last executing test programs: 14.466931733s ago: executing program 0 (id=1089): socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x6, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000020a000000000000000000000850000001700000095"], &(0x7f0000000140)='syzkaller\x00'}, 0x90) r0 = socket(0xf, 0x2, 0x3) setsockopt(r0, 0x107, 0x1, &(0x7f00000001c0)="010000000000060000071a80010061cc", 0x10) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x57fb, 0x4, 0x9, 0x25, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000001c0)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_aead={0x4c, 0x12, {{'pcrypt(aegis128l)\x00'}}}]}, 0x184}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') lseek(r2, 0x2027da, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0x8, 0x8}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000840)={0x2c, 0x0, &(0x7f0000000680)={0x0, 0x3, 0xa, @string={0xa, 0x3, "93905d355633e4a7"}}, 0x0, 0x0, 0x0}, 0x0) r4 = gettid() timer_create(0x3, &(0x7f0000000280)={0x0, 0x21, 0x2, @tid=r4}, &(0x7f0000000400)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, &(0x7f0000000500)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8}, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x1, './bus\x00'}, 0x6e) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x1) 11.539375604s ago: executing program 0 (id=1097): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file1\x00', 0x2010040, &(0x7f0000000480)={[{@noquota}, {@resgid}, {@errors_remount}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x79}}, {@data_err_abort}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2}}, {@noacl}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x75ca6e48}}, {@resgid}, {@noauto_da_alloc}]}, 0x10, 0x4eb, &(0x7f0000000d40)="$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") sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x80) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f00000007c0)=@ethtool_sfeatures={0x3b, 0x3, [{0xe8}, {0x0, 0x8}, {0x4, 0x9}]}}) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYRES8]) r4 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in6=@loopback}}, 0xe8) 11.266704526s ago: executing program 3 (id=1098): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e85"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file1\x00', 0x2010040, &(0x7f0000000480)={[{@noquota}, {@resgid}, {@errors_remount}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x79}}, {@data_err_abort}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2}}, {@noacl}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x75ca6e48}}, {@resgid}, {@noauto_da_alloc}]}, 0x10, 0x4eb, &(0x7f0000000d40)="$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") sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x80) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f00000007c0)=@ethtool_sfeatures={0x3b, 0x2, [{0xe8, 0x7}, {0x0, 0x8}]}}) 9.955470223s ago: executing program 0 (id=1100): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000018c0)=ANY=[@ANYBLOB="b702000000000004bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989425f5d0b79f6584d0416d7c4bb9f547b328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f01000000010000006e7dac1aba4b20dc7d0200000000000000df1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56e9cc48da2054476846591418451f3a6f907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b98d2de10c21d3ea02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d000000200008000000000000001abc11c800000000000000000000000928ee53595a779d243a48cea769470424d20a04c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642ba1694a0949b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de920000000000100000000000004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e91311ab96b81eea91cc6e3e4c37ee01c85009c68c54de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d505109000000000000008f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e09758bd445ab91d20baca005472b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92fe8bad99ca332af00f191b66b6a6f732a91f0e2e9190e4b448da7de018c58e950767f9b320be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c52573d9308a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c82c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e495f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e4a48dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c4698aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f00000021f8547d393dabe616fbbde21c90be00b5a22671395c7a69c6dd4d022ffc97ddb6aa025131652d409da1d8cfc3d219d4b1c1b7b8170d7c33d91db2b73f7ae02485a209a2474b5d0790d05c01bec623056e4d3f4d3149373a28b26a15a1fcce73d57e6eaf7e6f315fe275ebc9ef7aeca277dde01dde724f419803a2172a7833ceab38d21ca4f1dea5e1f4d8824167b21dd289dd4e6ecfba9e163bdbc48e1e758ecde05c10809c9edfa6d77c652fd742e6dad13d2a397bebe3ea8bc087d3720e2202f36c7719ae34f042e19dc08a3323a3d94098a7ec171469352bab1662c3e4d4803c565cfcce32dad628fade43a4844abb230ce608726fd87e93c40378b9811ad67440e68049304df5a7b86bfd7e3341f3e0b5f75b2a210c53adcca7de960a37b9e0b9b74e0d06d61b35ea65e6b4c810cc3735d4306552d7be0e2019e84688968d4c716f2b17f4ff0c9e5ee89d5e14ec149aae353e228612f5719dd6dae8a287064c93233a85ca5492798b54aae7d633f140aded112ce88a1aff7109aa5a9d2a447346a066c416933ab2a3c50b71946be9091ae1cdf30d46845ebe711458b8da6617579738ed8082a071c1d3cad599a3011f3bf456cd55a2d28ef3b196f235866aa8e44f3624fe4798468b5c1e3c8a10f2c93c003b0d6bf609f01e9140bdc537382839a034ef8aa95d72998f", @ANYRES16=0x0], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x4, 0x0, 0x8}, 0x10}, 0x90) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) syz_usb_control_io(r1, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="000004000000f82700e0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000f5ebd3d1000000000018340000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x8, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x8000, 0x0, 0x103, 0x12f, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000040000000000000000000085000000500000008500000050000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000001c0)='rxrpc_rx_icmp\x00'}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x6, 0x4, 0x6, 0x100, r3, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x0, 0x3}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) sched_setscheduler(0x0, 0x1, 0x0) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, 0x0, 0x0) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) r10 = inotify_init() creat(&(0x7f0000000100)='./file0\x00', 0x0) inotify_add_watch(r10, &(0x7f0000000240)='./file0\x00', 0x2) 9.059061547s ago: executing program 2 (id=1112): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e8500000007"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file1\x00', 0x2010040, &(0x7f0000000480)={[{@noquota}, {@resgid}, {@errors_remount}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x79}}, {@data_err_abort}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2}}, {@noacl}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x75ca6e48}}, {@resgid}, {@noauto_da_alloc}]}, 0x10, 0x4eb, &(0x7f0000000d40)="$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") sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x80) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f00000007c0)=@ethtool_sfeatures={0x3b, 0x2, [{0xe8, 0x7}, {0x0, 0x8}]}}) 9.055745547s ago: executing program 3 (id=1113): r0 = socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x5522, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r4, 0x80045510, 0x0) setrlimit(0x5, &(0x7f00000001c0)={0x3, 0x3b}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff"], &(0x7f0000000200)='GPL\x00', 0xffffffff, 0x53, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000500)='rxrpc_resend\x00', r6}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r8, 0x0, r0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="740000001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="000000000000008040000c0004000200380002803400018008001f00400f000008001b0009000000080018007f090000080011000400000008001b0006000000080014000500000014001a80100002800c0001800800000000000000"], 0x74}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) 8.238885234s ago: executing program 1 (id=1104): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_writepages\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000001c0)={[{@dioread_lock}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@grpquota}, {@barrier_val}, {@grpjquota}, {@jqfmt_vfsold}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pipe(0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0xb) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0xfdef) io_uring_setup(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) 8.095954216s ago: executing program 3 (id=1106): r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x45}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000140)={0x1000200, 0x0, 0x80000000, 0xffff, 0x0, "4ae23ae17df2e98c69ba36c4095c911abad88f"}) r3 = epoll_create1(0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000180)={0x10000001}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0xb}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000100)={0x0, 0x1, 0x1b, 0x1d, 0x20, 0x0}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000002840)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x3a) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x590, 0x3f0, 0x0, 0x200, 0x200, 0x0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x6, 0x0, {[{{@ipv6={@empty, @loopback, [], [], 'gre0\x00', 'bond0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@private}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x118}}, {{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@unspec=@realm={{0x30}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@local}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f0) r6 = socket$netlink(0x10, 0x3, 0x1) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x80000}, 0xc) syz_usb_connect$uac1(0x0, 0x86, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000086b1d0101400001020301090274000301fa10080904000000010100000a240104000302010207240704030005052405030009240300010100010409040100000102000009040101010102000009050109080004020d072501020005000904020000010202010101020000090582fc00000401f7072501007fe70000000000"], &(0x7f00000004c0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x0, 0x0, 0x0, 0xa, 0x20, 0x6}, 0xf, &(0x7f0000000280)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x0, 0x6, 0x69e4}]}, 0x1, [{0x2, &(0x7f0000000540)=ANY=[@ANYBLOB="02cf"]}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 8.095201116s ago: executing program 2 (id=1117): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e8500000007"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file1\x00', 0x2010040, &(0x7f0000000480)={[{@noquota}, {@resgid}, {@errors_remount}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x79}}, {@data_err_abort}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2}}, {@noacl}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x75ca6e48}}, {@resgid}, {@noauto_da_alloc}]}, 0x10, 0x4eb, &(0x7f0000000d40)="$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") sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x80) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f00000007c0)=@ethtool_sfeatures={0x3b, 0x2, [{0xe8, 0x7}, {0x0, 0x8}]}}) 7.165446512s ago: executing program 2 (id=1107): socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x6, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000020a000000000000000000000850000001700000095"], &(0x7f0000000140)='syzkaller\x00'}, 0x90) r0 = socket(0xf, 0x2, 0x3) setsockopt(r0, 0x107, 0x1, &(0x7f00000001c0)="010000000000060000071a80010061cc", 0x10) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x57fb, 0x4, 0x9, 0x25, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000001c0)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_aead={0x4c, 0x12, {{'pcrypt(aegis128l)\x00'}}}]}, 0x184}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') lseek(r2, 0x2027da, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x0, 0x8, 0x8}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000840)={0x2c, 0x0, &(0x7f0000000680)={0x0, 0x3, 0xa, @string={0xa, 0x3, "93905d355633e4a7"}}, 0x0, 0x0, 0x0}, 0x0) r4 = gettid() timer_create(0x3, &(0x7f0000000280)={0x0, 0x21, 0x2, @tid=r4}, &(0x7f0000000400)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, &(0x7f0000000500)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8}, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x1, './bus\x00'}, 0x6e) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x1) 7.003222896s ago: executing program 1 (id=1105): r0 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x5522, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r4, 0x80045510, 0x0) setrlimit(0x5, &(0x7f00000001c0)={0x3, 0x3b}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff"], &(0x7f0000000200)='GPL\x00', 0xffffffff, 0x53, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000500)='rxrpc_resend\x00', r6}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r8, 0x0, r0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="740000001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="000000000000008040000c0004000200380002803400018008001f00400f000008001b0009000000080018007f090000080011000400000008001b0006000000080014000500000014001a80100002800c0001800800000000000000"], 0x74}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 6.750963756s ago: executing program 0 (id=1108): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000d50000002a00c50095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)={{0x12, 0x1, 0x0, 0xe2, 0x79, 0x3b, 0x10, 0x5d1, 0x2001, 0x900, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4d, 0x2f, 0x9c}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x1, "81"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000ab00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) 6.204923111s ago: executing program 3 (id=1109): r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x45}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000140)={0x1000200, 0x0, 0x80000000, 0xffff, 0x0, "4ae23ae17df2e98c69ba36c4095c911abad88f"}) r3 = epoll_create1(0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000180)={0x10000001}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0xb}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KIOCSOUND(r5, 0x4b2f, 0x0) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000100)={0x0, 0x1, 0x1b, 0x1d, 0x20, 0x0}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000002840)) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x3a) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x590, 0x3f0, 0x0, 0x200, 0x200, 0x0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x6, 0x0, {[{{@ipv6={@empty, @loopback, [], [], 'gre0\x00', 'bond0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@private}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private2}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x118}}, {{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@unspec=@realm={{0x30}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@local}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f0) r7 = socket$netlink(0x10, 0x3, 0x1) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x80000}, 0xc) syz_usb_connect$uac1(0x0, 0x86, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000086b1d0101400001020301090274000301fa10080904000000010100000a240104000302010207240704030005052405030009240300010100010409040100000102000009040101010102000009050109080004020d072501020005000904020000010202010101020000090582fc00000401f7072501007fe70000000000"], &(0x7f00000004c0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x0, 0x0, 0x0, 0xa, 0x20, 0x6}, 0xf, &(0x7f0000000280)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x0, 0x6, 0x69e4}]}, 0x1, [{0x2, &(0x7f0000000540)=ANY=[@ANYBLOB="02cf"]}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 6.139395116s ago: executing program 1 (id=1110): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file1\x00', 0x2010040, &(0x7f0000000480)={[{@noquota}, {@resgid}, {@errors_remount}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x79}}, {@data_err_abort}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2}}, {@noacl}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x75ca6e48}}, {@resgid}, {@noauto_da_alloc}]}, 0x10, 0x4eb, &(0x7f0000000d40)="$eJzs3c9vG1kdAPDvTOLtryzJAodlJXZX7KJ0BbWTDd1GHEorIXqqRCn3EhIniuLEUey0TVShVNxBQgiQOHHigsQfgIT6JyCkSnBHBYEQtHDgABh5PG7T1E5S1fGwyecjTee9efF8v6+Wx/NmnjwBnFjvRsSViBiJiA8iYjzfnubLtXb7jc7fPXl8b769JNFq3fxbEkm+rbuvJF+fi4idiDgdEd+4FvHt5MW4ja3tlblarbqR1yvN1fVKY2v7wvLq3FJ1qbo2MzP90eyl2YuzUwPp50REXP7qn370/Z9/7fKvv3jnD7f+cv477bTG8vbd/RikTtdL2f9F12hEbBxFsAKM5OtSn/bvjQwxGQAADtQ+x/9kRHwuO/8fj5Hs7BQAAAA4TlpfGYt/JxEtAAAA4NhKszmwSVrO5wKMRZqWy505vJ+Os2mt3mh+YbG+ubbQmSs7EaV0cblWncrnCk9EKWnXp/M5tt36h3vqMxHxRkT8cPxMVi/P12sLRV/8AAAAgBPi3J7x/z/Hs/H/qaLzAgAAAAZsougEAAAAgCNn/A8AAADHn/E/AAAAHGtfv369vbS6z79euL21uVK/fWGh2lgpr27Ol+frG+vlpXp9KfvNvtWD9ler19e/FGubdyvNaqNZaWxt31qtb641by0/9whsAAAAYIjeeOfB75OI2PnymWxpe63opIChSA5ozx4S8iiv/HEICQFDM1J0AkBhRotOAChMaZ+2dIh5AMU56DpA38k7vxl8LgAAwNGY/Ez/+//7XRsAPv5c4wOAk8f9fzi5Ss/PALxYXCZAUT5xQPur3/9vtV4qIQAAYODGsiVJy/m9wLFI03I54vXssQClZHG5Vp3Kxwe/Gy+datens1cmB84ZBgAAAAAAAAAAAAAAAAAAAAAAAAA6Wq0kWgAAAMCxFpH+Ocl+zT9icvz9sb3XB15L/jWerSPizk9v/vjuXLO5Md3e/ven25s/ybd/WMQVDAAAAGCv7ji9O44HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEF68vjefHcZZty/Xo2IiZ7x3zmdrU5HKSLO/iOJ0V2vSyJiZADxd+5HxJu94ifttGIiOln0in9mAPGv5OuXjZ9GxLkBxIeT7MHVzofwxc9fGu9m696fv9F8eVX9j39pdI9/I32OP6/32WdpT/2th7+s9I1/P+Kt0d7Hn278pE/89w7Zx299c3u7X1vrZxGTfY5/u2NVmqvrlcbW9oXl1bml6lJ1bWZm+qPZS7MXZ6cqi8u1av5vzxg/+Oyv/rtf/8/uc/zdr//vH7L//3l49/GnOsW9b00W//x7vb9/3+wTP82/+z6fl9vtk93yTqe829u/+O3b+/V/oU//n77/Pb5o2zHPH7L/H9z47qND/ikAMASNre2VuVqtujHoQqvVah3Nnp8V0jiqPSsMv3Dq/yMNhU6h6CMTAAAwaM9O+ovOBAAAAAAAAAAAAAAAAAAAAE6uYfyc2N6YO8V0FQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgX/8LAAD//7zF2sw=") sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x80) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f00000007c0)=@ethtool_sfeatures={0x3b, 0x3, [{0xe8}, {0x0, 0x8}, {0x4, 0x9}]}}) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYRES8]) r4 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in6=@loopback}}, 0xe8) 5.658760866s ago: executing program 4 (id=1114): r0 = syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./bus\x00', 0x0, &(0x7f0000000200), 0x1, 0x545, &(0x7f0000000bc0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file1\x00', 0x98) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d571dc5db7e9309964e14df15b557469ddaa8e72999bbb4701884ec2521dabbc537ecb4aaeb5a3cff6f656d0748ef968c7afd9e0400000000000000c3a44170d1983cd6b8ede9ea4759d738d5b2a0d4ff894b6d52b43400733188c4d8a0c902b7865baafb9e304d72dd", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',\x00']) write$FUSE_DIRENTPLUS(r3, &(0x7f00000002c0)=ANY=[@ANYRES32=r3, @ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYRES16=r0], 0x1b0) write$FUSE_BMAP(r3, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_INIT(r3, &(0x7f0000000380)={0x50}, 0x50) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00'/15, @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',\x00']) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x3e0000, 0x0, 0x80000000, 0x3d70, r3, 0x6, '\x00', 0x0, r3, 0x1}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000007f1600850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) utimes(&(0x7f0000000280)='./file0\x00', 0x0) creat(&(0x7f0000000080)='./file1\x00', 0x0) r6 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x14f243, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r7 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r7, &(0x7f0000000440)={'#! ', '', [{0x20, 'GPL\x00'}, {0x20, ',[+'}]}, 0xd) r8 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0xb, &(0x7f0000000000)=0x40b, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001000)=ANY=[], 0x1a0}}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYRESHEX=r5, @ANYRES64=r6, @ANYBLOB="1054763caf4147762a32991c5e9770c41d29e258530a3beb1c6ceae173344cd27a9bf7c4f4c4b72040cfef8e3ded1726225ff26f086b6acbb0be57f4cf0dd843eccb95a742cafcd3a66278d3f4c40360c62b70c1381daabd8c2da2dfc3ce16a55b609f4495903e152d92a5ee279831cc6921f78e9a512f6c3b17ddfd5c2c1687abfdca5fcc131dd42430ad7cf4d2c850c2889cd620f35d08272d55a0ce990c7299f5a10dfa5d17ef2eac380db08555c0701c22b4cdb8a0b5d5b6df61fef173d6471937ee5d1d2b2bc43a77e8c0ff745b35ec7b6ca68887498021f6"], 0x0) 5.274009477s ago: executing program 1 (id=1116): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r2, 0x80045515, &(0x7f0000000040)={0x6, 0x1}) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r3 = open(&(0x7f0000000180)='./bus\x00', 0x1492fe, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r3, 0x0) fallocate(r3, 0x0, 0x0, 0x1001f0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r4 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x15, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "be1d0000ae9ef30bea2a004000010000000000008000"}) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b48, &(0x7f0000003d40)=""/175) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r6, 0x8b0d, &(0x7f0000001980)={'veth1_to_team\x00', @broadcast}) syz_usb_control_io(r5, &(0x7f0000000540)={0x2c, &(0x7f0000000240)={0x0, 0x0, 0x5, {0x5, 0x0, "a8dad2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000002c0)={0x24, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000000)={0x24, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="000312"], 0x0, 0x0}, 0x0) 5.24005186s ago: executing program 4 (id=1115): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file1\x00', 0x2010040, &(0x7f0000000480)={[{@noquota}, {@resgid}, {@errors_remount}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x79}}, {@data_err_abort}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2}}, {@noacl}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x75ca6e48}}, {@resgid}, {@noauto_da_alloc}]}, 0x10, 0x4eb, &(0x7f0000000d40)="$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") sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x80) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f00000007c0)=@ethtool_sfeatures={0x3b, 0x2, [{0xe8, 0x7}, {0x0, 0x8}]}}) 4.283934848s ago: executing program 0 (id=1118): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_writepages\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000001c0)={[{@dioread_lock}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@grpquota}, {@barrier_val}, {@grpjquota}, {@jqfmt_vfsold}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pipe(0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0xb) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0xfdef) io_uring_setup(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) 4.282726709s ago: executing program 2 (id=1119): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x5522, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80045510, 0x0) setrlimit(0x5, &(0x7f00000001c0)={0x3, 0x3b}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff"], &(0x7f0000000200)='GPL\x00', 0xffffffff, 0x53, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000500)='rxrpc_resend\x00', r5}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r7, 0x0, 0xffffffffffffffff) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="740000001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="000000000000008040000c0004000200380002803400018008001f00400f000008001b0009000000080018007f090000080011000400000008001b0006000000080014000500000014001a80100002800c0001800800000000000000"], 0x74}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) 4.238807162s ago: executing program 4 (id=1120): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e8500000007"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file1\x00', 0x2010040, &(0x7f0000000480)={[{@noquota}, {@resgid}, {@errors_remount}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x79}}, {@data_err_abort}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2}}, {@noacl}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x75ca6e48}}, {@resgid}, {@noauto_da_alloc}]}, 0x10, 0x4eb, &(0x7f0000000d40)="$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") sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x80) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f00000007c0)=@ethtool_sfeatures={0x3b, 0x2, [{0xe8, 0x7}, {0x0, 0x8}]}}) 2.885554993s ago: executing program 0 (id=1121): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000018c0)=ANY=[@ANYBLOB="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", @ANYRES16=0x0], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x4, 0x0, 0x8}, 0x10}, 0x90) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) syz_usb_control_io(r1, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="000004000000f82700e0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000f5ebd3d1000000000018340000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x8, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x8000, 0x0, 0x103, 0x162, &(0x7f0000000980)="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", &(0x7f00000007c0)="4c87fe555ceb79157b1e507ff4d3cc053321e42ae89f596427188b4877ab8f1776c0685784f1174c6401ecc1dd6e2a77bc79238f87ad9215a92ff203a30099e77c543e702b4a4438d358616381745f24f74e585498af129c4b173b242f445b08135f7fa40eb7ba78160ff4f0c80e1b324d0c234cb7f43a3ff9e9535dc16000c797113a039f4508a09144090000009f38a90a24f173b3e68377e4272950a80cfcd3aa6850e917bc7e57370060f5e6db941d67fc98a1e98103830b821657438325578d2af822dd4fc13ea7a7eef8d9be4e715aec8fd6cadc41c8da5ce9da2b9e1559d92a1936fc2b3a00000000000000000072200e10ba6269b634f10f7098c65ba67ba65c0e2687637e131fb8d5ba6c12c09c8356853c434a44ff0878e496dcf9a4f5ca02c293279948f37ebb28843f92c87c057a3b410e04418557d5deda7ddd3bd1d384d64ec980187e8b64a0696571a49e847db79349c9b3c3fab5f1f977bde4d8", 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000040000000000000000000085000000500000008500000050000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000001c0)='rxrpc_rx_icmp\x00'}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x6, 0x4, 0x6, 0x100, r3, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x0, 0x3}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) sched_setscheduler(0x0, 0x1, 0x0) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, 0x0, 0x0) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) r10 = inotify_init() creat(&(0x7f0000000100)='./file0\x00', 0x0) inotify_add_watch(r10, &(0x7f0000000240)='./file0\x00', 0x2) 2.884923163s ago: executing program 2 (id=1122): r0 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x5522, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r4, 0x80045510, 0x0) setrlimit(0x5, &(0x7f00000001c0)={0x3, 0x3b}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff"], &(0x7f0000000200)='GPL\x00', 0xffffffff, 0x53, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000500)='rxrpc_resend\x00', r6}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r8, 0x0, r0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="740000001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="000000000000008040000c0004000200380002803400018008001f00400f000008001b0009000000080018007f090000080011000400000008001b0006000000080014000500000014001a80100002800c0001800800000000000000"], 0x74}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.883555443s ago: executing program 3 (id=1123): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000a00)='spmi_write_begin\x00', r0}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000280)='%ps \x00'}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x0, 0x5}, 0x48) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000000)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@user_xattr}, {@jqfmt_vfsv1}, {@grpid}, {@nobh}, {@usrjquota, 0x2e}], [], 0x2e}, 0x6, 0x46f, &(0x7f0000000580)="$eJzs289vFFUcAPDvbLvlt62IP/ihVtHY+KOlBZWDF40mXExM9IDHWgpBCjW0JkKIVGPwaPgL1KOJf4EnvRj1pPGqiRcTY0IMF9GDGTO7M7C0u+v+ahfczycZeG/mTd/7zszbfTNvJ4CBNZ79k0Rsj4ifRiJGq9mbC4xX/7t29cLcX1cvzCWRpq/+kVTK/Xn1wlxRtNhvW56ZKEWUPkhib516l86dPzW7sDB/Ns9PLZ9+a2rp3PmnTp6ePTF/Yv7MzOHDhw5OP/vMzNM9iXNH1tY97y7u233k9csvzx29/Ma3n2frt+fba+OoGuu6zvEYv/lY1ng04tc0Tbuu41axoyadDPexIbRlKCKy01XO+n+MxlDcOHmj8dL7fW0csK7SNE03rVk7VCRWUuB/LIl+twDoj+KLPrv/LZYNHH703ZXnqzdAWdzX8qW6ZThKeZnyqvvbXhqPiKMrf3+cLVH3OQQAQG99mY1/nqw3/ivFPTXl7ojq3NBYRNwZETsj4q6I2BURd0dUyt4bEfe1Wf/4qvza8c8PWzoKrEXZ+O+5fG7r5vFfMfqLsaE8t6MSfzk5fnJh/kB+TCaivCnLTzep46sXf/yo0bba8V+2ZPUXY8G8Hb8Pr3pAd2x2ebabmGtdeS9iz3C9+JPrMwFJROyOiD0d/P3smJ18/LN9jbb/d/xN9GCeKf004rHq+V+JVfEXkubzk1ObY2H+wFRxVaz13feXXmlUf1fx90B2/rfWvf6vxz+W1M7XLrVfx6WfP2x4T9Pp9T+SvFZJj+Tr3pldXj47HTGSrKxdP3Nj3yJflM/in9hfv//vjPjnk3y/vRGRXcT3R8QDEfFg3vaHIuLhiNjfJP5vXnjkzc7jX19Z/MfaOv/tJ4ZOff1Fo/pbO/+HKqmJfE0rn3+tNrCbYwcAAAC3i1LlN/BJafJ6ulSanKz+hn9XbC0tLC4tP3F88e0zx6q/lR+Lcql40jVa8zx0On82XORnVuUPVp4bp2mabqnkJ+cWF9ZrTh1ozbYG/T/z21C/Wwesu7bm0Rq90QbclryvCYNL/4fB1Wr/L69zO4CN5/sfBle9/n8x4lofmgJsMN//MLj0fxhc+j8MLv0fBlI37/U3S+w80vHuaVe1b84D63D3X9blaDRLDG1gXb1MRKnupnJE3CItbJIo3RrNqCY2RUSrhS92emG3nejzBxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECP/BsAAP//cGjokQ==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2}, 0x4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="14000000000000000000000001000000060000000000000011000000000000000000000001000000040000000000000014000000000000000033aa0001000000010000000000000030000000000000000000000007000000008310f211295160385c6a96978064b9de8307a8ac1414bb07071a000000000014000000000000000000000001"], 0x90}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000000000001"], 0x50}}], 0x2, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000004c0)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="00000f0000000f04181980655cbf568ac8f9edde47"], 0x0, 0x0, 0x0, 0x0}, 0x0) ustat(0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0xad, &(0x7f00000003c0)=""/173}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r6}, 0x10) 2.461975888s ago: executing program 4 (id=1124): r0 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x5522, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r4, 0x80045510, 0x0) setrlimit(0x5, &(0x7f00000001c0)={0x3, 0x3b}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff"], &(0x7f0000000200)='GPL\x00', 0xffffffff, 0x53, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000500)='rxrpc_resend\x00', r6}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r8, 0x0, r0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="740000001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="000000000000008040000c0004000200380002803400018008001f00400f000008001b0009000000080018007f090000080011000400000008001b0006000000080014000500000014001a80100002800c0001800800000000000000"], 0x74}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.714076509s ago: executing program 2 (id=1125): socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x6, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000020a000000000000000000000850000001700000095"], &(0x7f0000000140)='syzkaller\x00'}, 0x90) r0 = socket(0xf, 0x2, 0x3) setsockopt(r0, 0x107, 0x1, &(0x7f00000001c0)="010000000000060000071a80010061cc", 0x10) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x57fb, 0x4, 0x9, 0x25, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000001c0)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, @in=@remote}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_aead={0x4c, 0x12, {{'pcrypt(aegis128l)\x00'}}}]}, 0x184}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') lseek(r2, 0x2027da, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000840)={0x2c, 0x0, &(0x7f0000000680)={0x0, 0x3, 0xa, @string={0xa, 0x3, "93905d355633e4a7"}}, 0x0, 0x0, 0x0}, 0x0) r4 = gettid() timer_create(0x3, &(0x7f0000000280)={0x0, 0x21, 0x2, @tid=r4}, &(0x7f0000000400)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, &(0x7f0000000500)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8}, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x1, './bus\x00'}, 0x6e) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x1) 868.194409ms ago: executing program 3 (id=1126): r0 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x5522, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r4, 0x80045510, 0x0) setrlimit(0x5, &(0x7f00000001c0)={0x3, 0x3b}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff"], &(0x7f0000000200)='GPL\x00', 0xffffffff, 0x53, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000500)='rxrpc_resend\x00', r6}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r8, 0x0, r0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="740000001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="000000000000008040000c0004000200380002803400018008001f00400f000008001b0009000000080018007f090000080011000400000008001b0006000000080014000500000014001a80100002800c0001800800000000000000"], 0x74}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) 867.730419ms ago: executing program 4 (id=1127): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file1\x00', 0x2010040, &(0x7f0000000480)={[{@noquota}, {@resgid}, {@errors_remount}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x79}}, {@data_err_abort}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2}}, {@noacl}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x75ca6e48}}, {@resgid}, {@noauto_da_alloc}]}, 0x10, 0x4eb, &(0x7f0000000d40)="$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") sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x80) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f00000007c0)=@ethtool_sfeatures={0x3b, 0x3, [{0xe8}, {0x0, 0x8}, {0x4, 0x9}]}}) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYRES8]) r4 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in6=@loopback}}, 0xe8) 295.258596ms ago: executing program 1 (id=1128): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f000001ac00)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020701172e479be3076bb207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000008385000000710000009500000000000000aeb2957aa3acfffc3049cd72b57fd48783d3b30373a1965520cce12501fabb3b07f21611b88a9aa224c7ae625e741a1bfd2632450f00dbf40024373715d05da32ecb24472107ede068baf57b0a34f53fa4d5dd90c848b0624d99fb195080d10d2a65dd44c086618e63b7c14617439966df47ff8ffdfdf85e4e7753b6ec83464696800ae377"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x24, r3, 0x351d4d5b9375e359, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x5, 'syz0\x00'}]}]}, 0x24}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x24061809}, 0xc, &(0x7f00000003c0)={&(0x7f000001b0c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00022cbd7000fddbdf256500000034000380240000801f00010048c4d9880605aff37816f67d13e48bb398b6e431878c4a0900000076a9000c00008008000300c700000008000200010000000800020000000000"], 0x58}, 0x1, 0x0, 0x0, 0x48000}, 0x4044890) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INFO(r5, 0x0, 0x80, &(0x7f00000004c0)={'nat\x00', 0x0, 0x0, 0x0, [0x1, 0xffffffffffffffff, 0x0, 0xae, 0x401, 0x8]}, &(0x7f0000000280)=0x78) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000004dc0)={0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x4, 0x0, @rand_addr=0x64010101}, {0x2, 0x6e23, @multicast1}, 0x369, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)='macvlan0\x00', 0x100000000, 0x0, 0x3}) r6 = socket$xdp(0x2c, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f00000005c0)={0x0, 0x6, 0x0, 0x4}, 0x10) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f000001ab40)={0x0, 'pimreg\x00', {0x2}, 0xffff}) sendto$inet6(r7, &(0x7f0000000180), 0x0, 0x40080, &(0x7f00000001c0)={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x29}, 0x6}, 0x1c) r8 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f000001aa80), 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f000001ae80)=[{{&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000200)="558ce224efb52c201c3d60b9d88cd96febf393d99ae15ff14b195b4de1a201cade02a9c12058b1e8102cbb6de9faa0c12096c220214aca722649d4efd4d2cd8cc74506eded434fc8f1eb40288176c1b4561ba50038cfaa399164c302e349f87f282d189fd1d7aa3f0cbf968e816bc789871cedbb503c0ea2c36480bda7b8d21a18bfc90d14087ed4f0c0092a176d2f46", 0x90}, {&(0x7f00000002c0)="83928c4261a4796b31a34ea2c6a24f010da6f160d4ab17483165abc96e4a967363f7c1f4340f4eff9bf4612f06ce7ff03177bd3eb4abe68dd23b4a650d47397c6f1207b35c1462ef8d2b390966b61437f3d654ed13be9435625050aefd5dc1c131ad85c1fdba8a8b757f0057da634e92be1a0994cb7a07099cebcb725ece87a5d3fd5b201265d1250b4ed6dcbc8da4a41dc6a1620591230c6cd84a6c8e78844767a3c3b69f99d6f5eaffa253b08630d746054e8c152bd687b502616b0b7a15996636be5969c2e27ca1e323506f4e07313324aaa37ec4fd40f5a18b614d51e62f0dc987ca", 0xe4}], 0x2}}, {{&(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000440)="a286ea94e852d03ca83483eaa039b26a43d3beca38170c54d1c8a43a4e7ce7882f2eee12f48d3a25d25a96f9cdb3d73dee6278e311be98a7b3a43e0fcc6a416e1ce69f3da02b66b01e8ce5d686dbae307be86c92", 0x54}, {&(0x7f00000004c0)="faa2f7293d4bc37ad1dfbe6fc4c020e5012ef379ba34ad31648c3d7f8a403e0f09b9c6dd2d9e25d19fa4cace", 0x2c}, {&(0x7f0000000500)="720e5389702103f440793eafd90c4fb8b28a12af6c7d7343c672bdbfcdc4c382da65bd4268346824a9cfa29942b1b9a5f6f4f8ae22c160f1c2a04094712da24b31e7a8b4189289ca98f1c0975d3a881b62", 0x51}], 0x3}}, {{&(0x7f00000005c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001ac0)=[{&(0x7f0000000640)="204a2198a3553f50fba74f657b6fda10eabedc97eeaa97b053f1ea80b056ac2917894555b5061be78dd7822ba2982e9474ab6c17fa66c15e78be0207c246e5368ca61e987567b05d478de3cb37793291f1257a387a60c40a5034334dcd3a6b1724fbb6853c5c86dcb0ac51a8aa3aa0df960fedf30af4df09cdf025f0a68d9f1c625be1996640732fc07d6bb281baac453baa1fe0779fae23", 0x98}, {&(0x7f000001ad00)="0233441908c57822ff54d86e23bb0040779026ba3917425d4e594dc1772b481f576b0e9f759efaa8ac4d2c29d1f7c19a176fed245278cb84b9d2a72d645b735f3f67f4af833a974060489c038f272f48abdffd62b0beb57d553df6bf483d3138e43b754448cc2fe92c0a7820e00700a66c77882d12a58c236c0532cec497634b13", 0x81}, {&(0x7f00000007c0)="b106d5bd7feb9e31c88899f7390dc68283b0cd8ca6c0c0813181f30e41850c5b1011168f8f676ab5c88face2acaa400ae2778248a9f9c3b9978c54576b961ba884858e7263af94f196d4861918d3ad7d0588a7e430d9dfe3717198fe21e5536f24c937489f5e4dc89dd40508314478564457b0d7c821966f6142b40aa5d75415433e095df71d65022706c1a119aae7e8571792e3636e71bf0d615c2ca628afb39f109d1e0c7fd5362e0a8fac4b520e05c9b3e9be227d2deb9996b8e180189de09d0cad79b61d5ee4adee9bb26f4821ba8cb0d8bc1200ec67d257e181baba3387d2d2c2aabdcf7ba698548ce9ea6e4e24b1c54072af9fc738eea4ca8381d235cb96460db0cc3ca7cc10765109410814c92b7267c67f1f2c33a2f62be52921b57a9a163a9725988158de6b0a0f7020fcb37eab67444b22a3cd98a85bc1664899d82b2d981bebff3913b43fdcb9d2da712c92426226600e47454487be06ca6f80d7958fcefd9936f5c77148f4c4a1ba13e8e4d0354e42061fac415bd70cca7729aee2ea75484d2fd2f3b6ef2580411f0ae60668b942d857e270525b3a0e6e5415ff0d53cd1820c0f54d6fb9b204d6e1c88e49aefd9128005edf031f2f7f53d9f22b682494822463f15dac16016a633ac5e31c482c8ef056cc82948f709ee5b361298005d2d711ea6e1023d3985911e1746c9e152f10040b90f3d1e173e455f90ec3c2ab6eecc0dcc8992faf3fe2f26ef6874461cac783746a0b2784d5907036b79803c3b3c80f1c23bb5ad13ed7c52783663850948fd41c57c9950fa3ee4be5654480ae95934fc44284d5994fc838ef75ab7db75005201dcdfdab188aefd5ede322336700e211fe3f10cede7ff81390f10488621c74bd5ab726486456354aad1624f9fa5fc4b6adbce83ced3e83b70b820b2565331e4210e869800b4690175dc78e6b94db1df16d497845d87553e21bd21b87b537fdf1ffa466bf08b8d4e92950ed5881f69def76c9fbb3092760c3cb2f368218fc5da4bad3529f6121a742b74f082125a523ab5658f38956308948cd9cb94113e8364582a97b717fff3e81c194137c3c343b90d942bffd618ebf3663fed777ac69916aedc7622fe891bffa904f9494f1da81e4e25817fac33645d992f14348dc80c5c8fc83f6133b52f991f8ae5538fafa525e50c2f01e22f98e5d9909160ac020453317fd3029a01cd19a6dba0bf28b681d42c8eadd74fc21cbf7eab70f959b2e80013d31e206f9c3a819c90b8c1ac2fa420d3eb296925374c756466095d0613faae75a7b559197aea4cc51e3ad39be801f1e7b239da85cc4196b888a59d1ceba3b2b39b38dff04df40c263f367ab56b2d034e7c615afb4cd598ffd1234bd8dcf39a40f220a578a16f2d8ec7a1220f861498d76ae8a41c4e263c64c9d5571da677e7a8dc7aa4fc4649fde5eccaa0c0f2b08f73ad019342483d61f4a4fdec27acd5c3ceeb945de2ce0e199288f67fb0b2f8ef45b4a74793152f4fac0746cdcc07fcad7b164eda66a611cf93bbc72491bb391b0370ca6c9ab9464da05654c6b670bfe5def4394d291064e876b5dccc178ace121fbb02ce069820f3f91f5fe6cbd52ec92acd411614a8d9102af82bbd248633d9c25f98cb344d088cf9c2f44dcae51cf5e640848a53641bfadbb8ae04365f58e6f29de50eee15fe79341fd61658ac4a13deb79cfb5324c99074fabbdc1d2b0cc3a6b49816c7efcf3d1b3677bcac7cb702aec0e0f7a05e91706a5210c2f1c5286e660f85ff7960ecefd5af8a0775417a35a76df2e958855f9c18ddb08ea4cf759ebc3050c83c51747bbb079545f430c1d079ba08f22ecf96d006f37a85fb917bdd305ea6d4f068ca3acc85e117ff869d348c8ade9d59ad994ab4ac9959182e32b212fa4ee43d7f4aae996f4fd853152f9135ab27d25c8e916256e19e1899fa39bd8a0af40f560513db28643d4792b0917cee95ee01571287da08f2689f0473e37ceebc3ced4988f6624f3f3ca97520e2c391f1b0cc7063d61817df2673fd600b01f2155266a9fc49f59b7d195a163ab28a66c5a08f10bb2fa554e4df0eccea7066927c9edcbd6fe4484bf5f4058ef52b20a6b4d4f7b2f2715bcdc3f823dc50ad8aedd82a062eecd3f5d663af26d6ec639e061b689f6a63adb20e108315ef873351e7e14878b59a2c1814be7add7a48823929e5105106205d9abae1824aa12144004ceb04f44ef45886b12a4f4362ff2bbccf61042f865f8659027db7f0ae041f74af752efaeb7fea0e1489f3a70f9005db8e9daf4b2a876d208b540000cb13a4934e373e7a2a99e0960754ddb5c56fcdf8a91e58e6dd641ea6641ed3fe0a8b9fe72195dd7126765233d14fb0349701215e833d86a3935b488a1e0653ce64ae4be6346c6e5b85c6b1867e6ca5dcf4ad55ea063b527b871ed4c0bb784930d4e44cd2456993b71731af28c4a4db9ad3fba3ab23e382b37586800f3067a3189bc2ceed703f701944bb8f7b2ec201b308f94683cb72628d7a4ae7bfbe8477d5762fd3663bfb2a46a568ece1c1e426dbc2299b020974dcab9d7f3aa112d09a97f8771c28edc1fbd840d55d68c1329e2ec75823f2d13dd2a552e064c2e8d1ed31088b5d91cc45508d80733f6bf89c753d321839b6e2926e77804b0bf2ebd5189876853ec21bef55dbac9f031838109a04319cf42e5d47396d49b179f79981dad947313cfe575ff3594fa79eeb3c4536d374a7c02c620033272ebfb116d07aa8d852c9b33448d211c422ddf9e1e95deeb6e3944f81916c4ecada173908780c753fd72e6adfe4fa4ab870aafa0d24f8cfdbe176513b68237aeac9af1ba81b2d43e01eb768925750c0cc3c7bf8cf4e7d1118497e8660ef310bf08d2ad3975a4545ff2313fb48a92de90c79b440733cc7de9e1038ba3a2bec8a4af1c51e31d6a0e2f3c642902d7ea8518a1b81c7769706d6198d2397b2edc2b9aedab2212b3cc9567a7f64d311cafb34019236d63b2697f8b42d7c2963bd24e4cae13e253d7c8bb254b4756a21983b1b1411ac6320a156b292e0f8be68a73c406c0c0a39be09ba6b4b2585ad3109624b8851a2482b11d8c53dc872fe0c6f5b8f79a8d5f0a158f445d4d7942c6f91910b2ea708bdd5a0d411a87868a541c1e81d4c4b800e8535f96eb9ca88378dc8dfe66964cabd305d45b24aaf952713fe4dd1181c9f415e1c08e6ca67716d72d145a491512bd2fcf7db51dae13005ebcfde04542784f606d5923b75c68564cacd4d8c81c73ea14203f0224aac78fe01840b99702b5e74fbfb7608b3726d0affa3bf93918ca0edd2e6a24bb6ef69edb410f15bc710ab80f7ee3a2f71ec5c0117e26dec0e6a6a2d5ffd3e8c5f63c5f8ae842d78be4c79f694cfae7d6ee3f0e2656ee77b8a33de2ff711a357748e4f7773a664d6a8935c5d75f13beeab0a0d21ac2aa314813169630ae0a7e9329349787e7eec07ae68b66520fcff09ddc92604ba51cfd91fece841f93dce2187ed114b0ef1f0188b69a2fb99aab97c982da72ac13127c3b9db4ea836a5dffda046bea684d4f23d302adeb246b2381f097bdc937e73e19720bfbb7a8da342dc5b7227adcf73047cc3411242a36790a3b4a4a4645ebde1a227322166ef64b4491f1a060706371c1866a8f037194e793ff9791748d2fbceb41a1b255ba9e4bb41ea29c3a863231eaa6d30984909003a825a6e47fc3514d1cd9843097acf64ff4278f072ccf048fe6e69293e017795333daf636f0e91cc7d39f2628cfd235c9e3c8da79e3b0e51f9226d5f421ff697f4a72db71e7cf61bf7fef23a5ad2e48cd7557bdea1b00f7ee451ff336284afc4371268a7665b3379a2ed99e54ef19bb8e5b33759f299b1ef368aca4e0215be74f022d5fd4732e33a0d042a37ccd39cf05d5c6d80ec1fd20d7183cfb4050cb1f1111b2325f3ffbfe7208a8ee26309d41f8765e77c79e8f2d9f35b4006b06cc371e917a3ef9e873f608e2313dbfee7e38789392c2d59e63646db2dedb730a69ce8d36e13a74183dfd62d757d215630946f00c3ef9e902b4720dcd6d0b96c7367a2db85a96b873679a8c7affb99138530d45215738a7433cc131935e51d39104061a07518fe654d8a4dd5702597da800577c78dda286160829d65ed6540e788e8995541aefaa29deecde58aaf0e4d24f6a8d3bb868794d28df777cf1fadcb52b11eac4931c7dfc9a27d5ae2cc5960b281ee5096762ea014ef60e2613a13dbd3b14a3654a7283c5808995ac0be987e093761dc64b12574cae95810b5a7868542c4d8ef08566ab2983a7511f2c529270ffd59da43ae6c9e626e9bfecee3454793f6c329653f0d81243ac2a303382848a9aa91937104c53a9d892f79098cc6c79892acf41166d3481b275e0a85093c6f675c7ce673b4d24dc658c2036d904be39cf2dc8e1a3fcc221eaf28b80d968c23ea26ba7f26f7d10956b97e258af11ddbc6fcc18816ba17fec2e1adb540681684287504bacf8f1f056b8496563c1925def3de8eb7c0f6e171446c51518ff88a9c917d93eb4f7b72a315b0fd6852cb37574625312b2e19de83c9e76fb5100219188ac7a0611549b484d00290dbc41c0a6ad857b51bf009e53d31d15caae4c3b700ff205f86b3fc45634aa9f1cbb81000b864913c08fa2bdfa27ae6d15702eff25979cfac2e5ad7081ac2071ed7013627bdd6d4346c42fb14c7d1dc118998b42236e35cec7660bf21974303714d7d514a4e071e9ac4797e5c082dd78633a341599a6488fff951a242e32a1898e1da490e4911686d980999a8d20dbd794c82400345b7bc8a426586a9a524e89283f80456f8f75c0fd22316965848b737a13966f005bf4e760ab434140e2519bcdb92f7a8bd11115872de66c092d531a21bc36d7f567352ef42975f871cb86549382239550e0444492994bb02b91cce78ad63ebdecc982a8746aeb89e025fed00a5aa3d4b3968fc68257a13aef21f1de811016be68a70502f42f6286b55cfdf473a1035bb4ff99885a135beaed342089f7c6ac65d25bf1d74e79f81b0a230626ea066b0ab450a987bf56022b6c1cd3f61f1936a96ea3fb524cae2619b29b742ce72b3ac8ff5f82d83411d88fb899fec5e320c15df437568faff759ef316e185e84beb29d6ac6f4d68085fbc54eb2daf3a8ba703701e366b42a14676381b4099bc483fc797974c8ae5ef716317ddefe79ba5cc204cf09388ff80d6f85123d17830412df02e88986c328761878c2f25831441d4df5710099df7cc37a0b496fba7350fbc0f511c595fd0f982538195bbe12d46debe5d3f24cec3601165c469629ae4039e71b795c959b2adf0b6a750e40d92411db0b173be7da727a499290a76b564142a273ada690f07e039e799afb21130c7329ad25cbd8d73d52ca851b4944f70e237a21da35ae048a3016e158a9990277eb28fc9360cbaf9913f14b786d45e0b260d9dd57f31f4d124d4d7aecd0b03edb3466abd8f2657b4474d52fc362391a816421cce43e4b161e52b45416e0dc2dcfb3bdd83407c0b7bc2df57d716e23c763bc1deb156e26ad7859c5b3e19e76213450c520e7ae4390146ae930a5ae151350907066e541f2e4d68ff32f07f0b67bbd382879a930198558429b47aa647be74fe9ae31878787725f165d082b24474f3c75fbf5518c8d39236803c08a68e5e65154b25a7549b3490f686b7ce0d20aa3c1d6a8e8776d43f6466d204c4dc7aa0d93548b67dd28506e0759e753c0e4c28d12771a98dbe3d4841af3fb1045214fb4962f097a8d690f6b718902", 