ T760] usb 2-1: USB disconnect, device number 38 [ 439.268190][ T289] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.289913][ T289] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.320651][ T289] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 439.330684][ T289] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.340971][ T289] usb 3-1: config 0 descriptor?? [ 439.633806][ T2132] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 439.823508][ T1254] usbhid 4-1:0.0: can't add hid device: -71 [ 439.830164][ T1254] usbhid: probe of 4-1:0.0 failed with error -71 [ 439.850338][ T1254] usb 4-1: USB disconnect, device number 43 [ 439.957378][ T52] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 439.978525][ T5223] udc-core: couldn't find an available UDC or it's busy [ 439.986305][ T2132] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 440.000178][ T5223] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 440.009590][ T2132] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 440.021926][ T2132] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.024012][ T289] usb 3-1: string descriptor 0 read error: -22 [ 440.038695][ T2132] usb 2-1: config 0 descriptor?? [ 440.082193][ T2132] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 440.285389][ T289] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0042/input/input68 [ 440.302223][ T289] uclogic 0003:256C:006D.0042: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 440.385475][ T52] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.403483][ T52] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.416599][ T52] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 440.426319][ T52] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.436644][ T52] usb 5-1: config 0 descriptor?? [ 440.479439][ T289] usb 3-1: USB disconnect, device number 46 [ 441.083895][ T5241] udc-core: couldn't find an available UDC or it's busy [ 441.093192][ T5241] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 441.119027][ T52] usb 5-1: string descriptor 0 read error: -22 [ 441.380147][ T52] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0043/input/input69 [ 441.418277][ T52] uclogic 0003:256C:006D.0043: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 441.458660][ T24] audit: type=1326 audit(1723251293.796:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5259 comm="syz.0.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee6b4ca9f9 code=0x7ffc0000 [ 441.545204][ T24] audit: type=1326 audit(1723251293.817:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5259 comm="syz.0.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee6b4ca9f9 code=0x7ffc0000 [ 441.618423][ T2132] usb 5-1: USB disconnect, device number 47 [ 441.657828][ T24] audit: type=1326 audit(1723251293.848:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5259 comm="syz.0.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7fee6b4ca9f9 code=0x7ffc0000 [ 441.700645][ T24] audit: type=1326 audit(1723251549.850:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5259 comm="syz.0.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee6b4ca9f9 code=0x7ffc0000 [ 442.250465][ T888] usb 2-1: USB disconnect, device number 39 [ 442.286737][ T5273] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 442.296833][ T5273] ext4 filesystem being mounted at /17/wÅü5ÔTÕÔ)­`)YFæ¾nA­½@T<Ÿ3»Ú‚$¢ó×rçcnH³<¿pƒrèñ¹“>ÅwC¾" žð-ùËòöè€Ó8 supports timestamps until 2038 (0x7fffffff) [ 442.323709][ T5273] EXT4-fs error (device loop4) in ext4_do_update_inode:5275: error 27 [ 442.335256][ T5273] EXT4-fs error (device loop4): ext4_dirty_inode:6079: inode #2: comm syz.4.1238: mark_inode_dirty error [ 442.351679][ T5273] EXT4-fs error (device loop4) in ext4_do_update_inode:5275: error 27 [ 442.362557][ T5273] EXT4-fs error (device loop4): __ext4_ext_dirty:182: inode #2: comm syz.4.1238: mark_inode_dirty error [ 442.462335][ T52] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 442.633821][ T1254] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 442.729034][ T5285] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 443.119675][ T52] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 443.131127][ T1254] usb 5-1: Using ep0 maxpacket: 16 [ 443.626567][ T5294] xt_bpf: check failed: parse error [ 443.858549][ T52] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 443.870081][ T52] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 443.880118][ T52] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.901063][ T5275] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 443.910479][ T888] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 444.032699][ T24] audit: type=1400 audit(1723251552.496:1010): avc: denied { setopt } for pid=5295 comm="syz.2.1243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 444.120009][ T1254] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 444.132300][ T1254] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.140973][ T1254] usb 5-1: Product: syz [ 444.145282][ T1254] usb 5-1: Manufacturer: syz [ 444.157877][ T52] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 444.167662][ T1254] usb 5-1: SerialNumber: syz [ 444.173283][ T52] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input70 [ 444.184609][ T1254] usb 5-1: config 0 descriptor?? [ 444.194158][ T52] usb 4-1: USB disconnect, device number 44 [ 444.254133][ T110] Bluetooth: hci0: Frame reassembly failed (-84) [ 444.310474][ T888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.321452][ T888] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 444.331340][ T888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.341290][ T888] usb 2-1: config 0 descriptor?? [ 444.567826][ T1254] r8152 5-1:0.0: Unknown version 0x0000 [ 444.576952][ T1254] usb 5-1: USB disconnect, device number 48 [ 445.174765][ T5311] 9pnet: Insufficient options for proto=fd [ 445.510279][ T1254] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 445.554231][ T5316] EXT4-fs (loop3): orphan cleanup on readonly fs [ 445.561527][ T5316] EXT4-fs warning (device loop3): ext4_enable_quotas:6467: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 445.576897][ T5316] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 445.584607][ T5316] EXT4-fs (loop3): 1 truncate cleaned up [ 445.590870][ T5316] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,noload,,errors=continue [ 445.901170][ T1254] usb 5-1: config 0 has an invalid interface number: 204 but max is 1 [ 445.909403][ T1254] usb 5-1: config 0 has no interface number 1 [ 446.196312][ T289] Bluetooth: hci0: command 0x1003 tx timeout [ 446.204549][ T2341] Bluetooth: hci0: sending frame failed (-49) [ 446.748681][ T1254] usb 5-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf [ 446.758429][ T1254] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.766911][ T1254] usb 5-1: Product: syz [ 446.771584][ T1254] usb 5-1: Manufacturer: syz [ 446.776089][ T1254] usb 5-1: SerialNumber: syz [ 446.791746][ T1254] usb 5-1: config 0 descriptor?? [ 446.843008][ T1254] snd-usb-audio: probe of 5-1:0.204 failed with error -22 [ 447.037852][ T1254] usb 5-1: USB disconnect, device number 49 [ 447.129525][ T888] usbhid 2-1:0.0: can't add hid device: -71 [ 447.136454][ T888] usbhid: probe of 2-1:0.0 failed with error -71 [ 447.147970][ T888] usb 2-1: USB disconnect, device number 40 [ 447.312536][ T5335] EXT4-fs (loop3): Unrecognized mount option "appraise_type=imasig" or missing value [ 447.825138][ T888] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 447.939221][ T2131] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 448.053730][ T888] usb 5-1: Using ep0 maxpacket: 16 [ 448.168123][ T289] Bluetooth: hci0: command 0x1001 tx timeout [ 448.174345][ T2341] Bluetooth: hci0: sending frame failed (-49) [ 448.197124][ T888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 448.209337][ T888] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 448.223259][ T888] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 448.233037][ T888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.243301][ T888] usb 5-1: config 0 descriptor?? [ 448.282732][ T2131] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 448.294394][ T2131] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 448.306759][ T2131] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 448.316139][ T2131] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.339931][ T5343] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 448.435110][ T289] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 448.568421][ T2131] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 448.578935][ T2131] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input71 [ 448.600958][ T2131] usb 2-1: USB disconnect, device number 41 [ 448.608812][ C0] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 448.787309][ T289] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 448.803146][ T289] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.814528][ T289] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 448.824499][ T289] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.834587][ T289] usb 4-1: config 0 descriptor?? [ 449.131893][ T5348] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 449.146582][ T5348] EXT4-fs (loop1): 1 truncate cleaned up [ 449.153312][ T888] usbhid 5-1:0.0: can't add hid device: -71 [ 449.153625][ T5348] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 449.159894][ T888] usbhid: probe of 5-1:0.0 failed with error -71 [ 449.187634][ T888] usb 5-1: USB disconnect, device number 50 [ 449.206898][ T5348] FAULT_INJECTION: forcing a failure. [ 449.206898][ T5348] name failslab, interval 1, probability 0, space 0, times 0 [ 449.225447][ T5348] CPU: 0 PID: 5348 Comm: syz.1.1257 Not tainted 5.10.222-syzkaller-01494-gfd58936f3c1f #0 [ 449.243506][ T5348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 449.258971][ T5348] Call Trace: [ 449.263727][ T5348] dump_stack_lvl+0x1e2/0x24b [ 449.272264][ T5348] ? panic+0x812/0x812 [ 449.277720][ T5348] ? bfq_pos_tree_add_move+0x43b/0x43b [ 449.283106][ T5348] ? vfs_write+0x852/0xe70 [ 449.288521][ T5348] ? kmem_cache_free+0x1c0/0x1e0 [ 449.293266][ T5348] dump_stack+0x15/0x17 [ 449.297369][ T5348] should_fail+0x3c6/0x510 [ 449.301980][ T5348] ? getname_flags+0xba/0x520 [ 449.307381][ T5348] __should_failslab+0xa4/0xe0 [ 449.311986][ T5348] should_failslab+0x9/0x20 [ 449.317030][ T5348] kmem_cache_alloc+0x3d/0x2e0 [ 449.321718][ T5348] getname_flags+0xba/0x520 [ 449.326290][ T5348] user_path_at_empty+0x2d/0x50 [ 449.331091][ T5348] __x64_sys_listxattr+0x108/0x230 [ 449.336229][ T5348] ? __ia32_sys_read+0x90/0x90 [ 449.340923][ T5348] ? __ia32_sys_fgetxattr+0x1e0/0x1e0 [ 449.346121][ T5348] ? debug_smp_processor_id+0x17/0x20 [ 449.351338][ T5348] do_syscall_64+0x34/0x70 [ 449.356488][ T5348] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 449.362861][ T5348] RIP: 0033:0x7ff08e8429f9 [ 449.367289][ T5348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 449.387735][ T5348] RSP: 002b:00007ff08d4c2038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c2 [ 449.396200][ T5348] RAX: ffffffffffffffda RBX: 00007ff08e9d0f80 RCX: 00007ff08e8429f9 [ 449.404113][ T5348] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 449.412098][ T5348] RBP: 00007ff08d4c2090 R08: 0000000000000000 R09: 0000000000000000 [ 449.420546][ T5348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.428521][ T5348] R13: 0000000000000000 R14: 00007ff08e9d0f80 R15: 00007ffe9a3d4008 [ 449.459201][ T289] hid-steam 0003:28DE:1142.0044: unknown main item tag 0x0 [ 449.466450][ T289] hid-steam 0003:28DE:1142.0044: unknown main item tag 0x0 [ 449.474471][ T289] hid-steam 0003:28DE:1142.0044: unknown main item tag 0x4 [ 449.482864][ T289] hid-steam 0003:28DE:1142.0044: : USB HID v0.40 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 449.498380][ T289] hid-steam 0003:28DE:1142.0045: unknown main item tag 0x0 [ 449.506888][ T289] hid-steam 0003:28DE:1142.0045: unknown main item tag 0x0 [ 449.523211][ T289] hid-steam 0003:28DE:1142.0045: unknown main item tag 0x4 [ 449.534993][ T289] hid-steam 0003:28DE:1142.0045: hidraw0: USB HID v0.40 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 449.607961][ T5354] EXT4-fs (loop1): Unrecognized mount option "smackfsroot=-@*%" or missing value [ 449.774503][ T289] hid-steam 0003:28DE:1142.0044: Steam wireless receiver connected [ 449.792532][ T289] usb 4-1: USB disconnect, device number 45 [ 449.803331][ T289] hid-steam 0003:28DE:1142.0044: Steam wireless receiver disconnected [ 450.053685][ T5359] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1258'. [ 450.253094][ T760] Bluetooth: hci0: command 0x1009 tx timeout [ 450.910294][ T5364] xt_bpf: check failed: parse error [ 451.603029][ T5376] EXT4-fs (loop4): error: could not find journal device path: error -2 [ 451.626008][ T2132] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 451.731693][ T5376] EXT4-fs error (device loop4): ext4_fill_super:4955: inode #2: comm syz.4.1265: casefold flag without casefold feature [ 451.756102][ T5376] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 451.769214][ T5376] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 451.769214][ T5376] [ 451.781064][ T5376] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 452.006912][ T2132] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.018042][ T2132] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 452.252432][ T5385] xt_hashlimit: max too large, truncated to 1048576 [ 452.450121][ T5380] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 452.462856][ T5380] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 452.500067][ T5380] F2FS-fs (loop3): Found nat_bits in checkpoint [ 452.604262][ T5380] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 452.612702][ T5380] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 452.673617][ T5380] attempt to access beyond end of device [ 452.673617][ T5380] loop3: rw=2049, want=45104, limit=40427 [ 452.721795][ T2132] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.737036][ T2132] usb 2-1: config 0 descriptor?? [ 453.012294][ T4423] attempt to access beyond end of device [ 453.012294][ T4423] loop3: rw=2051, want=45104, limit=40427 [ 453.026670][ T4423] F2FS-fs (loop3): Issue discard(5637, 5637, 1) failed, ret: -5 [ 453.761164][ T5401] 9pnet: Insufficient options for proto=fd [ 453.787039][ T5395] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.804703][ T5395] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.817370][ T5395] device bridge_slave_0 entered promiscuous mode [ 453.841364][ T5395] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.851689][ T5395] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.860700][ T5395] device bridge_slave_1 entered promiscuous mode [ 454.354743][ T5408] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 455.071790][ T2132] usbhid 2-1:0.0: can't add hid device: -71 [ 455.078306][ T2132] usbhid: probe of 2-1:0.0 failed with error -71 [ 455.115728][ T2132] usb 2-1: USB disconnect, device number 42 [ 455.193832][ T9] device bridge_slave_1 left promiscuous mode [ 455.200522][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.209544][ T9] device bridge_slave_0 left promiscuous mode [ 455.215751][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.225482][ T9] device veth1_macvtap left promiscuous mode [ 455.232001][ T9] device veth0_vlan left promiscuous mode [ 455.312257][ T1254] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 455.388572][ T2131] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 455.401568][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 455.409631][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 455.443750][ T888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 455.452729][ T888] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 455.461590][ T888] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.468990][ T888] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.495212][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 455.503606][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 455.513001][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 455.521579][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.521997][ T2132] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 455.528703][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 455.540986][ T1254] usb 5-1: Using ep0 maxpacket: 16 [ 455.561747][ T5407] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.571173][ T5407] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.580485][ T5407] device bridge_slave_0 entered promiscuous mode [ 455.591423][ T5407] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.600240][ T5407] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.609765][ T5407] device bridge_slave_1 entered promiscuous mode [ 455.674652][ T1254] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.685579][ T1254] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 455.693924][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 455.702989][ T1254] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 455.705920][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 455.717511][ T1254] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 455.734540][ T2131] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 455.760166][ T2131] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 455.769015][ T1254] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.777227][ T2131] usb 4-1: config 1 interface 0 has no altsetting 0 [ 455.784934][ T760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 455.786393][ T1254] usb 5-1: config 0 descriptor?? [ 455.794701][ T760] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 455.840462][ T888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 455.850900][ T888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 455.873855][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 455.882308][ T2132] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.896179][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 455.905011][ T2132] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 455.917441][ T2132] usb 2-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 455.920647][ T5395] device veth0_vlan entered promiscuous mode [ 455.927158][ T2132] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.941380][ T2131] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 455.950317][ T2131] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.955900][ T5395] device veth1_macvtap entered promiscuous mode [ 455.967028][ T2132] usb 2-1: config 0 descriptor?? [ 455.972884][ T2131] usb 4-1: Product: syz [ 455.976956][ T2131] usb 4-1: Manufacturer: syz [ 455.981880][ T2131] usb 4-1: SerialNumber: syz [ 455.991158][ T2134] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 455.999516][ T2134] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 456.010955][ T2134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 456.020382][ T2134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 456.031953][ T2134] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 456.069446][ T760] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 456.080326][ T760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 456.107238][ T888] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 456.117081][ T888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 456.230971][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 456.238025][ T5412] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1268'. [ 456.257239][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 456.327944][ T1254] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0046/input/input72 [ 456.345666][ T2134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 456.356517][ T2134] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 456.366572][ T2134] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.373621][ T2134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 456.383528][ T2134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 456.394466][ T2134] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 456.408960][ T1254] microsoft 0003:045E:07DA.0046: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 456.427750][ T2132] dragonrise 0003:0079:0006.0047: item fetching failed at offset 2/5 [ 456.437141][ T2134] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.444287][ T2134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 456.452051][ T2132] dragonrise 0003:0079:0006.0047: parse failed [ 456.478554][ T2132] dragonrise: probe of 0003:0079:0006.0047 failed with error -22 [ 456.487250][ T2134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 456.503750][ T2134] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 456.527819][ T2132] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 456.541215][ T888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 456.549188][ T20] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 456.569817][ T888] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 456.658552][ T5415] fuse: Bad value for 'fd' [ 456.679923][ T2132] usb 2-1: USB disconnect, device number 43 [ 456.695513][ T888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 456.715463][ T888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 456.760671][ T2131] cdc_mbim: probe of 4-1:1.0 failed with error -71 [ 456.781858][ T5407] device veth0_vlan entered promiscuous mode [ 456.801016][ T2131] usb 4-1: USB disconnect, device number 46 [ 456.840046][ T1254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 456.856036][ T2134] usb 5-1: USB disconnect, device number 51 [ 456.866167][ T1254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 456.877523][ T1254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 456.894114][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 456.903373][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 456.950685][ T20] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 456.967419][ T5407] device veth1_macvtap entered promiscuous mode [ 456.984307][ T20] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 456.998480][ T20] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 457.009438][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.050280][ T9] device bridge_slave_1 left promiscuous mode [ 457.057199][ T5424] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 457.065801][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.076750][ T9] device bridge_slave_0 left promiscuous mode [ 457.082914][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.104951][ T9] device veth1_macvtap left promiscuous mode [ 457.111458][ T9] device veth0_vlan left promiscuous mode [ 457.656071][ T20] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 457.992037][ T20] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input73 [ 458.005844][ T20] usb 1-1: USB disconnect, device number 44 [ 458.029549][ T5427] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 458.070533][ T5427] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 458.132028][ T5427] F2FS-fs (loop3): Found nat_bits in checkpoint [ 458.249328][ T5427] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 458.256402][ T5427] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 458.354170][ T5432] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1275'. [ 458.364329][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 458.374013][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 458.404005][ T5445] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1278'. [ 458.432566][ T760] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 458.443711][ T760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 458.697994][ T5449] xt_bpf: check failed: parse error [ 459.000774][ T20] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 459.122357][ T760] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 459.165746][ T5452] F2FS-fs (loop1): Found nat_bits in checkpoint [ 459.248638][ T5452] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 459.370646][ T2134] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 459.485233][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.501065][ T20] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 459.510780][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.530365][ T5463] xt_policy: neither incoming nor outgoing policy selected [ 459.627623][ T760] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.658179][ T20] usb 3-1: config 0 descriptor?? [ 459.670908][ T760] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.684847][ T760] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 459.840243][ T760] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.853803][ T760] usb 4-1: config 0 descriptor?? [ 460.322813][ T2134] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 460.333184][ T2134] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 460.352240][ T5454] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1279'. [ 460.361514][ T2134] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 460.361588][ T2134] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.372246][ T2134] usb 1-1: config 0 descriptor?? [ 460.409800][ T760] hid (null): unknown global tag 0xd [ 460.418510][ T760] lg-g15 0003:046D:C222.0048: unknown global tag 0xd [ 460.425225][ T760] lg-g15 0003:046D:C222.0048: item 0 1 1 13 parsing failed [ 460.433211][ T760] lg-g15: probe of 0003:046D:C222.0048 failed with error -22 [ 460.441847][ T2134] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 460.542254][ T2140] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 460.597039][ T5470] 9pnet: Insufficient options for proto=fd [ 460.605578][ T888] usb 4-1: USB disconnect, device number 47 [ 461.208260][ T2140] usb 2-1: Using ep0 maxpacket: 8 [ 461.259572][ T760] usb 1-1: USB disconnect, device number 45 [ 461.360957][ T2140] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 461.371511][ T2140] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.399262][ T2140] usb 2-1: config 0 descriptor?? [ 461.648526][ T20] usbhid 3-1:0.0: can't add hid device: -71 [ 461.656073][ T20] usbhid: probe of 3-1:0.0 failed with error -71 [ 461.919692][ T20] usb 3-1: USB disconnect, device number 47 [ 462.571209][ T2140] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 462.582205][ T2140] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHYID register: ffffffe0 [ 462.675455][ T888] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 462.780561][ T20] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 462.904111][ T888] usb 4-1: Using ep0 maxpacket: 16 [ 463.018374][ T888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.029899][ T888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 463.039897][ T888] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 463.052849][ T888] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 463.061834][ T888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.072094][ T888] usb 4-1: config 0 descriptor?? [ 463.142697][ T20] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 463.154352][ T20] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 463.165704][ T20] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 463.174826][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.199353][ T5494] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 463.427912][ T20] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 463.437664][ T20] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input74 [ 463.453082][ T20] usb 3-1: USB disconnect, device number 48 [ 463.535411][ T888] koneplus 0003:1E7D:2E22.0049: unknown main item tag 0x0 [ 463.546036][ T888] koneplus 0003:1E7D:2E22.0049: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.3-1/input0 [ 463.812194][ T5506] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1292'. [ 463.937624][ T52] usb 4-1: USB disconnect, device number 48 [ 464.856704][ T2140] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 464.886633][ T2140] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 464.914231][ T2140] asix: probe of 2-1:0.0 failed with error -71 [ 464.951185][ T2140] usb 2-1: USB disconnect, device number 44 [ 465.116804][ T5521] xt_bpf: check failed: parse error [ 465.205720][ T5519] EXT4-fs (loop1): orphan cleanup on readonly fs [ 465.229517][ T5519] EXT4-fs error (device loop1): ext4_find_extent:928: inode #4: comm syz.1.1296: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 465.267250][ T5519] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=-117 [ 465.286597][ T5519] EXT4-fs warning (device loop1): ext4_enable_quotas:6467: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 465.311396][ T5519] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 465.331330][ T5519] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 465.409508][ T52] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 465.828713][ T52] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.847016][ T52] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 465.857480][ T52] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.887501][ T52] usb 3-1: config 0 descriptor?? [ 466.061491][ T5529] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 466.071203][ T5529] ext4 filesystem being mounted at /56/wÅü5ÔTÕÔ)­`)YFæ¾nA­½@T<Ÿ3»Ú‚$¢ó×rçcnH³<¿pƒrèñ¹“>ÅwC¾" žð-ùËòöè€Ó8 supports timestamps until 2038 (0x7fffffff) [ 466.100782][ T5529] EXT4-fs error (device loop3) in ext4_do_update_inode:5275: error 27 [ 466.124094][ T5529] EXT4-fs error (device loop3): ext4_dirty_inode:6079: inode #2: comm syz.3.1299: mark_inode_dirty error [ 466.148917][ T5529] EXT4-fs error (device loop3) in ext4_do_update_inode:5275: error 27 [ 466.165140][ T5529] EXT4-fs error (device loop3): __ext4_ext_dirty:182: inode #2: comm syz.3.1299: mark_inode_dirty error [ 466.391312][ T5534] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 466.400710][ T5534] ext4 filesystem being mounted at /113/bus supports timestamps until 2038 (0x7fffffff) [ 466.485932][ T20] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 466.654908][ T24] audit: type=1326 audit(1723251576.242:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5515 comm="syz.0.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe44c1d49f9 code=0x7ffc0000 [ 466.683554][ T5544] 9pnet: Insufficient options for proto=fd [ 466.691930][ T24] audit: type=1326 audit(1723251576.242:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5515 comm="syz.0.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe44c1d49f9 code=0x7ffc0000 [ 466.723978][ T20] usb 4-1: Using ep0 maxpacket: 16 [ 466.728273][ T24] audit: type=1326 audit(1723251576.242:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5515 comm="syz.0.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe44c1d49f9 code=0x7ffc0000 [ 466.753555][ T24] audit: type=1326 audit(1723251576.242:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5515 comm="syz.0.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe44c1d49f9 code=0x7ffc0000 [ 466.777770][ T24] audit: type=1326 audit(1723251576.242:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5515 comm="syz.0.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe44c1d49f9 code=0x7ffc0000 [ 466.804005][ T24] audit: type=1326 audit(1723251576.242:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5515 comm="syz.0.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe44c1d49f9 code=0x7ffc0000 [ 466.829532][ T24] audit: type=1326 audit(1723251576.242:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5515 comm="syz.0.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe44c1d49f9 code=0x7ffc0000 [ 466.853670][ T24] audit: type=1326 audit(1723251576.242:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5515 comm="syz.0.