last executing test programs: 7.64480561s ago: executing program 0: mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b0000"], 0x15) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x8a, 0x0, 0x0) r6 = dup(0xffffffffffffffff) write$FUSE_DIRENTPLUS(r6, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f0000000040), 0x1) 7.593082508s ago: executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040d21f0760001000000001090224000100000000090400000103000000092100000001220500090581030000000000"], 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x8, &(0x7f0000002580)=ANY=[@ANYBLOB="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"/4081], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000000000000000000eeffffff00180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000795"], 0x0, 0xac26, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000140)='mm_page_alloc\x00', r4}, 0x10) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net\x00') preadv(r5, &(0x7f0000000840)=[{&(0x7f0000003440)=""/4086, 0xff6}], 0x1, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="f000000012001307"], 0xf0}}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000e8000000000040d900008500000023000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd32}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r6}, 0x10) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, 0x0, 0x5000) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="0000270000002700e042803eebabce6b4790ea16d6253f3f2c3ca1370842121c6318d304148cd161563e000051"], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000005c0)=ANY=[@ANYRESDEC=r3, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000008007b8af8ff00000000bfa20000000000000008000000b704000000000000850000000300070095f1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00eb6e00bfa100000000000007010000f8ffffffb702000008000000b703"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000280)='afs_cb_miss\x00', r5}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r8, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="0f060b7988d0e433454eac5b3bf9aa281383a37e35de94df591b29965d3d2e3a077018eacb73ff67ac4742e179043ccdc728de39e454f8761e58601ed395dc781e49ec1c24df917950f19a9606eb8ec436c15c8c262b7802f6cfbf5e50cf405840675e563541", 0x66}], 0x1, 0x0, 0x0, 0x40000}, 0x40) r10 = add_key$keyring(&(0x7f0000000080), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="303e30800200000002d190c937dc6914243b0402d6dcb7154fe6727ae888746b024ee670a5882a0ad79716584e5704b7f62edac751478af9c62f00000000", 0x3e, r10) recvmsg(r9, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/78, 0x4e}], 0x1}, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) 7.223295665s ago: executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000009c0)) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000000c0)=0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000400)='jbd2_handle_stats\x00', r4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) 6.762632436s ago: executing program 0: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x1840c07, 0x0, 0x1, 0x0, &(0x7f0000000000)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC, @ANYRES64=r0], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={0x0, r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x2808000, &(0x7f0000000040)={[{@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@shortname_mixed}, {@uni_xlate}, {@shortname_win95}, {@fat=@tz_utc}, {@shortname_mixed}, {@utf8}, {@shortname_win95}, {@utf8no}, {@rodir}, {@shortname_mixed}, {@uni_xlateno}]}, 0x1, 0x294, &(0x7f0000000500)="$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") mkdir(&(0x7f0000000000)='./control\x00', 0x0) open$dir(&(0x7f00000002c0)='./control/file0\x00', 0x80040, 0x0) r5 = open(&(0x7f0000000300)='./control\x00', 0x0, 0x0) getdents64(r5, 0x0, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000340)='C', 0xfe04, 0x100000002) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0}, 0x90) 6.361862478s ago: executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040d21f0760001000000001090224000100000000090400000103000000092100000001220500090581030000000000"], 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x8, &(0x7f0000002580)=ANY=[@ANYBLOB="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"/4081], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000000000000000000eeffffff00180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000795"], 0x0, 0xac26, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000140)='mm_page_alloc\x00', r4}, 0x10) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net\x00') preadv(r5, &(0x7f0000000840)=[{&(0x7f0000003440)=""/4086, 0xff6}], 0x1, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="f000000012001307"], 0xf0}}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000e8000000000040d900008500000023000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd32}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r6}, 0x10) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, 0x0, 0x5000) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="0000270000002700e042803eebabce6b4790ea16d6253f3f2c3ca1370842121c6318d304148cd161563e000051"], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000005c0)=ANY=[@ANYRESDEC=r3, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000008007b8af8ff00000000bfa20000000000000008000000b704000000000000850000000300070095f1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00eb6e00bfa100000000000007010000f8ffffffb702000008000000b70300000000008385000000ac4aa779107d68ae0e926496"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000280)='afs_cb_miss\x00', r5}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r8, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="0f060b7988d0e433454eac5b3bf9aa281383a37e35de94df591b29965d3d2e3a077018eacb73ff67ac4742e179043ccdc728de39e454f8761e58601ed395dc781e49ec1c24df917950f19a9606eb8ec436c15c8c262b7802f6cfbf5e50cf405840675e", 0x63}], 0x1, 0x0, 0x0, 0x40000}, 0x40) r10 = add_key$keyring(&(0x7f0000000080), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="303e30800200000002d190c937dc6914243b0402d6dcb7154fe6727ae888746b024ee670a5882a0ad79716584e5704b7", 0x30, r10) recvmsg(r9, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/78, 0x4e}], 0x1}, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00'}) 6.339302392s ago: executing program 1: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = getpid() openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000080850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000dc0)={&(0x7f0000000040)='ext4_unlink_enter\x00', r2}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) symlinkat(&(0x7f0000000140)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r0, &(0x7f0000000000)='./file0\x00') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 5.861825505s ago: executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x0, "a8407a73"}, @local=@item_4={0x3, 0x2, 0x0, "93bf0280"}, @main=@item_4={0x3, 0x0, 0x0, "7488dffc"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x4805, &(0x7f00000000c0)) 5.490881172s ago: executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040d21f0760001000000001090224000100000000090400000103000000092100000001220500090581030000000000"], 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x8, &(0x7f0000002580)=ANY=[@ANYBLOB="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"/4081], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000000000000000000eeffffff00180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000795"], 0x0, 0xac26, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000140)='mm_page_alloc\x00', r4}, 0x10) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net\x00') preadv(r5, &(0x7f0000000840)=[{&(0x7f0000003440)=""/4086, 0xff6}], 0x1, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="f000000012001307"], 0xf0}}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000e8000000000040d900008500000023000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd32}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r6}, 0x10) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, 0x0, 0x5000) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="0000270000002700e042803eebabce6b4790ea16d6253f3f2c3ca1370842121c6318d304148cd161563e000051"], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000005c0)=ANY=[@ANYRESDEC=r3, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000008007b8af8ff00000000bfa20000000000000008000000b704000000000000850000000300070095f1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00eb6e00bfa100000000000007010000f8ffffffb702000008000000b70300000000008385000000ac4aa779107d68ae0e926496"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000280)='afs_cb_miss\x00', r5}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r8, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="0f060b7988d0e433454eac5b3bf9aa281383a37e35de94df591b29965d3d2e3a077018eacb73ff67ac4742e179043ccdc728de39e454f8761e58601ed395dc781e49ec1c24df917950f19a9606eb8ec436c15c8c262b7802f6cfbf5e50cf405840675e", 0x63}], 0x1, 0x0, 0x0, 0x40000}, 0x40) r10 = add_key$keyring(&(0x7f0000000080), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="303e30800200000002d190c937dc6914243b0402d6dcb7154fe6727ae888746b024ee670a5882a0ad79716584e5704b7", 0x30, r10) recvmsg(r9, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/78, 0x4e}], 0x1}, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00'}) 5.467732636s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='percpu_free_percpu\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48) 5.369685821s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) chroot(0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/block/loop0', 0x0, 0x0) getdents64(r5, &(0x7f0000002f40)=""/4098, 0x1002) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 5.298844402s ago: executing program 2: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x7a) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x191580, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'gretap0\x00', &(0x7f0000000340)={'gretap0\x00', 0x0, 0x700, 0x0, 0x0, 0x4f4acc10, {{0x7, 0x4, 0x3, 0x8, 0x1c, 0x64, 0x0, 0x8, 0x2f, 0x0, @remote, @broadcast, {[@ssrr={0x89, 0x7, 0x4e, [@loopback]}]}}}}}) socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x880) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./bus\x00', 0x200001a, &(0x7f0000000cc0)=ANY=[], 0xd, 0x2b6, &(0x7f0000000900)="$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") syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x84}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffff80, 0x10, &(0x7f0000000000), 0x76}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1807000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) 4.448565004s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000009c0)) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0xfffffffffffffffd, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000000c0)=0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000001900), 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000400)='jbd2_handle_stats\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000400)='jbd2_handle_stats\x00', r7}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) 3.920724235s ago: executing program 2: getuid() openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f100"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x0, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x24, 0x68, 0xa898cf170ab9f9b9, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x12}, @NHA_FDB={0x4}]}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x2) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$eJzs3cFPG9kZAPBvBgiEkEDaHNqqbdI0bVpFscFJUJRTemlVRZGqRj31kFBwEMLGCJs00BzI/1CpkXpq/4QeKvVQKae97233tpfsYaXsbrSrsNIevJqxIYRgYDcES/j3k55m3jzj7z2sec98gF8APetcRKxFxLGIuBcRo+3rSbvEzVbJHvfyxaPp9RePppNoNu98luTt2bXY8jWZE+3nHIqIP/4u4i/Jm3HrK6vzU5VKealdLzaqi8X6yurluerUbHm2vFAqTU5Mjl+/cq10YGM9W/3P89/O3frT///3k2fvr/36b1m3RtptW8dxkFpDH9iMk+mPiFvvIlgX9LXHc6zbHeE7SSPiexFxPr//R6MvfzUBgKOs2RyN5ujWOgBw1KV5DixJC+1cwEikaaHQyuGdieG0Uqs3Lt2vLS/MtHJlYzGQ3p+rlMfbucKxGEiy+kR+/qpe2la/EhGnI+Lvg8fzemG6Vpnp5hsfAOhhJ7at/18OttZ/AOCIG+p2BwCAQ2f9B4DeY/0HgN5j/QeA3mP9B4DeY/0HgN5j/QeAnvKH27ez0lxvf/71zIOV5fnag8sz5fp8obo8XZiuLS0WZmu12fwze6p7PV+lVlucuBrLD4uNcr1RrK+s3q3Wlhcad/PP9b5bHjiUUQEAuzl99umHSUSs3Tiel9iyl4O1Go62tNsdALqmr9sdALrGbl/Qu/yMD+ywRe9rOv6J0JOD7wtwOC7+UP4fepX8P/Qu+X/oXfL/0LuazcSe/wDQY+T4Ab//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG9vJC9JWmjvBT4SaVooRJyMiLEYSO7PVcrjEXEqIj4YHBjM6hPd7jQA8JbST5L2/l8XRy+MbG89lnw1mB8j4q//vPOPh1ONxtJEdv3zzeuNJ+3rpW70HwDYy8Y6vbGOb3j54tH0RjnM/jz/TWtz0Szueru0WvqjPz8OxUBEDH+RtOst2fuVvgOIv/Y4In6w0/iTPDcy1t75dHv8LPbJQ42fvhY/zdtax+x78f0D6Av0mqfZ/HNzp/svjXP5cef7fyifod7exvy3/sb8l27Of30d5r9z+41x9b3fd2x7HPGj/p3iJ5vxkw7xL+wz/kc//un5Tm3Nf0VcjJ3jb41VbFQXi/WV1ctz1anZ8mx5oVSanJgcv37lWqmY56iLG5nqN31649Kp3cY/3CH+0B7j/8U+x//vr+/9+We7xP/Vz3d+/c/sEj9bE3+5z/hTw//tuH13Fn+mw/j3ev0v7TP+s49XZ/b5UADgENRXVuenKpXykhMnTpxsnnR7ZgLetVc3fbd7AgAAAAAAAAAAAAAAdHIY/07U7TECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwdH0TAAD//yyP2UE=") sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000016c0)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus/file0\x00', 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) 3.456735966s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708007558a5e8b89b00000000007b8af8ff00000000bfa2"], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x10}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r2}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000480)=ANY=[@ANYBLOB="9802"], 0x298) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="b0"], 0xb0) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x4, 0x4, @rand_addr=' \x01\x00'}]}]}, 0x48}}, 0x0) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f0000002f00)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002ec0)={&(0x7f0000002940)={0x60, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x86}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x8015}, 0x8000) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8015}, 0x8000) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}}) listxattr(&(0x7f0000001e80)='./file0\x00', 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000640)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000800)='bpf_lsm_path_chroot\x00') r6 = socket(0x10, 0x3, 0x0) connect$netlink(r6, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={&(0x7f0000000800), 0xc, &(0x7f00000005c0)={&(0x7f0000001580)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 3.116956289s ago: executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x10}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) dup(0xffffffffffffffff) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x298) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xb0) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) listxattr(0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000640)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) 3.033018832s ago: executing program 2: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f1000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x1c, 0x68, 0xa898cf170ab9f9b9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x2) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$eJzs3cFPG9kZAPBvBgiEkEDaHNqqbdI0bVpFscFJUJRTemlVRZGqRj31kFBwEMLGCJs00BzI/1CpkXpq/4QeKvVQKae97233tpfsYaXsbrSrsNIevJqxIYRgYDcES/j3k55m3jzj7z2sec98gF8APetcRKxFxLGIuBcRo+3rSbvEzVbJHvfyxaPp9RePppNoNu98luTt2bXY8jWZE+3nHIqIP/4u4i/Jm3HrK6vzU5VKealdLzaqi8X6yurluerUbHm2vFAqTU5Mjl+/cq10YGM9W/3P89/O3frT///3k2fvr/36b1m3RtptW8dxkFpDH9iMk+mPiFvvIlgX9LXHc6zbHeE7SSPiexFxPr//R6MvfzUBgKOs2RyN5ujWOgBw1KV5DixJC+1cwEikaaHQyuGdieG0Uqs3Lt2vLS/MtHJlYzGQ3p+rlMfbucKxGEiy+kR+/qpe2la/EhGnI+Lvg8fzemG6Vpnp5hsfAOhhJ7at/18OttZ/AOCIG+p2BwCAQ2f9B4DeY/0HgN5j/QeA3mP9B4DeY/0HgN5j/QeAnvKH27ez0lxvf/71zIOV5fnag8sz5fp8obo8XZiuLS0WZmu12fwze6p7PV+lVlucuBrLD4uNcr1RrK+s3q3Wlhcad/PP9b5bHjiUUQEAuzl99umHSUSs3Tiel9iyl4O1Go62tNsdALqmr9sdALrGbl/Qu/yMD+ywRe9rOv6J0JOD7wtwOC7+UP4fepX8P/Qu+X/oXfL/0LuazcSe/wDQY+T4Ab//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG9vJC9JWmjvBT4SaVooRJyMiLEYSO7PVcrjEXEqIj4YHBjM6hPd7jQA8JbST5L2/l8XRy+MbG89lnw1mB8j4q//vPOPh1ONxtJEdv3zzeuNJ+3rpW70HwDYy8Y6vbGOb3j54tH0RjnM/jz/TWtz0Szueru0WvqjPz8OxUBEDH+RtOst2fuVvgOIv/Y4In6w0/iTPDcy1t75dHv8LPbJQ42fvhY/zdtax+x78f0D6Av0mqfZ/HNzp/svjXP5cef7fyifod7exvy3/sb8l27Of30d5r9z+41x9b3fd2x7HPGj/p3iJ5vxkw7xL+wz/kc//un5Tm3Nf0VcjJ3jb41VbFQXi/WV1ctz1anZ8mx5oVSanJgcv37lWqmY56iLG5nqN31649Kp3cY/3CH+0B7j/8U+x//vr+/9+We7xP/Vz3d+/c/sEj9bE3+5z/hTw//tuH13Fn+mw/j3ev0v7TP+s49XZ/b5UADgENRXVuenKpXykhMnTpxsnnR7ZgLetVc3fbd7AgAAAAAAAAAAAAAAdHIY/07U7TECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwdH0TAAD//yyP2UE=") sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000016c0)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus/file0\x00', 0x0) setxattr(&(0x7f0000000340)='./bus/file0\x00', &(0x7f0000000400)=@known='security.apparmor\x00', &(0x7f00000003c0)='overlay\x00', 0xe407, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) 2.9149818s ago: executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$eJzs3c1rXFUbAPDnTpKmb9r3TV4QbF0FBA2UTkyNrYKLigsRLBR0bTtMpqFmkimZSWlCoBYR3AhaXAi66dqPunPrx1b/Bd2ISEvVtFhxISN3PjqTZiadtvloze8Htz3n3jM595l77zln5h7mBrBjjab/ZCL2R8R7ScRwY30SEQO1VH/E0Xq5myvL+XRJolp99bekVubGynI+2l6T2tPI7IuIb96OOJBZW295cWkmVywW5hv58crsmfHy4tLB07O56cJ0Ye7wxOTkoSPPHBncuFj/+H5p79X3X3ry86N/vfXo5Xe/TeJo7G1sa49jo4zGaOM9GUjfwlVe3OjKtlmy3TvAPUkvzb76VR77Yzj6aqne9F4SAHiQnI+IKgCwwyT6fwDYYZrfA9xYWc6nS/X89n4fsdWuvRARu+vxN+9v1rf0N+7Z7a7dBx26kay635FExMgG1D8aER9/+fqn6RKbdB8SoJM3L0TEyZHRZvvfan+SNXMW6nqfkPFUD2VGb8tr/2DrfJWOf55tjf9a11/m1vgnOox/Bjtcu/diNGJXe37t9Z+5sgHVdJWO/54faM1tu9kWf8NIXyP339qYbyA5dbpYSNu2/0XEWAwMpvmJdeoYu/739VUr+lrJ9vHf7xff+CStP/2/VSJzpf+2JncqV8ndb9xN1y5EPNbfKf7k1vFPuox/j/dYx8vPvfNRt21p/Gm8zWV1/Js/q6x6KeKJ6Bx/U7Le/MTD47XTYbx5UnTwxU8fDnWrv/34p0taf/OzwFZIj//Q+vGPJO3zNct3X8d3l4a/7rbtzvF3Pv93Ja/V0s3G41yuUpmfiNiVvLJ2/aHWa5v5Zvk0/rHHO1//653/6WfCkz3G33/118/uPf7NlcY/dVfH/+4Tl2/O9HWrv7fjP1lLjTXW9NL+9bqD9/PeAQAAAAAAAAAAAAAAAAAAAAAAAECvMhGxN5JM9lY6k8lm68/wfiSGMsVSuXLgVGlhbipqz8oeiYFM86cuh9t+D3Wi8Xv4zfyh2/JPR8T/I+KDwf/U8tl8qTi13cEDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMOeLs//T/0yuN17BwBsmt13LHG9sCU7AgBsmTv3/wDAv43+HwB2Hv0/AOw8+n8A2Hn0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGyy48eOpUv1z5XlfJqfOru4MFM6e3CqUJ7Jzi7ks/nS/JnsdKk0XSxk86XZtpf+0OnvFUulM5Mxt3BuvFIoV8bLi0snZksLc5UTp2dz04UThYEtiwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeldeXJrJFYuFeYmHJVEdrh+6B2V/Nj/x88Ef961X5qLTeOMT290yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwc/gkAAP//skMoxA==") prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = open(&(0x7f0000007fc0)='./bus\x00', 0x60142, 0x0) r5 = open(&(0x7f0000000380)='./file1\x00', 0x42042, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001740)={0x9c02}, 0x8) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300"], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x90) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r6}, 0x10) openat$full(0xffffffffffffff9c, &(0x7f0000001780), 0x20100, 0x0) r8 = socket(0x10, 0x80002, 0x4) sendmsg$nl_route_sched(r8, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newtaction={0x14, 0x13, 0x53b}, 0x14}}, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001080)={0x2, &(0x7f0000001040)=[{0x3, 0x7, 0x1, 0xffffff81}, {0x1ff, 0x2, 0xf2}]}) r10 = bpf$ITER_CREATE(0x21, &(0x7f00000010c0)={r4}, 0x8) r11 = socket(0x0, 0x80002, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600), 0x70}}, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) sendmmsg$unix(r3, &(0x7f00000003c0)=[{{&(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000540)="8326705d4dc215df0051d933fd48a0e9c1035681545705897a3748cb3da8f4ae7ef5cb0b9e5304", 0x27}], 0x1, &(0x7f0000000800)=ANY=[@ANYRESHEX, @ANYBLOB="eea4f7a7aef029d1b102c7e3e1c0059aef9f950df3a9", @ANYRES32=0x0, @ANYBLOB="000000001c00000000000000a3cf47a902000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB, @ANYRES16, @ANYBLOB="000000001c00000000ff", @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00'], 0xb8, 0x4090}}, {{0x0, 0x0, &(0x7f0000000c80)=[{0x0}, {&(0x7f0000000a40)}, {0x0}, {&(0x7f0000000b00)="6455089ab9075e64c4bedb2b941533bc71ec4be38eeb5e2e6c9ecdda0c6ed7bd4706c3fb85575d0034077bb770e214219d50542e7e671050c17a8022b175ce074558fe4e94f15f588cb4a56928bae16bd7f992b843c5011456ed86b60133edc2903c9f6bdf9a3620f7577841abe2e06fef85eb3ee0091a527f0977e3ba534f7fa31caf7465d30df85587b36f219c23d089bbff7e259bffa1157b2393f0a3cd0a5bd97fadc821f6596440b1cc9bfb", 0xae}], 0x4, &(0x7f00000012c0)=ANY=[@ANYBLOB="28000000000000000100000001000000b5376e51ab324160b1445009bfc3f82936bb8364a6e2f1156c4edfa76c8fd8a62c975d37d61c58094e0f4f8a9c48d4e621360d15ca9ab3e8ffa4ab41ed51e8cda603426f09bdeed81216d158e19abc17785c", @ANYRESHEX=r4, @ANYRES32=r5, @ANYRES32, @ANYRES32=r4, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRESHEX=r6, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000", @ANYRESHEX=r7, @ANYRES32=r11, @ANYRESHEX, @ANYBLOB="00000000280000000100cc8d26e9ce24e5c36be347000001000000", @ANYRESOCT=r1, @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r0, @ANYRES32=r10, @ANYRES32=r11], 0xa8, 0x40040}}], 0x2, 0x4000) openat$sysfs(0xffffffffffffff9c, 0x0, 0x200, 0x54) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000040)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x11) ioctl$sock_SIOCSIFBR(r8, 0x8941, &(0x7f0000000680)=@add_del={0x2, &(0x7f00000001c0)='syzkaller1\x00'}) ftruncate(r5, 0x2007ffb) sendfile(r4, r5, 0x0, 0x1000000211005) 2.518192371s ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000f2ff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='percpu_free_percpu\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00'}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48) 2.490602366s ago: executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r4}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_da_release_space\x00'}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000280)=ANY=[], 0x7) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 2.387547611s ago: executing program 3: getuid() openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f1000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b708"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x24, 0x68, 0xa898cf170ab9f9b9, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x12}, @NHA_FDB={0x4}]}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000016c0)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus/file0\x00', 0x0) setxattr(&(0x7f0000000340)='./bus/file0\x00', &(0x7f0000000400)=@known='security.apparmor\x00', &(0x7f00000003c0)='overlay\x00', 0xe407, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) 2.373899114s ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='ext4_begin_ordered_truncate\x00'}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='ext4_begin_ordered_truncate\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) 2.308482674s ago: executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b0000"], 0x15) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r5, 0x10f, 0x8a, 0x0, 0x0) r6 = dup(0xffffffffffffffff) write$FUSE_DIRENTPLUS(r6, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f0000000040), 0x1) 1.931204902s ago: executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = open(&(0x7f0000007fc0)='./bus\x00', 0x60142, 0x0) r5 = open(&(0x7f0000000380)='./file1\x00', 0x42042, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001740)={0x9c02}, 0x8) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300"], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x90) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00'}, 0x10) openat$full(0xffffffffffffff9c, &(0x7f0000001780), 0x20100, 0x0) r8 = socket(0x10, 0x80002, 0x4) sendmsg$nl_route_sched(r8, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newtaction={0x14, 0x13, 0x53b}, 0x14}}, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001080)={0x2, &(0x7f0000001040)=[{0x3, 0x7, 0x1, 0xffffff81}, {0x1ff, 0x2, 0xf2}]}) r10 = bpf$ITER_CREATE(0x21, &(0x7f00000010c0)={r4}, 0x8) r11 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600), 0x70}}, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) sendmmsg$unix(r3, &(0x7f00000003c0)=[{{&(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000540)="8326705d4dc215df0051d933fd48a0e9c1035681545705897a3748cb3da8f4ae7ef5cb0b9e5304", 0x27}], 0x1, &(0x7f0000000800)=ANY=[@ANYRESHEX, @ANYBLOB="eea4f7a7aef029d1b102c7e3e1c0059aef9f950df3a9", @ANYRES32=0x0, @ANYBLOB="000000001c00000000000000a3cf47a902000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB, @ANYRES16, @ANYBLOB="000000001c00000000ff", @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00'], 0xb8, 0x4090}}, {{0x0, 0x0, &(0x7f0000000c80)=[{0x0}, {&(0x7f0000000a40)}, {0x0}, {&(0x7f0000000b00)="6455089ab9075e64c4bedb2b941533bc71ec4be38eeb5e2e6c9ecdda0c6ed7bd4706c3fb85575d0034077bb770e214219d50542e7e671050c17a8022b175ce074558fe4e94f15f588cb4a56928bae16bd7f992b843c5011456ed86b60133edc2903c9f6bdf9a3620f7577841abe2e06fef85eb3ee0091a527f0977e3ba534f7fa31caf7465d30df85587b36f219c23d089bbff7e259bffa1157b2393f0a3cd0a5bd97fadc821f6596440b1cc9bfb", 0xae}], 0x4, &(0x7f00000012c0)=ANY=[@ANYBLOB="28000000000000000100000001000000b5376e51ab324160b1445009bfc3f82936bb8364a6e2f1156c4edfa76c8fd8a62c975d37d61c58094e0f4f8a9c48d4e621360d15ca9ab3e8ffa4ab41ed51e8cda603426f09bdeed81216d158e19abc17785c", @ANYRESHEX=r4, @ANYRES32=r5, @ANYRES32, @ANYRES32=r4, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRESHEX=r6, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000", @ANYRESHEX=r7, @ANYRES32=r11, @ANYRESHEX, @ANYBLOB="00000000280000000100cc8d26e9ce24e5c36be347000001000000", @ANYRESOCT=r1, @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r0, @ANYRES32=r10], 0xa8, 0x40040}}], 0x2, 0x4000) openat$sysfs(0xffffffffffffff9c, 0x0, 0x200, 0x54) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000040)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x11) ioctl$sock_SIOCSIFBR(r8, 0x8941, &(0x7f0000000680)=@add_del={0x2, &(0x7f00000001c0)='syzkaller1\x00'}) ftruncate(r5, 0x2007ffb) sendfile(r4, r5, 0x0, 0x1000000211005) 1.383165147s ago: executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000c50000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b00)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="6801"], 0x168) write$FUSE_BMAP(r3, &(0x7f00000000c0)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) chown(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) 1.365033079s ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x0, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffffffe, 0x0, 0x1}, {{@in6=@local}, 0x0, @in=@remote, 0x0, 0x1}}, 0xe8) socket$key(0xf, 0x3, 0x2) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x40, 0xb, 0x2, "7ae1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000001c0)={0x0, 0x0, 0x2, "73eb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'tunl0\x00', &(0x7f0000000480)={'syztnl0\x00', r2, 0x40, 0x10, 0x2, 0x1bfe5e3, {{0x5, 0x4, 0x3, 0x4, 0x14, 0x66, 0x0, 0x7, 0x4, 0x0, @rand_addr=0x64010100, @multicast2}}}}) r3 = bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e80)=@bpf_tracing={0x1a, 0x0, 0x0, &(0x7f0000000cc0)='GPL\x00', 0x0, 0x32, &(0x7f0000000d00)=""/50, 0x0, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000d40)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000d80)={0x3, 0x10, 0x40000000}, 0x10, 0x187af, 0xffffffffffffffff, 0x7, &(0x7f0000000dc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000e00)=[{0x3, 0x1, 0xb, 0xa}, {0x5, 0x3, 0xe, 0x7}, {0x4, 0x2, 0x3, 0x5}, {0x0, 0x1, 0xe, 0x5}, {0x4, 0x1, 0x0, 0x9}, {0x2, 0x4, 0x4, 0xd}, {0x0, 0x3, 0x1, 0xc}], 0x10, 0x1}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x1, 0x1c, &(0x7f0000001340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5c41c5cb, 0x0, 0x0, 0x0, 0x1bfe}, {}, {}, [@exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3d4d9ff0}, @jmp={0x5, 0x1, 0xb, 0xb, 0x0, 0x1, 0xfffffffffffffff0}, @tail_call, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x97c}, @map_val={0x18, 0x190185e04c44d54f, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x43}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000a00)='GPL\x00', 0x0, 0x6b, &(0x7f0000000a40)=""/107, 0x41000, 0x4, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000b00)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000f40)=[0xffffffffffffffff], &(0x7f0000000f80)=[{0x5, 0x3}, {0x5, 0x4, 0x9, 0x9}]}, 0x90) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x9f3, &(0x7f0000000a40)={{0x12, 0x1, 0x250, 0x76, 0x75, 0x14, 0x20, 0x2639, 0x1, 0x451f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9e1, 0x3, 0x2, 0x5, 0x0, 0x40, [{{0x9, 0x4, 0xfb, 0x4, 0x3, 0x94, 0x2, 0x8e, 0x2, [], [{{0x9, 0x5, 0x8, 0x4, 0x200, 0x20, 0x80, 0x40}}, {{0x9, 0x5, 0x1, 0x4, 0x3ff, 0xa8, 0x2, 0x53}}, {{0x9, 0x5, 0x9, 0x2, 0x10, 0x4, 0x9, 0x1, [@generic={0x4c, 0x21, "bec7aaa3d3525c7b68539f19679af7722d090c1326ab6c8f45227373d6e90135b00383ef2f929a4a95b8812dcf47830f2699bd5a2cf369fb9cadc2f71976edcbbab71c196c0118ecd32b"}, @generic={0x44, 0x37, "25b8c5f1e05772ac1125eb90611fc4959e2e5943cceda8837c052ed6eb6bfbd230bad865a304b51b845adefa23a740d1840b05b08c05e81bcba451568e20ed2af66b"}]}}]}}, {{0x9, 0x4, 0xac, 0x2, 0xd, 0xff, 0x10, 0x77, 0x5, [@uac_as={[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x80, 0x2, 0x40, 0x4, '\"z', 'a'}, @as_header={0x7, 0x24, 0x1, 0x1, 0x0, 0x3}]}], [{{0x9, 0x5, 0xf, 0x0, 0x10, 0x9, 0x31}}, {{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x7f, 0x7f, 0x2c}}, {{0x9, 0x5, 0x3, 0x0, 0x3b7, 0x8, 0x6, 0x40, [@generic={0xfa, 0x23, "05c9e6e3e616664146aa1cf9a944f884d5605ac4d44c128542621414ee976c0e8b473d9ae50761d0d48e65945ca0d57aa3c411d971adbc9b40670cd5470251cd0a6949d1e0f7e2a90850397855f1fc87adcdd52836eda9b58bdc77b7ab17016f8f8bfe097e6ebfc3cf2c3bb7743f31bcb3de143b7db08b43a1b3d21a798a09bd459254970d445adee1f3517566d66938a885d669e3d6047a323c0abe155b697865094120a69a694fd535c4ed7f4d7c14a2a7b1e0a5ab94f67d201a08ffaa7db44e3061cb8d96a4866d33a4b8e1777d34ffb96aa7923453a1c898ee3c7becb818971d25ac85d45018196a495403a8e6f801063f1acafdff45"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1}]}}, {{0x9, 0x5, 0xa, 0x10, 0x40, 0x0, 0x20, 0xc, [@generic={0xa9, 0xa, "b3919a6dd65740345439d02a125754ba4c686f7ec9f58a1abdb42d3b37ad4bf769dca6098de994aa540083548059ef64afac6693c7088d6056c6b1c70818cadc970ebde542d56b174340d45a12a3df3a03ec6db77adf8166a7c8fb92cc3d20cada4250970524132d76a98544a70487c4932e13beb7911924f72b54227b324bed32d85ebf3645fbca85332b89f038601a019adbf5b3696af5c9d105d3eb02222503d17f920d7531"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x72, 0x3}]}}, {{0x9, 0x5, 0xe, 0x4, 0x3ff, 0x34, 0x1, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xe0, 0xf000}, @generic={0xb3, 0xf, "8b9ac011aaac6a00695e8d784fac5d38a563bcac06e038fbe99cdc45dc37d7b6be1a8d1bb635dd9d5763bc99ec580efa70a227bc39adfc33c38aefa450d5f1fe1c7dfec451743a10062b67141b13a2b9dbc5b69f85d968de4b57ca49373cecd1a569b7b27959dec8fd4628279b1ca60ed5d0d9cf8eeed5448b2278fd06bc35c6e2fe9999000e7161043cf4a53bcfafd3a30ccd9334ba7dbed7683da504bf99b26ee2fd2f691ccedfaf167263f4ad967da3"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0xc8, 0xe5, 0x1, [@generic={0xae, 0x2, "0f783b1eaea9ad605a3015461beceaff774bfc47cb6ff5f9531653c0721ecba835b7b75ed2ba6add99ebd89dba1fffecd77b2f6e1adc61a576a3c716acc9c243882616e461c867c5c882fa676593ffe13e3b0466d945217b687d7f2fa9d051193aac0f029d3c36817ea07fb72da860077429b379e9e16283c7ee5beb1bdf33fb452164732b90bf332fb1a95bd106386b024c21af0a7e8c76bdfcb7c00c6dc5c14d47c73cb34159d1d3490c7e"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x40, 0xfff9}]}}, {{0x9, 0x5, 0x9, 0x10, 0x200, 0x5, 0x0, 0x40, [@generic={0xe5, 0xe, "7e45b8b4a6aa4325e22c27a3c9fa8f8c28a3faff27ddd7ee959c329cceae8119782ee18be3204da735ed85da6dff66b1c038c6ff270256e398229c27c7c42c8f1f281ca7d034085ea1a56b8166a9d6c292a4b88b04f0c8f784d0f95eff3a5643ecedd3ec8f4f6a3dc16299fedf5adf6556781ec62945204503d4a8050be825e60ea27da23ae221821bc7718f50103d39c6bf160f62af6c95c8493364a4aeddc2d7eef7d9926e5561b13e34559f29678b41564234d78ad377424b6319b10460290b5053417671c9b7d2c42b8f053dbd5ce2985ad9371a27a9fd38c0c2035ce06096a74b"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x6}]}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0x3, 0x2, 0x1, [@generic={0xb2, 0xd, "5a09050c5485d911e0506de050b7c304cd34f1df635b5f57b5691f737762c403b7c23e6716fc9f4e8a1fe66e52a15831b0ae7ed9ae81913da91a30a7983151c2df719a1de8fff04c470302d56a5727c0d9e5fa27264e5b4fcc341aeab73f11ac0960bd69bae051ec3b697bd89d4181089fecbfbf2a199a6b36bad7785c36570cd15a7b8910a52a9db77ad3fad3e960937c6f5a0602acadbcbec0b40733a3c95b851029b3a19c5f8dcff4c12d9e7118d9"}, @generic={0xdb, 0x31, "604834223506dcf87ee1267688711fc9d7fc1b812352e3dddaf7364278e2015b67165c97d1a1c5f8967ecdbf7392ebe244f458e10e06e5279179c8e9b1d09d2d6d28fd0ac941f3ee2c82f82540a55df139124a318de0d7724dfe2343b611ced87fedd1f3bdba25cc40645ee7d32df7d5e9c5d97de1b749e7bfe5ed791a9442580331c92a9435ce80d47aa80e65d7248b3dd1f808952dce835eae201b37602ed1d72b244f7ca045ac9a46e560d8e787214ef33670ce5061add3d125eaf9da096d930c9d84363ee6ec8905969581bdbe53f63baa9f70e006516b"}]}}, {{0x9, 0x5, 0x0, 0x4, 0x7bf, 0x1, 0x0, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x401}]}}, {{0x9, 0x5, 0x80, 0x2, 0x8, 0x0, 0x8, 0xff, [@generic={0x5b, 0x21, "281247822ee87fe23f24ba652199e1ca11b697b786459468f706a54224b3c77ab4b02fded885d64da8635f6496dbffb88286e06c87b99bbbe87d56b204f3f4035bd3c324af7ae49da1214cae196a3dcd75969d8a16bb8a484e"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x6}]}}, {{0x9, 0x5, 0x0, 0xd, 0x0, 0xff, 0x2, 0x5, [@generic={0xc5, 0x23, "979a08de451712fb686e26e342d1c1a2e5c206ee7cd0bd49da008c1c33955f5525e08c83f088c7a8f2ff9ed3bd145ee382d11efab32fec9c7a46abe2742431c2d8762848909a545995904c3b54d70f0a226bd8ac9fa963fc169276643e5a43690d878c80234a7a77f7044446d5d3d86e71383bfb24cb470cb134e6e80493b1ba0367fa17df2504f9c9403bc7782b90bff895d7a6664aa5a024a47ee088e9bfdd9279bd22e469bbf722fed9ee83a6b8ec99daa183974166c7e2957a2ebc1f50655eef5f"}]}}, {{0x9, 0x5, 0x83, 0x18, 0x3ff, 0x28, 0x1, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x41, 0x97, 0x4}]}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff, 0xfa, 0x5, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x81, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x1800}]}}]}}, {{0x9, 0x4, 0x6c, 0x9, 0xd, 0x1, 0x67, 0xae, 0x7f, [@uac_as], [{{0x9, 0x5, 0x2, 0x0, 0x20, 0xa7, 0x5, 0x8, [@generic={0xd, 0xe, "02318b95d40a243dbc0bc9"}]}}, {{0x9, 0x5, 0x0, 0x1, 0x200, 0x40, 0x30, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x5}, @generic={0x59, 0x5, "9692e1fee15ccf6b1624a6ec9dfa9cc79eea611bf5a7e6ccd14f50be5bb9167402c91567e6bc7d5f503ade1748120b5554016e376f9237610c40576648aff82cbd3288e1a89beeeedf13542f75b07e5586339211b08a74"}]}}, {{0x9, 0x5, 0x7, 0x8, 0x20, 0x8, 0x76, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x3}]}}, {{0x9, 0x5, 0x2, 0x10, 0x5ef, 0x5, 0x7, 0x5}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0x8, 0x57, 0x2, [@generic={0x9c, 0x3, "f5c9c58443c3c04fb9f44d4a06c7885e9d8cbda46a159904cca875dcd60503193adc819ab323d6dad286fe2f7959eec9160d860bd1ca1891fa23314105c1c1ab3e8c23c704f15f8396299af4153194e8f49277a01c0463564037329ee5aacc62822b323054a7f5eaa9a36d9ea6eb92827137c75ba196ceefd5a272b2738d652d60d2c47926b8b5853dfb5419306940ef820dbfdc331e420aa49e"}]}}, {{0x9, 0x5, 0xf, 0x3, 0x10, 0x1, 0x7b, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3f, 0x7f}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0xfd, 0xa82c}]}}, {{0x9, 0x5, 0xb, 0x1, 0x3ff, 0x0, 0x6, 0x6d}}, {{0x9, 0x5, 0xb, 0x0, 0x0, 0x0, 0x1, 0x8d}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0x0, 0x0, 0x1}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0x8, 0x5, 0x62, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3f, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0x4}]}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x2, 0x6}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x3, 0x6, 0x9}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x4, 0x7f, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xff, 0xaa0}]}}]}}]}}]}}, &(0x7f00000018c0)={0xa, &(0x7f00000007c0)={0xa, 0x6, 0x110, 0x25, 0x80, 0x7f, 0x20, 0xf8}, 0x4d, &(0x7f0000000800)={0x5, 0xf, 0x4d, 0x6, [@ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x7ff, 0xf00, 0xffff, [0x0, 0xffa0, 0xc0c0, 0x3f00, 0x3f30]}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "0f6e07aa3dbeeb8cdaa2f2dfb7787d04"}, @ptm_cap={0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x84, 0x42, 0x81, 0x1}, @ptm_cap={0x3}]}, 0x8, [{0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x480a}}, {0x52, &(0x7f00000008c0)=@string={0x52, 0x3, "bf135cd96ab78d3799d84a5e42b3b40ec926e831d30eb8e2d6ed959b4d87c66e954cf31e92dfbbe3082df0edf98599d47d7b03ebe5e4e6e3b886dbcdab0a3bc2ae7b465b8f92bc994040c7a5ab393e67"}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x438}}, {0x5d, &(0x7f00000016c0)=@string={0x5d, 0x3, "8093c4e9b59ca76ed964c2218fb43753455397c32408e919a73417680337c173478ed811148cf8a70d1a52cda2c5d5587432b0501ea82761189e5e329f8daafb4c662f2c7674377366947be70ed382a3f57fb99d5849fbd6385c87"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f0000001740)=@lang_id={0x4, 0x3, 0x427}}, {0xc8, &(0x7f0000001780)=@string={0xc8, 0x3, "f1edd999cf77e1998ee7bf3d692ee72e18717c4e0951abd073357fd2e8ee34d76d61b79c40b0289d2e4f58a7ebfb934646db2fb613d521e93477fc58a22228104313f2cd93ecb1c5e0b8b838880857a3c313af8e44c048024ef8d8b88664956654bf9dfc8ab1878e7d41c48c79ef23fa03e4e1309526337721bb29f0ea57926b81c14f50a8470f48fb11eda874884dd963398b5859db073208e47205451ebf5106f122c55df708d87eb72ba38ed917742d9f2be42108832fc48cb755c12850c3c18de275390f"}}, {0x4, &(0x7f0000001880)=@lang_id={0x4, 0x3, 0x412}}]}) clock_gettime(0x0, &(0x7f0000000280)) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018400110800395032303030"], 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00'}, 0x10) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18) chdir(&(0x7f0000000040)='./file0\x00') 1.363181059s ago: executing program 4: r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x1840c07, 0x0, 0x1, 0x0, &(0x7f0000000000)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r1, @ANYRES64=r0], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x2808000, &(0x7f0000000040)={[{@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@shortname_mixed}, {@uni_xlate}, {@shortname_win95}, {@fat=@tz_utc}, {@shortname_mixed}, {@utf8}, {@shortname_win95}, {@utf8no}, {@rodir}, {@shortname_mixed}, {@uni_xlateno}]}, 0x1, 0x294, &(0x7f0000000500)="$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") mkdir(&(0x7f0000000000)='./control\x00', 0x0) open$dir(&(0x7f00000002c0)='./control/file0\x00', 0x80040, 0x0) r6 = open(&(0x7f0000000300)='./control\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000fc4fbe)=""/80, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = open(&(0x7f0000000080)='./bus\x00', 0x1e5242, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, 0x0) setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = open(&(0x7f0000000080)='./bus\x00', 0x40002, 0x0) pwrite64(r8, &(0x7f0000000340)='C', 0xfe04, 0x100000002) fallocate(r8, 0x3, 0xfffffffb, 0xffeffeff000) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) 947.508044ms ago: executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040d21f0760001000000001090224000100000000090400000103000000092100000001220500090581030000000000"], 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x8, &(0x7f0000002580)=ANY=[@ANYBLOB="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"/4081], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000000000000000000eeffffff00180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000795"], 0x0, 0xac26, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000140)='mm_page_alloc\x00', r4}, 0x10) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net\x00') preadv(r5, &(0x7f0000000840)=[{&(0x7f0000003440)=""/4086, 0xff6}], 0x1, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="f000000012001307"], 0xf0}}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000e8000000000040d900008500000023000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd32}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r6}, 0x10) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, 0x0, 0x5000) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="0000270000002700e042803eebabce6b4790ea16d6253f3f2c3ca1370842121c6318d304148cd161563e000051"], 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000005c0)=ANY=[@ANYRESDEC=r3, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000008007b8af8ff00000000bfa20000000000000008000000b704000000000000850000000300070095f1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00eb6e00bfa100000000000007010000f8ffffffb702000008000000b70300000000008385000000ac4aa779107d68ae0e926496"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000280)='afs_cb_miss\x00', r5}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r8, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="0f060b7988d0e433454eac5b3bf9aa281383a37e35de94df591b29965d3d2e3a077018eacb73ff67ac4742e179043ccdc728de39e454f8761e58601ed395dc781e49ec1c24df917950f19a9606eb8ec436c15c8c262b7802f6cfbf5e50cf405840675e", 0x63}], 0x1, 0x0, 0x0, 0x40000}, 0x40) r10 = add_key$keyring(&(0x7f0000000080), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="303e30800200000002d190c937dc6914243b0402d6dcb7154fe6727ae888746b024ee670a5882a0ad79716584e5704b7", 0x30, r10) recvmsg(r9, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/78, 0x4e}], 0x1}, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00'}) 474.545397ms ago: executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r4 = inotify_init() inotify_add_watch(r4, &(0x7f00000001c0)='./file0\x00', 0x6000400) r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) write$9p(r3, &(0x7f0000001400)="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", 0x600) sendfile(r3, r5, 0x0, 0xe065) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_sfeatures={0x2, 0x2, [{}, {0x0, 0x3}]}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x24}}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000540)=[{{&(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000b00)=[{&(0x7f00000003c0)}, {&(0x7f00000006c0)="fc15fbe5f91439fa5e44ad4afbb36eb6644d34790c407e8e9c4e8f21c42a707391b232463b82245a90b9fe8fb6a90891591e024cf7688d59e30c22fdccdcaf73e8eb1bf30ec18a406eff0198d0442b8b68c31534ed5c9e7c7aa429dcc25d25670a7b894477743ed1760356610a5efedd813f95b64e27add2a802ff546299110ad1f114e5e5e2f3e2e3019c1fbdbd5024f40f1ccf031cdc168b4a84d85ec1ca0693a66dbdb2b83f456b1a44f456e69eac7b2de31b80185567d7b7c2d5526a", 0xbe}, {&(0x7f0000000940)="24d99d6283fe96f1daa245a2eb6f6269cdf0ec1fdf4c1edd6ea18e1150f18d759ea7db55c89be83a7c388af77f0984ffb38f119b159a00def12d4a2435b0f30e3b73cc1c11f96d458450e0d51af2abf1dc4a147709cb0332691230da32840b00389104918c8c697bbf76aa75073b36ca62489576c16f5d3a83ba0ac6077353a33f95429aea177d448b36ecea24bf3968a69ec92d2861bb0f5bbac2b1a52cdb55b6fb83cd95da5d0c296c59dfd1e1e3dd4ffc55f86d34ca2afc1d9d74f23c7319579b369bd054f018d9ed6994105f29ed54b20a32df3b2ee6f77c085300c7fdd703e311c5381732b82f", 0xe9}, {&(0x7f0000000a40)="97eaaec8d2795e537b2a830bebd414bc0738cfd147ef15637b617199b5b8525d8f0c3d072099b964f4b9be0d7f27e8da1d98976fc554a29af5309b116b173e5fadb95295af2531377213de4afa", 0x4d}], 0x4, &(0x7f0000000c80)=[@cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x10}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, r5, r1, r4, 0xffffffffffffffff, r2, r2, r3, r4, r2]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x80, 0x40080}}], 0x1, 0x40884) socket$inet_tcp(0x2, 0x1, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000500)='sched_switch\x00', r9}, 0x10) syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r11}, 0x10) 159.974426ms ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000f2ff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='percpu_free_percpu\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00'}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48) 0s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffffffe, 0x0, 0x1}, {{@in6=@local, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x1}}, 0xe8) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa5, 0x0, 0xe9, 0x40, 0x66b, 0x20f9, 0xff94, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3c, 0x6a, 0xba}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x40, 0xb, 0x2, "7ae1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000001c0)={0x0, 0x0, 0x2, "73eb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000380)={0x18, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000060000008a323aecf7351e1cd31695244e7efbd1880782446e36f4ba6abc022342498ef3c3ba7e60188ac76cfa53d0e869218106e68b4c85e97e92fdb74b931cb87d4e43859300ba"], 0x0, 0x0, 0x0, 0x0}) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x10, 0x0, 0x0, 0x2}, 0x10}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'tunl0\x00', &(0x7f0000000480)={'syztnl0\x00', r3, 0x40, 0x10, 0x2, 0x1bfe5e3, {{0x5, 0x4, 0x3, 0x4, 0x14, 0x66, 0x0, 0x7, 0x4, 0x0, @rand_addr=0x64010100, @multicast2}}}}) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000ac0), 0x8) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e80)=@bpf_tracing={0x1a, 0x21, &(0x7f0000000b80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x401}, {}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @tail_call, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @exit, @jmp={0x5, 0x0, 0x4, 0x8, 0x3, 0xc, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000cc0)='GPL\x00', 0x0, 0x32, &(0x7f0000000d00)=""/50, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000d40)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000d80)={0x3, 0x10, 0x40000000, 0x42}, 0x10, 0x187af, 0xffffffffffffffff, 0x6, &(0x7f0000000dc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000e00)=[{0x3, 0x1, 0xb, 0xa}, {0x5, 0x3, 0x0, 0x7}, {0x0, 0x1, 0xe, 0x5}, {0x4, 0x1, 0x7, 0x9}, {0x2, 0x4, 0x4, 0xd}, {0x0, 0x3, 0x1, 0xc}], 0x10, 0x1}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x1, 0x1c, &(0x7f0000001340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5c41c5cb, 