0x1000}, {&(0x7f00000017c0)="30cecd4ce067ea5cdd226e75b9f7065679a45d1abfdb9323274d073b4de06d6a4bc6f1c81f42845df5137c74d402d6eac424dfde901aaa717bbf8e9f5ec363e3ec30e12ecaf427d5159a90176dbf771d06c6343abe7229dd8f800dbe596199446443e19a658b8f10c1725b9f73784e55cb5e4c6f19c4806a8677a2edf9a1caa373f83412ed659e3bd0a2dc307e249d1f4f3b3970d6933f9d07990a5308e9f9845824a2bf20af14ee3bb286c679dfbc35c00cd339ee7469193beb303a99809e89e19f4213598164add8ab577eed7eb9f7550fb6a1d99171fe306b6c5fe6e33ea6f8ee2be04afc68", 0xe7}, {&(0x7f00000018c0)="32826430c37b571388d36c2b5d70e1e31d402b156c033324218215dd6dd955466c87e5498c40957107b5685ac380f808027ae02f0547309eb53925d7167afe9ac851cdde88d9c08c09933ccde8144e73171bed6efef8fdd098098bb6e68349b8115825790ca7dafa545b50a429d5d99fcaa6f8c66811207db15c3752d3f58d2893ff0ad2cedf2516a4bb77bd7faf5dd3c0a8196048ff94a693b31bf1b6e5e5caec781cbc0403bdf55d55ded1a3e952eff4918495057a4d1eeef6480a9a0054c4c700d079581d4cbbe0bfab36", 0xcc}, {&(0x7f00000019c0)="b40c4c7a5a7e3357f45d985ad623ada95056196a3e2eb39d3230b37a3ec35692ae3b4aadf56e70721348df1a82c28b8489ae08a69048ba8d48d7d912d283efe967e2908b90550bcb948884c9bdb8eaa9054b2000b67d51e98579d4dc8a26202364aed803c61b97e35648b09de0c706763e7523c62df6b055c3f340a102ff66e906f3afa48ec24a66d304232b17b0bc996867122b33904dad9400a1", 0x9b}, {&(0x7f0000001a80)="f5eeba42144d3c603d76a84735c33b0107f74815849dff1de2b57e977138ca", 0x1f}], 0x7, &(0x7f000001ab80)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRESHEX=r8, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x48, 0x20000000}}, {{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001c00)="879b5a96e000fc612fb6b1723e12fe5b8200e7e840828a21f09d0c5274bd6b9ebc798c006d0d704ffc2922928b108287fed860022fece8f0c11fed2657678944ad72c4e609a784adc8e89cc7f42d4789657a473e6eef858e4dd39ad5914832146d5441b1d36f405e0b303abd0f9903bf8f6b04c520083c698ecc1f362d5b5f0d2af7626a064440b6e77d18fc10efffa64b3f", 0x92}], 0x1, &(0x7f0000001d00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0x38, 0x811}}, {{&(0x7f0000001d40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001e00)=[{&(0x7f0000001dc0)="6504c7389af015253d4a334b1de96dcdc115849ae47ffe6c4155d701662ee2947cfd0e3a1c5c61d502ee238f7c2cdef90d2cb5c9925a", 0x36}], 0x1, &(0x7f0000001b40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0x40, 0x24008800}}, {{&(0x7f0000001e80)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000002440)=[{&(0x7f0000001f00)="35fc9f6e941c063cea3be6a607d2f49b4a0af8d0cb4c", 0x16}, {&(0x7f0000001f40)="d0476858dd0fbc9c8a7c30a138acab8092277c63841586b1a1251f5734311be8ebf50ae790e8a1b1e4f207f6207b7d668ebb351e3839e0fcdb93c6999247abf8ee2e0f955431ead4e0d5afb533a02c64216f381431b4844d3f7a9f1c15657f43ce03f041daf327c876e65c1bec68cf1bf0896500318ca7ff442a16a78949a1ef098da8d33933d308ebe099004111ddb60e9e5c9652f7ff44525c28e6789df8ada09e45b91063aec2f9affa1bf6f771a8f6b543f520ccdae82cc50b78fa210f2bac6a18463fa705", 0xc7}, {&(0x7f0000002040)="0c724b34e75b29ee64a8d623deb675fe3e93b6bb34e53eae12df09dab1b141c68b2f7d16c3c8cd21d53cd7766dd4214b266f682e28ec", 0x36}, {&(0x7f0000002080)="8a6679c48e1fa23ff856488c5726e672b754cafa80493f0a1c0b071e95c7113b198982f3de974e5bb769c6d28a63300a524abcf8e1cb83c069c5d1f05f6e6a2eeb0d6fc870e7a264de3d516c71e2fc2f527a3b35b7426f48cd1b2957343110ad033b87f21df992cef642e0", 0x6b}, {&(0x7f0000002100)="c3855d580fc77c04", 0x8}, {&(0x7f000001aac0)="7f61ff18c3bdeaf31ae9935c9df571964a6095cc9ab8505a5aaa4ba68ec4be918ed66f602d3b46cfda8b88d0d84484804180c0b23dfb1e04573c64f3ba51873d8688a998c1c01576118266", 0x4b}, {&(0x7f00000021c0)="83d86bd59e9703d34bb8ab45754240fbbcc5abd31ce7511a83d843c5b7e1c64cad5609182cc1134eeacedbf0c97f372270e50a5f911af78a5efb96aa5118207273de20b8232e107de1e5b11f86a87707c92e47fbae631226e344e2e5f99f58f7c205c76d45f94efbcb06f9be7df5f32809bec779a6c4dfeabf900460f1f4813918dc6f01bc2c45147201dfa8b9d268b86db193bb183cb84a540c6137d8bf337310807ac7a9e95cae743119c139944319ea02285ec87b6612aa1645f9c0ab6f0c2e5cc7fdc78dd3f9db232dfae56fef638f03ddf55883fba94ea4", 0xda}, {&(0x7f00000022c0)="2c7c3d79f132ba3b90cf664f78845ed8c84a776199e6c0c38eb52e3cf9f77e05dad9166d74a555a3992127c04703b981aa8be3810d220dc4a825aba784eb7f4d6123dafcfdd7898a2b85adb1d5cf420a093eee3225f301c5cd605908fb3289b2c32f323d67dd7c0788cf3a7f7ec870937ede2ceb6dff30e3d09928c4208cb6", 0x7f}, {&(0x7f0000002340)="847a14632f56d85276ceb967c19c6e9e968a78c0fb5284a761dbd5e0ab70bfbc7f5887d58b4274e6b52696067134123fa8a8800b98ed8eccb19fd87aa336d974a7b1c4f91f133e222a01a9d65bb821ff3e901c87985c71fa97c8fdb40d9fd0e39ed153c9fae92cac7164f4d23ddb8b2f2f75f32db85c35f802e4e892f66bcd115441cc5549673a802afbc9e0c1fbc19bc40b951b89ef6ca07d698a00777cd25a186ea4797732cc523b8b9509bffb09121562edd5a56d67570c1bdb3097151e9ffc79cc6db7da5e617505012f3625db25e16c8ad446e9b766cc7d8b605813e2", 0xdf}], 0x9, &(0x7f000001ae40)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000d34ef368e66ca0cb8bad44e909ab", @ANYRES32, @ANYRES32], 0x38, 0x805}}, {{&(0x7f0000002580)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000026c0)=[{&(0x7f0000002600)="dc5c", 0x2}, {&(0x7f0000002640)="39244f83e05f4db999392860e3f8c217f91fe956abb0eb0665094331fe5e003f45d37ed6beae8408f081d015485448b1bedfb2c7a951f820afb90cf1e8ba1133e60c6fb1c9b51ce83e38bd0924a97057e24218e47fbc4c749afc16c453aa9a2e9c4763735d20598332f69e4f4704626abc9c", 0x72}], 0x2, &(0x7f000001b140)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="00cc12390700a8c64cc7c1000000"], 0x38, 0x814}}, {{&(0x7f0000002740)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000047c0)=[{&(0x7f00000027c0)="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", 0x1000}, {&(0x7f00000037c0)="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", 0x1000}], 0x2, &(0x7f0000000700)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="814c00a51b487ddc728b175a76df054afecabe23963ee6b7d8ace2617381b94a66be283d61cc58f6b6e08bc932c0ed6b79472309656dfac518bc11227f47fcec8ec2a704d27757cc3028ad4ce61af0f509b0033237873572895631c1f5b93fc7d3d8329ee06d58135b10d46de1e17bd479d50e09c567f266eb5895"], 0x20, 0x8010}}, {{&(0x7f00000048c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000049c0)=[{&(0x7f0000004940)="ceece394201fb53ec9598c7c10f1b86901be8dba7aa176a61923ac2207e16f5edbe8bc9f1bd2636585244e18a5bdc762da8630f5a6e66a9d37fc0afa23d0c4c39cfb6c0907988d1e5b512403351bcca2f1ab1f6c163fe4b5d4f97c48bd325ed7ccc0018d2f9e97ea5b8e2b8f8ca4cdf913c400", 0x73}], 0x1, &(0x7f000001adc0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="00000000000001000000020f0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYRES8, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESDEC=r3, @ANYRES32, @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r8, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x78, 0x80}}], 0x9, 0x4004080) r9 = syz_open_dev$vcsa(&(0x7f0000000100), 0x1, 0x0) lseek(r9, 0x0, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000500)={0x2, &(0x7f00000002c0)=[{0x5, 0xfa, 0x2f, 0xeb7}, {0x7, 0x80, 0x10, 0x8000}]}) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000540)={r9, r10, 0xffffffff}) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8001, 0x0, 0x3}]) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f00000000c0)={0x200000000000003, 0x0, [0x3f, 0x8, 0x30, 0x7ff], &(0x7f0000000080)}) r11 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r11, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) 22.907338ms ago: executing program 1 (id=1129): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000d50000002a00c50095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)={{0x12, 0x1, 0x0, 0xe2, 0x79, 0x3b, 0x10, 0x5d1, 0x2001, 0x900, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4d, 0x2f, 0x9c}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x1, "81"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000ab00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) 0s ago: executing program 4 (id=1131): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_writepages\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000001c0)={[{@dioread_lock}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@grpquota}, {@barrier_val}, {@grpjquota}, {@jqfmt_vfsold}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$KVM_SMI(0xffffffffffffffff, 0xaeb7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pipe(0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0xb) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0xfdef) io_uring_setup(0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) kernel console output (not intermixed with test programs): 1][ T4212] loop3: rw=2057, sector=468, nr_sectors = 1004 limit=63 [ 246.160019][ T4212] syz.3.973: attempt to access beyond end of device [ 246.160019][ T4212] loop3: rw=2049, sector=468, nr_sectors = 1004 limit=63 [ 246.169493][ T3855] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 246.199603][ T298] hid (null): bogus close delimiter [ 246.419429][ T3855] usb 2-1: Using ep0 maxpacket: 8 [ 246.419477][ T298] usb 4-1: language id specifier not provided by device, defaulting to English [ 246.539481][ T3855] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 246.549465][ T3855] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 246.678604][ T4238] loop2: detected capacity change from 0 to 512 [ 246.685018][ T4238] EXT4-fs: Invalid want_extra_isize 2 [ 246.741844][ T322] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 247.150643][ T4242] loop0: detected capacity change from 0 to 512 [ 247.157006][ T4242] EXT4-fs: Ignoring removed bh option [ 247.177336][ T3855] usb 2-1: language id specifier not provided by device, defaulting to English [ 247.187400][ T4242] EXT4-fs error (device loop0): __ext4_iget:5046: inode #12: block 2: comm syz.0.979: invalid block [ 247.199616][ T298] uclogic 0003:256C:006D.0022: failed retrieving Huion firmware version: -71 [ 247.208293][ T4242] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.979: couldn't read orphan inode 12 (err -117) [ 247.220251][ T298] uclogic 0003:256C:006D.0022: failed probing parameters: -71 [ 247.227591][ T4242] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 247.241081][ T298] uclogic: probe of 0003:256C:006D.0022 failed with error -71 [ 247.252751][ T298] usb 4-1: USB disconnect, device number 42 [ 247.309451][ T1809] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 247.319740][ T3855] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 247.328883][ T3855] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.336868][ T3855] usb 2-1: Product: syz [ 247.340938][ T3855] usb 2-1: Manufacturer: syz [ 247.345480][ T3855] usb 2-1: SerialNumber: syz [ 247.568161][ T4157] EXT4-fs (loop0): unmounting filesystem. [ 247.601278][ T4251] loop0: detected capacity change from 0 to 2048 [ 247.624887][ T4251] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 247.709678][ T1809] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.759848][ T3855] usb 2-1: 0:2 : does not exist [ 248.020790][ T4256] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.985: bg 0: block 234: padding at end of block bitmap is not set [ 248.035011][ T4256] EXT4-fs (loop0): Remounting filesystem read-only [ 248.047857][ T3855] usb 2-1: USB disconnect, device number 40 [ 248.064609][ T330] kworker/u4:3: attempt to access beyond end of device [ 248.064609][ T330] loop3: rw=1, sector=448, nr_sectors = 16 limit=63 [ 248.077844][ T330] EXT4-fs warning (device loop3): ext4_end_bio:347: I/O error 10 writing to inode 18 starting block 112) [ 248.089127][ T330] Buffer I/O error on device loop3, logical block 112 [ 248.095700][ T330] Buffer I/O error on device loop3, logical block 113 [ 248.102499][ T330] Buffer I/O error on device loop3, logical block 114 [ 248.109072][ T330] Buffer I/O error on device loop3, logical block 115 [ 248.116508][ T3998] EXT4-fs (loop3): unmounting filesystem. [ 248.123207][ T4216] kmmpd-loop3: attempt to access beyond end of device [ 248.123207][ T4216] loop3: rw=14337, sector=256, nr_sectors = 4 limit=63 [ 248.136569][ T4216] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 248.159468][ T1809] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 248.168374][ T1809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.176188][ T1809] usb 5-1: Product: syz [ 248.180336][ T1809] usb 5-1: Manufacturer: syz [ 248.185099][ T1809] usb 5-1: SerialNumber: syz [ 248.283846][ T4260] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.290867][ T4260] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.297984][ T4260] device bridge_slave_0 entered promiscuous mode [ 248.304864][ T4260] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.311750][ T4260] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.318969][ T4260] device bridge_slave_1 entered promiscuous mode [ 248.339427][ T3829] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 248.370944][ T4260] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.377809][ T4260] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.384916][ T4260] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.392045][ T4260] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.410629][ T3524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 248.417942][ T3524] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.425119][ T3524] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.471122][ T3524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 248.479222][ T3524] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.486085][ T3524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.493965][ T3524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 248.495277][ T4157] EXT4-fs (loop0): unmounting filesystem. [ 248.502370][ T3524] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.514189][ T3524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.522206][ T3524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 248.538062][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 248.545749][ T3855] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 248.555942][ T4268] loop0: detected capacity change from 0 to 512 [ 248.562420][ T4268] EXT4-fs: Invalid want_extra_isize 2 [ 248.602650][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 248.612621][ T4260] device veth0_vlan entered promiscuous mode [ 248.621098][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 248.628933][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 248.636472][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 248.647764][ T4260] device veth1_macvtap entered promiscuous mode [ 248.656770][ T3524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 248.799604][ T3855] usb 2-1: Using ep0 maxpacket: 16 [ 248.846430][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 248.856585][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 248.869514][ T3829] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.920083][ T10] device bridge_slave_1 left promiscuous mode [ 248.926068][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.933270][ T10] device bridge_slave_0 left promiscuous mode [ 248.939264][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.946865][ T10] device veth1_macvtap left promiscuous mode [ 248.952845][ T10] device veth0_vlan left promiscuous mode [ 249.069456][ T3829] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 249.078417][ T3829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.079480][ T3855] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 249.086789][ T3829] usb 3-1: Product: syz [ 249.097862][ T3855] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.100112][ T3829] usb 3-1: Manufacturer: syz [ 249.107007][ T3855] usb 2-1: Product: syz [ 249.111553][ T3829] usb 3-1: SerialNumber: syz [ 249.115396][ T3855] usb 2-1: Manufacturer: syz [ 249.124196][ T3855] usb 2-1: SerialNumber: syz [ 249.129218][ T3855] usb 2-1: config 0 descriptor?? [ 249.149650][ T6] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 249.170515][ T3855] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 249.178190][ T3855] usb 2-1: Detected FT232H [ 249.329479][ T1809] cdc_ncm 5-1:1.0: failed to get mac address [ 249.399425][ T6] usb 4-1: Using ep0 maxpacket: 16 [ 249.419040][ T4278] loop0: detected capacity change from 0 to 1024 [ 249.459681][ T351] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 249.599512][ T3855] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 249.609498][ T1809] cdc_ncm 5-1:1.0: bind() failure [ 249.619507][ T3855] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 249.626454][ T3855] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 249.634421][ T1809] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 249.642688][ T3855] usb 2-1: USB disconnect, device number 41 [ 249.659444][ T1809] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 249.666689][ T3855] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 249.675917][ T1809] usb 5-1: USB disconnect, device number 41 [ 249.682734][ T3855] ftdi_sio 2-1:0.0: device disconnected [ 249.719607][ T6] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 249.728648][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.736501][ T6] usb 4-1: Product: syz [ 249.740613][ T6] usb 4-1: Manufacturer: syz [ 249.745000][ T6] usb 4-1: SerialNumber: syz [ 249.750178][ T6] r8152-cfgselector 4-1: config 0 descriptor?? [ 250.238895][ T4289] netlink: 12 bytes leftover after parsing attributes in process `syz.4.996'. [ 250.481454][ T3829] cdc_ncm 3-1:1.0: failed to get mac address [ 250.599460][ T3829] cdc_ncm 3-1:1.0: bind() failure [ 250.619430][ T3829] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 250.639492][ T3829] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 250.653715][ T3829] usb 3-1: USB disconnect, device number 43 [ 251.017346][ T4302] loop1: detected capacity change from 0 to 2048 [ 251.037489][ T4306] loop0: detected capacity change from 0 to 512 [ 251.044001][ T4306] EXT4-fs: Invalid want_extra_isize 2 [ 251.060922][ T4302] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 251.089926][ T322] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 251.203459][ T4310] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.210398][ T4310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.321793][ T4302] loop1: detected capacity change from 2048 to 63 [ 252.198689][ T6] r8152-cfgselector 4-1: Unknown version 0x0000 [ 252.206505][ T6] r8152-cfgselector 4-1: bad CDC descriptors [ 252.225461][ T4322] loop0: detected capacity change from 0 to 2048 [ 252.240907][ T6] r8152-cfgselector 4-1: Unknown version 0x0000 [ 252.242186][ T4322] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 252.247537][ T6] r8152-cfgselector 4-1: USB disconnect, device number 43 [ 252.340844][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.347722][ T4329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.355530][ T344] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 252.429433][ T3855] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 252.732586][ T4333] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1002: bg 0: block 234: padding at end of block bitmap is not set [ 252.746874][ T4333] EXT4-fs (loop0): Remounting filesystem read-only [ 252.966452][ T4337] loop4: detected capacity change from 0 to 512 [ 252.972919][ T4337] EXT4-fs: Invalid want_extra_isize 2 [ 253.030780][ T3855] usb 3-1: Using ep0 maxpacket: 8 [ 253.039511][ T344] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.075684][ T344] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.085651][ T344] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 253.095458][ T344] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.123429][ T344] usb 2-1: config 0 descriptor?? [ 253.249553][ T3855] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 253.310870][ T3855] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 253.357251][ T4157] EXT4-fs (loop0): unmounting filesystem. [ 253.459431][ T4344] loop3: detected capacity change from 0 to 2048 [ 253.471206][ T4344] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 253.539534][ T4344] loop3: detected capacity change from 2048 to 63 [ 253.569483][ T3855] usb 3-1: language id specifier not provided by device, defaulting to English [ 253.630034][ T4302] syz.1.998: attempt to access beyond end of device [ 253.630034][ T4302] loop1: rw=2057, sector=456, nr_sectors = 8 limit=63 [ 253.643175][ T4302] syz.1.998: attempt to access beyond end of device [ 253.643175][ T4302] loop1: rw=2049, sector=456, nr_sectors = 8 limit=63 [ 253.649461][ T1809] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 253.656894][ T4302] syz.1.998: attempt to access beyond end of device [ 253.656894][ T4302] loop1: rw=2057, sector=468, nr_sectors = 1004 limit=63 [ 253.677036][ T4302] syz.1.998: attempt to access beyond end of device [ 253.677036][ T4302] loop1: rw=2049, sector=468, nr_sectors = 1004 limit=63 [ 253.709681][ T344] hid (null): bogus close delimiter [ 253.714800][ T3855] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 253.724505][ T3855] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.732466][ T3855] usb 3-1: Product: syz [ 253.736415][ T3855] usb 3-1: Manufacturer: syz [ 253.740901][ T3855] usb 3-1: SerialNumber: syz [ 253.799436][ T6] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 253.919451][ T344] usb 2-1: language id specifier not provided by device, defaulting to English [ 253.929416][ T1809] usb 1-1: Using ep0 maxpacket: 16 [ 254.099469][ T3855] usb 3-1: 0:2 : does not exist [ 254.107313][ T3855] usb 3-1: USB disconnect, device number 44 [ 254.199849][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.209493][ T1809] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 254.210684][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.219889][ T1809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.229157][ T6] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 254.237227][ T1809] usb 1-1: Product: syz [ 254.246160][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.250296][ T1809] usb 1-1: Manufacturer: syz [ 254.258843][ T6] usb 4-1: config 0 descriptor?? [ 254.265569][ T1809] usb 1-1: SerialNumber: syz [ 254.272154][ T1809] usb 1-1: config 0 descriptor?? [ 254.309876][ T1809] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 254.317367][ T1809] usb 1-1: Detected FT232H [ 254.419600][ T344] uclogic 0003:256C:006D.0023: failed retrieving Huion firmware version: -71 [ 254.428257][ T344] uclogic 0003:256C:006D.0023: failed probing parameters: -71 [ 254.435738][ T344] uclogic: probe of 0003:256C:006D.0023 failed with error -71 [ 254.444331][ T344] usb 2-1: USB disconnect, device number 42 [ 254.494795][ T4352] loop4: detected capacity change from 0 to 512 [ 254.501449][ T4352] EXT4-fs: Invalid want_extra_isize 2 [ 254.520663][ T322] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 254.611801][ T4353] loop2: detected capacity change from 0 to 40427 [ 254.618625][ T4353] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 254.625099][ T4353] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 254.635192][ T4353] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 254.757517][ T4353] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 254.764612][ T4353] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 254.839559][ T1809] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 254.869631][ T1809] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 254.882153][ T6] hid (null): bogus close delimiter [ 254.890001][ T1809] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 254.905957][ T1809] usb 1-1: USB disconnect, device number 45 [ 254.923716][ T1809] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 254.941859][ T1809] ftdi_sio 1-1:0.0: device disconnected [ 255.039498][ T6] usb 4-1: language id specifier not provided by device, defaulting to English [ 255.048692][ T10] kworker/u4:1: attempt to access beyond end of device [ 255.048692][ T10] loop1: rw=1, sector=448, nr_sectors = 16 limit=63 [ 255.061991][ T10] EXT4-fs warning (device loop1): ext4_end_bio:347: I/O error 10 writing to inode 18 starting block 112) [ 255.073438][ T10] Buffer I/O error on device loop1, logical block 112 [ 255.080014][ T10] Buffer I/O error on device loop1, logical block 113 [ 255.086937][ T10] Buffer I/O error on device loop1, logical block 114 [ 255.093508][ T10] Buffer I/O error on device loop1, logical block 115 [ 255.101468][ T4190] EXT4-fs (loop1): unmounting filesystem. [ 255.108093][ T4307] kmmpd-loop1: attempt to access beyond end of device [ 255.108093][ T4307] loop1: rw=14337, sector=256, nr_sectors = 4 limit=63 [ 255.121682][ T4307] Buffer I/O error on dev loop1, logical block 64, lost sync page write [ 255.456293][ T3385] syz-executor: attempt to access beyond end of device [ 255.456293][ T3385] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 255.670366][ T10] device bridge_slave_1 left promiscuous mode [ 255.676425][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.684048][ T10] device bridge_slave_0 left promiscuous mode [ 255.690135][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.699476][ T6] uclogic 0003:256C:006D.0024: failed retrieving string descriptor #100: -71 [ 255.708106][ T6] uclogic 0003:256C:006D.0024: failed retrieving pen parameters: -71 [ 255.708193][ T10] device veth1_macvtap left promiscuous mode [ 255.716241][ T6] uclogic 0003:256C:006D.0024: failed probing pen v1 parameters: -71 [ 255.721946][ T10] device veth0_vlan left promiscuous mode [ 255.735433][ T6] uclogic 0003:256C:006D.0024: failed probing parameters: -71 [ 255.742828][ T6] uclogic: probe of 0003:256C:006D.0024 failed with error -71 [ 255.752792][ T6] usb 4-1: USB disconnect, device number 44 [ 256.379285][ T10] kworker/u4:1: attempt to access beyond end of device [ 256.379285][ T10] loop3: rw=1, sector=448, nr_sectors = 16 limit=63 [ 256.394795][ T4370] loop2: detected capacity change from 0 to 512 [ 256.401192][ T4370] EXT4-fs: Invalid want_extra_isize 2 [ 256.408099][ T10] EXT4-fs warning (device loop3): ext4_end_bio:347: I/O error 10 writing to inode 18 starting block 112) [ 256.421390][ T10] Buffer I/O error on device loop3, logical block 112 [ 256.427979][ T10] Buffer I/O error on device loop3, logical block 113 [ 256.434902][ T10] Buffer I/O error on device loop3, logical block 114 [ 256.441479][ T10] Buffer I/O error on device loop3, logical block 115 [ 256.461151][ T4260] EXT4-fs (loop3): unmounting filesystem. [ 256.561135][ T4346] kmmpd-loop3: attempt to access beyond end of device [ 256.561135][ T4346] loop3: rw=14337, sector=256, nr_sectors = 4 limit=63 [ 256.574650][ T4346] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 256.658776][ T28] audit: type=1400 audit(1722936076.478:335): avc: denied { setcurrent } for pid=4365 comm="syz.4.1011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 256.707615][ T28] audit: type=1401 audit(1722936076.478:336): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 256.729419][ T3855] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 256.807831][ T4378] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.828583][ T4378] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.868340][ T4378] device bridge_slave_0 entered promiscuous mode [ 256.909266][ T4378] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.918217][ T4378] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.951324][ T4378] device bridge_slave_1 entered promiscuous mode [ 256.969478][ T3855] usb 1-1: Using ep0 maxpacket: 16 [ 257.299505][ T3855] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 257.314586][ T3855] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.409482][ T3855] usb 1-1: Product: syz [ 257.418468][ T3855] usb 1-1: Manufacturer: syz [ 257.428533][ T3855] usb 1-1: SerialNumber: syz [ 257.438569][ T3855] r8152-cfgselector 1-1: config 0 descriptor?? [ 257.465584][ T1809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 257.514417][ T1809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 257.667970][ T1809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 257.676112][ T1809] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 257.684492][ T1809] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.691375][ T1809] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.698566][ T1809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 257.706941][ T1809] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 257.714949][ T1809] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.721801][ T1809] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.810958][ T4402] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.819059][ T4402] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.830051][ T4402] device bridge_slave_0 entered promiscuous mode [ 257.840498][ T4402] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.854242][ T4402] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.865771][ T4402] device bridge_slave_1 entered promiscuous mode [ 257.947167][ T1809] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 257.967266][ T1809] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 257.983483][ T1809] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 257.998449][ T4411] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.005339][ T4411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.029129][ T3829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 258.049260][ T3829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 258.057159][ T3829] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 258.064706][ T3829] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 258.082925][ T4378] device veth0_vlan entered promiscuous mode [ 258.110158][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 258.119161][ T10] device bridge_slave_1 left promiscuous mode [ 258.125440][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.132786][ T10] device bridge_slave_0 left promiscuous mode [ 258.139098][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.147011][ T10] device veth1_macvtap left promiscuous mode [ 258.152932][ T10] device veth0_vlan left promiscuous mode [ 258.224538][ T4378] device veth1_macvtap entered promiscuous mode [ 258.237204][ T1809] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 258.245315][ T1809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 258.255806][ T3524] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 258.263988][ T3524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 258.289545][ T3524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 258.297286][ T3524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 258.312680][ T3524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 258.321179][ T3524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 258.329175][ T3524] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.336039][ T3524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.343456][ T3524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 258.351659][ T3524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 258.360047][ T3524] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.366889][ T3524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.399750][ T3524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 258.407926][ T3524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 258.417204][ T3829] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 258.439688][ T3829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 258.441849][ T4420] loop4: detected capacity change from 0 to 2048 [ 258.447623][ T3829] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 258.461854][ T3829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 258.470140][ T3829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 258.482700][ T4402] device veth0_vlan entered promiscuous mode [ 258.488929][ T4420] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 258.489316][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 258.505619][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 258.513769][ T1809] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 258.521139][ T1809] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 258.534328][ T4402] device veth1_macvtap entered promiscuous mode [ 258.541150][ T3524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 258.549063][ T3524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 258.557501][ T3524] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 258.564831][ T298] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 258.569449][ T344] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 258.572522][ T4420] loop4: detected capacity change from 2048 to 63 [ 258.590985][ T3524] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 258.599091][ T3524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 258.609917][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 258.618004][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 258.645285][ T4427] loop3: detected capacity change from 0 to 2048 [ 258.660600][ T4427] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 259.059220][ T4431] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1017: bg 0: block 234: padding at end of block bitmap is not set [ 259.073573][ T1809] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 259.073601][ T4431] EXT4-fs (loop3): Remounting filesystem read-only [ 259.179477][ T298] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.189482][ T344] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.190255][ T298] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.210459][ T298] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 259.219242][ T298] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.227919][ T298] usb 3-1: config 0 descriptor?? [ 259.359637][ T344] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 259.368551][ T344] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.376502][ T344] usb 2-1: Product: syz [ 259.380511][ T344] usb 2-1: Manufacturer: syz [ 259.384900][ T344] usb 2-1: SerialNumber: syz [ 259.409671][ T3855] r8152-cfgselector 1-1: Unknown version 0x0000 [ 259.416149][ T3855] r8152-cfgselector 1-1: bad CDC descriptors [ 259.439847][ T3855] r8152-cfgselector 1-1: Unknown version 0x0000 [ 259.446400][ T3855] r8152-cfgselector 1-1: USB disconnect, device number 46 [ 259.453519][ T1809] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.464608][ T1809] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.474836][ T1809] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 259.483720][ T1809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.494722][ T1809] usb 5-1: config 0 descriptor?? [ 259.544569][ T4402] EXT4-fs (loop3): unmounting filesystem. [ 259.562293][ T4436] loop3: detected capacity change from 0 to 512 [ 259.568645][ T4436] EXT4-fs: Invalid want_extra_isize 2 [ 259.849501][ T3855] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 259.980742][ T4420] syz.4.1022: attempt to access beyond end of device [ 259.980742][ T4420] loop4: rw=2057, sector=456, nr_sectors = 8 limit=63 [ 259.994033][ T4420] syz.4.1022: attempt to access beyond end of device [ 259.994033][ T4420] loop4: rw=2049, sector=456, nr_sectors = 8 limit=63 [ 260.007110][ T4420] syz.4.1022: attempt to access beyond end of device [ 260.007110][ T4420] loop4: rw=2057, sector=468, nr_sectors = 1004 limit=63 [ 260.009448][ T298] usbhid 3-1:0.0: can't add hid device: -71 [ 260.026263][ T4420] syz.4.1022: attempt to access beyond end of device [ 260.026263][ T4420] loop4: rw=2049, sector=468, nr_sectors = 1004 limit=63 [ 260.026522][ T298] usbhid: probe of 3-1:0.0 failed with error -71 [ 260.048840][ T298] usb 3-1: USB disconnect, device number 45 [ 260.059646][ T1809] hid (null): bogus close delimiter [ 260.089429][ T3855] usb 1-1: Using ep0 maxpacket: 16 [ 260.279469][ T1809] usb 5-1: language id specifier not provided by device, defaulting to English [ 260.369463][ T3855] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 260.378451][ T3855] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.386442][ T3855] usb 1-1: Product: syz [ 260.390494][ T3855] usb 1-1: Manufacturer: syz [ 260.396447][ T3855] usb 1-1: SerialNumber: syz [ 260.404570][ T3855] usb 1-1: config 0 descriptor?? [ 260.453708][ T3855] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 260.467755][ T3855] usb 1-1: Detected FT232H [ 260.519511][ T344] cdc_ncm 2-1:1.0: failed to get mac address [ 260.689464][ T490] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 260.729453][ T3524] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 260.780001][ T1809] uclogic 0003:256C:006D.0025: failed retrieving Huion firmware version: -71 [ 260.788674][ T1809] uclogic 0003:256C:006D.0025: failed probing parameters: -71 [ 260.796797][ T1809] uclogic: probe of 0003:256C:006D.0025 failed with error -71 [ 260.804217][ T344] cdc_ncm 2-1:1.0: bind() failure [ 260.810727][ T1809] usb 5-1: USB disconnect, device number 42 [ 260.829598][ T344] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 260.849503][ T344] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 260.857055][ T344] usb 2-1: USB disconnect, device number 43 [ 260.889502][ T3855] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 260.909699][ T3855] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 260.916963][ T3855] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 260.926380][ T3855] usb 1-1: USB disconnect, device number 47 [ 260.932265][ T490] usb 4-1: Using ep0 maxpacket: 8 [ 260.937500][ T3855] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 260.946811][ T3855] ftdi_sio 1-1:0.0: device disconnected [ 260.989575][ T3524] usb 3-1: Using ep0 maxpacket: 8 [ 261.049493][ T490] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 261.059826][ T490] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 261.109481][ T3524] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 261.119487][ T3524] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 261.299461][ T490] usb 4-1: language id specifier not provided by device, defaulting to English [ 261.311028][ T4451] loop1: detected capacity change from 0 to 512 [ 261.317555][ T4451] EXT4-fs: Invalid want_extra_isize 2 [ 261.321026][ T701] kworker/u4:6: attempt to access beyond end of device [ 261.321026][ T701] loop4: rw=1, sector=448, nr_sectors = 16 limit=63 [ 261.336440][ T701] EXT4-fs warning (device loop4): ext4_end_bio:347: I/O error 10 writing to inode 18 starting block 112) [ 261.348065][ T701] Buffer I/O error on device loop4, logical block 112 [ 261.354646][ T701] Buffer I/O error on device loop4, logical block 113 [ 261.361678][ T701] Buffer I/O error on device loop4, logical block 114 [ 261.368251][ T701] Buffer I/O error on device loop4, logical block 115 [ 261.376035][ T4067] EXT4-fs (loop4): unmounting filesystem. [ 261.389587][ T4422] kmmpd-loop4: attempt to access beyond end of device [ 261.389587][ T4422] loop4: rw=14337, sector=256, nr_sectors = 4 limit=63 [ 261.404009][ T4422] Buffer I/O error on dev loop4, logical block 64, lost sync page write [ 261.419541][ T3524] usb 3-1: language id specifier not provided by device, defaulting to English [ 261.439967][ T490] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 261.450709][ T490] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.458651][ T490] usb 4-1: Product: syz [ 261.463361][ T490] usb 4-1: Manufacturer: syz [ 261.467828][ T490] usb 4-1: SerialNumber: syz [ 261.549736][ T3524] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 261.558662][ T3524] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.566562][ T3524] usb 3-1: Product: syz [ 261.570890][ T3524] usb 3-1: Manufacturer: syz [ 261.575389][ T3524] usb 3-1: SerialNumber: syz [ 261.829698][ T490] usb 4-1: 0:2 : does not exist [ 261.858834][ T490] usb 4-1: USB disconnect, device number 45 [ 261.901161][ T701] device bridge_slave_1 left promiscuous mode [ 261.907409][ T701] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.915854][ T701] device bridge_slave_0 left promiscuous mode [ 261.922503][ T701] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.932544][ T701] device veth1_macvtap left promiscuous mode [ 261.938665][ T701] device veth0_vlan left promiscuous mode [ 261.969845][ T3524] usb 3-1: 0:2 : does not exist [ 261.998846][ T3524] usb 3-1: USB disconnect, device number 46 [ 262.280323][ T4464] loop3: detected capacity change from 0 to 2048 [ 262.286368][ T4467] loop0: detected capacity change from 0 to 2048 [ 262.325402][ T4464] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 262.337489][ T4467] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 262.397947][ T4469] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.405664][ T4464] loop3: detected capacity change from 2048 to 63 [ 262.412073][ T4467] loop0: detected capacity change from 2048 to 63 [ 262.419387][ T4469] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.430754][ T4469] device bridge_slave_0 entered promiscuous mode [ 262.437857][ T4469] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.445137][ T4469] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.452766][ T4469] device bridge_slave_1 entered promiscuous mode [ 262.531001][ T3524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 262.538578][ T3524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 262.557553][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 262.566238][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 262.574316][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.581175][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.588402][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 262.597212][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 262.605290][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.612231][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.619454][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 262.627363][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 262.644862][ T4469] device veth0_vlan entered promiscuous mode [ 262.651319][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 262.659827][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 262.667710][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 262.675469][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 262.679425][ T490] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 262.682835][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 262.703407][ T4469] device veth1_macvtap entered promiscuous mode [ 262.709548][ T298] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 262.717806][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 262.730490][ T3524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 262.744114][ T3524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 263.039427][ T344] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 263.049572][ T490] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.061745][ T490] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.069467][ T3524] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 263.071746][ T490] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 263.079516][ T298] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.087916][ T490] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.109686][ T490] usb 4-1: config 0 descriptor?? [ 263.118684][ T298] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.128556][ T298] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 263.137671][ T298] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.146664][ T298] usb 1-1: config 0 descriptor?? [ 263.337439][ T4486] loop1: detected capacity change from 0 to 40427 [ 263.344394][ T4486] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 263.351004][ T4486] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 263.361296][ T4486] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 263.382648][ T4486] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 263.389583][ T4486] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 263.399590][ T344] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.449499][ T3524] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.569507][ T344] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 263.578909][ T4464] syz.3.1042: attempt to access beyond end of device [ 263.578909][ T4464] loop3: rw=2057, sector=456, nr_sectors = 8 limit=63 [ 263.592554][ T344] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.600717][ T4464] syz.3.1042: attempt to access beyond end of device [ 263.600717][ T4464] loop3: rw=2049, sector=456, nr_sectors = 8 limit=63 [ 263.614143][ T344] usb 3-1: Product: syz [ 263.618118][ T344] usb 3-1: Manufacturer: syz [ 263.619741][ T298] hid (null): bogus close delimiter [ 263.622864][ T344] usb 3-1: SerialNumber: syz [ 263.632654][ T4464] syz.3.1042: attempt to access beyond end of device [ 263.632654][ T4464] loop3: rw=2057, sector=468, nr_sectors = 1004 limit=63 [ 263.640461][ T3524] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 263.649793][ T4464] syz.3.1042: attempt to access beyond end of device [ 263.649793][ T4464] loop3: rw=2049, sector=468, nr_sectors = 1004 limit=63 [ 263.663778][ T3524] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.669748][ T490] hid (null): bogus close delimiter [ 263.686532][ T3524] usb 5-1: Product: syz [ 263.690576][ T3524] usb 5-1: Manufacturer: syz [ 263.694951][ T3524] usb 5-1: SerialNumber: syz [ 263.829483][ T298] usb 1-1: language id specifier not provided by device, defaulting to English [ 263.899484][ T490] usb 4-1: language id specifier not provided by device, defaulting to English [ 264.419449][ T28] audit: type=1401 audit(1722936084.178:337): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 264.459580][ T490] uclogic 0003:256C:006D.0027: failed retrieving Huion firmware version: -71 [ 264.479457][ T298] uclogic 0003:256C:006D.0026: failed retrieving string descriptor #100: -71 [ 264.485032][ T490] uclogic 0003:256C:006D.0027: failed probing parameters: -71 [ 264.488064][ T298] uclogic 0003:256C:006D.0026: failed retrieving pen parameters: -71 [ 264.495744][ T490] uclogic: probe of 0003:256C:006D.0027 failed with error -71 [ 264.503407][ T298] uclogic 0003:256C:006D.0026: failed probing pen v1 parameters: -71 [ 264.517441][ T490] usb 4-1: USB disconnect, device number 46 [ 264.519579][ T298] uclogic 0003:256C:006D.0026: failed probing parameters: -71 [ 264.532216][ T298] uclogic: probe of 0003:256C:006D.0026 failed with error -71 [ 264.544635][ T298] usb 1-1: USB disconnect, device number 48 [ 264.789474][ T344] cdc_ncm 3-1:1.0: failed to get mac address [ 264.899482][ T3524] cdc_ncm 5-1:1.0: failed to get mac address [ 265.062373][ T10] bio_check_eod: 1 callbacks suppressed [ 265.062391][ T10] kworker/u4:1: attempt to access beyond end of device [ 265.062391][ T10] loop0: rw=1, sector=448, nr_sectors = 16 limit=63 [ 265.076794][ T344] cdc_ncm 3-1:1.0: bind() failure [ 265.081505][ T10] EXT4-fs warning (device loop0): ext4_end_bio:347: I/O error 10 writing to inode 18 starting block 112) [ 265.097180][ T10] Buffer I/O error on device loop0, logical block 112 [ 265.103763][ T10] Buffer I/O error on device loop0, logical block 113 [ 265.105245][ T4508] loop1: detected capacity change from 0 to 2048 [ 265.116718][ T344] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 265.118174][ T10] Buffer I/O error on device loop0, logical block 114 [ 265.129546][ T10] Buffer I/O error on device loop0, logical block 115 [ 265.137370][ T701] kworker/u4:6: attempt to access beyond end of device [ 265.137370][ T701] loop3: rw=1, sector=448, nr_sectors = 16 limit=63 [ 265.147262][ T4157] EXT4-fs (loop0): unmounting filesystem. [ 265.150863][ T701] EXT4-fs warning (device loop3): ext4_end_bio:347: I/O error 10 writing to inode 18 starting block 112) [ 265.156236][ T344] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 265.168240][ T701] Buffer I/O error on device loop3, logical block 112 [ 265.178924][ T344] usb 3-1: USB disconnect, device number 47 [ 265.180162][ T701] Buffer I/O error on device loop3, logical block 113 [ 265.193356][ T4402] EXT4-fs (loop3): unmounting filesystem. [ 265.199517][ T4473] kmmpd-loop0: attempt to access beyond end of device [ 265.199517][ T4473] loop0: rw=14337, sector=256, nr_sectors = 4 limit=63 [ 265.200365][ T4472] kmmpd-loop3: attempt to access beyond end of device [ 265.200365][ T4472] loop3: rw=14337, sector=256, nr_sectors = 4 limit=63 [ 265.213206][ T3524] cdc_ncm 5-1:1.0: bind() failure [ 265.226327][ T4472] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 265.233208][ T4473] Buffer I/O error on dev loop0, logical block 64, lost sync page write [ 265.253660][ T4508] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 265.262487][ T3524] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 265.299519][ T3524] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 265.316325][ T3524] usb 5-1: USB disconnect, device number 43 [ 265.728148][ T4516] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.1035: bg 0: block 234: padding at end of block bitmap is not set [ 265.743737][ T4516] EXT4-fs (loop1): Remounting filesystem read-only [ 265.812550][ T4518] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.819490][ T4518] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.826531][ T4518] device bridge_slave_0 entered promiscuous mode [ 265.834063][ T4518] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.841324][ T4518] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.849163][ T4518] device bridge_slave_1 entered promiscuous mode [ 265.869148][ T4519] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.876137][ T4519] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.883421][ T4519] device bridge_slave_0 entered promiscuous mode [ 265.890388][ T4519] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.897223][ T4519] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.904479][ T4519] device bridge_slave_1 entered promiscuous mode [ 266.014711][ T4378] EXT4-fs (loop1): unmounting filesystem. [ 266.055004][ T4518] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.061884][ T4518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.068941][ T4518] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.076209][ T4518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.084803][ T43] device bridge_slave_1 left promiscuous mode [ 266.090761][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.097941][ T43] device bridge_slave_0 left promiscuous mode [ 266.103969][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.111674][ T43] device veth1_macvtap left promiscuous mode [ 266.117484][ T43] device veth0_vlan left promiscuous mode [ 266.129444][ T490] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 266.213368][ T4519] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.220254][ T4519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.227309][ T4519] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.234241][ T4519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.264590][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 266.272289][ T6] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.279350][ T6] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.286322][ T3524] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 266.294567][ T6] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.301945][ T6] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.312514][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 266.319618][ T344] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 266.327300][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 266.335347][ T315] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.342210][ T315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.353274][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 266.361336][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.368192][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.369507][ T490] usb 3-1: Using ep0 maxpacket: 8 [ 266.375738][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 266.388211][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.395069][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.409349][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 266.417396][ T315] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.424265][ T315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.435536][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 266.443493][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 266.451318][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 266.470469][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 266.478684][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 266.491191][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 266.498986][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 266.506475][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 266.509502][ T490] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 266.523823][ T490] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 266.524329][ T4519] device veth0_vlan entered promiscuous mode [ 266.539569][ T3524] usb 5-1: Using ep0 maxpacket: 16 [ 266.544646][ T3829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 266.553107][ T3829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 266.560912][ T3829] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 266.568070][ T3829] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 266.575403][ T4518] device veth0_vlan entered promiscuous mode [ 266.579480][ T344] usb 2-1: Using ep0 maxpacket: 8 [ 266.588764][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 266.597376][ T4518] device veth1_macvtap entered promiscuous mode [ 266.608696][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 266.624566][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 266.632568][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 266.642025][ T4519] device veth1_macvtap entered promiscuous mode [ 266.656916][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 266.668418][ T315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 266.699472][ T344] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 266.714491][ T4537] loop3: detected capacity change from 0 to 2048 [ 266.721168][ T344] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 266.724686][ T4540] loop0: detected capacity change from 0 to 2048 [ 266.744404][ T4537] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 266.758815][ T4540] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 266.769602][ T490] usb 3-1: language id specifier not provided by device, defaulting to English [ 266.810108][ T4537] loop3: detected capacity change from 2048 to 63 [ 266.859561][ T3524] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 266.868565][ T3524] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.876735][ T3524] usb 5-1: Product: syz [ 266.919744][ T490] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 267.116138][ T3524] usb 5-1: Manufacturer: syz [ 267.120951][ T3524] usb 5-1: SerialNumber: syz [ 267.132105][ T3524] usb 5-1: config 0 descriptor?? [ 267.174218][ T3524] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 267.183144][ T3524] usb 5-1: Detected FT232H [ 267.188503][ T4548] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1051: bg 0: block 234: padding at end of block bitmap is not set [ 267.202780][ T490] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.202811][ T4548] EXT4-fs (loop0): Remounting filesystem read-only [ 267.222618][ T490] usb 3-1: Product: syz [ 267.226606][ T490] usb 3-1: Manufacturer: syz [ 267.231158][ T490] usb 3-1: SerialNumber: syz [ 267.239454][ T344] usb 2-1: language id specifier not provided by device, defaulting to English [ 267.330214][ T43] device bridge_slave_1 left promiscuous mode [ 267.336142][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.343563][ T43] device bridge_slave_0 left promiscuous mode [ 267.349621][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.357368][ T43] device veth1_macvtap left promiscuous mode [ 267.363349][ T43] device veth0_vlan left promiscuous mode [ 267.363349][ T344] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 267.378006][ T344] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.385820][ T1809] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 267.393367][ T344] usb 2-1: Product: syz [ 267.397459][ T344] usb 2-1: Manufacturer: syz [ 267.401983][ T344] usb 2-1: SerialNumber: syz [ 267.589773][ T490] usb 3-1: 0:2 : does not exist [ 267.593104][ T4519] EXT4-fs (loop0): unmounting filesystem. [ 267.600151][ T3524] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 267.605626][ T490] usb 3-1: USB disconnect, device number 48 [ 267.621651][ T3524] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 267.631975][ T4551] loop0: detected capacity change from 0 to 512 [ 267.638500][ T4551] EXT4-fs: Invalid want_extra_isize 2 [ 267.647473][ T3524] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 267.659788][ T3524] usb 5-1: USB disconnect, device number 44 [ 267.666126][ T3524] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 267.667101][ T320] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 267.676222][ T3524] ftdi_sio 5-1:0.0: device disconnected [ 267.809563][ T1809] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.821128][ T344] usb 2-1: 0:2 : does not exist [ 267.827751][ T1809] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.841814][ T344] usb 2-1: USB disconnect, device number 44 [ 267.848284][ T1809] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 267.860082][ T1809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.871668][ T1809] usb 4-1: config 0 descriptor?? [ 268.231595][ T4559] loop1: detected capacity change from 0 to 512 [ 268.238433][ T4559] EXT4-fs: Invalid want_extra_isize 2 [ 268.287908][ T4557] loop4: detected capacity change from 0 to 2048 [ 268.449636][ T320] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 268.450340][ T4537] syz.3.1038: attempt to access beyond end of device [ 268.450340][ T4537] loop3: rw=2057, sector=456, nr_sectors = 8 limit=63 [ 269.572731][ T4537] syz.3.1038: attempt to access beyond end of device [ 269.572731][ T4537] loop3: rw=2049, sector=456, nr_sectors = 8 limit=63 [ 269.599603][ T4537] syz.3.1038: attempt to access beyond end of device [ 269.599603][ T4537] loop3: rw=2057, sector=468, nr_sectors = 1004 limit=63 [ 269.625515][ T4566] loop0: detected capacity change from 0 to 512 [ 269.631948][ T4566] EXT4-fs: Invalid want_extra_isize 2 [ 269.641413][ T4537] syz.3.1038: attempt to access beyond end of device [ 269.641413][ T4537] loop3: rw=2049, sector=468, nr_sectors = 1004 limit=63 [ 269.655884][ T4557] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 269.689660][ T1809] hid (null): bogus close delimiter [ 269.699682][ T320] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 269.710794][ T4557] loop4: detected capacity change from 2048 to 63 [ 269.795029][ T4573] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.801921][ T4573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.996430][ T1809] usb 4-1: language id specifier not provided by device, defaulting to English [ 270.013627][ T4575] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.020511][ T4575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.089489][ T490] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 270.552856][ T490] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.570900][ T490] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.582837][ T490] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 270.592511][ T490] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.605980][ T490] usb 5-1: config 0 descriptor?? [ 270.697024][ T4583] loop0: detected capacity change from 0 to 40427 [ 270.706233][ T4583] F2FS-fs (loop0): Found nat_bits in checkpoint [ 270.730210][ T4583] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 270.739553][ T1809] uclogic 0003:256C:006D.0028: failed retrieving string descriptor #100: -71 [ 270.752103][ T1809] uclogic 0003:256C:006D.0028: failed retrieving pen parameters: -71 [ 270.760533][ T1809] uclogic 0003:256C:006D.0028: failed probing pen v1 parameters: -71 [ 270.768441][ T1809] uclogic 0003:256C:006D.0028: failed probing parameters: -71 [ 270.776098][ T1809] uclogic: probe of 0003:256C:006D.0028 failed with error -71 [ 270.784381][ T1809] usb 4-1: USB disconnect, device number 47 [ 270.799460][ T344] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 270.869555][ T315] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 270.971743][ T4519] F2FS-fs (loop0): access invalid blkaddr:2048 [ 270.977858][ T4519] CPU: 1 PID: 4519 Comm: syz-executor Not tainted 6.1.90-syzkaller-00129-g37391192a93a #0 [ 270.987449][ T4519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 270.997344][ T4519] Call Trace: [ 271.000479][ T4519] [ 271.003253][ T4519] dump_stack_lvl+0x151/0x1b7 [ 271.007757][ T4519] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 271.013053][ T4519] ? f2fs_get_next_page_offset+0x770/0x770 [ 271.018694][ T4519] dump_stack+0x15/0x1a [ 271.022686][ T4519] __f2fs_is_valid_blkaddr+0xda6/0x1450 [ 271.028068][ T4519] f2fs_is_valid_blkaddr+0x25/0x30 [ 271.033015][ T4519] f2fs_map_blocks+0xd32/0x43a0 [ 271.037706][ T4519] ? mempool_alloc_slab+0x1d/0x30 [ 271.042563][ T4519] ? f2fs_map_lock+0x260/0x260 [ 271.047171][ T4519] ? xa_load+0x1a1/0x210 [ 271.051240][ T4519] ? xas_find_conflict+0x8c0/0x8c0 [ 271.056186][ T4519] ? folio_unlock+0x5c/0x70 [ 271.060525][ T4519] f2fs_mpage_readpages+0xc65/0x20f0 [ 271.065648][ T4519] ? __kasan_check_write+0x14/0x20 [ 271.069965][ T4557] syz.4.1050: attempt to access beyond end of device [ 271.069965][ T4557] loop4: rw=2057, sector=456, nr_sectors = 8 limit=63 [ 271.070602][ T4519] ? dquot_release_reservation_block+0xa0/0xa0 [ 271.083856][ T4557] syz.4.1050: attempt to access beyond end of device [ 271.083856][ T4557] loop4: rw=2049, sector=456, nr_sectors = 8 limit=63 [ 271.089784][ T4519] ? lru_cache_disable+0xc0/0xc0 [ 271.089818][ T4519] f2fs_readahead+0xfd/0x250 [ 271.104183][ T4557] syz.4.1050: attempt to access beyond end of device [ 271.104183][ T4557] loop4: rw=2057, sector=468, nr_sectors = 1004 limit=63 [ 271.107656][ T4519] ? blk_start_plug+0x9c/0x130 [ 271.112336][ T4557] syz.4.1050: attempt to access beyond end of device [ 271.112336][ T4557] loop4: rw=2049, sector=468, nr_sectors = 1004 limit=63 [ 271.125445][ T4519] read_pages+0x1be/0xd40 [ 271.125468][ T4519] ? workingset_activation+0x430/0x430 [ 271.125486][ T4519] ? folio_add_lru+0x280/0x3f0 [ 271.125504][ T4519] ? page_cache_ra_unbounded+0x690/0x690 [ 271.163116][ T4519] ? filemap_add_folio+0x18f/0x200 [ 271.168062][ T4519] ? __filemap_add_folio+0xd10/0xd10 [ 271.173183][ T4519] page_cache_ra_unbounded+0x4c1/0x690 [ 271.178476][ T4519] ? readahead_gfp_mask+0x190/0x190 [ 271.183511][ T4519] ? __kernel_text_address+0xd/0x40 [ 271.188543][ T4519] ? unwind_get_return_address+0x4d/0x90 [ 271.194137][ T4519] page_cache_ra_order+0x928/0xb30 [ 271.199045][ T4519] ? do_page_cache_ra+0x110/0x110 [ 271.203992][ T4519] ? __stack_depot_save+0x36/0x480 [ 271.208939][ T4519] ? putname+0xfa/0x150 [ 271.212953][ T4519] ondemand_readahead+0x91a/0xee0 [ 271.217793][ T4519] ? kasan_set_track+0x4b/0x70 [ 271.222396][ T4519] ? kasan_save_free_info+0x2b/0x40 [ 271.227425][ T4519] ? ____kasan_slab_free+0x131/0x180 [ 271.232548][ T4519] ? do_syscall_64+0x3b/0xb0 [ 271.236973][ T4519] ? page_cache_sync_ra+0x450/0x450 [ 271.242006][ T4519] ? blk_cgroup_congested+0x132/0x150 [ 271.247215][ T4519] page_cache_sync_ra+0x3d6/0x450 [ 271.252166][ T4519] f2fs_readdir+0x599/0xc10 [ 271.256507][ T4519] ? f2fs_fill_dentries+0xd00/0xd00 [ 271.261540][ T4519] ? __this_cpu_preempt_check+0x13/0x20 [ 271.266914][ T4519] ? memcg_rstat_updated+0x4f/0x110 [ 271.271951][ T4519] ? security_file_permission+0x86/0xb0 [ 271.277330][ T4519] iterate_dir+0x265/0x610 [ 271.281586][ T4519] ? f2fs_fill_dentries+0xd00/0xd00 [ 271.286618][ T4519] __se_sys_getdents64+0x1c1/0x460 [ 271.291564][ T4519] ? __x64_sys_getdents64+0x90/0x90 [ 271.296600][ T4519] ? filldir+0x670/0x670 [ 271.300677][ T4519] ? debug_smp_processor_id+0x17/0x20 [ 271.305899][ T4519] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 271.311789][ T4519] ? exit_to_user_mode_prepare+0x39/0xa0 [ 271.317256][ T4519] __x64_sys_getdents64+0x7b/0x90 [ 271.322210][ T4519] x64_sys_call+0x5ae/0x9a0 [ 271.326543][ T4519] do_syscall_64+0x3b/0xb0 [ 271.330796][ T4519] ? clear_bhb_loop+0x55/0xb0 [ 271.335318][ T4519] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 271.341034][ T4519] RIP: 0033:0x7f3272ba9a93 [ 271.345289][ T4519] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 32 44 f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 271.364734][ T4519] RSP: 002b:00007ffe8a84b978 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 271.373009][ T4519] RAX: ffffffffffffffda RBX: 00005555570ef4e0 RCX: 00007f3272ba9a93 [ 271.380789][ T4519] RDX: 0000000000008000 RSI: 00005555570ef4e0 RDI: 0000000000000005 [ 271.388597][ T4519] RBP: 00005555570ef4b4 R08: 0000000000000000 R09: 0000000000000000 [ 271.396410][ T4519] R10: 0000000000001000 R11: 0000000000000293 R12: ffffffffffffffa8 [ 271.404218][ T4519] R13: 0000000000000010 R14: 00005555570ef4b0 R15: 00007ffe8a84dc20 [ 271.412038][ T4519] [ 271.415802][ T490] hid (null): bogus close delimiter [ 271.421433][ T4519] syz-executor: attempt to access beyond end of device [ 271.421433][ T4519] loop0: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 271.435515][ T4519] syz-executor: attempt to access beyond end of device [ 271.435515][ T4519] loop0: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 271.452280][ T4519] syz-executor: attempt to access beyond end of device [ 271.452280][ T4519] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 271.469551][ T344] usb 2-1: Using ep0 maxpacket: 8 [ 271.499539][ T490] usb 5-1: language id specifier not provided by device, defaulting to English [ 271.539436][ T315] usb 3-1: Using ep0 maxpacket: 16 [ 271.589458][ T344] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 271.599605][ T344] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 271.625311][ T4593] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.633232][ T4593] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.640845][ T4593] device bridge_slave_0 entered promiscuous mode [ 271.647461][ T4593] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.654392][ T4593] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.661552][ T4593] device bridge_slave_1 entered promiscuous mode [ 271.697774][ T701] kworker/u4:6: attempt to access beyond end of device [ 271.697774][ T701] loop3: rw=1, sector=448, nr_sectors = 16 limit=63 [ 271.711644][ T701] EXT4-fs warning (device loop3): ext4_end_bio:347: I/O error 10 writing to inode 18 starting block 112) [ 271.722990][ T701] buffer_io_error: 2 callbacks suppressed [ 271.723004][ T701] Buffer I/O error on device loop3, logical block 112 [ 271.735136][ T701] Buffer I/O error on device loop3, logical block 113 [ 271.742157][ T701] Buffer I/O error on device loop3, logical block 114 [ 271.748735][ T701] Buffer I/O error on device loop3, logical block 115 [ 271.756508][ T4518] EXT4-fs (loop3): unmounting filesystem. [ 271.763314][ T4541] kmmpd-loop3: attempt to access beyond end of device [ 271.763314][ T4541] loop3: rw=14337, sector=256, nr_sectors = 4 limit=63 [ 271.763339][ T4593] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.763351][ T4593] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.776907][ T4541] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 271.783617][ T4593] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.805615][ T4593] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.827298][ T3855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 271.834781][ T3855] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.841948][ T3855] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.849638][ T315] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 271.851663][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 271.858492][ T315] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.858516][ T315] usb 3-1: Product: syz [ 271.858528][ T315] usb 3-1: Manufacturer: syz [ 271.883708][ T344] usb 2-1: language id specifier not provided by device, defaulting to English [ 271.886957][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.892533][ T315] usb 3-1: SerialNumber: syz [ 271.899352][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.904486][ T315] r8152-cfgselector 3-1: config 0 descriptor?? [ 271.950171][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 271.958439][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.965326][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.977779][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 271.985731][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 272.002464][ T3524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 272.009515][ T490] uclogic 0003:256C:006D.0029: failed retrieving Huion firmware version: -71 [ 272.015417][ T4593] device veth0_vlan entered promiscuous mode [ 272.019102][ T344] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 272.032750][ T4593] device veth1_macvtap entered promiscuous mode [ 272.040035][ T490] uclogic 0003:256C:006D.0029: failed probing parameters: -71 [ 272.047358][ T490] uclogic: probe of 0003:256C:006D.0029 failed with error -71 [ 272.054737][ T344] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.060862][ T3524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 272.062891][ T344] usb 2-1: Product: syz [ 272.070708][ T3524] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 272.080642][ T490] usb 5-1: USB disconnect, device number 45 [ 272.083259][ T3524] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 272.087032][ T344] usb 2-1: Manufacturer: syz [ 272.096109][ T3524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 272.103700][ T344] usb 2-1: SerialNumber: syz [ 272.120223][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 272.128410][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 272.168670][ T4601] loop0: detected capacity change from 0 to 2048 [ 272.181463][ T4599] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.182801][ T4601] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 272.188419][ T4599] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.207602][ T4599] device bridge_slave_0 entered promiscuous mode [ 272.216478][ T4599] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.224038][ T4599] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.231635][ T4599] device bridge_slave_1 entered promiscuous mode [ 272.251174][ T10] device bridge_slave_1 left promiscuous mode [ 272.257337][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.264836][ T10] device bridge_slave_0 left promiscuous mode [ 272.270907][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.278688][ T10] device veth1_macvtap left promiscuous mode [ 272.284752][ T10] device veth0_vlan left promiscuous mode [ 272.644258][ T4609] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1059: bg 0: block 234: padding at end of block bitmap is not set [ 272.659409][ T4609] EXT4-fs (loop0): Remounting filesystem read-only [ 272.693777][ T43] kworker/u4:2: attempt to access beyond end of device [ 272.693777][ T43] loop4: rw=1, sector=448, nr_sectors = 16 limit=63 [ 272.713478][ T43] EXT4-fs warning (device loop4): ext4_end_bio:347: I/O error 10 writing to inode 18 starting block 112) [ 272.729081][ T43] Buffer I/O error on device loop4, logical block 112 [ 272.735672][ T43] Buffer I/O error on device loop4, logical block 113 [ 272.746210][ T43] Buffer I/O error on device loop4, logical block 114 [ 272.753066][ T43] Buffer I/O error on device loop4, logical block 115 [ 272.759979][ T344] usb 2-1: 0:2 : does not exist [ 272.761025][ T4469] EXT4-fs (loop4): unmounting filesystem. [ 272.772096][ T344] usb 2-1: USB disconnect, device number 45 [ 272.778508][ T4567] Buffer I/O error on dev loop4, logical block 64, lost sync page write [ 272.781118][ T322] udevd[322]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 272.847042][ T3829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 272.854776][ T3829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 272.865378][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 272.873666][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 272.882206][ T490] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.889057][ T490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.896430][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 272.904853][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 272.913034][ T490] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.919899][ T490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.927279][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 272.941497][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 272.953504][ T3855] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 272.974875][ T3829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 272.994282][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 273.002641][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 273.010285][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 273.031679][ T4599] device veth0_vlan entered promiscuous mode [ 273.048522][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 273.064008][ T4599] device veth1_macvtap entered promiscuous mode [ 273.078158][ T4613] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.085547][ T4613] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.087901][ T4593] EXT4-fs (loop0): unmounting filesystem. [ 273.093027][ T4613] device bridge_slave_0 entered promiscuous mode [ 273.112467][ T4613] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.119416][ T4613] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.119766][ T4618] loop0: detected capacity change from 0 to 512 [ 273.126678][ T4613] device bridge_slave_1 entered promiscuous mode [ 273.141380][ T4618] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #15: comm syz.0.1064: casefold flag without casefold feature [ 273.155060][ T4618] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #2: comm syz.0.1064: missing EA_INODE flag [ 273.169557][ T3524] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 273.178131][ T3524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 273.186286][ T4621] loop1: detected capacity change from 0 to 512 [ 273.186466][ T3524] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 273.192750][ T4621] EXT4-fs: Invalid want_extra_isize 2 [ 273.200670][ T3524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 273.205601][ T4618] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.1064: error while reading EA inode 2 err=-117 [ 273.225945][ T4618] EXT4-fs (loop0): 1 orphan inode deleted [ 273.231660][ T4618] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 273.232314][ T322] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 274.461206][ T4593] EXT4-fs (loop0): unmounting filesystem. [ 274.467282][ T4613] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.474334][ T4613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.481438][ T4613] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.488185][ T4613] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.579352][ T315] r8152-cfgselector 3-1: Unknown version 0x0000 [ 274.585616][ T315] r8152-cfgselector 3-1: bad CDC descriptors [ 274.602666][ T3524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 274.610596][ T3524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 274.629474][ T315] r8152-cfgselector 3-1: Unknown version 0x0000 [ 274.629511][ T3524] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 274.645926][ T315] r8152-cfgselector 3-1: USB disconnect, device number 49 [ 274.679506][ T340] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 274.909474][ T3524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 274.917523][ T3524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 274.925593][ T3524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 274.933542][ T3524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 274.939507][ T340] usb 4-1: Using ep0 maxpacket: 8 [ 274.951476][ T3855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 274.959969][ T3855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 274.989471][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 274.997323][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 275.005595][ T4613] device veth0_vlan entered promiscuous mode [ 275.021072][ T3524] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 275.028491][ T3524] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 275.036078][ T4643] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.042962][ T4643] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.052724][ T3855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 275.062074][ T3855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 275.069978][ T340] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 275.080892][ T340] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 275.095402][ T4613] device veth1_macvtap entered promiscuous mode [ 275.106615][ T3524] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 275.114535][ T3524] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 275.122904][ T3524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 275.144338][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 275.157567][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 275.169471][ T3829] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 275.193408][ T4648] loop4: detected capacity change from 0 to 512 [ 275.200277][ T4648] EXT4-fs: Invalid want_extra_isize 2 [ 275.280049][ T10] device bridge_slave_1 left promiscuous mode [ 275.286095][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.293552][ T10] device bridge_slave_0 left promiscuous mode [ 275.299801][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.361723][ T340] usb 4-1: language id specifier not provided by device, defaulting to English [ 275.557137][ T10] device bridge_slave_1 left promiscuous mode [ 275.563598][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.571163][ T10] device bridge_slave_0 left promiscuous mode [ 275.590749][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.603974][ T10] device veth1_macvtap left promiscuous mode [ 275.610369][ T10] device veth0_vlan left promiscuous mode [ 275.616169][ T10] device veth1_macvtap left promiscuous mode [ 275.622196][ T10] device veth0_vlan left promiscuous mode [ 275.709889][ T340] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 275.718815][ T340] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.726618][ T340] usb 4-1: Product: syz [ 275.730629][ T340] usb 4-1: Manufacturer: syz [ 275.734982][ T340] usb 4-1: SerialNumber: syz [ 275.749493][ T3829] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.859521][ T3524] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 275.919550][ T3829] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 275.928566][ T3829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.936351][ T3829] usb 3-1: Product: syz [ 275.940389][ T3829] usb 3-1: Manufacturer: syz [ 275.944737][ T3829] usb 3-1: SerialNumber: syz [ 276.099549][ T340] usb 4-1: 0:2 : does not exist [ 276.105583][ T340] usb 4-1: USB disconnect, device number 48 [ 276.120186][ T3524] usb 1-1: Using ep0 maxpacket: 16 [ 276.196494][ T4660] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.203408][ T4660] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.329468][ T3855] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 276.409480][ T3524] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 276.418388][ T3524] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.426189][ T3524] usb 1-1: Product: syz [ 276.430305][ T3524] usb 1-1: Manufacturer: syz [ 276.434835][ T3524] usb 1-1: SerialNumber: syz [ 276.439891][ T3524] usb 1-1: config 0 descriptor?? [ 276.500393][ T3524] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 276.507294][ T4662] loop3: detected capacity change from 0 to 2048 [ 276.508275][ T3524] usb 1-1: Detected FT232H [ 276.521291][ T4662] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 276.539911][ T4662] loop3: detected capacity change from 2048 to 63 [ 276.689482][ T3855] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.809435][ T19] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 276.859514][ T3855] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 276.868455][ T3855] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.876302][ T3855] usb 5-1: Product: syz [ 276.880457][ T3855] usb 5-1: Manufacturer: syz [ 276.884873][ T3855] usb 5-1: SerialNumber: syz [ 276.929516][ T3524] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 276.949479][ T3524] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 276.956279][ T3524] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 276.965458][ T3524] usb 1-1: USB disconnect, device number 49 [ 276.971768][ T3524] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 276.981112][ T3524] ftdi_sio 1-1:0.0: device disconnected [ 277.059518][ T3829] cdc_ncm 3-1:1.0: failed to get mac address [ 277.169474][ T490] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 277.169487][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.169512][ T19] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.197289][ T19] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 277.206171][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.214465][ T19] usb 4-1: config 0 descriptor?? [ 277.339444][ T3829] cdc_ncm 3-1:1.0: bind() failure [ 277.359491][ T3829] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 277.379481][ T3829] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 277.388447][ T3829] usb 3-1: USB disconnect, device number 50 [ 277.409477][ T490] usb 2-1: Using ep0 maxpacket: 8 [ 277.437847][ T4672] loop0: detected capacity change from 0 to 2048 [ 277.450621][ T4672] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 277.529502][ T490] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 277.539463][ T490] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 277.777796][ T4662] bio_check_eod: 1 callbacks suppressed [ 277.777816][ T4662] syz.3.1074: attempt to access beyond end of device [ 277.777816][ T4662] loop3: rw=2057, sector=456, nr_sectors = 8 limit=63 [ 277.796765][ T4662] syz.3.1074: attempt to access beyond end of device [ 277.796765][ T4662] loop3: rw=2049, sector=456, nr_sectors = 8 limit=63 [ 277.810651][ T4662] syz.3.1074: attempt to access beyond end of device [ 277.810651][ T4662] loop3: rw=2057, sector=468, nr_sectors = 1004 limit=63 [ 277.824681][ T4662] syz.3.1074: attempt to access beyond end of device [ 277.824681][ T4662] loop3: rw=2049, sector=468, nr_sectors = 1004 limit=63 [ 277.849711][ T19] hid (null): bogus close delimiter [ 277.865323][ T4677] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1076: bg 0: block 234: padding at end of block bitmap is not set [ 277.880371][ T4677] EXT4-fs (loop0): Remounting filesystem read-only [ 278.039585][ T490] usb 2-1: language id specifier not provided by device, defaulting to English [ 278.059529][ T19] usb 4-1: language id specifier not provided by device, defaulting to English [ 278.159614][ T490] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 278.168536][ T490] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.176359][ T490] usb 2-1: Product: syz [ 278.180437][ T490] usb 2-1: Manufacturer: syz [ 278.184815][ T490] usb 2-1: SerialNumber: syz [ 278.259456][ T3855] cdc_ncm 5-1:1.0: failed to get mac address [ 278.299503][ T3829] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 278.317782][ T4593] EXT4-fs (loop0): unmounting filesystem. [ 278.333366][ T4682] loop0: detected capacity change from 0 to 512 [ 278.339793][ T4682] EXT4-fs: Invalid want_extra_isize 2 [ 278.543605][ T3855] cdc_ncm 5-1:1.0: bind() failure [ 278.549520][ T19] uclogic 0003:256C:006D.002A: failed retrieving Huion firmware version: -71 [ 278.549618][ T490] usb 2-1: 0:2 : does not exist [ 278.564150][ T19] uclogic 0003:256C:006D.002A: failed probing parameters: -71 [ 278.568793][ T490] usb 2-1: USB disconnect, device number 46 [ 278.579433][ T19] uclogic: probe of 0003:256C:006D.002A failed with error -71 [ 278.579505][ T3855] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 278.597614][ T19] usb 4-1: USB disconnect, device number 49 [ 278.602858][ T320] udevd[320]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 278.639794][ T3855] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 278.650253][ T3855] usb 5-1: USB disconnect, device number 46 [ 278.699642][ T3829] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.899590][ T3829] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 278.908616][ T3829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.916882][ T3829] usb 3-1: Product: syz [ 278.920973][ T3829] usb 3-1: Manufacturer: syz [ 278.925437][ T3829] usb 3-1: SerialNumber: syz [ 279.262440][ T4692] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.269328][ T4692] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.170151][ T701] kworker/u4:6: attempt to access beyond end of device [ 280.170151][ T701] loop3: rw=1, sector=448, nr_sectors = 16 limit=63 [ 280.184212][ T701] EXT4-fs warning (device loop3): ext4_end_bio:347: I/O error 10 writing to inode 18 starting block 112) [ 280.197783][ T701] Buffer I/O error on device loop3, logical block 112 [ 280.204375][ T701] Buffer I/O error on device loop3, logical block 113 [ 280.211347][ T701] Buffer I/O error on device loop3, logical block 114 [ 280.213398][ T4698] loop0: detected capacity change from 0 to 512 [ 280.217931][ T701] Buffer I/O error on device loop3, logical block 115 [ 280.224586][ T4698] EXT4-fs: Invalid want_extra_isize 2 [ 280.237816][ T4699] loop1: detected capacity change from 0 to 2048 [ 280.245841][ T4599] EXT4-fs (loop3): unmounting filesystem. [ 280.253602][ T4664] kmmpd-loop3: attempt to access beyond end of device [ 280.253602][ T4664] loop3: rw=14337, sector=256, nr_sectors = 4 limit=63 [ 280.260854][ T322] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 280.270619][ T4699] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 280.276653][ T4664] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 280.336579][ T3855] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 280.379522][ T4695] loop1: detected capacity change from 2048 to 63 [ 280.579444][ T3855] usb 5-1: Using ep0 maxpacket: 16 [ 280.629457][ T315] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 280.698390][ T4705] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.705471][ T4705] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.712870][ T4705] device bridge_slave_0 entered promiscuous mode [ 280.721723][ T4705] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.728627][ T4705] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.735866][ T4705] device bridge_slave_1 entered promiscuous mode [ 280.775439][ T4705] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.782332][ T4705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.789426][ T4705] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.796182][ T4705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.816253][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 280.823638][ T19] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.831408][ T19] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.842024][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 280.850255][ T490] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.857113][ T490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.865728][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 280.873722][ T490] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.880599][ T490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.887776][ T3855] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 280.897069][ T3855] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.904948][ T3855] usb 5-1: Product: syz [ 280.908916][ T3855] usb 5-1: Manufacturer: syz [ 280.924684][ T3855] usb 5-1: SerialNumber: syz [ 280.925309][ T4705] device veth0_vlan entered promiscuous mode [ 280.934925][ T3855] r8152-cfgselector 5-1: config 0 descriptor?? [ 280.942476][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 280.950858][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 280.958631][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 280.966022][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 280.974555][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 280.982505][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 280.995666][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 