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe44c1d49f9 code=0x7ffc0000 [ 466.881799][ T24] audit: type=1326 audit(1723251576.242:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5515 comm="syz.0.1295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7fe44c1d49f9 code=0x7ffc0000 [ 467.038122][ T20] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 467.047182][ T20] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.055154][ T20] usb 4-1: Product: syz [ 467.059626][ T20] usb 4-1: Manufacturer: syz [ 467.063981][ T20] usb 4-1: SerialNumber: syz [ 467.066558][ T2131] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 467.070821][ T20] usb 4-1: config 0 descriptor?? [ 467.133321][ T760] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 467.314272][ T2131] usb 1-1: Using ep0 maxpacket: 16 [ 467.447792][ T2131] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 467.459424][ T2131] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 467.473353][ T2131] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 467.494044][ T2131] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.496302][ T20] r8152 4-1:0.0: Unknown version 0x0000 [ 467.506386][ T2131] usb 1-1: config 0 descriptor?? [ 467.519523][ T20] usb 4-1: USB disconnect, device number 49 [ 467.628913][ T760] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 467.639353][ T760] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 467.648434][ T760] usb 2-1: config 1 interface 0 has no altsetting 0 [ 467.800571][ T760] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 467.809684][ T760] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.832056][ T760] usb 2-1: Product: syz [ 467.836381][ T760] usb 2-1: Manufacturer: syz [ 467.841439][ T760] usb 2-1: SerialNumber: syz [ 468.084060][ T5553] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.120215][ T5548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1303'. [ 468.129270][ T5553] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.137412][ T52] usbhid 3-1:0.0: can't add hid device: -71 [ 468.144780][ T52] usbhid: probe of 3-1:0.0 failed with error -71 [ 468.151061][ T5553] device bridge_slave_0 entered promiscuous mode [ 468.154398][ T5553] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.165351][ T5553] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.174037][ T5553] device bridge_slave_1 entered promiscuous mode [ 468.178709][ T52] usb 3-1: USB disconnect, device number 49 [ 468.454605][ T5563] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 468.763942][ T760] cdc_mbim: probe of 2-1:1.0 failed with error -71 [ 469.223497][ T2131] usbhid 1-1:0.0: can't add hid device: -71 [ 469.268986][ T2131] usbhid: probe of 1-1:0.0 failed with error -71 [ 469.334267][ T2131] usb 1-1: USB disconnect, device number 46 [ 469.359486][ T760] usb 2-1: USB disconnect, device number 45 [ 469.552720][ T2132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 469.614075][ T2132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 469.669538][ T5574] syz.2.1308[5574] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 469.753747][ T5574] syz.2.1308[5574] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 470.515271][ T2132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 470.564969][ T2132] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 470.574843][ T2132] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.581860][ T2132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.591297][ T2132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 470.609098][ T2132] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 470.618891][ T2132] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.626045][ T2132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.764880][ T2594] device bridge_slave_1 left promiscuous mode [ 470.773412][ T2594] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.838163][ T2594] device bridge_slave_0 left promiscuous mode [ 470.839166][ T760] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 470.845020][ T2594] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.864073][ T2594] device veth1_macvtap left promiscuous mode [ 470.870891][ T2594] device veth0_vlan left promiscuous mode [ 471.086576][ T760] usb 3-1: Using ep0 maxpacket: 32 [ 471.202374][ T760] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.267973][ T760] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 471.924962][ T760] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 471.948014][ T760] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 471.973548][ T760] usb 3-1: Product: syz [ 471.977756][ T760] usb 3-1: Manufacturer: syz [ 472.050616][ T760] hub 3-1:4.0: USB hub found [ 472.145853][ T5594] xt_bpf: check failed: parse error [ 472.198412][ T2132] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 472.333171][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 472.341728][ T760] hub 3-1:4.0: 2 ports detected [ 472.348828][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 472.368919][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 472.387892][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 472.448963][ T2131] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 472.471375][ T2140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 472.481742][ T2140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 472.505463][ T2140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 472.516374][ T2140] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 472.528673][ T5553] device veth0_vlan entered promiscuous mode [ 472.537611][ T1254] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 472.548070][ T1254] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 472.572383][ T1254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 472.583438][ T1254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 472.597584][ T5553] device veth1_macvtap entered promiscuous mode [ 472.618450][ T1254] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 472.627663][ T1254] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 472.637627][ T1254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 472.662386][ T2140] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 472.672326][ T2140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 472.696475][ T888] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 472.840274][ T2131] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.851397][ T2131] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 472.861464][ T2131] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.878757][ T2131] usb 4-1: config 0 descriptor?? [ 472.934349][ T888] usb 1-1: Using ep0 maxpacket: 16 [ 473.007567][ T5607] x_tables: ip6_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 473.048948][ T888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.060454][ T888] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 473.073635][ T888] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 473.077681][ T2140] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 473.083473][ T888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.101122][ T888] usb 1-1: config 0 descriptor?? [ 473.344074][ T2140] usb 5-1: Using ep0 maxpacket: 16 [ 473.353776][ T52] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 473.459227][ T2140] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.471253][ T2140] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 473.484182][ T2140] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 473.493183][ T2140] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.502956][ T2140] usb 5-1: config 0 descriptor?? [ 473.663816][ T5611] 9pnet: Insufficient options for proto=fd [ 473.715429][ T760] hub 3-1:4.0: hub_hub_status failed (err = -110) [ 473.721826][ T760] hub 3-1:4.0: config failed, can't get hub status (err -110) [ 473.734604][ T52] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 473.747182][ T52] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 473.756176][ T52] usb 2-1: config 1 interface 0 has no altsetting 0 [ 473.925570][ T52] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 473.935358][ T52] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.943334][ T52] usb 2-1: Product: syz [ 473.947541][ T52] usb 2-1: Manufacturer: syz [ 473.952057][ T52] usb 2-1: SerialNumber: syz [ 474.001443][ T888] usbhid 1-1:0.0: can't add hid device: -71 [ 474.012226][ T5605] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 474.022414][ T888] usbhid: probe of 1-1:0.0 failed with error -71 [ 474.040928][ T5605] input: syz0 as /devices/virtual/input/input75 [ 474.076379][ T888] usb 1-1: USB disconnect, device number 47 [ 474.192575][ T5609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1319'. [ 474.373843][ T1254] usb 3-1: reset high-speed USB device number 50 using dummy_hcd [ 474.582689][ T2140] usbhid 5-1:0.0: can't add hid device: -71 [ 474.589202][ T2140] usbhid: probe of 5-1:0.0 failed with error -71 [ 474.599391][ T2140] usb 5-1: USB disconnect, device number 52 [ 474.658870][ T1254] usb 3-1: device firmware changed [ 474.664600][ T1254] usb 3-1: USB disconnect, device number 50 [ 474.697936][ T52] cdc_mbim: probe of 2-1:1.0 failed with error -71 [ 474.708069][ T52] usb 2-1: USB disconnect, device number 46 [ 474.811290][ T2134] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 475.030818][ T1254] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 475.230932][ T5631] SELinux: policydb version 1055585079 does not match my version range 15-33 [ 475.241450][ T5631] SELinux: failed to load policy [ 475.670347][ T2131] usbhid 4-1:0.0: can't add hid device: -71 [ 475.676568][ T2131] usbhid: probe of 4-1:0.0 failed with error -71 [ 475.708614][ T2131] usb 4-1: USB disconnect, device number 50 [ 477.012158][ T1254] usb 3-1: Using ep0 maxpacket: 32 [ 477.062364][ T2134] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 477.082140][ T2134] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 477.092942][ T1254] usb 3-1: device descriptor read/all, error -71 [ 477.103184][ T2134] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 477.130904][ T2134] usb 1-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 477.140110][ T2134] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.150294][ T2134] usb 1-1: config 0 descriptor?? [ 477.339748][ T5646] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 477.349589][ T5646] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038 (0x7fffffff) [ 477.687685][ T52] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 477.697300][ T2134] usbhid 1-1:0.0: can't add hid device: -71 [ 477.703947][ T2134] usbhid: probe of 1-1:0.0 failed with error -71 [ 477.743529][ T2134] usb 1-1: USB disconnect, device number 48 [ 477.954269][ T52] usb 5-1: Using ep0 maxpacket: 16 [ 478.097604][ T52] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.136368][ T52] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 478.182885][ T52] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 478.197097][ T52] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.217435][ T52] usb 5-1: config 0 descriptor?? [ 480.412696][ T52] usbhid 5-1:0.0: can't add hid device: -71 [ 480.422005][ T52] usbhid: probe of 5-1:0.0 failed with error -71 [ 480.446910][ T52] usb 5-1: USB disconnect, device number 53 [ 480.607285][ T24] kauditd_printk_skb: 20 callbacks suppressed [ 480.607327][ T24] audit: type=1400 audit(1723251590.897:1040): avc: denied { sys_module } for pid=5687 comm="syz.0.1340" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 481.576457][ T5702] FAULT_INJECTION: forcing a failure. [ 481.576457][ T5702] name failslab, interval 1, probability 0, space 0, times 0 [ 481.590154][ T5702] CPU: 1 PID: 5702 Comm: syz.0.1344 Not tainted 5.10.222-syzkaller-01494-gfd58936f3c1f #0 [ 481.600184][ T5702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 481.610099][ T5702] Call Trace: [ 481.613345][ T5702] dump_stack_lvl+0x1e2/0x24b [ 481.617987][ T5702] ? panic+0x812/0x812 [ 481.622105][ T5702] ? bfq_pos_tree_add_move+0x43b/0x43b [ 481.627469][ T5702] dump_stack+0x15/0x17 [ 481.631440][ T5702] should_fail+0x3c6/0x510 [ 481.635719][ T5702] ? pfkey_spdflush+0xc5/0x500 [ 481.640305][ T5702] __should_failslab+0xa4/0xe0 [ 481.645092][ T5702] should_failslab+0x9/0x20 [ 481.649419][ T5702] __kmalloc_track_caller+0x5f/0x320 [ 481.654641][ T5702] ? kmem_cache_alloc+0x168/0x2e0 [ 481.659464][ T5702] ? __alloc_skb+0x80/0x510 [ 481.663803][ T5702] ? pfkey_spdflush+0xc5/0x500 [ 481.668402][ T5702] __alloc_skb+0xbc/0x510 [ 481.672574][ T5702] pfkey_spdflush+0xc5/0x500 [ 481.677073][ T5702] ? kfree_skbmem+0x104/0x170 [ 481.681659][ T5702] ? pfkey_spddump+0x250/0x250 [ 481.686278][ T5702] ? kfree_skb+0xc1/0x320 [ 481.690492][ T5702] ? pfkey_broadcast+0x2dd/0x2f0 [ 481.695338][ T5702] pfkey_sendmsg+0xb65/0xfa0 [ 481.699762][ T5702] ? pfkey_release+0x340/0x340 [ 481.704357][ T5702] ? selinux_socket_sendmsg+0x243/0x340 [ 481.709764][ T5702] ? check_stack_object+0x114/0x130 [ 481.714772][ T5702] ? security_socket_sendmsg+0x82/0xb0 [ 481.720096][ T5702] ? pfkey_release+0x340/0x340 [ 481.724686][ T5702] ____sys_sendmsg+0x59e/0x8f0 [ 481.729307][ T5702] ? __sys_sendmsg_sock+0x40/0x40 [ 481.734273][ T5702] ? import_iovec+0xe5/0x120 [ 481.738763][ T5702] ___sys_sendmsg+0x252/0x2e0 [ 481.743374][ T5702] ? __sys_sendmsg+0x280/0x280 [ 481.748082][ T5702] ? rw_verify_area+0x1c3/0x360 [ 481.752751][ T5702] ? __fdget+0x1bc/0x240 [ 481.756831][ T5702] __se_sys_sendmsg+0x1b1/0x280 [ 481.761537][ T5702] ? __x64_sys_sendmsg+0x90/0x90 [ 481.766415][ T5702] ? ksys_write+0x260/0x2c0 [ 481.770744][ T5702] ? debug_smp_processor_id+0x17/0x20 [ 481.775948][ T5702] __x64_sys_sendmsg+0x7b/0x90 [ 481.780581][ T5702] do_syscall_64+0x34/0x70 [ 481.784934][ T5702] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 481.790728][ T5702] RIP: 0033:0x7fe44c1d49f9 [ 481.795089][ T5702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 481.814952][ T5702] RSP: 002b:00007fe44ae54038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 481.823386][ T5702] RAX: ffffffffffffffda RBX: 00007fe44c362f80 RCX: 00007fe44c1d49f9 [ 481.831195][ T5702] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000006 [ 481.839024][ T5702] RBP: 00007fe44ae54090 R08: 0000000000000000 R09: 0000000000000000 [ 481.846817][ T5702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 481.854704][ T5702] R13: 0000000000000000 R14: 00007fe44c362f80 R15: 00007ffe0ef247d8 [ 482.121062][ T5700] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 482.208254][ T5700] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 482.291683][ T5700] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,usrjquota=,errors=remount-ro,norecovery,mblk_io_submit,mblk_io_submit,i_version,barrier=0x0000000000000000,grpjquota=,bsddf, [ 484.185240][ T760] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 484.527870][ T760] usb 5-1: New USB device found, idVendor=0b57, idProduct=d863, bcdDevice=2e.bb [ 484.546527][ T760] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.604785][ T760] usb 5-1: config 0 descriptor?? [ 484.643390][ T760] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 484.985061][ T5715] udc-core: couldn't find an available UDC or it's busy [ 484.991983][ T5715] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 485.260894][ T760] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 485.364841][ T5747] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 485.404502][ T5747] EXT4-fs error (device loop3): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 485.420571][ T5747] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 485.440968][ T5747] EXT4-fs (loop3): This should not happen!! Data will be lost [ 485.440968][ T5747] [ 485.453098][ T5747] EXT4-fs (loop3): Total free blocks count 0 [ 485.459598][ T5747] EXT4-fs (loop3): Free/Dirty block details [ 485.466763][ T5747] EXT4-fs (loop3): free_blocks=2415919104 [ 485.474483][ T5747] EXT4-fs (loop3): dirty_blocks=16 [ 485.480455][ T5747] EXT4-fs (loop3): Block reservation details [ 485.486662][ T5747] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 485.641636][ T760] usb 2-1: Using ep0 maxpacket: 16 [ 485.794377][ T760] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.806103][ T760] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 485.819757][ T760] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 485.829552][ T760] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.840482][ T760] usb 2-1: config 0 descriptor?? [ 485.871170][ T5759] exfat: Unknown parameter 'íq{ž´§ìiû“' [ 485.945373][ T24] audit: type=1326 audit(1723251596.493:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5756 comm="syz.2.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa985ffc9f9 code=0x7ffc0000 [ 485.996879][ T24] audit: type=1326 audit(1723251596.493:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5756 comm="syz.2.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa985ffc9f9 code=0x7ffc0000 [ 486.021850][ T24] audit: type=1326 audit(1723251596.493:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5756 comm="syz.2.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7fa985ffc9f9 code=0x7ffc0000 [ 486.050140][ T24] audit: type=1326 audit(1723251596.493:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5756 comm="syz.2.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa985ffc9f9 code=0x7ffc0000 [ 486.075469][ T24] audit: type=1326 audit(1723251596.493:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5756 comm="syz.2.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa985ffc9f9 code=0x7ffc0000 [ 486.112443][ T24] audit: type=1326 audit(1723251596.493:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5756 comm="syz.2.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa985ffc9f9 code=0x7ffc0000 [ 486.148855][ T1254] usb 5-1: USB disconnect, device number 54 [ 486.151980][ T24] audit: type=1326 audit(1723251596.493:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5756 comm="syz.2.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa985ffc9f9 code=0x7ffc0000 [ 486.273526][ T24] audit: type=1326 audit(1723251596.493:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5756 comm="syz.2.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa985ffc9f9 code=0x7ffc0000 [ 486.298386][ T24] audit: type=1326 audit(1723251596.493:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5756 comm="syz.2.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fa985ffc9f9 code=0x7ffc0000 [ 486.337466][ T24] audit: type=1326 audit(1723251596.493:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5756 comm="syz.2.1356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa985ffc9f9 code=0x7ffc0000 [ 486.756628][ T888] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 486.975440][ T760] usbhid 2-1:0.0: can't add hid device: -71 [ 486.999405][ T760] usbhid: probe of 2-1:0.0 failed with error -71 [ 487.070471][ T888] usb 1-1: Using ep0 maxpacket: 16 [ 487.129713][ T760] usb 2-1: USB disconnect, device number 47 [ 487.223419][ T888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 487.565950][ T888] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 487.652413][ T2134] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 487.702337][ T888] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 487.715710][ T888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.737703][ T888] usb 1-1: config 0 descriptor?? [ 487.779019][ T5768] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 487.794576][ T5768] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 487.856845][ T5768] F2FS-fs (loop2): Found nat_bits in checkpoint [ 487.950121][ T5768] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 487.958091][ T5768] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 488.013931][ T2134] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 488.025822][ T2134] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 488.037264][ T2134] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 488.052097][ T2134] usb 5-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00 [ 488.062105][ T2134] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.073230][ T2134] usb 5-1: config 0 descriptor?? [ 488.191847][ T5763] input: syz0 as /devices/virtual/input/input76 [ 488.420988][ T5768] attempt to access beyond end of device [ 488.420988][ T5768] loop2: rw=2049, want=45104, limit=40427 [ 488.503566][ T5407] attempt to access beyond end of device [ 488.503566][ T5407] loop2: rw=2051, want=45104, limit=40427 [ 488.515941][ T5407] F2FS-fs (loop2): Issue discard(5637, 5637, 1) failed, ret: -5 [ 488.541629][ T2134] holtek_mouse 0003:04D9:A070.004A: item fetching failed at offset 1/5 [ 488.572702][ T2134] holtek_mouse 0003:04D9:A070.004A: hid parse failed: -22 [ 488.586359][ T2134] holtek_mouse: probe of 0003:04D9:A070.004A failed with error -22 [ 488.736785][ T2134] usb 5-1: USB disconnect, device number 55 [ 488.918871][ T888] usbhid 1-1:0.0: can't add hid device: -71 [ 488.925517][ T888] usbhid: probe of 1-1:0.0 failed with error -71 [ 488.956012][ T888] usb 1-1: USB disconnect, device number 49 [ 489.159562][ T5799] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1367'. [ 489.202125][ T5799] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1367'. [ 489.632855][ T888] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 490.061679][ T888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 490.090220][ T888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 490.118982][ T888] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 490.151817][ T888] usb 3-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 490.171286][ T888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.192775][ T888] usb 3-1: config 0 descriptor?? [ 490.350158][ T5815] hub 6-0:1.0: USB hub found [ 490.359993][ T5815] hub 6-0:1.0: 1 port detected [ 490.697911][ T5811] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 490.709559][ T5811] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 490.756839][ T888] usbhid 3-1:0.0: can't add hid device: -71 [ 490.762977][ T888] usbhid: probe of 3-1:0.0 failed with error -71 [ 490.778009][ T5811] F2FS-fs (loop4): Found nat_bits in checkpoint [ 490.804645][ T888] usb 3-1: USB disconnect, device number 53 [ 490.871329][ T289] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 490.981295][ T5811] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 490.988689][ T5811] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 491.647054][ T289] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 491.683479][ T289] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 491.713709][ T5844] xt_bpf: check failed: parse error [ 491.722927][ T289] usb 4-1: New USB device found, idVendor=0530, idProduct=030a, bcdDevice= 0.00 [ 491.733226][ T24] kauditd_printk_skb: 48 callbacks suppressed [ 491.733267][ T24] audit: type=1326 audit(1723251602.540:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5838 comm="syz.2.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa985ffc9f9 code=0x7ffc0000 [ 491.810064][ T289] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.848871][ T24] audit: type=1326 audit(1723251602.540:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5838 comm="syz.2.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7fa985ffc9f9 code=0x7ffc0000 [ 491.900352][ T24] audit: type=1326 audit(1723251602.540:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5838 comm="syz.2.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa985ffc9f9 code=0x7ffc0000 [ 491.934371][ T289] usb 4-1: config 0 descriptor?? [ 492.100330][ T888] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 492.433938][ T289] usbhid 4-1:0.0: can't add hid device: -71 [ 492.440590][ T289] usbhid: probe of 4-1:0.0 failed with error -71 [ 492.470146][ T289] usb 4-1: USB disconnect, device number 51 [ 492.595617][ T888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.650638][ T888] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 492.756221][ T888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.924609][ T888] usb 2-1: config 0 descriptor?? [ 493.557641][ T888] keytouch 0003:0926:3333.004B: fixing up Keytouch IEC report descriptor [ 493.581710][ T888] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.004B/input/input77 [ 493.907385][ T888] keytouch 0003:0926:3333.004B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 494.406793][ T5844] 9pnet: Insufficient options for proto=fd [ 494.686170][ T5877] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1387'. [ 494.940793][ T1254] usb 2-1: USB disconnect, device number 48 [ 495.905437][ T5884] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 495.958125][ T5884] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038 (0x7fffffff) [ 496.248643][ T5892] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 496.263206][ T5892] ext4 filesystem being mounted at /15/bus supports timestamps until 2038 (0x7fffffff) [ 496.723282][ T2134] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 496.935584][ T5906] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1391'. [ 497.016196][ T2134] usb 3-1: Using ep0 maxpacket: 16 [ 497.130076][ T2134] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.148764][ T2134] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 497.181942][ T2134] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 497.191574][ T2134] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.220939][ T2134] usb 3-1: config 0 descriptor?? [ 497.543319][ T5910] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 497.552222][ T5910] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 497.571975][ T5910] F2FS-fs (loop1): Found nat_bits in checkpoint [ 497.729374][ T2134] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.004C/input/input78 [ 497.759585][ T5910] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 497.767039][ T5910] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 497.819385][ T2134] microsoft 0003:045E:07DA.004C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 497.892289][ T5920] EXT4-fs (loop3): Test dummy encryption mode enabled [ 497.950041][ T5920] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue [ 497.987468][ T5920] ext4 filesystem being mounted at /75/mnt supports timestamps until 2038 (0x7fffffff) [ 498.083327][ T2134] usb 3-1: USB disconnect, device number 54 [ 499.063251][ T2132] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 499.342265][ T24] audit: type=1326 audit(1723251610.560:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5909 comm="syz.1.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff08e8429f9 code=0x7ffc0000 [ 499.406779][ T24] audit: type=1326 audit(1723251610.581:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5909 comm="syz.1.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff08e8429f9 code=0x7ffc0000 [ 499.423958][ T5910] attempt to access beyond end of device [ 499.423958][ T5910] loop1: rw=2049, want=45104, limit=40427 [ 499.462134][ T24] audit: type=1326 audit(1723251610.592:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5909 comm="syz.1.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff08e8429f9 code=0x7ffc0000 [ 499.511612][ T2132] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 499.523098][ T24] audit: type=1326 audit(1723251610.592:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5909 comm="syz.1.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff08e8429f9 code=0x7ffc0000 [ 499.597396][ T2132] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 499.606483][ T24] audit: type=1326 audit(1723251610.592:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5909 comm="syz.1.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff08e8429f9 code=0x7ffc0000 [ 499.623096][ T2132] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 499.673238][ T2132] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.719929][ T24] audit: type=1326 audit(1723251610.613:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5909 comm="syz.1.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff08e8429f9 code=0x7ffc0000 [ 499.749650][ T5929] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 499.756314][ T24] audit: type=1326 audit(1723251610.623:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5909 comm="syz.1.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff08e8429f9 code=0x7ffc0000 [ 499.794389][ T5934] xt_bpf: check failed: parse error [ 499.813692][ T24] audit: type=1326 audit(1723251610.623:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5909 comm="syz.1.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff08e8429f9 code=0x7ffc0000 [ 499.842748][ T24] audit: type=1326 audit(1723251610.623:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5909 comm="syz.1.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff08e8429f9 code=0x7ffc0000 [ 499.867294][ T24] audit: type=1326 audit(1723251610.623:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5909 comm="syz.1.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff08e8429f9 code=0x7ffc0000 [ 499.884365][ T3556] attempt to access beyond end of device [ 499.884365][ T3556] loop1: rw=2051, want=45104, limit=40427 [ 499.906814][ T3556] F2FS-fs (loop1): Issue discard(5637, 5637, 1) failed, ret: -5 [ 499.999239][ T5937] EXT4-fs (loop3): Test dummy encryption mode enabled [ 500.024088][ T5937] EXT4-fs error (device loop3): __ext4_iget:4958: inode #11: block 1: comm syz.3.1400: invalid block [ 500.035632][ T2132] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 500.046855][ T5937] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1400: couldn't read orphan inode 11 (err -117) [ 500.059447][ T5937] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000002000,jqfmt=vfsv0,delalloc,usrjquota=,noauto_da_alloc,test_dummy_encryption,,errors=continue [ 500.061722][ T2132] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input79 [ 500.094624][ T888] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 500.137325][ T2132] usb 3-1: USB disconnect, device number 55 [ 500.144039][ C0] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 500.741440][ T888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 500.967177][ T888] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 501.057949][ T888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.092995][ T888] usb 5-1: config 0 descriptor?? [ 501.396344][ T5951] FAULT_INJECTION: forcing a failure. [ 501.396344][ T5951] name failslab, interval 1, probability 0, space 0, times 0 [ 501.409496][ T5951] CPU: 1 PID: 5951 Comm: syz.1.1398 Not tainted 5.10.222-syzkaller-01494-gfd58936f3c1f #0 [ 501.419468][ T5951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 501.429523][ T5951] Call Trace: [ 501.432688][ T5951] dump_stack_lvl+0x1e2/0x24b [ 501.437194][ T5951] ? panic+0x812/0x812 [ 501.441096][ T5951] ? bfq_pos_tree_add_move+0x43b/0x43b [ 501.446381][ T5951] ? _parse_integer_fixup_radix+0x49/0x330 [ 501.452106][ T5951] ? _parse_integer_limit+0xbc/0x1e0 [ 501.457238][ T5951] ? simple_strtoul+0x151/0x220 [ 501.462133][ T5951] dump_stack+0x15/0x17 [ 501.466303][ T5951] should_fail+0x3c6/0x510 [ 501.470558][ T5951] ? match_int+0xd9/0x1f0 [ 501.474997][ T5951] __should_failslab+0xa4/0xe0 [ 501.479779][ T5951] should_failslab+0x9/0x20 [ 501.484214][ T5951] __kmalloc_track_caller+0x5f/0x320 [ 501.489475][ T5951] kmemdup_nul+0x2a/0xa0 [ 501.493654][ T5951] match_int+0xd9/0x1f0 [ 501.497659][ T5951] ? match_token+0x660/0x660 [ 501.502357][ T5951] parse_opts+0x281/0x690 [ 501.506711][ T5951] ? p9_fd_show_options+0x1b0/0x1b0 [ 501.511850][ T5951] ? kfree+0xc3/0x270 [ 501.515685][ T5951] p9_fd_create+0x8c/0x510 [ 501.520021][ T5951] ? p9_fd_create_unix+0x430/0x430 [ 501.525019][ T5951] ? kfree+0xc3/0x270 [ 501.528948][ T5951] p9_client_create+0x81b/0x1130 [ 501.534019][ T5951] ? p9_parse_header+0x6c0/0x6c0 [ 501.538985][ T5951] ? slab_post_alloc_hook+0x80/0x2f0 [ 501.544111][ T5951] ? kstrdup+0x4f/0x70 [ 501.548227][ T5951] ? __kasan_check_write+0x14/0x20 [ 501.553606][ T5951] v9fs_session_init+0x1fa/0x19b0 [ 501.558702][ T5951] ? v9fs_show_options+0x570/0x570 [ 501.563605][ T5951] ? __kasan_kmalloc+0x9/0x10 [ 501.568413][ T5951] ? v9fs_mount+0x5f/0x7b0 [ 501.572806][ T5951] v9fs_mount+0x75/0x7b0 [ 501.577173][ T5951] legacy_get_tree+0xf1/0x190 [ 501.581919][ T5951] ? incfs_get_verity_signature+0x420/0x420 [ 501.587623][ T5951] vfs_get_tree+0x88/0x290 [ 501.592357][ T5951] do_new_mount+0x2ba/0xb30 [ 501.596901][ T5951] ? do_move_mount_old+0x160/0x160 [ 501.602508][ T5951] ? security_capable+0x87/0xb0 [ 501.607420][ T5951] ? ns_capable+0x89/0xe0 [ 501.611716][ T5951] path_mount+0x56f/0xcb0 [ 501.616159][ T5951] __se_sys_mount+0x2c4/0x3b0 [ 501.621078][ T5951] ? __x64_sys_mount+0xd0/0xd0 [ 501.626032][ T5951] ? fpu__clear_all+0x20/0x20 [ 501.630664][ T5951] __x64_sys_mount+0xbf/0xd0 [ 501.635187][ T5951] do_syscall_64+0x34/0x70 [ 501.639663][ T5951] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 501.645494][ T5951] RIP: 0033:0x7ff08e8429f9 [ 501.650014][ T5951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 501.670029][ T5951] RSP: 002b:00007ff08d480038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 501.678754][ T5951] RAX: ffffffffffffffda RBX: 00007ff08e9d1130 RCX: 00007ff08e8429f9 [ 501.687124][ T5951] RDX: 0000000020000b80 RSI: 0000000020000040 RDI: 0000000000000000 [ 501.695212][ T5951] RBP: 00007ff08d480090 R08: 0000000020000180 R09: 0000000000000000 [ 501.703023][ T5951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 501.711146][ T5951] R13: 0000000000000000 R14: 00007ff08e9d1130 R15: 00007ffe9a3d4008 [ 501.720283][ T5951] 9pnet: Insufficient options for proto=fd [ 501.949698][ T2132] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 502.020158][ T888] keytouch 0003:0926:3333.004D: fixing up Keytouch IEC report descriptor [ 502.040604][ T888] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.004D/input/input80 [ 502.150279][ T888] keytouch 0003:0926:3333.004D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 502.203163][ T2132] usb 3-1: Using ep0 maxpacket: 16 [ 502.276527][ T5966] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 502.283831][ T5966] IPv6: NLM_F_CREATE should be set when creating new route [ 502.340566][ T2132] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 502.372696][ T2132] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 502.400860][ T2132] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 502.421801][ T2132] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.442186][ T2132] usb 3-1: config 0 descriptor?? [ 502.484958][ T5934] 9pnet: Insufficient options for proto=fd [ 502.743180][ T5975] FAULT_INJECTION: forcing a failure. [ 502.743180][ T5975] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 502.757299][ T5975] CPU: 1 PID: 5975 Comm: syz.1.1409 Not tainted 5.10.222-syzkaller-01494-gfd58936f3c1f #0 [ 502.767365][ T5975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 502.777421][ T5975] Call Trace: [ 502.780664][ T5975] dump_stack_lvl+0x1e2/0x24b [ 502.785337][ T5975] ? bfq_pos_tree_add_move+0x43b/0x43b [ 502.790725][ T5975] dump_stack+0x15/0x17 [ 502.794713][ T5975] should_fail+0x3c6/0x510 [ 502.799185][ T5975] should_fail_usercopy+0x1a/0x20 [ 502.804177][ T5975] _copy_from_iter_full+0x1ef/0xa20 [ 502.809304][ T5975] ? slab_post_alloc_hook+0x80/0x2f0 [ 502.814446][ T5975] ? netlink_sendmsg+0x7a4/0xd00 [ 502.819513][ T5975] ? __kmalloc_track_caller+0x184/0x320 [ 502.824971][ T5975] ? copyin+0x90/0x90 [ 502.828775][ T5975] ? __check_object_size+0x2e6/0x3c0 [ 502.833919][ T5975] netlink_sendmsg+0x8a9/0xd00 [ 502.838519][ T5975] ? netlink_getsockopt+0x5c0/0x5c0 [ 502.843548][ T5975] ? security_socket_sendmsg+0x82/0xb0 [ 502.848949][ T5975] ? netlink_getsockopt+0x5c0/0x5c0 [ 502.854131][ T5975] sock_write_iter+0x39b/0x530 [ 502.858726][ T5975] ? sock_read_iter+0x480/0x480 [ 502.863434][ T5975] ? iov_iter_init+0x3f/0x120 [ 502.868203][ T5975] vfs_write+0xb4c/0xe70 [ 502.872295][ T5975] ? kernel_write+0x3d0/0x3d0 [ 502.876797][ T5975] ? __fdget_pos+0x209/0x3a0 [ 502.881301][ T5975] ? ksys_write+0x77/0x2c0 [ 502.885738][ T5975] ksys_write+0x199/0x2c0 [ 502.890038][ T5975] ? __ia32_sys_read+0x90/0x90 [ 502.894817][ T5975] ? debug_smp_processor_id+0x17/0x20 [ 502.900032][ T5975] __x64_sys_write+0x7b/0x90 [ 502.904546][ T5975] do_syscall_64+0x34/0x70 [ 502.908792][ T5975] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 502.914616][ T5975] RIP: 0033:0x7ff08e8429f9 [ 502.918851][ T5975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 502.938540][ T5975] RSP: 002b:00007ff08d4c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 502.946808][ T5975] RAX: ffffffffffffffda RBX: 00007ff08e9d0f80 RCX: 00007ff08e8429f9 [ 502.954692][ T5975] RDX: 0000000000000024 RSI: 0000000020000080 RDI: 0000000000000008 [ 502.962485][ T5975] RBP: 00007ff08d4c2090 R08: 0000000000000000 R09: 0000000000000000 [ 502.970321][ T5975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 502.978116][ T5975] R13: 0000000000000000 R14: 00007ff08e9d0f80 R15: 00007ffe9a3d4008 [ 503.079956][ T5962] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.087522][ T5962] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.099328][ T5962] device bridge_slave_0 entered promiscuous mode [ 503.109566][ T5962] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.122561][ T2132] cp2112 0003:10C4:EA90.004E: unknown main item tag 0x0 [ 503.129921][ T5962] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.138414][ T2132] cp2112 0003:10C4:EA90.004E: unknown main item tag 0x0 [ 503.147815][ T5962] device bridge_slave_1 entered promiscuous mode [ 503.155161][ T2132] cp2112 0003:10C4:EA90.004E: unknown main item tag 0x0 [ 503.166797][ T2132] cp2112 0003:10C4:EA90.004E: unknown main item tag 0x0 [ 503.191097][ T2132] cp2112 0003:10C4:EA90.004E: unknown main item tag 0x0 [ 503.220294][ T2132] cp2112 0003:10C4:EA90.004E: hidraw1: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 503.258111][ T52] usb 5-1: USB disconnect, device number 56 [ 503.407305][ T1254] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 503.523843][ T367] device bridge_slave_1 left promiscuous mode [ 503.530241][ T367] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.539288][ T367] device bridge_slave_0 left promiscuous mode [ 503.546537][ T367] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.557959][ T367] device veth1_macvtap left promiscuous mode [ 503.564469][ T367] device veth0_vlan left promiscuous mode [ 503.759526][ T1254] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 503.826297][ T2132] cp2112 0003:10C4:EA90.004E: error requesting version [ 503.848144][ T2132] cp2112: probe of 0003:10C4:EA90.004E failed with error -71 [ 503.895235][ T2132] usb 3-1: USB disconnect, device number 56 [ 503.921804][ T1254] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 503.953102][ T1254] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.010103][ T1254] usb 4-1: Product: syz [ 504.024344][ T1254] usb 4-1: Manufacturer: syz [ 504.032103][ T1254] usb 4-1: SerialNumber: syz [ 504.041080][ T1254] usb 4-1: config 0 descriptor?? [ 504.280026][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 504.291162][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 504.312686][ T1254] snd-usb-audio: probe of 4-1:0.0 failed with error -2 [ 504.342524][ T1254] usb 4-1: USB disconnect, device number 52 [ 504.371852][ T2132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 504.381851][ T2132] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 504.392071][ T2132] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.399230][ T2132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 504.412325][ T2132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 504.422649][ T2132] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 504.432349][ T2132] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.439479][ T2132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 504.486073][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 504.494849][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 504.514439][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 504.525798][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 504.535331][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 504.565518][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 504.575968][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 504.634079][ T5962] device veth0_vlan entered promiscuous mode [ 504.647729][ T888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 504.663684][ T888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 504.683641][ T888] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 504.691596][ T888] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 504.710134][ T5962] device veth1_macvtap entered promiscuous mode [ 504.724539][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 504.733543][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 504.744706][ T289] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 504.788801][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 504.911354][ T52] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 505.026240][ T1254] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 505.105010][ T1254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 506.442417][ T6025] xt_bpf: check failed: parse error [ 506.731949][ T888] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 506.937738][ T6033] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.1423: casefold flag without casefold feature [ 506.959159][ T6033] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #2: comm syz.4.1423: missing EA_INODE flag [ 506.971965][ T6033] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1423: error while reading EA inode 2 err=-117 [ 506.995449][ T6033] EXT4-fs (loop4): 1 orphan inode deleted [ 507.015136][ T6033] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 507.084214][ T24] kauditd_printk_skb: 19 callbacks suppressed [ 507.084252][ T24] audit: type=1400 audit(1723251618.696:1131): avc: denied { create } for pid=6030 comm="syz.4.1423" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 507.428204][ T760] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 507.598765][ T888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 507.646114][ T888] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 507.666253][ T888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.694911][ T888] usb 3-1: config 0 descriptor?? [ 507.724322][ T6045] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 507.792007][ T6045] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1047: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 507.806726][ T760] usb 4-1: Using ep0 maxpacket: 16 [ 507.827722][ T6045] EXT4-fs (loop1): 1 truncate cleaned up [ 507.841381][ T6045] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,block_validity,sysvgroups,,errors=continue [ 508.074123][ T760] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 508.085471][ T760] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 508.098839][ T760] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 508.108293][ T760] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.118686][ T760] usb 4-1: config 0 descriptor?? [ 508.200395][ T888] keytouch 0003:0926:3333.004F: fixing up Keytouch IEC report descriptor [ 508.223673][ T888] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.004F/input/input81 [ 508.312117][ T888] keytouch 0003:0926:3333.004F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 508.312756][ T52] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 508.402764][ T6057] EXT4-fs (loop4): Ignoring removed orlov option [ 508.417768][ T6057] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 508.439024][ T6057] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 508.451172][ T6057] EXT4-fs (loop4): invalid journal inode [ 508.457186][ T6057] EXT4-fs (loop4): can't get journal size [ 508.481725][ T6057] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,auto_da_alloc,orlov,norecovery,,errors=continue [ 508.560673][ T52] usb 1-1: Using ep0 maxpacket: 16 [ 508.594300][ T6025] 9pnet: Insufficient options for proto=fd [ 508.675036][ T52] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 508.686030][ T52] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 508.808492][ T52] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 508.817930][ T52] usb 1-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 508.826257][ T52] usb 1-1: Product: syz [ 508.830431][ T52] usb 1-1: Manufacturer: syz [ 508.836838][ T760] usbhid 4-1:0.0: can't add hid device: -71 [ 508.843599][ T760] usbhid: probe of 4-1:0.0 failed with error -71 [ 508.851640][ T52] usb 1-1: config 0 descriptor?? [ 508.874342][ T760] usb 4-1: USB disconnect, device number 53 [ 509.087735][ T888] usb 3-1: USB disconnect, device number 57 [ 509.372508][ T52] kovaplus 0003:1E7D:2D50.0050: item fetching failed at offset 5/7 [ 509.381041][ T2134] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 509.390070][ T52] kovaplus 0003:1E7D:2D50.0050: parse failed [ 509.396531][ T52] kovaplus: probe of 0003:1E7D:2D50.0050 failed with error -22 [ 509.507839][ T888] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 509.608757][ T2134] usb 5-1: Using ep0 maxpacket: 8 [ 509.695166][ T52] usb 1-1: USB disconnect, device number 50 [ 509.723007][ T2134] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.744844][ T2134] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.755771][ T2134] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 509.768838][ T2134] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 509.779948][ T2134] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.799843][ T2134] usb 5-1: config 0 descriptor?? [ 509.857424][ T6076] xt_CT: No such helper "snmp_trap" [ 510.152152][ T888] usb 3-1: too many configurations: 222, using maximum allowed: 8 [ 510.333474][ T888] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 510.397044][ T888] usb 3-1: can't read configurations, error -61 [ 510.656093][ T888] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 511.141773][ T2134] usbhid 5-1:0.0: can't add hid device: -71 [ 511.147884][ T2134] usbhid: probe of 5-1:0.0 failed with error -71 [ 511.167430][ T2134] usb 5-1: USB disconnect, device number 57 [ 511.418621][ T888] usb 3-1: too many configurations: 222, using maximum allowed: 8 [ 511.619914][ T888] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 511.637540][ T888] usb 3-1: can't read configurations, error -61 [ 511.644118][ T888] usb usb3-port1: attempt power cycle [ 511.646660][ T52] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 511.688357][ T6094] EXT4-fs (loop4): Ignoring removed bh option [ 511.704461][ T6094] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 511.711911][ T6094] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 511.999693][ T52] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.019651][ T52] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 512.103306][ T52] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 512.142208][ T52] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.296487][ T52] usb 4-1: config 0 descriptor?? [ 512.367669][ T6106] EXT4-fs error (device loop2): __ext4_iget:4958: inode #11: block 1: comm syz.2.1439: invalid block [ 512.409580][ T6106] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1439: couldn't read orphan inode 11 (err -117) [ 512.431530][ T6106] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,minixdf,nogrpid,data_err=abort,grpquota,usrjquota=,inode_readahead_blks=0x0000000000400000,i_version,acl,,errors=continue [ 512.651045][ T6112] xt_bpf: check failed: parse error [ 512.931543][ T2132] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 512.953998][ T6090] udc-core: couldn't find an available UDC or it's busy [ 512.971703][ T6090] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 513.009220][ T52] usb 4-1: string descriptor 0 read error: -22 [ 513.098120][ T5407] ------------[ cut here ]------------ [ 513.103562][ T5407] kernel BUG at fs/ext4/inode.c:5246! [ 513.108993][ T5407] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 513.115243][ T5407] CPU: 0 PID: 5407 Comm: syz-executor Not tainted 5.10.222-syzkaller-01494-gfd58936f3c1f #0 [ 513.125114][ T5407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 513.135136][ T5407] RIP: 0010:ext4_mark_iloc_dirty+0x3e51/0x3e60 [ 513.141509][ T5407] Code: 6d ca ff e9 0f f1 ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 21 f1 ff ff 48 89 df e8 79 6e ca ff e9 14 f1 ff ff e8 1f d6 8c ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 48 89 e5 41 57 41 [ 513.161157][ T5407] RSP: 0018:ffffc90000d279e0 EFLAGS: 00010293 [ 513.167151][ T5407] RAX: ffffffff81ddd2e1 RBX: 0000000000000000 RCX: ffff888115dbcf00 [ 513.174954][ T5407] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 513.182756][ T5407] RBP: ffffc90000d27af0 R08: ffffffff81ddaefd R09: ffffed10247ba58b [ 513.190590][ T5407] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 513.198677][ T5407] R13: 00000000ffffffff R14: 0000000000000000 R15: ffff888122496000 [ 513.206681][ T5407] FS: 0000555555876500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 513.215462][ T5407] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 513.222308][ T5407] CR2: 00005555558a1528 CR3: 0000000130f59000 CR4: 00000000003526b0 [ 513.230397][ T5407] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 513.238322][ T5407] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 513.246214][ T5407] Call Trace: [ 513.249387][ T5407] ? __die_body+0x62/0xb0 [ 513.253548][ T5407] ? die+0x88/0xb0 [ 513.257182][ T5407] ? do_trap+0x1a4/0x310 [ 513.261260][ T5407] ? ext4_mark_iloc_dirty+0x3e51/0x3e60 [ 513.266655][ T5407] ? handle_invalid_op+0x95/0xc0 [ 513.271416][ T5407] ? ext4_mark_iloc_dirty+0x3e51/0x3e60 [ 513.276938][ T5407] ? exc_invalid_op+0x32/0x50 [ 513.281539][ T5407] ? asm_exc_invalid_op+0x12/0x20 [ 513.286524][ T5407] ? ext4_mark_iloc_dirty+0x1a6d/0x3e60 [ 513.292029][ T5407] ? ext4_mark_iloc_dirty+0x3e51/0x3e60 [ 513.297592][ T5407] ? ext4_mark_iloc_dirty+0x3e51/0x3e60 [ 513.303077][ T5407] __ext4_mark_inode_dirty+0x4fc/0x7b0 [ 513.308594][ T5407] ? sb_end_intwrite+0x110/0x110 [ 513.313480][ T5407] ? __ext4_fc_track_unlink+0xf6/0x250 [ 513.318890][ T5407] ext4_rmdir+0x876/0xa70 [ 513.323153][ T5407] ? ext4_mkdir+0xba0/0xba0 [ 513.327664][ T5407] ? selinux_inode_rmdir+0x22/0x30 [ 513.333105][ T5407] ? security_inode_rmdir+0xcd/0x110 [ 513.338341][ T5407] vfs_rmdir+0x2b7/0x3f0 [ 513.342532][ T5407] do_rmdir+0x2cf/0x5c0 [ 513.346654][ T5407] ? d_delete_notify+0xd0/0xd0 [ 513.351544][ T5407] ? strncpy_from_user+0x18e/0x2d0 [ 513.356581][ T5407] ? getname_flags+0x1fd/0x520 [ 513.361377][ T5407] __x64_sys_unlinkat+0xdf/0xf0 [ 513.366163][ T5407] do_syscall_64+0x34/0x70 [ 513.370565][ T5407] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 513.376385][ T5407] RIP: 0033:0x7fa985ffbfd7 [ 513.380771][ T5407] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 513.400638][ T5407] RSP: 002b:00007ffc90753668 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 513.409053][ T5407] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fa985ffbfd7 [ 513.416851][ T5407] RDX: 0000000000000200 RSI: 00007ffc90754810 RDI: 00000000ffffff9c [ 513.424936][ T5407] RBP: 00007fa98606a78c R08: 000055555589954b R09: 0000000000000000 [ 513.432828][ T5407] R10: 0000000000001000 R11: 0000000000000207 R12: 00007ffc90754810 [ 513.441042][ T5407] R13: 00007fa98606a78c R14: 0000000000082966 R15: 00007ffc907569c0 [ 513.449099][ T5407] Modules linked in: [ 513.454239][ T5407] ---[ end trace 8a9847da02300023 ]--- [ 513.460035][ T5407] RIP: 0010:ext4_mark_iloc_dirty+0x3e51/0x3e60 [ 513.466182][ T5407] Code: 6d ca ff e9 0f f1 ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 21 f1 ff ff 48 89 df e8 79 6e ca ff e9 14 f1 ff ff e8 1f d6 8c ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 55 48 89 e5 41 57 41 [ 513.486890][ T5407] RSP: 0018:ffffc90000d279e0 EFLAGS: 00010293 [ 513.493191][ T5407] RAX: ffffffff81ddd2e1 RBX: 0000000000000000 RCX: ffff888115dbcf00 [ 513.501415][ T5407] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 513.510210][ T5407] RBP: ffffc90000d27af0 R08: ffffffff81ddaefd R09: ffffed10247ba58b [ 513.518269][ T5407] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 513.526295][ T5407] R13: 00000000ffffffff R14: 0000000000000000 R15: ffff888122496000 [ 513.534407][ T5407] FS: 0000555555876500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 513.543952][ T5407] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 513.550641][ T5407] CR2: 00005555558a1528 CR3: 0000000130f59000 CR4: 00000000003526b0 [ 513.558944][ T5407] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 513.567392][ T5407] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 513.575452][ T5407] Kernel panic - not syncing: Fatal exception [ 513.582649][ T5407] Kernel Offset: disabled [ 513.587060][ T5407] Rebooting in 86400 seconds..