0x0, 0x0, 0x0, 0x1bfe}, {}, {}, [@exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3d4d9ff0}, @jmp={0x5, 0x1, 0xb, 0xb, 0x4, 0x1, 0xfffffffffffffff0}, @tail_call, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x97c}, @map_val], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000a00)='GPL\x00', 0x8, 0x6b, &(0x7f0000000a40)=""/107, 0x41000, 0x4, '\x00', r3, 0x24, r4, 0x8, &(0x7f0000000b00)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x5, 0x87, 0xc464, 0x20}, 0x10, 0xffffffffffffffff, r5, 0x2, &(0x7f0000000f40)=[0xffffffffffffffff], &(0x7f0000000f80)=[{0x5, 0x3, 0xe, 0x9}, {0x5, 0x4, 0x9, 0x9}], 0x10, 0x3}, 0x90) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000003640), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x24, &(0x7f0000001700)=ANY=[@ANYBLOB="18000000e1270000000000000200000098110000e60a83", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001842000008000000000000000000000085200000020000004f550c00f0ffffff18120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001869000001000000000000007f00000018400000020000000000000000000000180100002020702500000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000b90100008500000006000000bf91000000000000b7020000010000008500000085000007cba22217d848fb009500000000000000", @ANYRESHEX=r5, @ANYRES16, @ANYRESOCT=r6], &(0x7f0000000380)='GPL\x00', 0x2, 0xe1, &(0x7f0000000640)=""/225, 0x0, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0xf, 0x6, 0x1}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000740)=[0xffffffffffffffff], &(0x7f0000000780)=[{0x4, 0x2, 0x9, 0x9}, {0x3, 0x4, 0x6, 0x9}, {0x2, 0x5, 0x5, 0x2}, {0x5, 0x3, 0xc, 0xc}], 0x10, 0x1}, 0x90) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000001a80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x18946d9c6384dece}, 0xc, &(0x7f0000001a40)={&(0x7f00000019c0)={0x60, r6, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @empty}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_PEER_V6={0x14, 0x9, @remote}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000001) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000000340)={0x14, &(0x7f0000000200)={0x40, 0x21, 0x24, {0x24, 0x2, "3586a480063a6d969aeceeab9bd0333e15cdca4f37f1c18fc3cf7af772348ab0c81c"}}, &(0x7f00000002c0)={0x0, 0x3, 0x2, @string={0x2}}}, &(0x7f0000000740)={0x44, &(0x7f0000000480)={0x20, 0x26, 0x3d, "b4873ca3881859b45e10b0d74647d14f8d9338c67ea5fd17ea62ad340c0e5a312ed0b603ee02060befc7b29e6b8bc395e22c0ae88f2ec9e90fa8f2e11e"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x1a}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0xb3}, &(0x7f0000000600)={0x20, 0x81, 0x2, "1f34"}, &(0x7f0000000640)={0x20, 0x82, 0x1, 'm'}, &(0x7f0000000680)={0x20, 0x83, 0x2, "bcfd"}, &(0x7f00000006c0)={0x20, 0x84, 0x3, "e9c694"}, &(0x7f0000000700)={0x20, 0x85, 0x3, "fcc19e"}}) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_usb_connect(0x4, 0xc5e, &(0x7f0000000a40)={{0x12, 0x1, 0x250, 0x76, 0x75, 0x14, 0x20, 0x2639, 0x1, 0x451f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc4c, 0x4, 0x2, 0x5, 0x10, 0x40, [{{0x9, 0x4, 0xfb, 0x4, 0x3, 0x94, 0x2, 0x8e, 0x2, [], [{{0x9, 0x5, 0x8, 0x4, 0x200, 0x20, 0x80, 0x40}}, {{0x9, 0x5, 0x1, 0x4, 0x3ff, 0xa8, 0x2, 0x53}}, {{0x9, 0x5, 0x9, 0x2, 0x10, 0x4, 0x9, 0x1, [@generic={0x4c, 0x21, "bec7aaa3d3525c7b68539f19679af7722d090c1326ab6c8f45227373d6e90135b00383ef2f929a4a95b8812dcf47830f2699bd5a2cf369fb9cadc2f71976edcbbab71c196c0118ecd32b"}, @generic={0x44, 0x37, "25b8c5f1e05772ac1125eb90611fc4959e2e5943cceda8837c052ed6eb6bfbd230bad865a304b51b845adefa23a740d1840b05b08c05e81bcba451568e20ed2af66b"}]}}]}}, {{0x9, 0x4, 0xac, 0x2, 0xd, 0xff, 0x10, 0x77, 0x5, [@uac_as={[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x80, 0x2, 0x40, 0x4, '\"z', 'a'}, @as_header={0x7, 0x24, 0x1, 0x1, 0x0, 0x3}]}], [{{0x9, 0x5, 0xf, 0x0, 0x10, 0x9, 0x31}}, {{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x7f, 0x7f, 0x2c}}, {{0x9, 0x5, 0x3, 0x0, 0x3b7, 0x8, 0x6, 0x40, [@generic={0xfa, 0x23, "05c9e6e3e616664146aa1cf9a944f884d5605ac4d44c128542621414ee976c0e8b473d9ae50761d0d48e65945ca0d57aa3c411d971adbc9b40670cd5470251cd0a6949d1e0f7e2a90850397855f1fc87adcdd52836eda9b58bdc77b7ab17016f8f8bfe097e6ebfc3cf2c3bb7743f31bcb3de143b7db08b43a1b3d21a798a09bd459254970d445adee1f3517566d66938a885d669e3d6047a323c0abe155b697865094120a69a694fd535c4ed7f4d7c14a2a7b1e0a5ab94f67d201a08ffaa7db44e3061cb8d96a4866d33a4b8e1777d34ffb96aa7923453a1c898ee3c7becb818971d25ac85d45018196a495403a8e6f801063f1acafdff45"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1}]}}, {{0x9, 0x5, 0xa, 0x10, 0x40, 0x0, 0x20, 0xc, [@generic={0xa9, 0xa, "b3919a6dd65740345439d02a125754ba4c686f7ec9f58a1abdb42d3b37ad4bf769dca6098de994aa540083548059ef64afac6693c7088d6056c6b1c70818cadc970ebde542d56b174340d45a12a3df3a03ec6db77adf8166a7c8fb92cc3d20cada4250970524132d76a98544a70487c4932e13beb7911924f72b54227b324bed32d85ebf3645fbca85332b89f038601a019adbf5b3696af5c9d105d3eb02222503d17f920d7531"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x72, 0x3}]}}, {{0x9, 0x5, 0xe, 0x4, 0x3ff, 0x34, 0x1, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xe0, 0xf000}, @generic={0xb3, 0xf, "8b9ac011aaac6a00695e8d784fac5d38a563bcac06e038fbe99cdc45dc37d7b6be1a8d1bb635dd9d5763bc99ec580efa70a227bc39adfc33c38aefa450d5f1fe1c7dfec451743a10062b67141b13a2b9dbc5b69f85d968de4b57ca49373cecd1a569b7b27959dec8fd4628279b1ca60ed5d0d9cf8eeed5448b2278fd06bc35c6e2fe9999000e7161043cf4a53bcfafd3a30ccd9334ba7dbed7683da504bf99b26ee2fd2f691ccedfaf167263f4ad967da3"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0xc8, 0xe5, 0x1, [@generic={0xae, 0x2, "0f783b1eaea9ad605a3015461beceaff774bfc47cb6ff5f9531653c0721ecba835b7b75ed2ba6add99ebd89dba1fffecd77b2f6e1adc61a576a3c716acc9c243882616e461c867c5c882fa676593ffe13e3b0466d945217b687d7f2fa9d051193aac0f029d3c36817ea07fb72da860077429b379e9e16283c7ee5beb1bdf33fb452164732b90bf332fb1a95bd106386b024c21af0a7e8c76bdfcb7c00c6dc5c14d47c73cb34159d1d3490c7e"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x40, 0xfff9}]}}, {{0x9, 0x5, 0x9, 0x10, 0x200, 0x5, 0x0, 0x40, [@generic={0xe5, 0xe, "7e45b8b4a6aa4325e22c27a3c9fa8f8c28a3faff27ddd7ee959c329cceae8119782ee18be3204da735ed85da6dff66b1c038c6ff270256e398229c27c7c42c8f1f281ca7d034085ea1a56b8166a9d6c292a4b88b04f0c8f784d0f95eff3a5643ecedd3ec8f4f6a3dc16299fedf5adf6556781ec62945204503d4a8050be825e60ea27da23ae221821bc7718f50103d39c6bf160f62af6c95c8493364a4aeddc2d7eef7d9926e5561b13e34559f29678b41564234d78ad377424b6319b10460290b5053417671c9b7d2c42b8f053dbd5ce2985ad9371a27a9fd38c0c2035ce06096a74b"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x6}]}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0x3, 0x2, 0x1, [@generic={0xb2, 0xd, "5a09050c5485d911e0506de050b7c304cd34f1df635b5f57b5691f737762c403b7c23e6716fc9f4e8a1fe66e52a15831b0ae7ed9ae81913da91a30a7983151c2df719a1de8fff04c470302d56a5727c0d9e5fa27264e5b4fcc341aeab73f11ac0960bd69bae051ec3b697bd89d4181089fecbfbf2a199a6b36bad7785c36570cd15a7b8910a52a9db77ad3fad3e960937c6f5a0602acadbcbec0b40733a3c95b851029b3a19c5f8dcff4c12d9e7118d9"}, @generic={0xdb, 0x31, "604834223506dcf87ee1267688711fc9d7fc1b812352e3dddaf7364278e2015b67165c97d1a1c5f8967ecdbf7392ebe244f458e10e06e5279179c8e9b1d09d2d6d28fd0ac941f3ee2c82f82540a55df139124a318de0d7724dfe2343b611ced87fedd1f3bdba25cc40645ee7d32df7d5e9c5d97de1b749e7bfe5ed791a9442580331c92a9435ce80d47aa80e65d7248b3dd1f808952dce835eae201b37602ed1d72b244f7ca045ac9a46e560d8e787214ef33670ce5061add3d125eaf9da096d930c9d84363ee6ec8905969581bdbe53f63baa9f70e006516b"}]}}, {{0x9, 0x5, 0x0, 0x4, 0x7bf, 0x1, 0x0, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x401}]}}, {{0x9, 0x5, 0x80, 0x2, 0x8, 0x0, 0x8, 0xff, [@generic={0x5b, 0x21, "281247822ee87fe23f24ba652199e1ca11b697b786459468f706a54224b3c77ab4b02fded885d64da8635f6496dbffb88286e06c87b99bbbe87d56b204f3f4035bd3c324af7ae49da1214cae196a3dcd75969d8a16bb8a484e"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x6}]}}, {{0x9, 0x5, 0x0, 0xd, 0x0, 0xff, 0x2, 0x5, [@generic={0xc5, 0x23, "979a08de451712fb686e26e342d1c1a2e5c206ee7cd0bd49da008c1c33955f5525e08c83f088c7a8f2ff9ed3bd145ee382d11efab32fec9c7a46abe2742431c2d8762848909a545995904c3b54d70f0a226bd8ac9fa963fc169276643e5a43690d878c80234a7a77f7044446d5d3d86e71383bfb24cb470cb134e6e80493b1ba0367fa17df2504f9c9403bc7782b90bff895d7a6664aa5a024a47ee088e9bfdd9279bd22e469bbf722fed9ee83a6b8ec99daa183974166c7e2957a2ebc1f50655eef5f"}]}}, {{0x9, 0x5, 0x83, 0x18, 0x3ff, 0x28, 0x1, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x41, 0x97, 0x4}]}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff, 0xfa, 0x5, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x81, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x1800}]}}]}}, {{0x9, 0x4, 0x6c, 0x9, 0xe, 0x1, 0x67, 0xae, 0x7f, [@uac_as], [{{0x9, 0x5, 0x2, 0x0, 0x20, 0xa7, 0x5, 0x8, [@generic={0xd, 0xe, "02318b95d40a243dbc0bc9"}]}}, {{0x9, 0x5, 0x0, 0x1, 0x200, 0x40, 0x30, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x5}, @generic={0x59, 0x5, "9692e1fee15ccf6b1624a6ec9dfa9cc79eea611bf5a7e6ccd14f50be5bb9167402c91567e6bc7d5f503ade1748120b5554016e376f9237610c40576648aff82cbd3288e1a89beeeedf13542f75b07e5586339211b08a74"}]}}, {{0x9, 0x5, 0x7, 0x8, 0x20, 0x8, 0x76, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x3}]}}, {{0x9, 0x5, 0x2, 0x10, 0x5ef, 0x5, 0x7, 0x5}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0x8, 0x57, 0x2, [@generic={0x9c, 0x3, "f5c9c58443c3c04fb9f44d4a06c7885e9d8cbda46a159904cca875dcd60503193adc819ab323d6dad286fe2f7959eec9160d860bd1ca1891fa23314105c1c1ab3e8c23c704f15f8396299af4153194e8f49277a01c0463564037329ee5aacc62822b323054a7f5eaa9a36d9ea6eb92827137c75ba196ceefd5a272b2738d652d60d2c47926b8b5853dfb5419306940ef820dbfdc331e420aa49e"}]}}, {{0x9, 0x5, 0xf, 0x3, 0x10, 0x1, 0x7b, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3f, 0x7f}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0xfd, 0xa82c}]}}, {{0x9, 0x5, 0xb, 0x1, 0x3ff, 0x0, 0x6, 0x6d, [@generic={0x91, 0x2c, "f3b063783914b010790de53c822721d5064ac57255a4d86092e59b1ebdfcb47c7a9690dd5490ab39a4cad6a2a8bda6deded0196cea71c134ef9386ecf86fec42a0824f8216421b8cc5f74935c930c6a8adbf52964954fb9392e5466a0b8908078829570398aaf2552aa9eb17757c89f44beade3114b305cffd984851a81a9ea1af82b96fcc1d8b858aba9ccb98fb97"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x40, 0x5, 0x1, 0x8d}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0x4, 0x4, 0x1, [@generic={0x25, 0x11, "d2ebda13f496ccf11ede30aa117f9461898b36347872ac45e97d28c1c3490d23705f56"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0x8, 0x5, 0x62, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3f, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0x4}]}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0x4, 0x1f, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xc0}]}}, {{0x9, 0x5, 0x6, 0x10, 0x400, 0x2, 0x6, 0x5}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x3, 0x6, 0x9}}, {{0x9, 0x5, 0xf, 0x8, 0x200, 0x4, 0x7f, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xff, 0xaa0}]}}]}}, {{0x9, 0x4, 0x59, 0x80, 0x4, 0xff, 0xff, 0xff, 0x1, [], [{{0x9, 0x5, 0x8, 0x0, 0x40, 0x2, 0x62, 0x9, [@generic={0xee, 0x4, "2b1b1550bdf3a175d166349363e89881d00b2526d3ef9f13d0f095bb9be01a1a1f22edbe72e9f75f54f84fbb5d7301c13781eafb43a579089c3c542d3eabef4d2da53a2aa9fd969222cdbdbb0137a17298e1f267ae7304f2819c674e26f083eac2151c064d45f817f73a021cec132bac521c4f0ae5c40f9ca75c46d80ef7b76b78eb75b99dc67c9f2fa81e81c1c17781530e9a3d8960785232aa132a217db2d15c6b5ab3b165d6b3868fee06c950f880b8f08f97c0bc305721df764cb7d6a3e4799b3c793c66c80b2d5122f74574462c19fcd0dd9e664a61965bcf1fa3f606c756891e4a22e646bcd93b7825"}, @generic={0x7c, 0x9, "7676b58b1ab3b825ae1f9477f387f9c137dd0a3cbbd9f851d3da0edfeda38dc296a671ca3694b041b6d447ee1b702d6438b36c9343b4dc34ddffc2b46d329760468b613f375a56e6f516ff4b7d99cbcceef5d1d67e92e5820252d963426a693d5929f25cbb6617ee218a20df14ffab425b53767f9d9791d4a6b0"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x40, 0x7, 0x3f, 0x34, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xc}]}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0x0, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0xfffb}]}}, {{0x9, 0x5, 0x2, 0xc, 0x400, 0x5, 0xb8, 0x3}}]}}]}}]}}, &(0x7f00000018c0)={0xa, &(0x7f00000007c0)={0xa, 0x6, 0x110, 0x25, 0x80, 0x7f, 0x20, 0xf8}, 0x4d, &(0x7f0000000800)={0x5, 0xf, 0x4d, 0x6, [@ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x7ff, 0xf00, 0xffff, [0x60, 0xffa0, 0xc0c0, 0x3f00, 0x3f30]}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "0f6e07aa3dbeeb8cdaa2f2dfb7787d04"}, @ptm_cap={0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x84, 0x42, 0x81, 0x1}, @ptm_cap={0x3}]}, 0x8, [{0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x480a}}, {0x52, &(0x7f00000008c0)=@string={0x52, 0x3, "bf135cd96ab78d3799d84a5e42b3b40ec926e831d30eb8e2d6ed959b4d87c66e954cf31e92dfbbe3082df0edf98599d47d7b03ebe5e4e6e3b886dbcdab0a3bc2ae7b465b8f92bc994040c7a5ab393e67"}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x438}}, {0x5d, &(0x7f00000016c0)=@string={0x5d, 0x3, "8093c4e9b59ca76ed964c2218fb43753455397c32408e919a73417680337c173478ed811148cf8a70d1a52cda2c5d5587432b0501ea82761189e5e329f8daafb4c662f2c7674377366947be70ed382a3f57fb99d5849fbd6385c87"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f0000001740)=@lang_id={0x4, 0x3, 0x427}}, {0xc8, &(0x7f0000001780)=@string={0xc8, 0x3, "f1edd999cf77e1998ee7bf3d692ee72e18717c4e0951abd073357fd2e8ee34d76d61b79c40b0289d2e4f58a7ebfb934646db2fb613d521e93477fc58a22228104313f2cd93ecb1c5e0b8b838880857a3c313af8e44c048024ef8d8b88664956654bf9dfc8ab1878e7d41c48c79ef23fa03e4e1309526337721bb29f0ea57926b81c14f50a8470f48fb11eda874884dd963398b5859db073208e47205451ebf5106f122c55df708d87eb72ba38ed917742d9f2be42108832fc48cb755c12850c3c18de275390f"}}, {0x4, &(0x7f0000001880)=@lang_id={0x4, 0x3, 0x412}}]}) clock_gettime(0x0, &(0x7f0000000280)) write$P9_RVERSION(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018400110800395032303030"], 0x15) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r8}, 0x10) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$fuse(0x0, &(0x7f0000006340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 08 altsetting 9 has a duplicate endpoint with address 0xB, skipping [ 3306.597558][ T333] usb 1-1: config 2 interface 108 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 3306.608016][ T333] usb 1-1: config 2 interface 108 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 3306.619544][ T333] usb 1-1: config 2 interface 108 altsetting 9 has an invalid endpoint with address 0x80, skipping [ 3306.630059][ T333] usb 1-1: config 2 interface 108 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 3306.640524][ T333] usb 1-1: config 2 interface 108 altsetting 9 has 14 endpoint descriptors, different from the interface descriptor's value: 13 [ 3306.653491][ T333] usb 1-1: config 2 interface 251 has no altsetting 0 [ 3306.660087][ T333] usb 1-1: config 2 interface 172 has no altsetting 0 [ 3306.666702][ T333] usb 1-1: config 2 interface 108 has no altsetting 0 [ 3306.820473][T21758] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3306.825260][ T333] usb 1-1: New USB device found, idVendor=2639, idProduct=0001, bcdDevice=45.1f [ 3306.838754][ T333] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3306.846634][ T333] usb 1-1: Product: и [ 3306.850461][ T333] usb 1-1: Manufacturer: Ꮏ띪㞍幊덂ິ⛉㇨໓鮕蝍滆䲕ỳⴈ藹풙筽蚸췛ફ숻箮孆銏馼䁀ꗇ㦫朾 [ 3306.864322][ T333] usb 1-1: SerialNumber: 鎀鲵溧擙⇂뒏匷卅쎗ࠤ᧩㒧栗㜃珁蹇ᇘ谔ꟸᨍ쵒얢壕㉴傰ꠞ愧鸘㉞趟ﮪ晌Ⱟ瑶猷鑦팎ꎂ翵鶹䥘훻尸 [ 3306.895272][T21751] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 3307.005199][ T336] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 3307.072449][T20538] hid-multitouch 0003:1FD2:6007.03DA: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.4-1/input0 [ 3307.091473][ T28] audit: type=1326 audit(1717587186.005:5029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21773 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f37c2a7cee9 code=0x0 [ 3307.260786][ T3608] usb 5-1: USB disconnect, device number 64 [ 3307.267404][ T333] usb 1-1: USB disconnect, device number 72 [ 3307.505270][T22048] usb 4-1: string descriptor 0 read error: -71 [ 3307.525182][T22048] uclogic 0003:256C:006D.03DB: failed retrieving string descriptor #200: -71 [ 3307.533832][T22048] uclogic 0003:256C:006D.03DB: failed retrieving pen parameters: -71 [ 3307.541707][T22048] uclogic 0003:256C:006D.03DB: failed probing pen v2 parameters: -71 [ 3307.545206][ T336] usb 2-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 3307.549609][T22048] uclogic 0003:256C:006D.03DB: failed probing parameters: -71 [ 3307.558543][ T336] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3307.565750][T22048] uclogic: probe of 0003:256C:006D.03DB failed with error -71 [ 3307.575204][ T336] usb 2-1: Product: syz [ 3307.582239][T22048] usb 4-1: USB disconnect, device number 49 [ 3307.584932][ T336] usb 2-1: Manufacturer: syz [ 3307.594947][ T336] usb 2-1: SerialNumber: syz [ 3307.600104][ T336] usb 2-1: config 0 descriptor?? [ 3307.785363][T21780] loop0: detected capacity change from 0 to 256 [ 3308.265228][ T3608] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 3308.362756][T21788] bridge0: port 1(bridge_slave_0) entered blocking state [ 3308.369826][ T336] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 3308.379238][T21788] bridge0: port 1(bridge_slave_0) entered disabled state [ 3308.386892][T21788] device bridge_slave_0 entered promiscuous mode [ 3308.396270][T21788] bridge0: port 2(bridge_slave_1) entered blocking state [ 3308.403131][T21788] bridge0: port 2(bridge_slave_1) entered disabled state [ 3308.410416][T21788] device bridge_slave_1 entered promiscuous mode [ 3308.484875][T21788] bridge0: port 2(bridge_slave_1) entered blocking state [ 3308.491748][T21788] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3308.498849][T21788] bridge0: port 1(bridge_slave_0) entered blocking state [ 3308.505631][T21788] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3308.533876][T18841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3308.542495][T18841] bridge0: port 1(bridge_slave_0) entered disabled state [ 3308.549625][T18841] bridge0: port 2(bridge_slave_1) entered disabled state [ 3308.568593][T18841] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3308.579360][T18841] bridge0: port 1(bridge_slave_0) entered blocking state [ 3308.586225][T18841] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3308.593390][ T336] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 3308.603732][ T336] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 3308.613929][T18841] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3308.622302][ T336] asix: probe of 2-1:0.0 failed with error -71 [ 3308.628558][T18841] bridge0: port 2(bridge_slave_1) entered blocking state [ 3308.635412][T18841] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3308.643755][ T336] usb 2-1: USB disconnect, device number 65 [ 3308.655388][ T3608] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3308.676553][ T3608] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3308.692519][T21788] device veth0_vlan entered promiscuous mode [ 3308.698404][ T3608] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 3308.708706][ T5888] device bridge_slave_1 left promiscuous mode [ 3308.714837][ T5888] bridge0: port 2(bridge_slave_1) entered disabled state [ 3308.722751][ T5888] device bridge_slave_0 left promiscuous mode [ 3308.728692][ T3608] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3308.736558][ T5888] bridge0: port 1(bridge_slave_0) entered disabled state [ 3308.744997][ T3608] usb 5-1: config 0 descriptor?? [ 3308.751045][ T5888] device veth1_macvtap left promiscuous mode [ 3308.756937][ T5888] device veth0_vlan left promiscuous mode [ 3308.924080][T21788] device veth1_macvtap entered promiscuous mode [ 3308.932231][T14192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3308.940728][T14192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3308.948735][T14192] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3308.957868][T14192] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3308.974584][T21794] loop3: detected capacity change from 0 to 2048 [ 3308.981052][T14192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3308.989620][T14192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3308.997507][T14192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3309.013031][T14192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3309.016932][T21794] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 3309.021389][T14192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3309.059311][T21801] 9pnet_fd: Insufficient options for proto=fd [ 3309.072426][T21802] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 3309.121099][T21807] loop1: detected capacity change from 0 to 2048 [ 3309.147169][T21807] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 3309.967645][T21817] loop2: detected capacity change from 0 to 256 [ 3310.476641][T18688] EXT4-fs (loop1): unmounting filesystem. [ 3310.512840][T21824] loop2: detected capacity change from 0 to 2048 [ 3310.525217][ T3608] usbhid 5-1:0.0: can't add hid device: -71 [ 3310.531251][ T3608] usbhid: probe of 5-1:0.0 failed with error -71 [ 3310.538436][ T3608] usb 5-1: USB disconnect, device number 65 [ 3310.545151][T21824] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 3310.557656][T21652] EXT4-fs (loop3): unmounting filesystem. [ 3310.627113][T21830] loop3: detected capacity change from 0 to 2048 [ 3310.636711][T21830] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 3311.111236][T22048] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 3311.118751][T20538] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 3311.407371][T21788] EXT4-fs (loop2): unmounting filesystem. [ 3311.516081][T21652] EXT4-fs (loop3): unmounting filesystem. [ 3311.735310][T20538] usb 1-1: Using ep0 maxpacket: 32 [ 3311.840985][T21841] loop2: detected capacity change from 0 to 40427 [ 3311.847975][T21841] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 3311.855555][T21841] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 3311.865179][T22048] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3311.882156][T21841] F2FS-fs (loop2): invalid crc value [ 3311.887699][T22048] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3311.897804][T22048] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice=10.00 [ 3311.908502][T22048] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3311.920529][T21841] F2FS-fs (loop2): Found nat_bits in checkpoint [ 3311.929567][T22048] usb 2-1: config 0 descriptor?? [ 3311.955213][T20538] usb 1-1: config 2 has an invalid interface number: 251 but max is 2 [ 3311.975172][T20538] usb 1-1: config 2 has an invalid interface number: 172 but max is 2 [ 3311.983229][T20538] usb 1-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 3311.993208][T20538] usb 1-1: config 2 has an invalid interface number: 108 but max is 2 [ 3312.001905][T20538] usb 1-1: config 2 has no interface number 0 [ 3312.008138][T20538] usb 1-1: config 2 has no interface number 1 [ 3312.014316][T20538] usb 1-1: config 2 has no interface number 2 [ 3312.020434][T20538] usb 1-1: config 2 