281.004743][ T4705] device veth1_macvtap entered promiscuous mode [ 281.009499][ T315] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.015058][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 281.024144][ T315] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.039288][ T315] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 281.048620][ T315] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.059976][ T315] usb 2-1: config 0 descriptor?? [ 281.081576][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 281.089703][ T3829] cdc_ncm 3-1:1.0: failed to get mac address [ 281.234495][ T4715] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.241398][ T4715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.263115][ T701] device bridge_slave_1 left promiscuous mode [ 281.269518][ T701] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.278513][ T701] device bridge_slave_0 left promiscuous mode [ 281.285501][ T701] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.301505][ T701] device veth1_macvtap left promiscuous mode [ 281.307896][ T701] device veth0_vlan left promiscuous mode [ 281.359513][ T3829] cdc_ncm 3-1:1.0: bind() failure [ 281.380824][ T3829] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 281.399591][ T3829] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 281.412540][ T3829] usb 3-1: USB disconnect, device number 51 [ 281.489440][ T526] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 281.560503][ T4695] syz.1.1082: attempt to access beyond end of device [ 281.560503][ T4695] loop1: rw=2057, sector=456, nr_sectors = 8 limit=63 [ 281.573741][ T4695] syz.1.1082: attempt to access beyond end of device [ 281.573741][ T4695] loop1: rw=2049, sector=456, nr_sectors = 8 limit=63 [ 281.587127][ T4695] syz.1.1082: attempt to access beyond end of device [ 281.587127][ T4695] loop1: rw=2057, sector=468, nr_sectors = 1004 limit=63 [ 281.601026][ T4695] syz.1.1082: attempt to access beyond end of device [ 281.601026][ T4695] loop1: rw=2049, sector=468, nr_sectors = 1004 limit=63 [ 281.619752][ T315] hid (null): bogus close delimiter [ 281.739428][ T526] usb 4-1: Using ep0 maxpacket: 8 [ 281.839470][ T315] usb 2-1: language id specifier not provided by device, defaulting to English [ 281.871350][ T526] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 281.881714][ T526] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 282.139486][ T490] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 282.169477][ T526] usb 4-1: language id specifier not provided by device, defaulting to English [ 282.199499][ T344] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 282.309502][ T526] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 282.318423][ T526] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.326220][ T526] usb 4-1: Product: syz [ 282.330213][ T526] usb 4-1: Manufacturer: syz [ 282.334576][ T526] usb 4-1: SerialNumber: syz [ 282.379534][ T490] usb 3-1: Using ep0 maxpacket: 16 [ 282.499524][ T315] uclogic 0003:256C:006D.002B: failed retrieving string descriptor #100: -71 [ 282.508370][ T315] uclogic 0003:256C:006D.002B: failed retrieving pen parameters: -71 [ 282.516569][ T315] uclogic 0003:256C:006D.002B: failed probing pen v1 parameters: -71 [ 282.525366][ T315] uclogic 0003:256C:006D.002B: failed probing parameters: -71 [ 282.532829][ T3855] r8152-cfgselector 5-1: Unknown version 0x0000 [ 282.539021][ T315] uclogic: probe of 0003:256C:006D.002B failed with error -71 [ 282.547090][ T3855] r8152-cfgselector 5-1: bad CDC descriptors [ 282.555134][ T315] usb 2-1: USB disconnect, device number 47 [ 282.561146][ T344] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.572047][ T3855] r8152-cfgselector 5-1: Unknown version 0x0000 [ 282.575022][ T4724] loop4: detected capacity change from 0 to 512 [ 282.579746][ T3855] r8152-cfgselector 5-1: USB disconnect, device number 47 [ 282.595383][ T4724] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 282.605160][ T4724] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz.4.1090: iget: bad i_size value: -67835469387268086 [ 282.618224][ T4724] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.1090: couldn't read orphan inode 15 (err -117) [ 282.630280][ T4724] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 282.638725][ T4724] ext2 filesystem being mounted at /4/file0 supports timestamps until 2038 (0x7fffffff) [ 282.669492][ T490] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 282.678359][ T490] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.686600][ T490] usb 3-1: Product: syz [ 282.690725][ T490] usb 3-1: Manufacturer: syz [ 282.695126][ T490] usb 3-1: SerialNumber: syz [ 282.709521][ T526] usb 4-1: 0:2 : does not exist [ 282.709650][ T490] usb 3-1: config 0 descriptor?? [ 282.730007][ T526] usb 4-1: USB disconnect, device number 50 [ 282.759571][ T344] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 282.768495][ T344] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.776407][ T344] usb 1-1: Product: syz [ 282.780927][ T490] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 282.788547][ T490] usb 3-1: Detected FT232H [ 282.793400][ T344] usb 1-1: Manufacturer: syz [ 282.797815][ T344] usb 1-1: SerialNumber: syz [ 283.162620][ T43] kworker/u4:2: attempt to access beyond end of device [ 283.162620][ T43] loop1: rw=1, sector=448, nr_sectors = 16 limit=63 [ 283.181075][ T43] EXT4-fs warning (device loop1): ext4_end_bio:347: I/O error 10 writing to inode 18 starting block 112) [ 283.192204][ T43] Buffer I/O error on device loop1, logical block 112 [ 283.192221][ T43] Buffer I/O error on device loop1, logical block 113 [ 283.192509][ T43] Buffer I/O error on device loop1, logical block 114 [ 283.212036][ T43] Buffer I/O error on device loop1, logical block 115 [ 283.213312][ T4378] EXT4-fs (loop1): unmounting filesystem. [ 283.226343][ T4700] kmmpd-loop1: attempt to access beyond end of device [ 283.226343][ T4700] loop1: rw=14337, sector=256, nr_sectors = 4 limit=63 [ 283.239938][ T4700] Buffer I/O error on dev loop1, logical block 64, lost sync page write [ 283.379514][ T490] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 283.386816][ T4732] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.393837][ T4732] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.399489][ T490] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 283.401388][ T4732] device bridge_slave_0 entered promiscuous mode [ 283.407774][ T490] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 283.423589][ T490] usb 3-1: USB disconnect, device number 52 [ 283.432833][ T490] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 283.442435][ T4732] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.449350][ T4732] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.457279][ T490] ftdi_sio 3-1:0.0: device disconnected [ 283.457531][ T4613] EXT4-fs (loop4): unmounting filesystem. [ 283.470801][ T4732] device bridge_slave_1 entered promiscuous mode [ 283.519487][ T3855] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 283.528912][ T4732] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.535774][ T4732] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.542870][ T4732] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.549656][ T4732] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.570135][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 283.577545][ T526] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.584800][ T526] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.593307][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 283.601692][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.608541][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.628471][ T4732] device veth0_vlan entered promiscuous mode [ 283.635356][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 283.643578][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 283.651725][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 283.658886][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 283.666281][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 283.674300][ T526] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.681138][ T526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.688832][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 283.696738][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 283.710927][ T4732] device veth1_macvtap entered promiscuous mode [ 283.717680][ T526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 283.728542][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 283.741151][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 283.761786][ T60] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 283.769436][ T3855] usb 4-1: Using ep0 maxpacket: 8 [ 283.783075][ T4739] loop1: detected capacity change from 0 to 2048 [ 283.800521][ T4739] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 283.849880][ T4739] loop1: detected capacity change from 2048 to 63 [ 283.889526][ T3855] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 283.899958][ T3855] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 283.900100][ T43] device bridge_slave_1 left promiscuous mode [ 283.914842][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.922078][ T43] device bridge_slave_0 left promiscuous mode [ 283.928021][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.935692][ T43] device veth1_macvtap left promiscuous mode [ 283.941551][ T43] device veth0_vlan left promiscuous mode [ 284.029469][ T344] cdc_ncm 1-1:1.0: failed to get mac address [ 284.119468][ T340] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 284.139589][ T3855] usb 4-1: language id specifier not provided by device, defaulting to English [ 284.148397][ T60] usb 5-1: config 0 has no interfaces? [ 284.153742][ T60] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 284.162703][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.169464][ T3829] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 284.175338][ T60] usb 5-1: config 0 descriptor?? [ 284.259502][ T3855] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 284.268362][ T3855] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.276423][ T3855] usb 4-1: Product: syz [ 284.280758][ T3855] usb 4-1: Manufacturer: syz [ 284.285190][ T3855] usb 4-1: SerialNumber: syz [ 284.309505][ T344] cdc_ncm 1-1:1.0: bind() failure [ 284.329791][ T344] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 284.350181][ T344] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 284.357502][ T344] usb 1-1: USB disconnect, device number 50 [ 284.419416][ T3829] usb 3-1: Using ep0 maxpacket: 8 [ 284.479471][ T340] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.490248][ T340] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.499788][ T340] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 284.508781][ T340] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.517321][ T340] usb 2-1: config 0 descriptor?? [ 284.537469][ T1809] usb 5-1: USB disconnect, device number 48 [ 284.549605][ T3829] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 284.559745][ T3829] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 284.649471][ T3855] usb 4-1: 0:2 : does not exist [ 284.655376][ T3855] usb 4-1: USB disconnect, device number 51 [ 284.810691][ T4749] loop0: detected capacity change from 0 to 512 [ 284.816989][ T4749] EXT4-fs: Invalid want_extra_isize 2 [ 284.822356][ T3829] usb 3-1: language id specifier not provided by device, defaulting to English [ 284.840210][ T320] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 285.051934][ T4739] syz.1.1094: attempt to access beyond end of device [ 285.051934][ T4739] loop1: rw=2057, sector=456, nr_sectors = 8 limit=63 [ 285.065731][ T4739] syz.1.1094: attempt to access beyond end of device [ 285.065731][ T4739] loop1: rw=2049, sector=456, nr_sectors = 8 limit=63 [ 285.119271][ T3829] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 285.136697][ T3829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.137941][ T4753] loop3: detected capacity change from 0 to 512 [ 285.144863][ T4739] syz.1.1094: attempt to access beyond end of device [ 285.144863][ T4739] loop1: rw=2057, sector=468, nr_sectors = 1004 limit=63 [ 285.151124][ T4753] EXT4-fs: Invalid want_extra_isize 2 [ 285.168003][ T3829] usb 3-1: Product: syz [ 285.244953][ T3829] usb 3-1: Manufacturer: syz [ 285.246124][ T4739] syz.1.1094: attempt to access beyond end of device [ 285.246124][ T4739] loop1: rw=2049, sector=468, nr_sectors = 1004 limit=63 [ 285.250349][ T3829] usb 3-1: SerialNumber: syz [ 285.279780][ T340] hid (null): bogus close delimiter [ 286.547857][ T340] usb 2-1: language id specifier not provided by device, defaulting to English [ 286.655552][ T4769] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.662451][ T4769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.799504][ T3829] usb 3-1: 0:2 : does not exist [ 286.807472][ T3829] usb 3-1: USB disconnect, device number 53 [ 286.909542][ T4763] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 287.049806][ T340] uclogic 0003:256C:006D.002C: failed retrieving Huion firmware version: -71 [ 287.058560][ T340] uclogic 0003:256C:006D.002C: failed probing parameters: -71 [ 287.065914][ T340] uclogic: probe of 0003:256C:006D.002C failed with error -71 [ 287.074678][ T340] usb 2-1: USB disconnect, device number 48 [ 287.149454][ T4763] usb 1-1: Using ep0 maxpacket: 16 [ 287.351323][ T4771] loop4: detected capacity change from 0 to 2048 [ 287.364719][ T4773] loop2: detected capacity change from 0 to 512 [ 287.371121][ T4773] EXT4-fs: Invalid want_extra_isize 2 [ 287.391430][ T4771] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 287.410167][ T322] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 287.500150][ T4781] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.507020][ T4781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.531590][ T4771] loop4: detected capacity change from 2048 to 63 [ 287.582660][ T4763] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 287.594669][ T4763] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.603151][ T4763] usb 1-1: Product: syz [ 287.609412][ T4763] usb 1-1: Manufacturer: syz [ 287.615050][ T4763] usb 1-1: SerialNumber: syz [ 287.676579][ T4763] r8152-cfgselector 1-1: config 0 descriptor?? [ 287.922147][ T490] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 287.952877][ T701] kworker/u4:6: attempt to access beyond end of device [ 287.952877][ T701] loop1: rw=1, sector=448, nr_sectors = 16 limit=63 [ 287.966140][ T701] EXT4-fs warning (device loop1): ext4_end_bio:347: I/O error 10 writing to inode 18 starting block 112) [ 287.977584][ T701] Buffer I/O error on device loop1, logical block 112 [ 287.984158][ T701] Buffer I/O error on device loop1, logical block 113 [ 287.991386][ T701] Buffer I/O error on device loop1, logical block 114 [ 287.997967][ T701] Buffer I/O error on device loop1, logical block 115 [ 288.008723][ T4732] EXT4-fs (loop1): unmounting filesystem. [ 288.017180][ T4741] kmmpd-loop1: attempt to access beyond end of device [ 288.017180][ T4741] loop1: rw=14337, sector=256, nr_sectors = 4 limit=63 [ 288.030926][ T4741] Buffer I/O error on dev loop1, logical block 64, lost sync page write [ 288.307607][ T4790] loop2: detected capacity change from 0 to 512 [ 288.314018][ T4790] EXT4-fs: Invalid want_extra_isize 2 [ 288.321506][ T490] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.335944][ T490] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.350676][ T322] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 288.362054][ T490] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 288.377915][ T490] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.403129][ T490] usb 5-1: config 0 descriptor?? [ 288.434518][ T4792] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.441592][ T4792] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.448728][ T4792] device bridge_slave_0 entered promiscuous mode [ 288.456250][ T4792] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.463233][ T4792] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.472104][ T4792] device bridge_slave_1 entered promiscuous mode [ 288.569548][ T340] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 288.705023][ T4792] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.711899][ T4792] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.718962][ T4792] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.725798][ T4792] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.741431][ T330] device bridge_slave_1 left promiscuous mode [ 288.747721][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.756158][ T330] device bridge_slave_0 left promiscuous mode [ 288.762603][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.773290][ T330] device veth1_macvtap left promiscuous mode [ 288.779271][ T330] device veth0_vlan left promiscuous mode [ 288.809472][ T340] usb 4-1: Using ep0 maxpacket: 8 [ 288.860168][ T4771] syz.4.1102: attempt to access beyond end of device [ 288.860168][ T4771] loop4: rw=2057, sector=456, nr_sectors = 8 limit=63 [ 288.873905][ T4771] syz.4.1102: attempt to access beyond end of device [ 288.873905][ T4771] loop4: rw=2049, sector=456, nr_sectors = 8 limit=63 [ 288.887506][ T4771] syz.4.1102: attempt to access beyond end of device [ 288.887506][ T4771] loop4: rw=2057, sector=468, nr_sectors = 1004 limit=63 [ 288.901389][ T4771] syz.4.1102: attempt to access beyond end of device [ 288.901389][ T4771] loop4: rw=2049, sector=468, nr_sectors = 1004 limit=63 [ 288.920215][ T490] hid (null): bogus close delimiter [ 288.939527][ T340] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 288.949790][ T340] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 288.963389][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 288.971893][ T6] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.979520][ T6] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.000996][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 289.009515][ T6] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.016363][ T6] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.029271][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 289.037733][ T6] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.044600][ T6] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.070874][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 289.079576][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 289.091821][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 289.100503][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 289.129762][ T490] usb 5-1: language id specifier not provided by device, defaulting to English [ 289.131684][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 289.209582][ T340] usb 4-1: language id specifier not provided by device, defaulting to English [ 289.221709][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 289.236053][ T4792] device veth0_vlan entered promiscuous mode [ 289.242575][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 289.250384][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 289.258134][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 289.265693][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 289.278746][ T4792] device veth1_macvtap entered promiscuous mode [ 289.285296][ T728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 289.293733][ T728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 289.301727][ T728] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 289.314706][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 289.322762][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 289.330864][ T340] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 289.340002][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 289.347986][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 289.355958][ T340] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.363974][ T340] usb 4-1: Product: syz [ 289.368075][ T340] usb 4-1: Manufacturer: syz [ 289.372898][ T340] usb 4-1: SerialNumber: syz [ 289.519626][ T3855] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 289.545248][ T4804] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.552150][ T4804] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.723081][ T4763] r8152-cfgselector 1-1: Unknown version 0x0000 [ 289.729232][ T4763] r8152-cfgselector 1-1: bad CDC descriptors [ 289.749475][ T4763] r8152-cfgselector 1-1: Unknown version 0x0000 [ 289.756207][ T4763] r8152-cfgselector 1-1: USB disconnect, device number 51 [ 289.779599][ T340] usb 4-1: 0:2 : does not exist [ 289.785807][ T340] usb 4-1: USB disconnect, device number 52 [ 289.859478][ T490] uclogic 0003:256C:006D.002D: failed retrieving string descriptor #100: -71 [ 289.870954][ T490] uclogic 0003:256C:006D.002D: failed retrieving pen parameters: -71 [ 289.878885][ T490] uclogic 0003:256C:006D.002D: failed probing pen v1 parameters: -71 [ 289.886809][ T490] uclogic 0003:256C:006D.002D: failed probing parameters: -71 [ 289.894211][ T3855] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.905044][ T490] uclogic: probe of 0003:256C:006D.002D failed with error -71 [ 289.913733][ T490] usb 5-1: USB disconnect, device number 49 [ 290.069489][ T3855] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 290.078518][ T3855] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.086386][ T3855] usb 3-1: Product: syz [ 290.090388][ T3855] usb 3-1: Manufacturer: syz [ 290.094757][ T3855] usb 3-1: SerialNumber: syz [ 290.129475][ T4763] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 290.256560][ T4811] loop1: detected capacity change from 0 to 512 [ 290.262998][ T4811] EXT4-fs: Invalid want_extra_isize 2 [ 290.550904][ T43] kworker/u4:2: attempt to access beyond end of device [ 290.550904][ T43] loop4: rw=1, sector=448, nr_sectors = 16 limit=63 [ 290.553471][ T4763] usb 1-1: Using ep0 maxpacket: 16 [ 290.564380][ T43] EXT4-fs warning (device loop4): ext4_end_bio:347: I/O error 10 writing to inode 18 starting block 112) [ 290.580316][ T43] Buffer I/O error on device loop4, logical block 112 [ 290.586895][ T43] Buffer I/O error on device loop4, logical block 113 [ 290.593778][ T43] Buffer I/O error on device loop4, logical block 114 [ 290.600351][ T43] Buffer I/O error on device loop4, logical block 115 [ 290.607933][ T4613] EXT4-fs (loop4): unmounting filesystem. [ 290.614801][ T4777] kmmpd-loop4: attempt to access beyond end of device [ 290.614801][ T4777] loop4: rw=14337, sector=256, nr_sectors = 4 limit=63 [ 290.628287][ T4777] Buffer I/O error on dev loop4, logical block 64, lost sync page write [ 290.639572][ T3524] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 290.767616][ T4816] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.774623][ T4816] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.782053][ T4816] device bridge_slave_0 entered promiscuous mode [ 290.788899][ T4816] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.795797][ T4816] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.803748][ T4816] device bridge_slave_1 entered promiscuous mode [ 290.845013][ T4816] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.851891][ T4816] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.858940][ T4816] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.865777][ T4816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.886236][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 290.894258][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.901808][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.909769][ T4763] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 290.918680][ T4763] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.926503][ T3524] usb 4-1: Using ep0 maxpacket: 8 [ 290.931407][ T4763] usb 1-1: Product: syz [ 290.933831][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 290.935431][ T4763] usb 1-1: Manufacturer: syz [ 290.943958][ T490] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.947655][ T4763] usb 1-1: SerialNumber: syz [ 290.954538][ T490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.966837][ T4763] usb 1-1: config 0 descriptor?? [ 290.972102][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 290.980172][ T490] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.986996][ T490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.994621][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 291.002458][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 291.015779][ T3829] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 291.024319][ T4763] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 291.032136][ T4763] usb 1-1: Detected FT232H [ 291.035313][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 291.044261][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 291.051654][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 291.060189][ T3524] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 291.070229][ T3524] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 291.079809][ T4816] device veth0_vlan entered promiscuous mode [ 291.092004][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 291.101651][ T4816] device veth1_macvtap entered promiscuous mode [ 291.115625][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 291.140877][ T490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 291.148981][ T4821] loop1: detected capacity change from 0 to 2048 [ 291.162118][ T4824] loop4: detected capacity change from 0 to 512 [ 291.168507][ T4824] EXT4-fs: Invalid want_extra_isize 2 [ 291.185097][ T4821] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 291.228561][ T3855] cdc_ncm 3-1:1.0: failed to get mac address [ 291.239836][ T4821] loop1: detected capacity change from 2048 to 63 [ 291.260109][ T43] device bridge_slave_1 left promiscuous mode [ 291.266036][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.273525][ T43] device bridge_slave_0 left promiscuous mode [ 291.279550][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.290266][ T43] device veth1_macvtap left promiscuous mode [ 291.296233][ T43] device veth0_vlan left promiscuous mode [ 291.389566][ T3524] usb 4-1: language id specifier not provided by device, defaulting to English [ 291.459663][ T4763] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 291.479838][ T4763] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 291.488606][ T4763] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 291.489560][ T3855] cdc_ncm 3-1:1.0: bind() failure [ 291.511096][ T6] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 291.519352][ T4763] usb 1-1: USB disconnect, device number 52 [ 291.519460][ T3524] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 291.529696][ T3855] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 291.542910][ T4763] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 291.552365][ T3524] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.560121][ T3855] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 291.567596][ T4763] ftdi_sio 1-1:0.0: device disconnected [ 291.580703][ T3524] usb 4-1: Product: syz [ 291.582020][ T3855] usb 3-1: USB disconnect, device number 54 [ 291.599624][ T3524] usb 4-1: Manufacturer: syz [ 291.616383][ T3524] usb 4-1: SerialNumber: syz [ 291.919528][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.930842][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.940634][ T6] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 291.949762][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.959944][ T6] usb 2-1: config 0 descriptor?? [ 292.036194][ T3524] usb 4-1: 0:2 : does not exist [ 292.055861][ T4833] loop0: detected capacity change from 0 to 2048 [ 292.072107][ T3524] usb 4-1: USB disconnect, device number 53 [ 292.124379][ T4838] loop4: detected capacity change from 0 to 512 [ 292.130833][ T4838] EXT4-fs: Invalid want_extra_isize 2 [ 292.141298][ T4833] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 292.196974][ T320] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 292.780224][ T4843] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1118: bg 0: block 234: padding at end of block bitmap is not set [ 292.841910][ T4843] EXT4-fs (loop0): Remounting filesystem read-only [ 293.647375][ T4853] loop3: detected capacity change from 0 to 512 [ 293.732153][ T4854] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.739024][ T4854] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.893392][ T4855] syz.1.1116: attempt to access beyond end of device [ 293.893392][ T4855] loop1: rw=2057, sector=456, nr_sectors = 8 limit=63 [ 293.920805][ T4853] EXT4-fs: Ignoring removed nobh option [ 293.934756][ T4855] syz.1.1116: attempt to access beyond end of device [ 293.934756][ T4855] loop1: rw=2049, sector=456, nr_sectors = 8 limit=63 [ 293.938518][ T4853] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 293.948113][ T4855] syz.1.1116: attempt to access beyond end of device [ 293.948113][ T4855] loop1: rw=2057, sector=468, nr_sectors = 1004 limit=63 [ 293.974646][ T4853] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.1123: attempt to clear invalid blocks 2 len 1 [ 293.992836][ T4855] syz.1.1116: attempt to access beyond end of device [ 293.992836][ T4855] loop1: rw=2049, sector=468, nr_sectors = 1004 limit=63 [ 294.016190][ T4853] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 294.022844][ T4593] EXT4-fs (loop0): unmounting filesystem. [ 294.036112][ T4853] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1123: invalid indirect mapped block 1819239214 (level 0) [ 294.050485][ T4853] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1123: invalid indirect mapped block 1819239214 (level 1) [ 294.064749][ T6] hid (null): bogus close delimiter [ 294.070158][ T4853] EXT4-fs (loop3): 1 truncate cleaned up [ 294.075675][ T4853] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 294.233801][ T4862] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.240714][ T4862] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.699536][ T6] usb 2-1: language id specifier not provided by device, defaulting to English [ 294.845191][ T4848] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 295.119486][ T4848] usb 1-1: Using ep0 maxpacket: 16 [ 295.149598][ T4847] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 295.279505][ T6] uclogic 0003:256C:006D.002E: failed retrieving Huion firmware version: -71 [ 295.288121][ T6] uclogic 0003:256C:006D.002E: failed probing parameters: -71 [ 295.295965][ T6] uclogic: probe of 0003:256C:006D.002E failed with error -71 [ 295.304176][ T6] usb 2-1: USB disconnect, device number 49 [ 295.399529][ T4848] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 295.409060][ T4848] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.417275][ T4848] usb 1-1: Product: syz [ 295.421229][ T4848] usb 1-1: Manufacturer: syz [ 295.425609][ T4848] usb 1-1: SerialNumber: syz [ 295.430898][ T4848] r8152-cfgselector 1-1: config 0 descriptor?? [ 295.519808][ T4705] EXT4-fs (loop3): unmounting filesystem. [ 295.522010][ T4847] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.540932][ T4869] loop4: detected capacity change from 0 to 512 [ 295.547289][ T4869] EXT4-fs: Invalid want_extra_isize 2 [ 295.757936][ T4874] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.764847][ T4874] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.995382][ T4847] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 296.005329][ T4847] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.015230][ T4847] usb 3-1: Product: syz [ 296.020284][ T4847] usb 3-1: Manufacturer: syz [ 296.026772][ T4847] usb 3-1: SerialNumber: syz [ 296.162718][ T10] kworker/u4:1: attempt to access beyond end of device [ 296.162718][ T10] loop1: rw=1, sector=448, nr_sectors = 16 limit=63 [ 296.183795][ T10] EXT4-fs warning (device loop1): ext4_end_bio:347: I/O error 10 writing to inode 18 starting block 112) [ 296.189549][ T4825] kmmpd-loop1: attempt to access beyond end of device [ 296.189549][ T4825] loop1: rw=14337, sector=256, nr_sectors = 4 limit=63 [ 296.195021][ T10] Buffer I/O error on device loop1, logical block 112 [ 296.214791][ T10] Buffer I/O error on device loop1, logical block 113 [ 296.221600][ T10] Buffer I/O error on device loop1, logical block 114 [ 296.221634][ T4825] Buffer I/O error on dev loop1, logical block 64, lost sync page write [ 296.228180][ T10] Buffer I/O error on device loop1, logical block 115 [ 296.229148][ T4792] EXT4-fs (loop1): unmounting filesystem. [ 296.250959][ T4825] EXT4-fs error (device loop1): kmmpd:186: comm kmmpd-loop1: Error writing to MMP block [ 296.260996][ T4825] kmmpd-loop1: attempt to access beyond end of device [ 296.260996][ T4825] loop1: rw=14337, sector=256, nr_sectors = 4 limit=63 [ 296.274491][ T4825] Buffer I/O error on dev loop1, logical block 64, lost sync page write [ 296.403788][ T4881] loop4: detected capacity change from 0 to 2048 [ 296.454626][ T4881] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 296.475212][ T4882] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.482409][ T4882] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.489948][ T4882] device bridge_slave_0 entered promiscuous mode [ 296.498630][ T4882] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.505807][ T4882] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.513394][ T4882] device bridge_slave_1 entered promiscuous mode [ 296.555675][ T4882] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.562549][ T4882] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.569665][ T4882] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.576428][ T4882] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.856156][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 296.864277][ T6] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.871688][ T6] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.887548][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 296.895518][ T4885] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 296.910347][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.917231][ T298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.924779][ T4885] ================================================================== [ 296.932655][ T4885] BUG: KASAN: use-after-free in enqueue_timer+0xa6/0x480 [ 296.939507][ T4885] Write of size 8 at addr ffff88811749e4c0 by task ext4lazyinit/4885 [ 296.947400][ T4885] [ 296.949572][ T4885] CPU: 0 PID: 4885 Comm: ext4lazyinit Not tainted 6.1.90-syzkaller-00129-g37391192a93a #0 [ 296.959293][ T4885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 296.969187][ T4885] Call Trace: [ 296.972309][ T4885] [ 296.975089][ T4885] dump_stack_lvl+0x151/0x1b7 [ 296.979603][ T4885] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 296.984899][ T4885] ? _printk+0xd1/0x111 [ 296.988889][ T4885] ? __virt_addr_valid+0x242/0x2f0 [ 296.993841][ T4885] print_report+0x158/0x4e0 [ 296.998174][ T4885] ? __virt_addr_valid+0x242/0x2f0 [ 297.003122][ T4885] ? kasan_complete_mode_report_info+0x90/0x1b0 [ 297.009197][ T4885] ? enqueue_timer+0xa6/0x480 [ 297.013714][ T4885] kasan_report+0x13c/0x170 [ 297.018051][ T4885] ? enqueue_timer+0xa6/0x480 [ 297.022562][ T4885] ? __kasan_check_write+0x14/0x20 [ 297.027508][ T4885] __asan_report_store8_noabort+0x17/0x20 [ 297.033068][ T4885] enqueue_timer+0xa6/0x480 [ 297.037406][ T4885] __mod_timer+0x8d3/0xcf0 [ 297.041659][ T4885] ? mod_timer_pending+0x30/0x30 [ 297.046438][ T4885] ? __kasan_check_write+0x14/0x20 [ 297.051375][ T4885] ? _raw_spin_lock+0xa4/0x1b0 [ 297.055986][ T4885] ? _raw_spin_trylock_bh+0x190/0x190 [ 297.061184][ T4885] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 297.066826][ T4885] ? __percpu_counter_sum+0x1e7/0x200 [ 297.072033][ T4885] mod_timer+0x1f/0x30 [ 297.075940][ T4885] ext4_update_super+0xa41/0xe50 [ 297.080717][ T4885] ext4_commit_super+0xe3/0x4b0 [ 297.085399][ T4885] ext4_handle_error+0x5e1/0x890 [ 297.090172][ T4885] __ext4_error+0x260/0x480 [ 297.094510][ T4885] ? _raw_spin_trylock_bh+0x190/0x190 [ 297.099719][ T4885] ? ext4_itable_unused_set+0x100/0x100 [ 297.105099][ T4885] ? __find_get_block+0xf66/0x1180 [ 297.110061][ T4885] ? ext4_block_bitmap_csum_verify+0x1c7/0x570 [ 297.116045][ T4885] ? ext4_inode_bitmap_csum_set+0x4e0/0x4e0 [ 297.121789][ T4885] ? __wake_up+0x1c0/0x1c0 [ 297.126018][ T4885] ? _find_next_zero_bit+0x101/0x140 [ 297.131139][ T4885] ext4_validate_block_bitmap+0x106d/0x1400 [ 297.136868][ T4885] ext4_read_block_bitmap_nowait+0x593/0x970 [ 297.142682][ T4885] ext4_mb_prefetch+0x46d/0x640 [ 297.147368][ T4885] ? mb_set_bits+0x130/0x130 [ 297.151793][ T4885] ? mutex_unlock+0xb2/0x260 [ 297.156222][ T4885] ? __mutex_lock_slowpath+0x10/0x10 [ 297.161443][ T4885] ? __kasan_check_read+0x11/0x20 [ 297.166308][ T4885] ext4_lazyinit_thread+0x5df/0x1650 [ 297.171424][ T4885] ? seq_show_option+0x80/0x80 [ 297.176021][ T4885] ? __kthread_parkme+0x12d/0x180 [ 297.180969][ T4885] kthread+0x26d/0x300 [ 297.184882][ T4885] ? seq_show_option+0x80/0x80 [ 297.189474][ T4885] ? kthread_blkcg+0xd0/0xd0 [ 297.193903][ T4885] ret_from_fork+0x1f/0x30 [ 297.198243][ T4885] [ 297.201110][ T4885] [ 297.203274][ T4885] Allocated by task 4821: [ 297.207441][ T4885] kasan_set_track+0x4b/0x70 [ 297.211867][ T4885] kasan_save_alloc_info+0x1f/0x30 [ 297.216812][ T4885] __kasan_kmalloc+0x9c/0xb0 [ 297.221243][ T4885] kmalloc_trace+0x44/0xa0 [ 297.225496][ T4885] ext4_fill_super+0x102/0x8460 [ 297.230185][ T4885] get_tree_bdev+0x440/0x680 [ 297.234608][ T4885] ext4_get_tree+0x1c/0x20 [ 297.238945][ T4885] vfs_get_tree+0x88/0x290 [ 297.243197][ T4885] do_new_mount+0x2ba/0xb30 [ 297.247538][ T4885] path_mount+0x671/0x1070 [ 297.251794][ T4885] __se_sys_mount+0x2c4/0x3b0 [ 297.256304][ T4885] __x64_sys_mount+0xbf/0xd0 [ 297.260730][ T4885] x64_sys_call+0x49d/0x9a0 [ 297.265163][ T4885] do_syscall_64+0x3b/0xb0 [ 297.269414][ T4885] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 297.275232][ T4885] [ 297.277399][ T4885] Freed by task 4792: [ 297.281220][ T4885] kasan_set_track+0x4b/0x70 [ 297.285646][ T4885] kasan_save_free_info+0x2b/0x40 [ 297.290504][ T4885] ____kasan_slab_free+0x131/0x180 [ 297.295453][ T4885] __kasan_slab_free+0x11/0x20 [ 297.300052][ T4885] __kmem_cache_free+0x218/0x3b0 [ 297.305105][ T4885] kfree+0x7a/0xf0 [ 297.308647][ T4885] ext4_put_super+0x9e5/0xd60 [ 297.313157][ T4885] generic_shutdown_super+0x14f/0x370 [ 297.318364][ T4885] kill_block_super+0x7e/0xe0 [ 297.322878][ T4885] deactivate_locked_super+0xad/0x110 [ 297.328086][ T4885] deactivate_super+0xbe/0xf0 [ 297.332598][ T4885] cleanup_mnt+0x485/0x510 [ 297.336852][ T4885] __cleanup_mnt+0x19/0x20 [ 297.341104][ T4885] task_work_run+0x24d/0x2e0 [ 297.345531][ T4885] do_exit+0xbd5/0x2b80 [ 297.349523][ T4885] do_group_exit+0x21a/0x2d0 [ 297.353950][ T4885] __x64_sys_exit_group+0x3f/0x40 [ 297.358812][ T4885] x64_sys_call+0x610/0x9a0 [ 297.363236][ T4885] do_syscall_64+0x3b/0xb0 [ 297.367491][ T4885] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 297.373217][ T4885] [ 297.375391][ T4885] The buggy address belongs to the object at ffff88811749e000 [ 297.375391][ T4885] which belongs to the cache kmalloc-4k of size 4096 [ 297.389276][ T4885] The buggy address is located 1216 bytes inside of [ 297.389276][ T4885] 4096-byte region [ffff88811749e000, ffff88811749f000) [ 297.402642][ T4885] [ 297.404811][ T4885] The buggy address belongs to the physical page: [ 297.411061][ T4885] page:ffffea00045d2600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x117498 [ 297.421126][ T4885] head:ffffea00045d2600 order:3 compound_mapcount:0 compound_pincount:0 [ 297.429294][ T4885] flags: 0x4000000000010200(slab|head|zone=1) [ 297.435193][ T4885] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043380 [ 297.443615][ T4885] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 297.452033][ T4885] page dumped because: kasan: bad access detected [ 297.458286][ T4885] page_owner tracks the page as allocated [ 297.463827][ T4885] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 1821, tgid 1821 (syz-executor), ts 101280615620, free_ts 101208467380 [ 297.486573][ T4885] post_alloc_hook+0x213/0x220 [ 297.491167][ T4885] prep_new_page+0x1b/0x110 [ 297.495508][ T4885] get_page_from_freelist+0x27ea/0x2870 [ 297.500888][ T4885] __alloc_pages+0x3a1/0x780 [ 297.505314][ T4885] alloc_slab_page+0x6c/0xf0 [ 297.509748][ T4885] new_slab+0x90/0x3e0 [ 297.513645][ T4885] ___slab_alloc+0x6f9/0xb80 [ 297.518071][ T4885] __slab_alloc+0x5d/0xa0 [ 297.522236][ T4885] __kmem_cache_alloc_node+0x1af/0x250 [ 297.527532][ T4885] kmalloc_trace+0x2a/0xa0 [ 297.531785][ T4885] ipv6_add_dev+0x5dd/0x11a0 [ 297.536211][ T4885] inet6_rtm_newaddr+0x6b0/0x2780 [ 297.541072][ T4885] rtnetlink_rcv_msg+0x9a5/0xca0 [ 297.545847][ T4885] netlink_rcv_skb+0x1cd/0x410 [ 297.550446][ T4885] rtnetlink_rcv+0x1c/0x20 [ 297.554698][ T4885] netlink_unicast+0x906/0xab0 [ 297.559301][ T4885] page last free stack trace: [ 297.563812][ T4885] free_unref_page_prepare+0x83d/0x850 [ 297.569105][ T4885] free_unref_page+0xb2/0x5c0 [ 297.573618][ T4885] __free_pages+0x61/0xf0 [ 297.577786][ T4885] __free_slab+0xce/0x1a0 [ 297.581960][ T4885] __unfreeze_partials+0x165/0x1a0 [ 297.586985][ T4885] put_cpu_partial+0xa9/0x100 [ 297.591504][ T4885] __slab_free+0x1c8/0x280 [ 297.595752][ T4885] ___cache_free+0xc6/0xd0 [ 297.600005][ T4885] qlist_free_all+0xc5/0x140 [ 297.604429][ T4885] kasan_quarantine_reduce+0x15a/0x180 [ 297.609728][ T4885] __kasan_slab_alloc+0x24/0x80 [ 297.614421][ T4885] slab_post_alloc_hook+0x53/0x2c0 [ 297.619359][ T4885] __kmem_cache_alloc_node+0x191/0x250 [ 297.624655][ T4885] kmalloc_trace+0x2a/0xa0 [ 297.628905][ T4885] ref_tracker_alloc+0x138/0x450 [ 297.633694][ T4885] netdev_queue_update_kobjects+0x18a/0x4a0 [ 297.639407][ T4885] [ 297.641592][ T4885] Memory state around the buggy address: [ 297.647133][ T4885] ffff88811749e380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 297.655033][ T4885] ffff88811749e400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 297.662931][ T4885] >ffff88811749e480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 297.670826][ T4885] ^ [ 297.676819][ T4885] ffff88811749e500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 297.684718][ T4885] ffff88811749e580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 297.692612][ T4885] ================================================================== [ 297.700514][ T4885] Disabling lock debugging due to kernel taint [ 297.714561][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 297.722466][ T4885] EXT4-fs (loop4): Remounting filesystem read-only [ 297.730022][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.736890][ T298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.772113][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 297.780302][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 297.789630][ T4848] r8152-cfgselector 1-1: Unknown version 0x0000 [ 297.796030][ T4882] device veth0_vlan entered promiscuous mode [ 297.797098][ T4848] r8152-cfgselector 1-1: bad CDC descriptors [ 297.819678][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 297.827872][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 297.829457][ T4848] r8152-cfgselector 1-1: Unknown version 0x0000 [ 297.842184][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 297.843128][ T4816] EXT4-fs (loop4): unmounting filesystem. [ 297.852924][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 297.864438][ T4848] r8152-cfgselector 1-1: USB disconnect, device number 53 [ 297.881396][ T4763] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 297.888795][ T4763] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 297.898166][ T4882] device veth1_macvtap entered promiscuous mode [ 297.904714][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 297.913066][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 297.921259][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 297.934160][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 297.942221][ T344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 297.952780][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 297.960894][ T298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 297.972147][ T10] device bridge_slave_1 left promiscuous mode [ 297.978146][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.985790][ T10] device bridge_slave_0 left promiscuous mode [ 297.992105][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.000118][ T10] device veth1_macvtap left promiscuous mode [ 298.005968][ T10] device veth0_vlan left promiscuous mode [ 298.239549][ T4847] cdc_ncm 3-1:1.0: failed to get mac address [ 298.519693][ T4847] cdc_ncm 3-1:1.0: bind() failure [ 298.539625][ T4847] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 298.559611][ T4847] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 298.566948][ T4847] usb 3-1: USB disconnect, device number 55