interface 251 altsetting 4 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 3312.031736][T21841] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 3312.031735][T20538] usb 1-1: config 2 interface 251 altsetting 4 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 3312.031768][T20538] usb 1-1: config 2 interface 251 altsetting 4 bulk endpoint 0x9 has invalid maxpacket 16 [ 3312.041069][T21841] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 3312.049400][T20538] usb 1-1: config 2 interface 172 altsetting 2 has a duplicate endpoint with address 0x1, skipping [ 3312.076955][T20538] usb 1-1: config 2 interface 172 altsetting 2 endpoint 0x3 has invalid maxpacket 951, setting to 64 [ 3312.133010][T20538] usb 1-1: config 2 interface 172 altsetting 2 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 3312.143974][T20538] usb 1-1: config 2 interface 172 altsetting 2 has a duplicate endpoint with address 0x9, skipping [ 3312.154516][T20538] usb 1-1: config 2 interface 172 altsetting 2 has a duplicate endpoint with address 0xF, skipping [ 3312.165150][T20538] usb 1-1: config 2 interface 172 altsetting 2 has an invalid endpoint with address 0x0, skipping [ 3312.175551][T20538] usb 1-1: config 2 interface 172 altsetting 2 has an invalid endpoint with address 0x80, skipping [ 3312.186058][T20538] usb 1-1: config 2 interface 172 altsetting 2 has an invalid endpoint with address 0x0, skipping [ 3312.196485][T20538] usb 1-1: config 2 interface 172 altsetting 2 has a duplicate endpoint with address 0x83, skipping [ 3312.198807][T21826] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3312.207092][T20538] usb 1-1: config 2 interface 172 altsetting 2 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 3312.207130][T20538] usb 1-1: config 2 interface 108 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 3312.237835][T20538] usb 1-1: config 2 interface 108 altsetting 9 has an invalid endpoint with address 0x96, skipping [ 3312.248754][T20538] usb 1-1: config 2 interface 108 altsetting 9 has a duplicate endpoint with address 0x2, skipping [ 3312.934476][T20538] usb 1-1: config 2 interface 108 altsetting 9 has a duplicate endpoint with address 0xF, skipping [ 3312.945135][T20538] usb 1-1: config 2 interface 108 altsetting 9 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 3312.966644][T20538] usb 1-1: config 2 interface 108 altsetting 9 has a duplicate endpoint with address 0xB, skipping [ 3313.026967][T22048] hid-multitouch 0003:1FD2:6007.03DC: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 3313.049491][T20538] usb 1-1: config 2 interface 108 altsetting 9 has a duplicate endpoint with address 0xB, skipping [ 3313.060037][T20538] usb 1-1: config 2 interface 108 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 3313.071279][T20538] usb 1-1: config 2 interface 108 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 3313.081719][T20538] usb 1-1: config 2 interface 108 altsetting 9 has an invalid endpoint with address 0x80, skipping [ 3313.092221][T20538] usb 1-1: config 2 interface 108 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 3313.102799][T20538] usb 1-1: config 2 interface 108 altsetting 9 has 14 endpoint descriptors, different from the interface descriptor's value: 13 [ 3313.116084][T20538] usb 1-1: config 2 interface 251 has no altsetting 0 [ 3313.122844][T20538] usb 1-1: config 2 interface 172 has no altsetting 0 [ 3313.129675][T20538] usb 1-1: config 2 interface 108 has no altsetting 0 [ 3313.259404][T10270] usb 2-1: USB disconnect, device number 66 [ 3313.305591][T20538] usb 1-1: New USB device found, idVendor=2639, idProduct=0001, bcdDevice=45.1f [ 3313.329007][T20538] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3313.349293][T20538] usb 1-1: Product: и [ 3313.353301][T20538] usb 1-1: Manufacturer: Ꮏ띪㞍幊덂ິ⛉㇨໓鮕蝍滆䲕ỳⴈ藹풙筽蚸췛ફ숻箮孆銏馼䁀ꗇ㦫朾 [ 3313.367219][T20538] usb 1-1: SerialNumber: 鎀鲵溧擙⇂뒏匷卅쎗ࠤ᧩㒧栗㜃珁蹇ᇘ谔ꟸᨍ쵒얢壕㉴傰ꠞ愧鸘㉞趟ﮪ晌Ⱟ瑶猷鑦팎ꎂ翵鶹䥘훻尸 [ 3313.384449][T21864] 9pnet_fd: Insufficient options for proto=fd [ 3313.395284][T21822] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 3313.455961][T21867] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 3313.491282][T21869] loop0: detected capacity change from 0 to 512 [ 3313.497425][ T3608] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 3313.527096][T21869] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 3313.535922][T21869] ext4 filesystem being mounted at /root/syzkaller-testdir1459517667/syzkaller.T2QQFo/70/bus supports timestamps until 2038 (0x7fffffff) [ 3313.636635][T20538] usb 1-1: USB disconnect, device number 73 [ 3313.893848][T21878] loop4: detected capacity change from 0 to 2048 [ 3313.906959][T21878] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 3314.017543][T21883] loop1: detected capacity change from 0 to 256 [ 3314.285315][ T3608] usb 4-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 3314.296286][ T3608] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3314.309234][ T3608] usb 4-1: Product: syz [ 3314.316305][ T3608] usb 4-1: Manufacturer: syz [ 3314.323820][ T3608] usb 4-1: SerialNumber: syz [ 3314.338229][ T3608] usb 4-1: config 0 descriptor?? [ 3314.376841][T20136] EXT4-fs (loop0): unmounting filesystem. [ 3314.470011][T21891] loop0: detected capacity change from 0 to 2048 [ 3314.505450][T21891] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 3314.645259][ T4530] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 3314.942960][T21463] EXT4-fs (loop4): unmounting filesystem. [ 3315.100352][T21906] loop1: detected capacity change from 0 to 256 [ 3315.225495][ T4530] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3315.254878][ T4530] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3315.283064][ T3608] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 3315.292754][ T4530] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 3315.337448][T20136] EXT4-fs (loop0): unmounting filesystem. [ 3315.343775][ T4530] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3315.360484][ T4530] usb 3-1: config 0 descriptor?? [ 3315.366330][T21908] syz-executor.0[21908] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3315.366403][T21908] syz-executor.0[21908] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3315.378664][T21908] syz-executor.0[21908] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3315.390319][T21908] syz-executor.0[21908] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3315.402320][T21908] syz-executor.0[21908] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3315.414187][T21908] syz-executor.0[21908] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3315.420178][T21904] loop4: detected capacity change from 0 to 40427 [ 3315.444367][T21904] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 3315.452001][T21904] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 3315.461350][T21904] F2FS-fs (loop4): invalid crc value [ 3315.467939][T21904] F2FS-fs (loop4): Found nat_bits in checkpoint [ 3315.495197][ T3608] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 3315.505191][ T3608] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 3315.509457][T21904] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 3315.515349][ T3608] asix: probe of 4-1:0.0 failed with error -71 [ 3315.522042][T21904] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 3315.529296][ T3608] usb 4-1: USB disconnect, device number 50 [ 3316.015240][T14192] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 3316.059472][T21922] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 3316.285696][ T4530] usbhid 3-1:0.0: can't add hid device: -71 [ 3316.291987][ T4530] usbhid: probe of 3-1:0.0 failed with error -71 [ 3316.303058][ T4530] usb 3-1: USB disconnect, device number 101 [ 3316.355236][T10270] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 3316.575183][T14192] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3316.585919][T14192] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3316.595435][T14192] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 3316.604275][T14192] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3316.612670][T14192] usb 1-1: config 0 descriptor?? [ 3316.715181][T10270] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3316.726011][T10270] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3316.735526][T10270] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 3316.744348][T10270] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3316.752631][T10270] usb 5-1: config 0 descriptor?? [ 3316.860269][T21932] loop1: detected capacity change from 0 to 2048 [ 3316.886836][T21932] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 3316.958347][T21937] syz-executor.2[21937] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3316.958434][T21937] syz-executor.2[21937] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3317.757237][T18688] EXT4-fs (loop1): unmounting filesystem. [ 3317.801313][T21948] loop3: detected capacity change from 0 to 256 [ 3318.081399][T21954] syz-executor.1[21954] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3318.081478][T21954] syz-executor.1[21954] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3318.093217][T14192] usb 1-1: string descriptor 0 read error: -71 [ 3318.135297][T14192] uclogic 0003:256C:006D.03DD: failed retrieving string descriptor #200: -71 [ 3318.144376][T14192] uclogic 0003:256C:006D.03DD: failed retrieving pen parameters: -71 [ 3318.155232][T14192] uclogic 0003:256C:006D.03DD: failed probing pen v2 parameters: -71 [ 3318.163277][T14192] uclogic 0003:256C:006D.03DD: failed probing parameters: -71 [ 3318.170895][T14192] uclogic: probe of 0003:256C:006D.03DD failed with error -71 [ 3318.179030][T14192] usb 1-1: USB disconnect, device number 74 [ 3318.195197][T10270] usb 5-1: string descriptor 0 read error: -71 [ 3318.223457][T10270] uclogic 0003:256C:006D.03DE: failed retrieving string descriptor #200: -71 [ 3318.247653][T10270] uclogic 0003:256C:006D.03DE: failed retrieving pen parameters: -71 [ 3318.267387][T10270] uclogic 0003:256C:006D.03DE: failed probing pen v2 parameters: -71 [ 3318.283655][T10270] uclogic 0003:256C:006D.03DE: failed probing parameters: -71 [ 3318.300109][T10270] uclogic: probe of 0003:256C:006D.03DE failed with error -71 [ 3318.311186][T10270] usb 5-1: USB disconnect, device number 66 [ 3318.325861][T21956] loop1: detected capacity change from 0 to 40427 [ 3318.333029][T21956] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 3318.340893][T21956] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 3318.352918][T21956] F2FS-fs (loop1): invalid crc value [ 3318.397730][T21956] F2FS-fs (loop1): Found nat_bits in checkpoint [ 3318.527242][T21956] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 3318.534133][T21956] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 3318.653336][T21970] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 3318.785255][T10270] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 3318.952243][T21980] loop2: detected capacity change from 0 to 2048 [ 3318.966880][T21980] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 3319.455479][T20538] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 3319.506913][T10270] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3319.547404][T10270] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3319.557696][T10270] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 3319.567248][T10270] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3319.603675][T10270] usb 1-1: config 0 descriptor?? [ 3319.820955][T21788] EXT4-fs (loop2): unmounting filesystem. [ 3320.127334][T22004] loop1: detected capacity change from 0 to 256 [ 3320.245538][T20538] usb 5-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 3320.265351][T20538] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3320.304347][T20538] usb 5-1: Product: syz [ 3320.306524][T18841] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 3320.313160][T20538] usb 5-1: Manufacturer: syz [ 3320.320369][T20538] usb 5-1: SerialNumber: syz [ 3320.327871][T20538] usb 5-1: config 0 descriptor?? [ 3320.505259][T10270] usbhid 1-1:0.0: can't add hid device: -71 [ 3320.511040][T10270] usbhid: probe of 1-1:0.0 failed with error -71 [ 3320.517788][T10270] usb 1-1: USB disconnect, device number 75 [ 3320.735234][T18841] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3320.746144][T18841] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3320.759061][T18841] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 3320.768282][T18841] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3320.778091][T18841] usb 4-1: config 0 descriptor?? [ 3321.048182][T22015] loop1: detected capacity change from 0 to 40427 [ 3321.057341][T22020] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 3321.066697][T22015] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 3321.074412][T22015] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 3321.083453][T22015] F2FS-fs (loop1): invalid crc value [ 3321.116322][T22015] F2FS-fs (loop1): Found nat_bits in checkpoint [ 3321.177575][T22015] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 3321.184434][T22015] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 3321.495345][T20538] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 3321.505834][T20538] asix: probe of 5-1:0.0 failed with error -71 [ 3321.516999][T20538] usb 5-1: USB disconnect, device number 67 [ 3321.658912][T22028] loop2: detected capacity change from 0 to 2048 [ 3321.676763][T22028] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 3321.765211][T18841] usb 4-1: string descriptor 0 read error: -71 [ 3321.795263][T18841] uclogic 0003:256C:006D.03DF: failed retrieving string descriptor #200: -71 [ 3321.804280][T18841] uclogic 0003:256C:006D.03DF: failed retrieving pen parameters: -71 [ 3321.812964][T18841] uclogic 0003:256C:006D.03DF: failed probing pen v2 parameters: -71 [ 3322.132715][T18841] uclogic 0003:256C:006D.03DF: failed probing parameters: -71 [ 3322.140088][T18841] uclogic: probe of 0003:256C:006D.03DF failed with error -71 [ 3322.148164][T18841] usb 4-1: USB disconnect, device number 51 [ 3322.157084][T22038] bpf_get_probe_write_proto: 16 callbacks suppressed [ 3322.157101][T22038] syz-executor.0[22038] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3322.163673][T22038] syz-executor.0[22038] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3322.176668][T22038] syz-executor.0[22038] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3322.188413][T22038] syz-executor.0[22038] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3322.227900][T22041] loop4: detected capacity change from 0 to 2048 [ 3322.256872][T22041] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 3322.805254][ T28] audit: type=1326 audit(1717587201.355:5030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22036 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6af87cee9 code=0x7ffc0000 [ 3323.212342][T21788] EXT4-fs (loop2): unmounting filesystem. [ 3323.278133][T21463] EXT4-fs (loop4): unmounting filesystem. [ 3323.311350][T22054] loop1: detected capacity change from 0 to 2048 [ 3323.340241][ T28] audit: type=1326 audit(1717587201.355:5031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22036 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6af87cee9 code=0x7ffc0000 [ 3323.341856][T22054] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 3323.382586][ T28] audit: type=1326 audit(1717587201.375:5032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22036 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb6af87cee9 code=0x7ffc0000 [ 3323.406549][ T28] audit: type=1326 audit(1717587201.375:5033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22036 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6af87cee9 code=0x7ffc0000 [ 3323.430591][ T28] audit: type=1326 audit(1717587201.375:5034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22036 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6af87cee9 code=0x7ffc0000 [ 3323.454557][ T28] audit: type=1326 audit(1717587201.395:5035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22036 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7fb6af87cee9 code=0x7ffc0000 [ 3323.478529][ T28] audit: type=1326 audit(1717587201.395:5036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22036 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6af87cee9 code=0x7ffc0000 [ 3323.503223][ T28] audit: type=1326 audit(1717587201.405:5037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22036 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6af87cee9 code=0x7ffc0000 [ 3323.529427][ T28] audit: type=1326 audit(1717587201.405:5038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22036 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb6af87cee9 code=0x7ffc0000 [ 3323.568150][ T28] audit: type=1326 audit(1717587201.415:5039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22036 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6af87cee9 code=0x7ffc0000 [ 3323.680141][T22068] loop4: detected capacity change from 0 to 256 [ 3323.936738][T22043] loop0: detected capacity change from 0 to 40427 [ 3323.944080][T22043] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 3323.951766][T22043] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 3323.973388][T22043] F2FS-fs (loop0): invalid crc value [ 3324.010097][T22043] F2FS-fs (loop0): Found nat_bits in checkpoint [ 3324.162056][T18688] EXT4-fs (loop1): unmounting filesystem. [ 3324.210857][T22043] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 3324.217927][T22043] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 3324.287631][T22081] loop2: detected capacity change from 0 to 2048 [ 3324.354575][T22081] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 3324.958217][T22092] syz-executor.3[22092] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3324.958289][T22092] syz-executor.3[22092] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3324.990631][T22092] syz-executor.3[22092] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3325.015237][T22092] syz-executor.3[22092] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3325.030505][T22095] loop4: detected capacity change from 0 to 2048 [ 3325.078966][T22095] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 3325.088494][T22101] loop3: detected capacity change from 0 to 2048 [ 3325.159078][T21788] EXT4-fs (loop2): unmounting filesystem. [ 3325.214600][T22101] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 3325.751416][T19145] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 3326.089021][T21652] EXT4-fs (loop3): unmounting filesystem. [ 3326.099163][T21463] EXT4-fs (loop4): unmounting filesystem. [ 3326.147845][T22119] loop1: detected capacity change from 0 to 2048 [ 3326.173789][T22119] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 3326.191217][T22123] loop4: detected capacity change from 0 to 2048 [ 3326.206843][T22123] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 3326.235492][ T3608] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 3328.000299][T21463] EXT4-fs (loop4): unmounting filesystem. [ 3328.006470][T18688] EXT4-fs (loop1): unmounting filesystem. [ 3328.076854][T22144] syz-executor.0[22144] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3328.076944][T22144] syz-executor.0[22144] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3328.204614][T22144] syz-executor.0[22144] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3328.219028][T22144] syz-executor.0[22144] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3328.463486][T22148] loop3: detected capacity change from 0 to 256 [ 3328.483276][T19145] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 3328.494190][T19145] usb 1-1: can't read configurations, error -71 [ 3328.705226][T22151] loop2: detected capacity change from 0 to 2048 [ 3328.717220][T22151] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 3328.805193][ T3608] usb 3-1: device descriptor read/all, error -71 [ 3328.855173][T10975] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 3329.403453][T22152] loop0: detected capacity change from 0 to 40427 [ 3329.459154][T22152] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 3329.469520][T22162] loop3: detected capacity change from 0 to 2048 [ 3329.474521][T22160] loop4: detected capacity change from 0 to 2048 [ 3329.476761][T22152] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 3329.491511][T22152] F2FS-fs (loop0): invalid crc value [ 3329.498809][T22162] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 3329.498935][T22152] F2FS-fs (loop0): Found nat_bits in checkpoint [ 3329.507429][T22160] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 3329.586167][T21788] EXT4-fs (loop2): unmounting filesystem. [ 3329.615180][T22152] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 3329.622117][T22152] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 3330.531263][T21652] EXT4-fs (loop3): unmounting filesystem. [ 3330.541188][T21463] EXT4-fs (loop4): unmounting filesystem. [ 3330.590570][T10975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3330.601897][T10975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3330.611668][T10975] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 3330.620545][T10975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3330.624074][T22184] loop4: detected capacity change from 0 to 2048 [ 3330.635997][T10975] usb 2-1: config 0 descriptor?? [ 3330.640875][T22186] loop3: detected capacity change from 0 to 2048 [ 3330.755908][T22186] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 3330.892406][T22184] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 3331.655982][ T3608] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 3331.670136][T21652] EXT4-fs (loop3): unmounting filesystem. [ 3331.876563][T22204] loop0: detected capacity change from 0 to 256 [ 3332.192307][T21463] EXT4-fs (loop4): unmounting filesystem. [ 3332.205207][T10975] usbhid 2-1:0.0: can't add hid device: -71 [ 3332.207246][T22206] syz-executor.4[22206] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3332.211022][T10975] usbhid: probe of 2-1:0.0 failed with error -71 [ 3332.211046][T22206] syz-executor.4[22206] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3332.223879][T10975] usb 2-1: USB disconnect, device number 67 [ 3332.246481][T22206] syz-executor.4[22206] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3332.246550][T22206] syz-executor.4[22206] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3332.315211][T18841] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 3332.460015][T22210] loop4: detected capacity change from 0 to 256 [ 3332.785197][ T3608] usb 3-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 3332.794182][ T3608] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3332.802189][ T3608] usb 3-1: Product: syz [ 3332.807163][ T3608] usb 3-1: Manufacturer: syz [ 3332.812627][ T3608] usb 3-1: SerialNumber: syz [ 3332.854339][T22215] loop0: detected capacity change from 0 to 256 [ 3332.930455][T18841] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3333.025315][ T3608] usb 3-1: config 0 descriptor?? [ 3333.030359][T18841] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3333.050593][T18841] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 3333.059601][T18841] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3333.067943][T18841] usb 4-1: config 0 descriptor?? [ 3333.305250][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 3333.305305][ T28] audit: type=1326 audit(1717587212.095:5047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22216 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6af87cee9 code=0x7ffc0000 [ 3333.336004][ T28] audit: type=1326 audit(1717587212.095:5048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22216 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6af87cee9 code=0x7ffc0000 [ 3333.360025][ T28] audit: type=1326 audit(1717587212.105:5049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22216 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb6af87cee9 code=0x7ffc0000 [ 3333.383865][ T28] audit: type=1326 audit(1717587212.105:5050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22216 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6af87cee9 code=0x7ffc0000 [ 3333.407684][ T28] audit: type=1326 audit(1717587212.105:5051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22216 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6af87cee9 code=0x7ffc0000 [ 3333.431519][ T28] audit: type=1326 audit(1717587212.115:5052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22216 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7fb6af87cee9 code=0x7ffc0000 [ 3333.455369][ T28] audit: type=1326 audit(1717587212.115:5053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22216 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6af87cee9 code=0x7ffc0000 [ 3333.479280][ T28] audit: type=1326 audit(1717587212.115:5054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22216 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6af87cee9 code=0x7ffc0000 [ 3333.503135][ T28] audit: type=1326 audit(1717587212.115:5055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22216 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb6af87cee9 code=0x7ffc0000 [ 3333.526996][ T28] audit: type=1326 audit(1717587212.125:5056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22216 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6af87cee9 code=0x7ffc0000 [ 3333.588919][T22221] loop0: detected capacity change from 0 to 2048 [ 3333.606694][T22221] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 3334.118974][T22230] loop1: detected capacity change from 0 to 2048 [ 3334.136806][T22230] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 3334.585637][T20136] EXT4-fs (loop0): unmounting filesystem. [ 3334.596290][ T3608] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 3334.607731][ T3608] asix: probe of 3-1:0.0 failed with error -71 [ 3334.614589][ T3608] usb 3-1: USB disconnect, device number 103 [ 3334.620480][T18841] usb 4-1: string descriptor 0 read error: -71 [ 3334.655194][T18841] uclogic 0003:256C:006D.03E0: failed retrieving string descriptor #200: -71 [ 3334.663807][T18841] uclogic 0003:256C:006D.03E0: failed retrieving pen parameters: -71 [ 3334.671827][T18841] uclogic 0003:256C:006D.03E0: failed probing pen v2 parameters: -71 [ 3334.679905][T18841] uclogic 0003:256C:006D.03E0: failed probing parameters: -71 [ 3334.687459][T18841] uclogic: probe of 0003:256C:006D.03E0 failed with error -71 [ 3334.695603][T18841] usb 4-1: USB disconnect, device number 52 [ 3334.894182][T18688] EXT4-fs (loop1): unmounting filesystem. [ 3334.930984][T22248] loop1: detected capacity change from 0 to 512 [ 3334.959749][T22246] loop0: detected capacity change from 0 to 40427 [ 3334.966965][T22246] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 3334.974664][T22246] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 3334.985226][T22248] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 3335.001949][T22248] ext4 filesystem being mounted at /root/syzkaller-testdir3126533547/syzkaller.KknAhP/161/bus supports timestamps until 2038 (0x7fffffff) [ 3335.075403][T22246] F2FS-fs (loop0): invalid crc value [ 3335.113356][T22256] syz-executor.2[22256] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3335.113428][T22256] syz-executor.2[22256] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3335.126693][T22246] F2FS-fs (loop0): Found nat_bits in checkpoint [ 3335.325852][T22256] syz-executor.2[22256] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3335.326738][T22256] syz-executor.2[22256] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3335.369604][T22246] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 3335.388673][T22246] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 3335.396070][ T4530] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 3335.825166][T22267] loop2: detected capacity change from 0 to 256 [ 3336.611500][T18688] EXT4-fs (loop1): unmounting filesystem. [ 3336.825515][T22282] loop2: detected capacity change from 0 to 512 [ 3336.895630][T22284] loop4: detected capacity change from 0 to 256 [ 3337.017050][T22285] loop0: detected capacity change from 0 to 256 [ 3337.315614][T22282] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 3337.345458][T22282] ext4 filesystem being mounted at /root/syzkaller-testdir3481370067/syzkaller.8ExMjY/27/bus supports timestamps until 2038 (0x7fffffff) [ 3337.495573][ T4530] usb 4-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 3337.507120][ T4530] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3337.515173][ T4530] usb 4-1: Product: syz [ 3337.519321][ T4530] usb 4-1: Manufacturer: syz [ 3337.523920][ T4530] usb 4-1: SerialNumber: syz [ 3337.736329][ T4530] usb 4-1: config 0 descriptor?? [ 3337.747497][T22294] loop1: detected capacity change from 0 to 256 [ 3337.822695][T21788] EXT4-fs (loop2): unmounting filesystem. [ 3337.929956][T22300] loop4: detected capacity change from 0 to 256 [ 3338.115211][T19145] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 3338.375134][T19145] usb 3-1: Using ep0 maxpacket: 32 [ 3338.465185][ T3608] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 3338.575249][T19145] usb 3-1: config 2 has an invalid interface number: 251 but max is 2 [ 3338.588049][T19145] usb 3-1: config 2 has an invalid interface number: 172 but max is 2 [ 3338.596162][T19145] usb 3-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 3338.604616][T19145] usb 3-1: config 2 has an invalid interface number: 108 but max is 2 [ 3338.612704][T19145] usb 3-1: config 2 has no interface number 0 [ 3338.618756][T19145] usb 3-1: config 2 has no interface number 1 [ 3338.624639][T19145] usb 3-1: config 2 has no interface number 2 [ 3338.630567][T19145] usb 3-1: config 2 interface 251 altsetting 4 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 3338.641216][T19145] usb 3-1: config 2 interface 251 altsetting 4 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 3338.651981][T19145] usb 3-1: config 2 interface 251 altsetting 4 bulk endpoint 0x9 has invalid maxpacket 16 [ 3338.661717][T19145] usb 3-1: config 2 interface 172 altsetting 2 has a duplicate endpoint with address 0x1, skipping [ 3338.672252][T19145] usb 3-1: config 2 interface 172 altsetting 2 endpoint 0x3 has invalid maxpacket 951, setting to 64 [ 3338.682940][T19145] usb 3-1: config 2 interface 172 altsetting 2 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 3338.693677][T19145] usb 3-1: config 2 interface 172 altsetting 2 has a duplicate endpoint with address 0x9, skipping [ 3338.704327][T19145] usb 3-1: config 2 interface 172 altsetting 2 has a duplicate endpoint with address 0xF, skipping [ 3338.715350][T19145] usb 3-1: config 2 interface 172 altsetting 2 has an invalid endpoint with address 0x0, skipping [ 3338.725899][T19145] usb 3-1: config 2 interface 172 altsetting 2 has an invalid endpoint with address 0x80, skipping [ 3338.736478][T19145] usb 3-1: config 2 interface 172 altsetting 2 has an invalid endpoint with address 0x0, skipping [ 3338.747013][T19145] usb 3-1: config 2 interface 172 altsetting 2 has a duplicate endpoint with address 0x83, skipping [ 3338.757704][T19145] usb 3-1: config 2 interface 172 altsetting 2 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 3338.768636][T19145] usb 3-1: config 2 interface 108 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 3338.779089][T19145] usb 3-1: config 2 interface 108 altsetting 9 has an invalid endpoint with address 0x96, skipping [ 3338.789607][T19145] usb 3-1: config 2 interface 108 altsetting 9 has a duplicate endpoint with address 0x2, skipping [ 3338.800104][T19145] usb 3-1: config 2 interface 108 altsetting 9 has a duplicate endpoint with address 0xF, skipping [ 3338.810620][T19145] usb 3-1: config 2 interface 108 altsetting 9 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 3338.821359][T19145] usb 3-1: config 2 interface 108 altsetting 9 has a duplicate endpoint with address 0xB, skipping [ 3338.831871][T19145] usb 3-1: config 2 interface 108 altsetting 9 has a duplicate endpoint with address 0xB, skipping [ 3338.842351][T19145] usb 3-1: config 2 interface 108 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 3338.845207][ T3608] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3338.852790][T19145] usb 3-1: config 2 interface 108 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 3338.870289][ T3608] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3338.883461][T19145] usb 3-1: config 2 interface 108 altsetting 9 has an invalid endpoint with address 0x80, skipping [ 3338.891313][ T3608] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 3338.902985][ T3608] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3338.905135][T19145] usb 3-1: config 2 interface 108 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 3338.921584][ T3608] usb 1-1: config 0 descriptor?? [ 3338.928458][T19145] usb 3-1: config 2 interface 108 altsetting 9 has 14 endpoint descriptors, different from the interface descriptor's value: 13 [ 3338.948887][T19145] usb 3-1: config 2 interface 251 has no altsetting 0 [ 3338.959315][T19145] usb 3-1: config 2 interface 172 has no altsetting 0 [ 3338.965999][ T4530] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 3338.975722][ T4530] asix: probe of 4-1:0.0 failed with error -71 [ 3338.982225][T19145] usb 3-1: config 2 interface 108 has no altsetting 0 [ 3338.988910][ T4530] usb 4-1: USB disconnect, device number 53 [ 3339.123617][T22309] syz-executor.4[22309] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3339.123696][T22309] syz-executor.4[22309] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3339.136020][T22309] syz-executor.4[22309] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3339.147721][T22309] syz-executor.4[22309] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3339.155239][T19145] usb 3-1: New USB device found, idVendor=2639, idProduct=0001, bcdDevice=45.1f [ 3339.195146][T19145] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3339.202960][T19145] usb 3-1: Product: и [ 3339.212230][T19145] usb 3-1: Manufacturer: Ꮏ띪㞍幊덂ິ⛉㇨໓鮕蝍滆䲕ỳⴈ藹풙筽蚸췛ફ숻箮孆銏馼䁀ꗇ㦫朾 [ 3339.287896][T19145] usb 3-1: SerialNumber: 鎀鲵溧擙⇂뒏匷卅쎗ࠤ᧩㒧栗㜃珁蹇ᇘ谔ꟸᨍ쵒얢壕㉴傰ꠞ愧鸘㉞趟ﮪ晌Ⱟ瑶猷鑦팎ꎂ翵鶹䥘훻尸 [ 3339.315260][T22299] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 3339.475179][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 3339.475195][ T28] audit: type=1326 audit(1717587218.365:5067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22310 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9b9e7cee9 code=0x7ffc0000 [ 3339.649512][ T28] audit: type=1326 audit(1717587218.365:5068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22310 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9b9e7cee9 code=0x7ffc0000 [ 3339.673733][ T28] audit: type=1326 audit(1717587218.365:5069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22310 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb9b9e7cee9 code=0x7ffc0000 [ 3339.689877][T22315] loop3: detected capacity change from 0 to 512 [ 3339.697654][ T28] audit: type=1326 audit(1717587218.365:5070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22310 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9b9e7cee9 code=0x7ffc0000 [ 3339.729242][T19145] usb 3-1: USB disconnect, device number 104 [ 3339.734912][ T28] audit: type=1326 audit(1717587218.365:5071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22310 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9b9e7cee9 code=0x7ffc0000 [ 3339.759437][ T28] audit: type=1326 audit(1717587218.375:5072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22310 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7fb9b9e7cee9 code=0x7ffc0000 [ 3339.783500][ T28] audit: type=1326 audit(1717587218.375:5073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22310 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9b9e7cee9 code=0x7ffc0000 [ 3339.803115][T22315] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 3339.816175][T22315] ext4 filesystem being mounted at /root/syzkaller-testdir3195156106/syzkaller.uLJuSx/27/bus supports timestamps until 2038 (0x7fffffff) [ 3339.896134][ T28] audit: type=1326 audit(1717587218.375:5074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22310 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9b9e7cee9 code=0x7ffc0000 [ 3339.920237][ T28] audit: type=1326 audit(1717587218.375:5075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22310 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb9b9e7cee9 code=0x7ffc0000 [ 3339.944214][ T28] audit: type=1326 audit(1717587218.375:5076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22310 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9b9e7cee9 code=0x7ffc0000 [ 3340.005209][ T3608] usb 1-1: string descriptor 0 read error: -71 [ 3340.025186][ T3608] uclogic 0003:256C:006D.03E1: failed retrieving string descriptor #200: -71 [ 3340.033899][ T3608] uclogic 0003:256C:006D.03E1: failed retrieving pen parameters: -71 [ 3340.042023][ T3608] uclogic 0003:256C:006D.03E1: failed probing pen v2 parameters: -71 [ 3340.049995][ T3608] uclogic 0003:256C:006D.03E1: failed probing parameters: -71 [ 3340.066727][ T3608] uclogic: probe of 0003:256C:006D.03E1 failed with error -71 [ 3341.225838][T22324] loop1: detected capacity change from 0 to 256 [ 3341.233939][ T3608] usb 1-1: USB disconnect, device number 78 [ 3341.291270][T21652] EXT4-fs (loop3): unmounting filesystem. [ 3341.353348][T22333] loop4: detected capacity change from 0 to 512 [ 3341.367212][T22333] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 3341.376103][T22333] ext4 filesystem being mounted at /root/syzkaller-testdir3795617587/syzkaller.5SQXRE/42/bus supports timestamps until 2038 (0x7fffffff) [ 3341.510091][T22338] syz-executor.2[22338] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3341.512079][T22338] syz-executor.2[22338] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3342.219068][T21463] EXT4-fs (loop4): unmounting filesystem. [ 3342.263224][T22352] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 3342.273693][T22354] syz-executor.4[22354] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3342.273765][T22354] syz-executor.4[22354] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3342.295009][T22354] syz-executor.4[22354] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3342.307529][T22354] syz-executor.4[22354] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3342.467456][T22358] loop3: detected capacity change from 0 to 256 [ 3342.635191][T20538] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 3343.155213][T20538] usb 5-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 3343.175125][T20538] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3343.182950][T20538] usb 5-1: Product: syz [ 3343.186961][T20538] usb 5-1: Manufacturer: syz [ 3343.191364][T20538] usb 5-1: SerialNumber: syz [ 3343.202697][T20538] usb 5-1: config 0 descriptor?? [ 3343.325176][T18010] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 3343.555423][T22378] loop3: detected capacity change from 0 to 2048 [ 3343.575122][T18010] usb 2-1: Using ep0 maxpacket: 32 [ 3343.590342][T22378] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 3344.015174][T18010] usb 2-1: config 2 has an invalid interface number: 251 but max is 2 [ 3344.023201][T18010] usb 2-1: config 2 has an invalid interface number: 172 but max is 2 [ 3344.031195][T18010] usb 2-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 3344.039695][T18010] usb 2-1: config 2 has an invalid interface number: 108 but max is 2 [ 3344.047697][T18010] usb 2-1: config 2 has no interface number 0 [ 3344.053574][T18010] usb 2-1: config 2 has no interface number 1 [ 3344.059793][T18010] usb 2-1: config 2 has no interface number 2 [ 3344.065733][T18010] usb 2-1: config 2 interface 251 altsetting 4 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 3344.076395][T18010] usb 2-1: config 2 interface 251 altsetting 4 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 3344.087152][T18010] usb 2-1: config 2 interface 251 altsetting 4 bulk endpoint 0x9 has invalid maxpacket 16 [ 3344.096870][T18010] usb 2-1: config 2 interface 172 altsetting 2 has a duplicate endpoint with address 0x1, skipping [ 3344.107391][T18010] usb 2-1: config 2 interface 172 altsetting 2 endpoint 0x3 has invalid maxpacket 951, setting to 64 [ 3344.118049][T18010] usb 2-1: config 2 interface 172 altsetting 2 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 3344.128831][T18841] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 3344.136290][T18010] usb 2-1: config 2 interface 172 altsetting 2 has a duplicate endpoint with address 0x9, skipping [ 3344.146810][T18010] usb 2-1: config 2 interface 172 altsetting 2 has a duplicate endpoint with address 0xF, skipping [ 3344.157274][T18010] usb 2-1: config 2 interface 172 altsetting 2 has an invalid endpoint with address 0x0, skipping [ 3344.167765][T18010] usb 2-1: config 2 interface 172 altsetting 2 has an invalid endpoint with address 0x80, skipping [ 3344.178247][T18010] usb 2-1: config 2 interface 172 altsetting 2 has an invalid endpoint with address 0x0, skipping [ 3344.188736][T18010] usb 2-1: config 2 interface 172 altsetting 2 has a duplicate endpoint with address 0x83, skipping [ 3344.199429][T18010] usb 2-1: config 2 interface 172 altsetting 2 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 3344.211174][T18010] usb 2-1: config 2 interface 108 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 3344.221643][T18010] usb 2-1: config 2 interface 108 altsetting 9 has an invalid endpoint with address 0x96, skipping [ 3344.232193][T18010] usb 2-1: config 2 interface 108 altsetting 9 has a duplicate endpoint with address 0x2, skipping [ 3344.242673][T18010] usb 2-1: config 2 interface 108 altsetting 9 has a duplicate endpoint with address 0xF, skipping [ 3344.253386][T18010] usb 2-1: config 2 interface 108 altsetting 9 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 3344.264184][T18010] usb 2-1: config 2 interface 108 altsetting 9 has a duplicate endpoint with address 0xB, skipping [ 3344.274832][T18010] usb 2-1: config 2 interface 108 altsetting 9 has a duplicate endpoint with address 0xB, skipping [ 3344.285458][T18010] usb 2-1: config 2 interface 108 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 3344.295900][T18010] usb 2-1: config 2 interface 108 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 3344.306329][T18010] usb 2-1: config 2 interface 108 altsetting 9 has an invalid endpoint with address 0x80, skipping [ 3344.316821][T18010] usb 2-1: config 2 interface 108 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 3344.327243][T18010] usb 2-1: config 2 interface 108 altsetting 9 has 14 endpoint descriptors, different from the interface descriptor's value: 13 [ 3344.340291][T18010] usb 2-1: config 2 interface 251 has no altsetting 0 [ 3344.346845][T18010] usb 2-1: config 2 interface 172 has no altsetting 0 [ 3344.353456][T18010] usb 2-1: config 2 interface 108 has no altsetting 0 [ 3344.405344][T21652] EXT4-fs (loop3): unmounting filesystem. [ 3344.423066][T22392] syz-executor.3[22392] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3344.423142][T22392] syz-executor.3[22392] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3344.436188][T22392] syz-executor.3[22392] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3344.447909][T22392] syz-executor.3[22392] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3344.462270][T20538] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 3344.484128][T20538] asix: probe of 5-1:0.0 failed with error -71 [ 3344.490917][T20538] usb 5-1: USB disconnect, device number 68 [ 3344.525334][T18841] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3344.880374][T18010] usb 2-1: New USB device found, idVendor=2639, idProduct=0001, bcdDevice=45.1f [ 3344.891341][T18010] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3344.900248][T18841] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3344.910839][T18010] usb 2-1: Product: и [ 3344.914740][T18841] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 3344.924620][T18010] usb 2-1: Manufacturer: Ꮏ띪㞍幊덂ິ⛉㇨໓鮕蝍滆䲕ỳⴈ藹풙筽蚸췛ફ숻箮孆銏馼䁀ꗇ㦫朾 [ 3344.938464][T18841] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3344.947348][T18010] usb 2-1: SerialNumber: 鎀鲵溧擙⇂뒏匷卅쎗ࠤ᧩㒧栗㜃珁蹇ᇘ谔ꟸᨍ쵒얢壕㉴傰ꠞ愧鸘㉞趟ﮪ晌Ⱟ瑶猷鑦팎ꎂ翵鶹䥘훻尸 [ 3345.036981][T18841] usb 3-1: config 0 descriptor?? [ 3345.125517][T22401] loop4: detected capacity change from 0 to 2048 [ 3345.135242][T22368] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 3345.137051][T22401] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 3345.538801][T22409] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 3345.706427][T18010] usb 2-1: USB disconnect, device number 68 [ 3345.991445][T21463] EXT4-fs (loop4): unmounting filesystem. [ 3346.010673][T22415] loop4: detected capacity change from 0 to 2048 [ 3346.026762][T22415] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 3346.150153][T22421] loop0: detected capacity change from 0 to 2048 [ 3346.176681][T22421] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 3346.826485][T22428] loop1: detected capacity change from 0 to 256 [ 3346.971177][T21463] EXT4-fs (loop4): unmounting filesystem. [ 3347.156486][T18841] usb 3-1: string descriptor 0 read error: -71 [ 3347.175646][T18841] uclogic 0003:256C:006D.03E2: failed retrieving string descriptor #200: -71 [ 3347.184958][T18841] uclogic 0003:256C:006D.03E2: failed retrieving pen parameters: -71 [ 3347.193202][T18841] uclogic 0003:256C:006D.03E2: failed probing pen v2 parameters: -71 [ 3347.201198][T18841] uclogic 0003:256C:006D.03E2: failed probing parameters: -71 [ 3347.208574][T18841] uclogic: probe of 0003:256C:006D.03E2 failed with error -71 [ 3347.216691][T18841] usb 3-1: USB disconnect, device number 105 [ 3347.375155][T20538] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 3347.435203][ T3608] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 3347.615463][T20538] usb 5-1: Using ep0 maxpacket: 32 [ 3347.631058][T20136] EXT4-fs (loop0): unmounting filesystem. [ 3347.723125][T22456] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 3347.815221][ T3608] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3347.825191][T20538] usb 5-1: config 2 has an invalid interface number: 251 but max is 2 [ 3347.826044][ T3608] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3347.834008][T20538] usb 5-1: config 2 has an invalid interface number: 172 but max is 2 [ 3347.843663][ T3608] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice=10.00 [ 3347.851757][T20538] usb 5-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 3347.860407][ T3608] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3347.861414][ T3608] usb 4-1: config 0 descriptor?? [ 3347.868940][T20538] usb 5-1: config 2 has an invalid interface number: 108 but max is 2 [ 3347.876865][T18841] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 3347.881485][T20538] usb 5-1: config 2 has no interface number 0 [ 3347.881502][T20538] usb 5-1: config 2 has no interface number 1 [ 3347.881517][T20538] usb 5-1: config 2 has no interface number 2 [ 3347.914659][T20538] usb 5-1: config 2 interface 251 altsetting 4 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 3347.925339][T20538] usb 5-1: config 2 interface 251 altsetting 4 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 3347.936176][T20538] usb 5-1: config 2 interface 251 altsetting 4 bulk endpoint 0x9 has invalid maxpacket 16 [ 3347.945961][T20538] usb 5-1: config 2 interface 172 altsetting 2 has a duplicate endpoint with address 0x1, skipping [ 3347.956667][T20538] usb 5-1: config 2 interface 172 altsetting 2 endpoint 0x3 has invalid maxpacket 951, setting to 64 [ 3347.967368][T20538] usb 5-1: config 2 interface 172 altsetting 2 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 3347.978123][T20538] usb 5-1: config 2 interface 172 altsetting 2 has a duplicate endpoint with address 0x9, skipping [ 3347.988632][T20538] usb 5-1: config 2 interface 172 altsetting 2 has a duplicate endpoint with address 0xF, skipping [ 3347.999320][T20538] usb 5-1: config 2 interface 172 altsetting 2 has an invalid endpoint with address 0x0, skipping [ 3348.016395][T20538] usb 5-1: config 2 interface 172 altsetting 2 has an invalid endpoint with address 0x80, skipping [ 3348.027246][T20538] usb 5-1: config 2 interface 172 altsetting 2 has an invalid endpoint with address 0x0, skipping [ 3348.038609][T20538] usb 5-1: config 2 interface 172 altsetting 2 has a duplicate endpoint with address 0x83, skipping [ 3348.049259][T20538] usb 5-1: config 2 interface 172 altsetting 2 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 3348.060040][T20538] usb 5-1: config 2 interface 108 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 3348.070447][T20538] usb 5-1: config 2 interface 108 altsetting 9 has an invalid endpoint with address 0x96, skipping [ 3348.080916][T20538] usb 5-1: config 2 interface 108 altsetting 9 has a duplicate endpoint with address 0x2, skipping [ 3348.091405][T20538] usb 5-1: config 2 interface 108 altsetting 9 has a duplicate endpoint with address 0xF, skipping [ 3348.101908][T20538] usb 5-1: config 2 interface 108 altsetting 9 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 3348.112797][T20538] usb 5-1: config 2 interface 108 altsetting 9 has a duplicate endpoint with address 0xB, skipping [ 3348.123333][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 3348.123349][ T28] audit: type=1400 audit(1717587227.035:5104): avc: denied { relabelfrom } for pid=22457 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 3348.149471][T20538] usb 5-1: config 2 interface 108 altsetting 9 has a duplicate endpoint with address 0xB, skipping [ 3348.151047][T22438] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3348.160047][T20538] usb 5-1: config 2 interface 108 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 3348.169220][T18841] usb 3-1: Using ep0 maxpacket: 8 [ 3348.184489][ T28] audit: type=1400 audit(1717587227.035:5105): avc: denied { relabelto } for pid=22457 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 3348.204443][T20538] usb 5-1: config 2 interface 108 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 3348.217193][T20538] usb 5-1: config 2 interface 108 altsetting 9 has an invalid endpoint with address 0x80, skipping [ 3348.227689][T20538] usb 5-1: config 2 interface 108 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 3348.238083][T20538] usb 5-1: config 2 interface 108 altsetting 9 has 14 endpoint descriptors, different from the interface descriptor's value: 13 [ 3348.251107][T20538] usb 5-1: config 2 interface 251 has no altsetting 0 [ 3348.257695][T20538] usb 5-1: config 2 interface 172 has no altsetting 0 [ 3348.264397][T20538] usb 5-1: config 2 interface 108 has no altsetting 0 [ 3348.315186][T18841] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 3348.323343][T18841] usb 3-1: config 179 has no interface number 0 [ 3348.329404][T18841] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 3348.340265][T18841] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 3348.351264][T18841] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 3348.362177][T18841] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 3348.371992][T18841] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 3348.384998][T18841] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 3348.393849][T18841] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3348.415190][T22453] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 3348.417484][ T3608] hid-multitouch 0003:1FD2:6007.03E3: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.3-1/input0 [ 3348.425227][T20538] usb 5-1: New USB device found, idVendor=2639, idProduct=0001, bcdDevice=45.1f [ 3348.442797][T20538] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3348.445800][T18841] xpad: probe of 3-1:179.65 failed with error -5 [ 3348.450671][T20538] usb 5-1: Product: и [ 3348.460710][T20538] usb 5-1: Manufacturer: Ꮏ띪㞍幊덂ິ⛉㇨໓鮕蝍滆䲕ỳⴈ藹풙筽蚸췛ફ숻箮孆銏馼䁀ꗇ㦫朾 [ 3348.474892][T20538] usb 5-1: SerialNumber: 鎀鲵溧擙⇂뒏匷卅쎗ࠤ᧩㒧栗㜃珁蹇ᇘ谔ꟸᨍ쵒얢壕㉴傰ꠞ愧鸘㉞趟ﮪ晌Ⱟ瑶猷鑦팎ꎂ翵鶹䥘훻尸 [ 3348.505934][T22432] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 3348.615870][T22470] netlink: 'syz-executor.1': attribute type 14 has an invalid length. [ 3348.627322][ T28] audit: type=1400 audit(1717587227.545:5106): avc: denied { create } for pid=22471 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 3348.655646][T18841] usb 3-1: USB disconnect, device number 106 [ 3348.887495][T20538] usb 5-1: USB disconnect, device number 69 [ 3349.306232][T22520] loop2: detected capacity change from 0 to 512 [ 3349.326181][T22520] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz-executor.2: casefold flag without casefold feature [ 3349.341862][T22520] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz-executor.2: casefold flag without casefold feature [ 3349.360871][T22520] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz-executor.2: ea_inode with extended attributes [ 3349.377617][T22520] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz-executor.2: error while reading EA inode 12 err=-117 [ 3349.394778][T22520] EXT4-fs (loop2): 1 orphan inode deleted [ 3349.405365][T22520] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 3349.600684][T22556] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3349.621497][T22556] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3349.829629][T21788] EXT4-fs (loop2): unmounting filesystem. [ 3349.872571][T22576] tmpfs: Unknown parameter 'usrquota' [ 3349.903752][T22580] loop2: detected capacity change from 0 to 256 [ 3350.009473][ T28] audit: type=1400 audit(1717587228.925:5107): avc: denied { shutdown } for pid=22591 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 3350.070855][T22597] loop2: detected capacity change from 0 to 512 [ 3350.081212][T22597] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz-executor.2: casefold flag without casefold feature [ 3350.108005][T22597] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz-executor.2: casefold flag without casefold feature [ 3350.147588][T22597] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz-executor.2: ea_inode with extended attributes [ 3350.173898][T18010] usb 4-1: USB disconnect, device number 54 [ 3350.195024][T22600] loop1: detected capacity change from 0 to 2048 [ 3350.201556][T22602] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 3350.212717][T22597] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz-executor.2: error while reading EA inode 12 err=-117 [ 3350.252845][T22597] EXT4-fs (loop2): 1 orphan inode deleted [ 3350.259468][T22600] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 3350.270344][T22514] loop4: detected capacity change from 0 to 131072 [ 3350.275196][T22597] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 3350.281451][T22514] F2FS-fs (loop4): Found nat_bits in checkpoint [ 3350.748320][T22514] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 3350.789753][T22514] F2FS-fs (loop4): sanity_check_inode: corrupted inode ino=7, run fsck to fix. [ 3351.029990][T18688] EXT4-fs (loop1): unmounting filesystem. [ 3351.037699][T21788] EXT4-fs (loop2): unmounting filesystem. [ 3351.126016][ T28] audit: type=1326 audit(1717587230.045:5108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22636 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad1ac7cee9 code=0x7ffc0000 [ 3351.156072][ T28] audit: type=1326 audit(1717587230.065:5109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22636 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad1ac7cee9 code=0x7ffc0000 [ 3351.180163][ T28] audit: type=1326 audit(1717587230.065:5110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22636 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad1ac7cee9 code=0x7ffc0000 [ 3351.219891][ T28] audit: type=1326 audit(1717587230.065:5111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22636 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7fad1ac7cee9 code=0x7ffc0000 [ 3351.270309][T22667] loop2: detected capacity change from 0 to 2048 [ 3351.278349][ T28] audit: type=1326 audit(1717587230.065:5112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22636 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad1ac7cee9 code=0x7ffc0000 [ 3351.304380][ T28] audit: type=1326 audit(1717587230.065:5113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22636 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fad1ac7cee9 code=0x7ffc0000 [ 3351.337840][T22667] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 3351.347881][T22670] loop4: detected capacity change from 0 to 512 [ 3351.390116][T22670] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz-executor.4: casefold flag without casefold feature [ 3351.415303][T22670] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #12: comm syz-executor.4: casefold flag without casefold feature [ 3351.470893][T22670] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #12: comm syz-executor.4: ea_inode with extended attributes [ 3351.756916][T22670] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz-executor.4: error while reading EA inode 12 err=-117 [ 3351.782428][T22670] EXT4-fs (loop4): 1 orphan inode deleted [ 3351.792596][T22670] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 3352.148310][T22708] bpf_get_probe_write_proto: 2 callbacks suppressed [ 3352.148339][T22708] syz-executor.3[22708] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3352.155036][T22708] syz-executor.3[22708] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3352.411817][T21788] EXT4-fs (loop2): unmounting filesystem. [ 3352.597223][T21463] EXT4-fs (loop4): unmounting filesystem. [ 3352.694054][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Dropping request. Check SNMP counters. [ 3353.010499][T22741] loop3: detected capacity change from 0 to 2048 [ 3353.027100][T22741] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 3353.690369][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 3353.690428][ T28] audit: type=1400 audit(1717587232.605:5125): avc: denied { setattr } for pid=22755 comm="syz-executor.2" path="/dev/net/tun" dev="devtmpfs" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 3353.940887][T21652] EXT4-fs (loop3): unmounting filesystem. [ 3354.052046][T22778] loop3: detected capacity change from 0 to 512 [ 3354.060913][T22778] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz-executor.3: inode #1: comm syz-executor.3: iget: illegal inode # [ 3354.074731][T22778] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz-executor.3: error while reading EA inode 1 err=-117 [ 3354.087356][T22778] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz-executor.3: inode #1: comm syz-executor.3: iget: illegal inode # [ 3354.101093][T22778] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz-executor.3: error while reading EA inode 1 err=-117 [ 3354.113836][T22778] EXT4-fs (loop3): 1 orphan inode deleted [ 3354.119503][T22778] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 3354.131475][ T28] audit: type=1400 audit(1717587233.055:5126): avc: denied { create } for pid=22777 comm="syz-executor.3" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 3354.164980][T21652] EXT4-fs (loop3): unmounting filesystem. [ 3354.295157][T18841] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 3354.379571][T22795] syz-executor.1[22795] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3354.379894][T22795] syz-executor.1[22795] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3354.652690][T20538] hid-generic 0000:0000:0000.03E4: unknown main item tag 0x0 [ 3354.671699][T20538] hid-generic 0000:0000:0000.03E4: unknown main item tag 0x0 [ 3354.679117][T20538] hid-generic 0000:0000:0000.03E4: unknown main item tag 0x0 [ 3354.686495][T20538] hid-generic 0000:0000:0000.03E4: unknown main item tag 0x0 [ 3354.693776][T20538] hid-generic 0000:0000:0000.03E4: unknown main item tag 0x0 [ 3354.707563][T20538] hid-generic 0000:0000:0000.03E4: unknown main item tag 0x0 [ 3354.716928][T20538] hid-generic 0000:0000:0000.03E4: unknown main item tag 0x0 [ 3354.731126][T20538] hid-generic 0000:0000:0000.03E4: unknown main item tag 0x0 [ 3354.741966][T20538] hid-generic 0000:0000:0000.03E4: unknown main item tag 0x0 [ 3354.749471][T20538] hid-generic 0000:0000:0000.03E4: unknown main item tag 0x0 [ 3354.755349][T22802] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 3354.756947][T20538] hid-generic 0000:0000:0000.03E4: unknown main item tag 0x0 [ 3354.765440][T18841] usb 1-1: Using ep0 maxpacket: 8 [ 3354.772561][T20538] hid-generic 0000:0000:0000.03E4: unknown main item tag 0x0 [ 3354.786255][T22803] devpts: called with bogus options [ 3354.792309][T20538] hid-generic 0000:0000:0000.03E4: unknown main item tag 0x0 [ 3354.797004][T22802] overlayfs: missing 'lowerdir' [ 3354.799645][T20538] hid-generic 0000:0000:0000.03E4: unknown main item tag 0x0 [ 3354.811555][T20538] hid-generic 0000:0000:0000.03E4: unknown main item tag 0x0 [ 3354.819115][T20538] hid-generic 0000:0000:0000.03E4: unknown main item tag 0x0 [ 3354.826495][T20538] hid-generic 0000:0000:0000.03E4: unknown main item tag 0x0 [ 3354.833868][T20538] hid-generic 0000:0000:0000.03E4: unknown main item tag 0x0 [ 3354.841267][T20538] hid-generic 0000:0000:0000.03E4: unknown main item tag 0x0 [ 3354.848950][T20538] hid-generic 0000:0000:0000.03E4: unknown main item tag 0x0 [ 3354.856261][T20538] hid-generic 0000:0000:0000.03E4: unknown main item tag 0x0 [ 3354.863554][T20538] hid-generic 0000:0000:0000.03E4: unknown main item tag 0x0 [ 3354.870775][T20538] hid-generic 0000:0000:0000.03E4: unknown main item tag 0x0 [ 3354.878206][T20538] hid-generic 0000:0000:0000.03E4: unknown main item tag 0x0 [ 3354.885718][T20538] hid-generic 0000:0000:0000.03E4: unknown main item tag 0x0 [ 3354.893116][T20538] hid-generic 0000:0000:0000.03E4: unknown main item tag 0x0 [ 3354.900538][T20538] hid-generic 0000:0000:0000.03E4: unknown main item tag 0x0 [ 3354.905185][T18841] usb 1-1: config 135 has an invalid interface number: 230 but max is 0 [ 3354.907884][T20538] hid-generic 0000:0000:0000.03E4: unknown main item tag 0x0 [ 3354.923297][T20538] hid-generic 0000:0000:0000.03E4: unknown main item tag 0x0 [ 3354.924647][T18841] usb 1-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 3354.930676][T20538] hid-generic 0000:0000:0000.03E4: unknown main item tag 0x0 [ 3354.948027][T20538] hid-generic 0000:0000:0000.03E4: unknown main item tag 0x0 [ 3354.955499][T20538] hid-generic 0000:0000:0000.03E4: unknown main item tag 0x0 [ 3354.963401][T20538] hid-generic 0000:0000:0000.03E4: unknown main item tag 0x0 [ 3354.970653][T18841] usb 1-1: config 135 has no interface number 0 [ 3354.977044][T20538] hid-generic 0000:0000:0000.03E4: unknown main item tag 0x0 [ 3354.984662][T20538] hid-generic 0000:0000:0000.03E4: unknown main item tag 0x0 [ 3354.984787][T18841] usb 1-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 3354.996559][T20538] hid-generic 0000:0000:0000.03E4: unknown main item tag 0x0 [ 3355.024137][T20538] hid-generic 0000:0000:0000.03E4: unknown main item tag 0x0 [ 3355.038281][T20538] hid-generic 0000:0000:0000.03E4: unknown main item tag 0x0 [ 3355.052931][T20538] hid-generic 0000:0000:0000.03E4: unknown main item tag 0x0 [ 3355.069239][T20538] hid-generic 0000:0000:0000.03E4: unknown main item tag 0x0 [ 3355.080917][T20538] hid-generic 0000:0000:0000.03E4: unknown main item tag 0x0 [ 3355.093692][T20538] hid-generic 0000:0000:0000.03E4: unknown main item tag 0x0 [ 3355.110586][T20538] hid-generic 0000:0000:0000.03E4: unknown main item tag 0x0 [ 3355.123947][T20538] hid-generic 0000:0000:0000.03E4: hidraw0: HID v0.00 Device [syz0] on syz0 [ 3355.215215][T18841] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 3355.224154][T18841] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3355.232178][T18841] usb 1-1: Product: syz [ 3355.236332][T18841] usb 1-1: Manufacturer: syz [ 3355.240974][T18841] usb 1-1: SerialNumber: syz [ 3355.285695][T18841] usb 1-1: Found UVC 0.00 device syz (18ec:3288) [ 3355.292074][T18841] usb 1-1: No valid video chain found. [ 3355.371112][T22817] loop3: detected capacity change from 0 to 256 [ 3355.475166][T20538] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 3355.501164][ T24] usb 1-1: USB disconnect, device number 79 [ 3355.725396][T20538] usb 2-1: Using ep0 maxpacket: 32 [ 3355.845413][T20538] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3355.872609][T20538] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3355.918593][T20538] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 3355.927740][T20538] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3355.942585][T20538] usb 2-1: config 0 descriptor?? [ 3355.985891][T20538] hub 2-1:0.0: USB hub found [ 3356.205590][T20538] hub 2-1:0.0: 1 port detected [ 3356.455172][T20538] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 3356.470482][T20538] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 3356.575225][T20538] usbhid 2-1:0.0: can't add hid device: -71 [ 3356.581221][T20538] usbhid: probe of 2-1:0.0 failed with error -71 [ 3356.615545][T20538] usb 2-1: USB disconnect, device number 69 [ 3357.397742][T22853] loop3: detected capacity change from 0 to 40427 [ 3357.414123][T22853] F2FS-fs (loop3): Found nat_bits in checkpoint [ 3357.492020][T22853] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 3357.587074][T21652] syz-executor.3: attempt to access beyond end of device [ 3357.587074][T21652] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 3358.025384][T11103] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 3358.095525][T20538] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 3358.143900][T22905] loop0: detected capacity change from 0 to 128 [ 3358.275185][T11103] usb 5-1: Using ep0 maxpacket: 32 [ 3358.395420][T11103] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3358.406373][T11103] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3358.416218][T11103] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 3358.425272][T11103] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3358.435805][T11103] usb 5-1: config 0 descriptor?? [ 3358.519450][T20538] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 3358.530246][T11103] hub 5-1:0.0: USB hub found [ 3358.534700][T20538] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3358.544797][T20538] usb 2-1: config 0 descriptor?? [ 3358.675319][T22912] SELinux: Context system_u:object_r:cron_spool_t:s0 is not valid (left unmapped). [ 3358.716957][ T28] audit: type=1400 audit(1717587237.595:5127): avc: denied { relabelto } for pid=22911 comm="syz-executor.2" name="file0" dev="sda1" ino=1967 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:cron_spool_t:s0" [ 3358.755411][T11103] hub 5-1:0.0: 1 port detected [ 3358.758994][ T28] audit: type=1400 audit(1717587237.675:5128): avc: denied { rmdir } for pid=21788 comm="syz-executor.2" name="file0" dev="sda1" ino=1967 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:cron_spool_t:s0" [ 3358.847213][T22916] fuse: Bad value for 'fd' [ 3358.975239][T11103] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 3358.981413][T11103] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 3359.095249][T11103] usbhid 5-1:0.0: can't add hid device: -71 [ 3359.101021][T11103] usbhid: probe of 5-1:0.0 failed with error -71 [ 3359.124603][T22914] loop3: detected capacity change from 0 to 40427 [ 3359.133303][T22920] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 3359.134027][T22914] F2FS-fs (loop3): Found nat_bits in checkpoint [ 3359.142234][T11103] usb 5-1: USB disconnect, device number 70 [ 3359.180652][T22914] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 3359.204218][T21652] syz-executor.3: attempt to access beyond end of device [ 3359.204218][T21652] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 3359.616327][ T28] audit: type=1400 audit(1717587238.535:5129): avc: denied { mounton } for pid=22934 comm="syz-executor.4" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 3359.679705][T22934] bridge0: port 1(bridge_slave_0) entered blocking state [ 3359.687080][T22934] bridge0: port 1(bridge_slave_0) entered disabled state [ 3359.694780][T22934] device bridge_slave_0 entered promiscuous mode [ 3359.702504][T22934] bridge0: port 2(bridge_slave_1) entered blocking state [ 3359.709734][T22934] bridge0: port 2(bridge_slave_1) entered disabled state [ 3359.717040][T22934] device bridge_slave_1 entered promiscuous mode [ 3359.781708][T22934] bridge0: port 2(bridge_slave_1) entered blocking state [ 3359.788662][T22934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3359.795756][T22934] bridge0: port 1(bridge_slave_0) entered blocking state [ 3359.802522][T22934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3359.825330][T11103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3359.832719][T11103] bridge0: port 1(bridge_slave_0) entered disabled state [ 3359.842381][T11103] bridge0: port 2(bridge_slave_1) entered disabled state [ 3359.863331][T11103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3359.876276][T11103] bridge0: port 1(bridge_slave_0) entered blocking state [ 3359.883141][T11103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3359.890664][T11103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3359.898785][T11103] bridge0: port 2(bridge_slave_1) entered blocking state [ 3359.905641][T11103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3359.926562][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3359.934552][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3360.017545][T18010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3360.029088][T22934] device veth0_vlan entered promiscuous mode [ 3360.036241][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3360.044082][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3360.051494][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3360.339691][T22934] device veth1_macvtap entered promiscuous mode [ 3360.349598][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3360.364323][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3360.375697][T20538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3360.393744][T22965] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 3360.526091][T21431] device bridge_slave_1 left promiscuous mode [ 3360.532166][T21431] bridge0: port 2(bridge_slave_1) entered disabled state [ 3360.539878][T21431] device bridge_slave_0 left promiscuous mode [ 3360.546147][T21431] bridge0: port 1(bridge_slave_0) entered disabled state [ 3360.554397][T21431] device veth1_macvtap left promiscuous mode [ 3360.560891][T21431] device veth0_vlan left promiscuous mode [ 3360.633610][T22972] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 3360.665159][ T3608] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 3360.665834][T11103] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 3360.835467][T20538] usb 2-1: USB disconnect, device number 70 [ 3360.915199][ T3608] usb 4-1: Using ep0 maxpacket: 32 [ 3360.932544][ T28] audit: type=1400 audit(1717587239.845:5130): avc: denied { create } for pid=22985 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 3360.957528][ T28] audit: type=1400 audit(1717587239.845:5131): avc: denied { connect } for pid=22985 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 3360.979365][ T28] audit: type=1400 audit(1717587239.845:5132): avc: denied { name_connect } for pid=22985 comm="syz-executor.0" dest=65531 scontext=system_u:object_r:hugetlbfs_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 3361.002733][ T28] audit: type=1400 audit(1717587239.845:5133): avc: denied { name_connect } for pid=22985 comm="syz-executor.0" scontext=system_u:object_r:hugetlbfs_t tcontext=system_u:object_r:port_t tclass=tcp_socket permissive=1 [ 3361.024439][ T28] audit: type=1400 audit(1717587239.845:5134): avc: denied { create } for pid=22985 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_rdma_socket permissive=1 [ 3361.046693][ T28] audit: type=1400 audit(1717587239.845:5135): avc: denied { shutdown } for pid=22985 comm="syz-executor.0" faddr=2001:: scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 3361.055223][T11103] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3361.080542][T11103] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3361.091331][T11103] usb 3-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 3361.095795][ T3608] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 3361.103930][T11103] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3361.125586][T11103] usb 3-1: config 0 descriptor?? [ 3361.285223][ T3608] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3361.294149][ T3608] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3361.301981][ T3608] usb 4-1: Product: syz [ 3361.305958][ T3608] usb 4-1: Manufacturer: syz [ 3361.310475][ T3608] usb 4-1: SerialNumber: syz [ 3361.355615][ T3608] usb 4-1: bad CDC descriptors [ 3361.425168][T18010] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 3361.475168][T18841] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 3361.560109][ T19] usb 4-1: USB disconnect, device number 55 [ 3361.665176][T11103] usbhid 3-1:0.0: can't add hid device: -71 [ 3361.670992][T11103] usbhid: probe of 3-1:0.0 failed with error -71 [ 3361.678011][T11103] usb 3-1: USB disconnect, device number 107 [ 3361.685261][ T3608] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 3361.692698][T18010] usb 2-1: Using ep0 maxpacket: 32 [ 3361.905303][T18010] usb 2-1: config 2 has an invalid interface number: 251 but max is 2 [ 3361.913372][T18010] usb 2-1: config 2 has an invalid interface number: 172 but max is 2 [ 3361.921328][T18010] usb 2-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 3361.931686][T18010] usb 2-1: config 2 has an invalid interface number: 108 but max is 2 [ 3361.940389][T18010] usb 2-1: config 2 has no interface number 0 [ 3361.946376][T18010] usb 2-1: config 2 has no interface number 1 [ 3361.952169][T18010] usb 2-1: config 2 has no interface number 2 [ 3361.958093][ T3608] usb 5-1: Using ep0 maxpacket: 32 [ 3361.963070][T18010] usb 2-1: config 2 interface 251 altsetting 4 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 3361.973775][T18010] usb 2-1: config 2 interface 251 altsetting 4 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 3361.984489][T18010] usb 2-1: config 2 interface 251 altsetting 4 bulk endpoint 0x9 has invalid maxpacket 16 [ 3361.994271][T18010] usb 2-1: config 2 interface 172 altsetting 2 has a duplicate endpoint with address 0x1, skipping [ 3362.004766][T18010] usb 2-1: config 2 interface 172 altsetting 2 endpoint 0x3 has invalid maxpacket 951, setting to 64 [ 3362.015497][T18010] usb 2-1: config 2 interface 172 altsetting 2 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 3362.026233][T18010] usb 2-1: config 2 interface 172 altsetting 2 has a duplicate endpoint with address 0x9, skipping [ 3362.036816][T18841] usb 1-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 3362.045592][T18010] usb 2-1: config 2 interface 172 altsetting 2 has a duplicate endpoint with address 0xF, skipping [ 3362.056106][T18841] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3362.063881][T18841] usb 1-1: Product: syz [ 3362.067909][T18010] usb 2-1: config 2 interface 172 altsetting 2 has an invalid endpoint with address 0x0, skipping [ 3362.078395][T18841] usb 1-1: Manufacturer: syz [ 3362.082709][T18841] usb 1-1: SerialNumber: syz [ 3362.087228][T18010] usb 2-1: config 2 interface 172 altsetting 2 has an invalid endpoint with address 0x80, skipping [ 3362.098475][T18841] usb 1-1: config 0 descriptor?? [ 3362.103330][T18010] usb 2-1: config 2 interface 172 altsetting 2 has an invalid endpoint with address 0x0, skipping [ 3362.115583][T18010] usb 2-1: config 2 interface 172 altsetting 2 has a duplicate endpoint with address 0x83, skipping [ 3362.126812][T18010] usb 2-1: config 2 interface 172 altsetting 2 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 3362.140922][T18010] usb 2-1: config 2 interface 108 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 3362.153132][T18010] usb 2-1: config 2 interface 108 altsetting 9 has an invalid endpoint with address 0x96, skipping [ 3362.163737][ T3608] usb 5-1: config 2 has an invalid interface number: 251 but max is 1 [ 3362.171693][T18010] usb 2-1: config 2 interface 108 altsetting 9 has a duplicate endpoint with address 0x2, skipping [ 3362.182171][ T3608] usb 5-1: config 2 has an invalid interface number: 172 but max is 1 [ 3362.190183][ T3608] usb 5-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 3362.198638][T18010] usb 2-1: config 2 interface 108 altsetting 9 has a duplicate endpoint with address 0xF, skipping [ 3362.209161][ T3608] usb 5-1: config 2 has no interface number 0 [ 3362.215011][ T3608] usb 5-1: config 2 has no interface number 1 [ 3362.220952][T18010] usb 2-1: config 2 interface 108 altsetting 9 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 3362.231710][ T3608] usb 5-1: config 2 interface 251 altsetting 4 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 3362.242388][T18010] usb 2-1: config 2 interface 108 altsetting 9 has a duplicate endpoint with address 0xB, skipping [ 3362.252890][ T3608] usb 5-1: config 2 interface 251 altsetting 4 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 3362.263632][T18010] usb 2-1: config 2 interface 108 altsetting 9 has a duplicate endpoint with address 0xB, skipping [ 3362.274137][ T3608] usb 5-1: config 2 interface 251 altsetting 4 bulk endpoint 0x9 has invalid maxpacket 16 [ 3362.283863][T18010] usb 2-1: config 2 interface 108 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 3362.294304][ T3608] usb 5-1: config 2 interface 172 altsetting 2 has a duplicate endpoint with address 0x1, skipping [ 3362.304854][T18010] usb 2-1: config 2 interface 108 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 3362.315257][ T3608] usb 5-1: config 2 interface 172 altsetting 2 endpoint 0x3 has invalid maxpacket 951, setting to 64 [ 3362.325868][T18010] usb 2-1: config 2 interface 108 altsetting 9 has an invalid endpoint with address 0x80, skipping [ 3362.336399][ T3608] usb 5-1: config 2 interface 172 altsetting 2 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 3362.347152][T18010] usb 2-1: config 2 interface 108 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 3362.357643][ T3608] usb 5-1: config 2 interface 172 altsetting 2 has a duplicate endpoint with address 0x9, skipping [ 3362.368064][T18010] usb 2-1: config 2 interface 108 altsetting 9 has 14 endpoint descriptors, different from the interface descriptor's value: 13 [ 3362.381073][ T3608] usb 5-1: config 2 interface 172 altsetting 2 has a duplicate endpoint with address 0xF, skipping [ 3362.391579][T18010] usb 2-1: config 2 interface 251 has no altsetting 0 [ 3362.398157][T18010] usb 2-1: config 2 interface 172 has no altsetting 0 [ 3362.404742][T18010] usb 2-1: config 2 interface 108 has no altsetting 0 [ 3362.411349][ T3608] usb 5-1: config 2 interface 172 altsetting 2 has an invalid endpoint with address 0x0, skipping [ 3362.421772][ T3608] usb 5-1: config 2 interface 172 altsetting 2 has an invalid endpoint with address 0x80, skipping [ 3362.425132][T11103] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 3362.432343][ T3608] usb 5-1: config 2 interface 172 altsetting 2 has an invalid endpoint with address 0x0, skipping [ 3362.450193][ T3608] usb 5-1: config 2 interface 172 altsetting 2 has a duplicate endpoint with address 0x83, skipping [ 3362.455176][T20538] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 3362.460752][ T3608] usb 5-1: config 2 interface 172 altsetting 2 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 3362.478908][ T3608] usb 5-1: config 2 interface 251 has no altsetting 0 [ 3362.485470][ T3608] usb 5-1: config 2 interface 172 has no altsetting 0 [ 3362.595261][T18010] usb 2-1: New USB device found, idVendor=2639, idProduct=0001, bcdDevice=45.1f [ 3362.604297][T18010] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3362.612293][T18010] usb 2-1: Product: и [ 3362.616481][T18010] usb 2-1: Manufacturer: Ꮏ띪㞍幊덂ິ⛉㇨໓鮕蝍滆䲕ỳⴈ藹풙筽蚸췛ફ숻箮孆銏馼䁀ꗇ㦫朾 [ 3362.630410][T18010] usb 2-1: SerialNumber: 鎀鲵溧擙⇂뒏匷卅쎗ࠤ᧩㒧栗㜃珁蹇ᇘ谔ꟸᨍ쵒얢壕㉴傰ꠞ愧鸘㉞趟ﮪ晌Ⱟ瑶猷鑦팎ꎂ翵鶹䥘훻尸 [ 3362.665220][ T3608] usb 5-1: New USB device found, idVendor=2639, idProduct=0001, bcdDevice=45.1f [ 3362.665230][T22995] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 3362.681190][ T3608] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3362.689069][ T3608] usb 5-1: Product: и [ 3362.692864][ T3608] usb 5-1: Manufacturer: Ꮏ띪㞍幊덂ິ⛉㇨໓鮕蝍滆䲕ỳⴈ藹풙筽蚸췛ફ숻箮孆銏馼䁀ꗇ㦫朾 [ 3362.706683][ T3608] usb 5-1: SerialNumber: 鎀鲵溧擙⇂뒏匷卅쎗ࠤ᧩㒧栗㜃珁蹇ᇘ谔ꟸᨍ쵒얢壕㉴傰ꠞ愧鸘㉞趟ﮪ晌Ⱟ瑶猷鑦팎ꎂ翵鶹䥘훻尸 [ 3362.735221][T23003] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 3362.795215][T11103] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3362.806103][T11103] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3362.815655][T11103] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 3362.824480][T11103] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3362.832380][T20538] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3362.843245][T20538] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3362.852960][T11103] usb 3-1: config 0 descriptor?? [ 3362.857780][T20538] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 3362.866561][T20538] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3362.874872][T20538] usb 4-1: config 0 descriptor?? [ 3363.046422][T18010] usb 2-1: USB disconnect, device number 71 [ 3363.066902][ T3608] usb 5-1: USB disconnect, device number 71 [ 3363.215198][T18841] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 3363.225034][T18841] asix: probe of 1-1:0.0 failed with error -71 [ 3363.231558][T18841] usb 1-1: USB disconnect, device number 80 [ 3363.235187][T11103] usbhid 3-1:0.0: can't add hid device: -71 [ 3363.243010][T11103] usbhid: probe of 3-1:0.0 failed with error -71 [ 3363.250038][T11103] usb 3-1: USB disconnect, device number 108 [ 3363.635267][T20538] usbhid 4-1:0.0: can't add hid device: -71 [ 3363.641150][T20538] usbhid: probe of 4-1:0.0 failed with error -71 [ 3363.648006][T20538] usb 4-1: USB disconnect, device number 56 [ 3363.665130][T18010] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 3363.775188][T11103] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 3364.145199][T11103] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3364.156018][T11103] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3364.165731][T11103] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice=10.00 [ 3364.174661][T11103] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3364.195299][T11103] usb 5-1: config 0 descriptor?? [ 3364.260328][T23030] loop3: detected capacity change from 0 to 40427 [ 3364.267204][T23030] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 3364.274734][T23030] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 3364.283727][T23030] F2FS-fs (loop3): invalid crc value [ 3364.290329][T23030] F2FS-fs (loop3): Found nat_bits in checkpoint [ 3364.326432][T23030] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 3364.333337][T23030] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 3364.436474][T23018] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.4'. [ 3364.710634][T18010] usb 2-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 3364.720650][T18010] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3364.728537][T18010] usb 2-1: Product: syz [ 3364.732476][T18010] usb 2-1: Manufacturer: syz [ 3364.736942][T18010] usb 2-1: SerialNumber: syz [ 3364.741738][T18010] usb 2-1: config 0 descriptor?? [ 3364.780727][T23040] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 3364.960733][T11103] hid-multitouch 0003:1FD2:6007.03E5: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.4-1/input0 [ 3365.157640][T11103] usb 5-1: USB disconnect, device number 72 [ 3365.172759][T23046] loop3: detected capacity change from 0 to 2048 [ 3365.217980][T23046] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 3365.855166][T18010] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 3365.866387][T18010] asix: probe of 2-1:0.0 failed with error -71 [ 3365.881745][T18010] usb 2-1: USB disconnect, device number 72 [ 3365.892457][T23067] loop4: detected capacity change from 0 to 512 [ 3365.906922][T23067] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 3365.915843][T23067] ext4 filesystem being mounted at /root/syzkaller-testdir514732539/syzkaller.DsrHtt/6/bus supports timestamps until 2038 (0x7fffffff) [ 3365.978890][ T3608] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 3366.027404][T21652] EXT4-fs (loop3): unmounting filesystem. [ 3366.305167][T20538] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 3366.355151][T10975] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 3366.390419][T23078] loop1: detected capacity change from 0 to 2048 [ 3366.406503][T23078] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 3366.625254][ T3608] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3366.638086][ T3608] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3366.651839][ T3608] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3366.664612][ T3608] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3366.665238][T20538] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3366.673576][ T3608] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3366.692710][ T3608] usb 1-1: config 0 descriptor?? [ 3366.698426][T20538] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3366.708102][T20538] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice=10.00 [ 3366.717064][T20538] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3366.755298][T10975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3366.762436][T20538] usb 4-1: config 0 descriptor?? [ 3366.771889][T10975] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3366.785513][T22934] EXT4-fs (loop4): unmounting filesystem. [ 3366.791392][T10975] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3366.800417][T10975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3366.809194][T10975] usb 3-1: config 0 descriptor?? [ 3366.830791][T23084] loop4: detected capacity change from 0 to 2048 [ 3366.846931][T23084] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 3367.006427][T23073] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3367.185767][ T3608] plantronics 0003:047F:FFFF.03E6: unknown main item tag 0x0 [ 3367.193026][ T3608] plantronics 0003:047F:FFFF.03E6: unknown main item tag 0x0 [ 3367.200354][ T3608] plantronics 0003:047F:FFFF.03E6: No inputs registered, leaving [ 3367.208634][ T3608] plantronics 0003:047F:FFFF.03E6: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 3367.247045][T20538] hid-multitouch 0003:1FD2:6007.03E7: hidraw1: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.3-1/input0 [ 3367.264349][T18688] EXT4-fs (loop1): unmounting filesystem. [ 3367.270617][T10975] plantronics 0003:047F:FFFF.03E8: global environment stack underflow [ 3367.278845][T10975] plantronics 0003:047F:FFFF.03E8: item 0 0 1 11 parsing failed [ 3367.286487][T10975] plantronics 0003:047F:FFFF.03E8: parse failed [ 3367.292563][T10975] plantronics: probe of 0003:047F:FFFF.03E8 failed with error -22 [ 3367.408086][T23090] loop1: detected capacity change from 0 to 40427 [ 3367.414966][T23090] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 3367.422519][T23090] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 3367.431443][T23090] F2FS-fs (loop1): invalid crc value [ 3367.437867][T23090] F2FS-fs (loop1): Found nat_bits in checkpoint [ 3367.450302][T20538] usb 4-1: USB disconnect, device number 57 [ 3367.458106][T11103] usb 1-1: USB disconnect, device number 81 [ 3367.473659][ T466] usb 3-1: USB disconnect, device number 109 [ 3367.482211][T23090] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 3367.489155][T23090] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 3367.897649][T22934] EXT4-fs (loop4): unmounting filesystem. [ 3367.973473][ T28] audit: type=1326 audit(1717587246.885:5136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23100 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4a2d47cee9 code=0x0 [ 3368.175172][ T24] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 3368.415202][ T3608] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 3368.735382][ T24] usb 5-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 3368.744386][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3368.752570][ T24] usb 5-1: Product: syz [ 3368.756539][ T24] usb 5-1: Manufacturer: syz [ 3368.760904][ T24] usb 5-1: SerialNumber: syz [ 3368.765923][ T24] usb 5-1: config 0 descriptor?? [ 3368.805179][ T3608] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3368.815951][ T3608] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3368.827970][ T3608] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice=10.00 [ 3368.836883][ T3608] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3368.846039][ T3608] usb 3-1: config 0 descriptor?? [ 3369.053532][T23124] loop0: detected capacity change from 0 to 256 [ 3369.235589][T23107] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.2'. [ 3369.390240][T23129] bridge0: port 1(bridge_slave_0) entered blocking state [ 3369.397169][T23129] bridge0: port 1(bridge_slave_0) entered disabled state [ 3369.404380][T23129] device bridge_slave_0 entered promiscuous mode [ 3369.411138][T23129] bridge0: port 2(bridge_slave_1) entered blocking state [ 3369.418458][T23129] bridge0: port 2(bridge_slave_1) entered disabled state [ 3369.427162][T23129] device bridge_slave_1 entered promiscuous mode [ 3369.469685][T23134] syz-executor.1[23134] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3369.469766][T23134] syz-executor.1[23134] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3369.610630][ T3608] hid-multitouch 0003:1FD2:6007.03E9: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.2-1/input0 [ 3369.617361][T23129] bridge0: port 2(bridge_slave_1) entered blocking state [ 3369.640707][T23129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3369.647774][T23129] bridge0: port 1(bridge_slave_0) entered blocking state [ 3369.654566][T23129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3369.678049][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3369.685507][ T466] bridge0: port 1(bridge_slave_0) entered disabled state [ 3369.692557][ T466] bridge0: port 2(bridge_slave_1) entered disabled state [ 3369.701733][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3369.710596][ T466] bridge0: port 1(bridge_slave_0) entered blocking state [ 3369.717442][ T466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3369.729744][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3369.738106][ T3608] bridge0: port 2(bridge_slave_1) entered blocking state [ 3369.744977][ T3608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3369.760450][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3369.768567][ T3608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3369.780964][T26944] device bridge_slave_1 left promiscuous mode [ 3369.786979][T26944] bridge0: port 2(bridge_slave_1) entered disabled state [ 3369.794247][T26944] device bridge_slave_0 left promiscuous mode [ 3369.800603][T26944] bridge0: port 1(bridge_slave_0) entered disabled state [ 3369.802661][T10270] usb 3-1: USB disconnect, device number 110 [ 3369.814566][T26944] device veth1_macvtap left promiscuous mode [ 3369.820514][T26944] device veth0_vlan left promiscuous mode [ 3369.975059][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3369.983635][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3369.995026][T23129] device veth0_vlan entered promiscuous mode [ 3370.000889][ T24] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 3370.010930][T23129] device veth1_macvtap entered promiscuous mode [ 3370.015954][ T24] asix: probe of 5-1:0.0 failed with error -71 [ 3370.023899][ T24] usb 5-1: USB disconnect, device number 73 [ 3370.030946][T10270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3370.038584][T10270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3370.046438][T10270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3370.054296][T10270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3370.062378][T10270] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3370.065201][ T3608] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 3370.069891][T10270] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3370.084998][T10270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3370.093096][T10270] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3370.101067][T10270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3370.109423][T10270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3370.116712][T10270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3370.645585][ T28] audit: type=1326 audit(1717587249.425:5137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23141 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6af87cee9 code=0x7ffc0000 [ 3370.672306][ T28] audit: type=1326 audit(1717587249.425:5138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23141 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6af87cee9 code=0x7ffc0000 [ 3370.795036][T23149] loop2: detected capacity change from 0 to 256 [ 3370.802408][T10270] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 3370.879429][ T28] audit: type=1326 audit(1717587249.445:5139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23141 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb6af87cee9 code=0x7ffc0000 [ 3370.955520][ T3608] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3370.959928][ T28] audit: type=1326 audit(1717587249.445:5140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23141 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6af87cee9 code=0x7ffc0000 [ 3370.994560][ T28] audit: type=1326 audit(1717587249.445:5141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23141 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6af87cee9 code=0x7ffc0000 [ 3371.018834][ T3608] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3371.029598][ T3608] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3371.043578][ T28] audit: type=1326 audit(1717587249.485:5142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23141 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7fb6af87cee9 code=0x7ffc0000 [ 3371.046027][ T3608] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3371.076265][ T3608] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3371.087803][ T3608] usb 1-1: config 0 descriptor?? [ 3371.092721][ T28] audit: type=1326 audit(1717587249.485:5143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23141 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6af87cee9 code=0x7ffc0000 [ 3371.116636][ T28] audit: type=1326 audit(1717587249.485:5144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23141 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6af87cee9 code=0x7ffc0000 [ 3371.140787][ T28] audit: type=1326 audit(1717587249.495:5145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23141 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb6af87cee9 code=0x7ffc0000 [ 3371.375244][ T24] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 3371.425297][T10270] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3371.436407][T10270] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3371.446311][T10270] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice=10.00 [ 3371.455482][T10270] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3371.467197][T10270] usb 4-1: config 0 descriptor?? [ 3371.655992][ T3608] plantronics 0003:047F:FFFF.03EA: unknown main item tag 0x0 [ 3371.663205][ T3608] plantronics 0003:047F:FFFF.03EA: unknown main item tag 0x0 [ 3371.670553][ T3608] plantronics 0003:047F:FFFF.03EA: No inputs registered, leaving [ 3371.706484][T23138] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 3371.709545][ T3608] plantronics 0003:047F:FFFF.03EA: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 3371.722710][T23161] loop2: detected capacity change from 0 to 512 [ 3371.735224][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3371.746079][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3371.755666][ T24] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 3371.764465][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3371.767427][T23161] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 3371.772970][ T24] usb 5-1: config 0 descriptor?? [ 3371.781154][T23161] ext4 filesystem being mounted at /root/syzkaller-testdir3481370067/syzkaller.8ExMjY/87/bus supports timestamps until 2038 (0x7fffffff) [ 3371.964801][ T466] usb 1-1: USB disconnect, device number 82 [ 3371.981212][T10270] hid-multitouch 0003:1FD2:6007.03EB: hidraw1: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.3-1/input0 [ 3372.196032][ T3608] usb 4-1: USB disconnect, device number 58 [ 3372.435168][T18841] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 3372.585211][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 3372.591181][ T24] usbhid: probe of 5-1:0.0 failed with error -71 [ 3372.592343][T21788] EXT4-fs (loop2): unmounting filesystem. [ 3372.598570][ T24] usb 5-1: USB disconnect, device number 74 [ 3372.620376][T23174] loop2: detected capacity change from 0 to 512 [ 3372.636890][T23174] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 3372.645738][T23174] ext4 filesystem being mounted at /root/syzkaller-testdir3481370067/syzkaller.8ExMjY/88/bus supports timestamps until 2038 (0x7fffffff) [ 3372.728653][T23178] loop3: detected capacity change from 0 to 2048 [ 3372.746624][T23178] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 3372.775153][T10270] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 3373.145192][T18841] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3373.145242][T10270] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3373.156030][T18841] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 3373.166854][T10270] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 3373.240714][T23129] EXT4-fs (loop3): unmounting filesystem. [ 3373.355521][T18841] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3373.364532][T18841] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3373.385593][T10270] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3373.394825][T10270] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3373.402956][T10270] usb 1-1: Product: syz [ 3373.407694][T10270] usb 1-1: Manufacturer: syz [ 3373.412403][T10270] usb 1-1: SerialNumber: syz [ 3373.432677][T18841] usb 2-1: Product: syz [ 3373.678474][T18841] usb 2-1: Manufacturer: syz [ 3373.683086][T21788] EXT4-fs (loop2): unmounting filesystem. [ 3373.691185][T18841] usb 2-1: SerialNumber: syz [ 3373.818921][T23203] loop2: detected capacity change from 0 to 2048 [ 3373.836698][T23203] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 3373.892260][T23172] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 3374.041030][T23169] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 3374.248534][T23211] 9pnet_fd: Insufficient options for proto=fd [ 3374.432675][T23217] loop4: detected capacity change from 0 to 256 [ 3374.600917][ T336] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 3374.666821][T23172] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 3374.676682][T21788] EXT4-fs (loop2): unmounting filesystem. [ 3374.735606][T23169] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 3374.875131][ T336] usb 4-1: Using ep0 maxpacket: 32 [ 3374.925180][T10270] cdc_ncm 1-1:1.0: failed to get mac address [ 3374.945187][T10270] cdc_ncm 1-1:1.0: bind() failure [ 3374.955208][T18841] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 3374.961508][ T3608] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 3374.965186][T10270] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 3374.968957][T18841] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 3374.982414][T18841] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 3374.995244][T10270] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 3375.002953][T10270] usb 1-1: USB disconnect, device number 83 [ 3375.095219][ T336] usb 4-1: config 2 has an invalid interface number: 251 but max is 2 [ 3375.103575][ T336] usb 4-1: config 2 has an invalid interface number: 172 but max is 2 [ 3375.113277][ T336] usb 4-1: config 2 contains an unexpected descriptor of type 0x2, skipping [ 3375.121849][ T336] usb 4-1: config 2 has an invalid interface number: 108 but max is 2 [ 3375.129803][ T336] usb 4-1: config 2 has no interface number 0 [ 3375.135728][ T336] usb 4-1: config 2 has no interface number 1 [ 3375.141586][ T336] usb 4-1: config 2 has no interface number 2 [ 3375.147523][ T336] usb 4-1: config 2 interface 251 altsetting 4 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 3375.160004][T18841] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 3375.170900][ T336] usb 4-1: config 2 interface 251 altsetting 4 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 3375.183237][ T336] usb 4-1: config 2 interface 251 altsetting 4 bulk endpoint 0x9 has invalid maxpacket 16 [ 3375.192986][ T336] usb 4-1: config 2 interface 172 altsetting 2 has a duplicate endpoint with address 0x1, skipping [ 3375.203459][ T336] usb 4-1: config 2 interface 172 altsetting 2 endpoint 0x3 has invalid maxpacket 951, setting to 64 [ 3375.214142][ T336] usb 4-1: config 2 interface 172 altsetting 2 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 3375.224928][ T336] usb 4-1: config 2 interface 172 altsetting 2 has a duplicate endpoint with address 0x9, skipping [ 3375.235675][ T336] usb 4-1: config 2 interface 172 altsetting 2 has a duplicate endpoint with address 0xF, skipping [ 3375.363508][ T336] usb 4-1: config 2 interface 172 altsetting 2 has an invalid endpoint with address 0x0, skipping [ 3375.374418][ T336] usb 4-1: config 2 interface 172 altsetting 2 has an invalid endpoint with address 0x80, skipping [ 3375.560483][ T336] usb 4-1: config 2 interface 172 altsetting 2 has an invalid endpoint with address 0x0, skipping [ 3375.571077][ T336] usb 4-1: config 2 interface 172 altsetting 2 has a duplicate endpoint with address 0x83, skipping [ 3375.581942][ T336] usb 4-1: config 2 interface 172 altsetting 2 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 3375.592799][ T3608] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3375.615159][ T336] usb 4-1: config 2 interface 108 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 3375.625781][ T3608] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3375.638661][ T336] usb 4-1: config 2 interface 108 altsetting 9 has an invalid endpoint with address 0x96, skipping [ 3375.649378][ T3608] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice=10.00 [ 3375.658445][ T336] usb 4-1: config 2 interface 108 altsetting 9 has a duplicate endpoint with address 0x2, skipping [ 3375.668231][ T24] usb 2-1: USB disconnect, device number 73 [ 3375.669119][ T3608] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3375.675057][ T24] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 3375.683186][ T336] usb 4-1: config 2 interface 108 altsetting 9 has a duplicate endpoint with address 0xF, skipping [ 3375.703253][ T3608] usb 3-1: config 0 descriptor?? [ 3375.708303][ T336] usb 4-1: config 2 interface 108 altsetting 9 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 3375.719246][ T336] usb 4-1: config 2 interface 108 altsetting 9 has a duplicate endpoint with address 0xB, skipping [ 3375.729889][ T336] usb 4-1: config 2 interface 108 altsetting 9 has a duplicate endpoint with address 0xB, skipping [ 3375.740533][ T336] usb 4-1: config 2 interface 108 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 3375.751721][ T336] usb 4-1: config 2 interface 108 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 3375.762378][ T336] usb 4-1: config 2 interface 108 altsetting 9 has an invalid endpoint with address 0x80, skipping [ 3375.773012][ T336] usb 4-1: config 2 interface 108 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 3375.783612][ T336] usb 4-1: config 2 interface 108 altsetting 9 has 14 endpoint descriptors, different from the interface descriptor's value: 13 [ 3375.796754][ T336] usb 4-1: config 2 interface 251 has no altsetting 0 [ 3375.803557][ T336] usb 4-1: config 2 interface 172 has no altsetting 0 [ 3375.810187][ T336] usb 4-1: config 2 interface 108 has no altsetting 0 [ 3375.817062][T18841] ================================================================== [ 3375.825059][T18841] BUG: KASAN: use-after-free in __list_del_entry_valid+0xa6/0x130 [ 3375.832706][T18841] Read of size 8 at addr ffff888116596cf0 by task kworker/0:8/18841 [ 3375.840517][T18841] [ 3375.842687][T18841] CPU: 0 PID: 18841 Comm: kworker/0:8 Not tainted 6.1.78-syzkaller-00140-g9fcc2459efcd #0 [ 3375.852411][T18841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 3375.862305][T18841] Workqueue: events linkwatch_event [ 3375.867342][T18841] Call Trace: [ 3375.870466][T18841] [ 3375.873240][T18841] dump_stack_lvl+0x151/0x1b7 [ 3375.877752][T18841] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 3375.883043][T18841] ? _printk+0xd1/0x111 [ 3375.887043][T18841] ? __virt_addr_valid+0x242/0x2f0 [ 3375.891987][T18841] print_report+0x158/0x4e0 [ 3375.896329][T18841] ? __vunmap+0xaac/0xb60 [ 3375.900490][T18841] ? __virt_addr_valid+0x242/0x2f0 [ 3375.905444][T18841] ? kasan_complete_mode_report_info+0x90/0x1b0 [ 3375.911516][T18841] ? __list_del_entry_valid+0xa6/0x130 [ 3375.916934][T18841] kasan_report+0x13c/0x170 [ 3375.921267][T18841] ? __list_del_entry_valid+0xa6/0x130 [ 3375.926565][T18841] __asan_report_load8_noabort+0x14/0x20 [ 3375.932027][T18841] __list_del_entry_valid+0xa6/0x130 [ 3375.937150][T18841] process_one_work+0x4d7/0xcb0 [ 3375.941841][T18841] worker_thread+0xa60/0x1260 [ 3375.946358][T18841] kthread+0x26d/0x300 [ 3375.950257][T18841] ? worker_clr_flags+0x1a0/0x1a0 [ 3375.955125][T18841] ? kthread_blkcg+0xd0/0xd0 [ 3375.959542][T18841] ret_from_fork+0x1f/0x30 [ 3375.963800][T18841] [ 3375.966661][T18841] [ 3375.968831][T18841] Allocated by task 18841: [ 3375.973083][T18841] kasan_set_track+0x4b/0x70 [ 3375.977512][T18841] kasan_save_alloc_info+0x1f/0x30 [ 3375.982454][T18841] __kasan_kmalloc+0x9c/0xb0 [ 3375.986881][T18841] __kmalloc_node+0xb4/0x1e0 [ 3375.991307][T18841] kvmalloc_node+0x221/0x640 [ 3375.995737][T18841] alloc_netdev_mqs+0x8c/0xf90 [ 3376.000335][T18841] alloc_etherdev_mqs+0x36/0x40 [ 3376.005021][T18841] usbnet_probe+0x207/0x27c0 [ 3376.009450][T18841] usb_probe_interface+0x5b6/0xa90 [ 3376.014396][T18841] really_probe+0x2b8/0x920 [ 3376.018735][T18841] __driver_probe_device+0x1a0/0x310 [ 3376.023854][T18841] driver_probe_device+0x54/0x3d0 [ 3376.028715][T18841] __device_attach_driver+0x2e3/0x490 [ 3376.033922][T18841] bus_for_each_drv+0x183/0x200 [ 3376.038612][T18841] __device_attach+0x312/0x510 [ 3376.043209][T18841] device_initial_probe+0x1a/0x20 [ 3376.048073][T18841] bus_probe_device+0xbe/0x1e0 [ 3376.052672][T18841] device_add+0xb60/0xf10 [ 3376.056836][T18841] usb_set_configuration+0x190f/0x1e80 [ 3376.062132][T18841] usb_generic_driver_probe+0x8b/0x150 [ 3376.067424][T18841] usb_probe_device+0x144/0x260 [ 3376.072113][T18841] really_probe+0x2b8/0x920 [ 3376.076451][T18841] __driver_probe_device+0x1a0/0x310 [ 3376.081577][T18841] driver_probe_device+0x54/0x3d0 [ 3376.086454][T18841] __device_attach_driver+0x2e3/0x490 [ 3376.091643][T18841] bus_for_each_drv+0x183/0x200 [ 3376.096327][T18841] __device_attach+0x312/0x510 [ 3376.100930][T18841] device_initial_probe+0x1a/0x20 [ 3376.105791][T18841] bus_probe_device+0xbe/0x1e0 [ 3376.110388][T18841] device_add+0xb60/0xf10 [ 3376.114555][T18841] usb_new_device+0xf32/0x1810 [ 3376.119158][T18841] hub_event+0x2db1/0x4830 [ 3376.123408][T18841] process_one_work+0x73d/0xcb0 [ 3376.128095][T18841] worker_thread+0xa60/0x1260 [ 3376.132611][T18841] kthread+0x26d/0x300 [ 3376.136513][T18841] ret_from_fork+0x1f/0x30 [ 3376.140768][T18841] [ 3376.142937][T18841] Freed by task 24: [ 3376.146582][T18841] kasan_set_track+0x4b/0x70 [ 3376.151010][T18841] kasan_save_free_info+0x2b/0x40 [ 3376.155867][T18841] ____kasan_slab_free+0x131/0x180 [ 3376.160818][T18841] __kasan_slab_free+0x11/0x20 [ 3376.165416][T18841] __kmem_cache_free+0x218/0x3b0 [ 3376.170191][T18841] kfree+0x7a/0xf0 [ 3376.173767][T18841] kvfree+0x35/0x40 [ 3376.177394][T18841] netdev_freemem+0x3f/0x60 [ 3376.181735][T18841] netdev_release+0x7f/0xb0 [ 3376.186075][T18841] device_release+0x95/0x1c0 [ 3376.190501][T18841] kobject_put+0x178/0x260 [ 3376.194751][T18841] put_device+0x1f/0x30 [ 3376.198750][T18841] free_netdev+0x393/0x480 [ 3376.203000][T18841] usbnet_disconnect+0x245/0x390 [ 3376.207771][T18841] usb_unbind_interface+0x1fa/0x8c0 [ 3376.212805][T18841] device_release_driver_internal+0x53e/0x870 [ 3376.218710][T18841] device_release_driver+0x19/0x20 [ 3376.223657][T18841] bus_remove_device+0x2fa/0x360 [ 3376.228428][T18841] device_del+0x663/0xe90 [ 3376.232597][T18841] usb_disable_device+0x380/0x720 [ 3376.237456][T18841] usb_disconnect+0x32a/0x890 [ 3376.241971][T18841] hub_event+0x1ed8/0x4830 [ 3376.246224][T18841] process_one_work+0x73d/0xcb0 [ 3376.250907][T18841] worker_thread+0xa60/0x1260 [ 3376.255424][T18841] kthread+0x26d/0x300 [ 3376.259329][T18841] ret_from_fork+0x1f/0x30 [ 3376.263581][T18841] [ 3376.265760][T18841] Last potentially related work creation: [ 3376.271304][T18841] kasan_save_stack+0x3b/0x60 [ 3376.275907][T18841] __kasan_record_aux_stack+0xb4/0xc0 [ 3376.281115][T18841] kasan_record_aux_stack_noalloc+0xb/0x10 [ 3376.286754][T18841] insert_work+0x56/0x310 [ 3376.290919][T18841] __queue_work+0x9b6/0xd70 [ 3376.295258][T18841] queue_work_on+0x105/0x170 [ 3376.299686][T18841] usbnet_link_change+0xeb/0x100 [ 3376.304460][T18841] usbnet_probe+0x1dbe/0x27c0 [ 3376.308970][T18841] usb_probe_interface+0x5b6/0xa90 [ 3376.313919][T18841] really_probe+0x2b8/0x920 [ 3376.318261][T18841] __driver_probe_device+0x1a0/0x310 [ 3376.323379][T18841] driver_probe_device+0x54/0x3d0 [ 3376.328373][T18841] __device_attach_driver+0x2e3/0x490 [ 3376.333582][T18841] bus_for_each_drv+0x183/0x200 [ 3376.338277][T18841] __device_attach+0x312/0x510 [ 3376.342866][T18841] device_initial_probe+0x1a/0x20 [ 3376.347726][T18841] bus_probe_device+0xbe/0x1e0 [ 3376.352326][T18841] device_add+0xb60/0xf10 [ 3376.356494][T18841] usb_set_configuration+0x190f/0x1e80 [ 3376.361873][T18841] usb_generic_driver_probe+0x8b/0x150 [ 3376.367167][T18841] usb_probe_device+0x144/0x260 [ 3376.371857][T18841] really_probe+0x2b8/0x920 [ 3376.376194][T18841] __driver_probe_device+0x1a0/0x310 [ 3376.381319][T18841] driver_probe_device+0x54/0x3d0 [ 3376.386177][T18841] __device_attach_driver+0x2e3/0x490 [ 3376.391386][T18841] bus_for_each_drv+0x183/0x200 [ 3376.396070][T18841] __device_attach+0x312/0x510 [ 3376.400678][T18841] device_initial_probe+0x1a/0x20 [ 3376.405534][T18841] bus_probe_device+0xbe/0x1e0 [ 3376.410131][T18841] device_add+0xb60/0xf10 [ 3376.414437][T18841] usb_new_device+0xf32/0x1810 [ 3376.419038][T18841] hub_event+0x2db1/0x4830 [ 3376.423291][T18841] process_one_work+0x73d/0xcb0 [ 3376.427976][T18841] worker_thread+0xa60/0x1260 [ 3376.432489][T18841] kthread+0x26d/0x300 [ 3376.436394][T18841] ret_from_fork+0x1f/0x30 [ 3376.440647][T18841] [ 3376.442820][T18841] The buggy address belongs to the object at ffff888116596000 [ 3376.442820][T18841] which belongs to the cache kmalloc-4k of size 4096 [ 3376.456707][T18841] The buggy address is located 3312 bytes inside of [ 3376.456707][T18841] 4096-byte region [ffff888116596000, ffff888116597000) [ 3376.469986][T18841] [ 3376.472154][T18841] The buggy address belongs to the physical page: [ 3376.478414][T18841] page:ffffea0004596400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x116590 [ 3376.488474][T18841] head:ffffea0004596400 order:3 compound_mapcount:0 compound_pincount:0 [ 3376.496628][T18841] flags: 0x4000000000010200(slab|head|zone=1) [ 3376.502542][T18841] raw: 4000000000010200 ffffea0004df1400 dead000000000002 ffff888100043380 [ 3376.510954][T18841] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 3376.519371][T18841] page dumped because: kasan: bad access detected [ 3376.525639][T18841] page_owner tracks the page as allocated [ 3376.531173][T18841] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 20571, tgid 20571 (syz-executor.0), ts 1263037545810, free_ts 1262176127709 [ 3376.554436][T18841] post_alloc_hook+0x213/0x220 [ 3376.559033][T18841] prep_new_page+0x1b/0x110 [ 3376.563375][T18841] get_page_from_freelist+0x27ea/0x2870 [ 3376.568756][T18841] __alloc_pages+0x3a1/0x780 [ 3376.573181][T18841] alloc_slab_page+0x6c/0xf0 [ 3376.577607][T18841] new_slab+0x90/0x3e0 [ 3376.581515][T18841] ___slab_alloc+0x6f9/0xb80 [ 3376.585944][T18841] __slab_alloc+0x5d/0xa0 [ 3376.590215][T18841] __kmem_cache_alloc_node+0x1af/0x250 [ 3376.595596][T18841] __kmalloc_node_track_caller+0xa2/0x1e0 [ 3376.601149][T18841] kmemdup+0x29/0x60 [ 3376.604893][T18841] __addrconf_sysctl_register+0xad/0x3e0 [ 3376.610349][T18841] addrconf_sysctl_register+0x141/0x1a0 [ 3376.615731][T18841] ipv6_add_dev+0xbd7/0x11a0 [ 3376.620158][T18841] addrconf_notify+0x6d2/0xe10 [ 3376.624760][T18841] raw_notifier_call_chain+0x8c/0xf0 [ 3376.629889][T18841] page last free stack trace: [ 3376.634393][T18841] free_unref_page_prepare+0x83d/0x850 [ 3376.639698][T18841] free_unref_page+0xb2/0x5c0 [ 3376.644203][T18841] __free_pages+0x61/0xf0 [ 3376.648367][T18841] __free_slab+0xce/0x1a0 [ 3376.652539][T18841] __unfreeze_partials+0x165/0x1a0 [ 3376.657481][T18841] put_cpu_partial+0xa9/0x100 [ 3376.661994][T18841] __slab_free+0x1c8/0x280 [ 3376.666244][T18841] ___cache_free+0xc6/0xd0 [ 3376.670608][T18841] qlist_free_all+0xc5/0x140 [ 3376.675029][T18841] kasan_quarantine_reduce+0x15a/0x180 [ 3376.680324][T18841] __kasan_slab_alloc+0x24/0x80 [ 3376.685017][T18841] slab_post_alloc_hook+0x53/0x2c0 [ 3376.689957][T18841] __kmem_cache_alloc_node+0x191/0x250 [ 3376.695251][T18841] __kmalloc+0xa3/0x1e0 [ 3376.699245][T18841] usb_cache_string+0xa2/0x130 [ 3376.703844][T18841] usb_new_device+0x2a3/0x1810 [ 3376.708448][T18841] [ 3376.710614][T18841] Memory state around the buggy address: [ 3376.716086][T18841] ffff888116596b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3376.723986][T18841] ffff888116596c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3376.731882][T18841] >ffff888116596c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3376.739780][T18841] ^ [ 3376.747334][T18841] ffff888116596d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3376.755229][T18841] ffff888116596d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3376.763128][T18841] ================================================================== [ 3376.771024][T18841] Disabling lock debugging due to kernel taint 2024/06/05 11:34:15 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 3376.930785][ T336] usb 4-1: string descriptor 0 read error: -71 [ 3376.964540][ T336] usb 4-1: New USB device found, idVendor=2639, idProduct=0001, bcdDevice=45.1f [ 3376.973876][ T336] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3377.007065][ T336] usb 4-1: can't set config #2, error -71 [ 3377.014637][ T336] usb 4-1: USB disconnect, device number 59 [ 3377.040999][ T3608] usbhid 3-1:0.0: can't add hid device: -71 [ 3377.046927][ T3608] usbhid: probe of 3-1:0.0 failed with error -71 [ 3377.055978][ T3608] usb 3-1: USB disconnect, device number 111