last executing test programs: 29.610351763s ago: executing program 2 (id=6211): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401e04012810000000000109022400010000000009040000020300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0xfff, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) r4 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fsmount(r7, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) 27.896081609s ago: executing program 2 (id=6215): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1807000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r5, &(0x7f0000003080)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1}, 0x1c, &(0x7f0000001b40)=[{0x0}, {&(0x7f0000000a40)="13ab3eeee593968811a98ce0eb08018efc054c8faeba6abd27c981fdbba854db371d3ef85fff0c5a815bce21f63166c801401f654ac3fd484338b4ccb726d2eb2e87f4a952aab9c6ab538365407a9b5b3f5d19b4d7d9afc8072d1d259130729a6745080c9db7398d70da7c1db8bc139e937a2a41f903526d5e15b06b01a068396389ed6dde3749593c274c153ecfa407e7aeb7f20f2eb436898fac9f0724b1894b286db08902dee46666f3af3c6a667eefa37e7eba83b8ddf74f0127ef456502cb08b0dcd36f", 0xc6}, {&(0x7f0000000b40)}, {0x0}, {0x0}], 0x5}}, {{&(0x7f0000002e40)={0xa, 0x0, 0x6, @mcast2, 0x2}, 0x1c, &(0x7f0000002f40), 0x0, &(0x7f0000000680)=ANY=[], 0x18}}], 0x2, 0x0) 24.968637719s ago: executing program 2 (id=6217): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018400110800395032303030"], 0x15) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001400a685b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = dup(r1) write$FUSE_BMAP(r4, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4e7, 0x30, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000042020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) syz_usb_control_io(r5, &(0x7f0000000380)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="000007fe000007000047fc6b"], 0x0, 0x0, 0x0, 0x0}, 0x0) chdir(&(0x7f0000000040)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) 22.877481528s ago: executing program 2 (id=6227): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000640)={[{@nojournal_checksum}, {@nombcache}, {@inlinecrypt}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@jqfmt_vfsv0}, {@noauto_da_alloc}]}, 0xfe, 0x55a, &(0x7f0000000a00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000280)='}($\x00'}, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f0000000140)={0x0, 0x0}) r7 = syz_open_procfs(r6, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000380)=0x4020) 21.878301533s ago: executing program 2 (id=6230): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a000090400000103010100092100080001220100"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x141201) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f0000000880)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000024c0)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="00000010000000000000000000b5650000000000acfede5a4a8662ad61ad4348d18cc11218f2f91f5e7bb3012dabdb7c0a9c5868ba3fa3596ad6af13df962990549de4b0bf7c9f46bd4a6ab37150b517072db9f63f58fdf9e2071224852e268435ef5fd034247ae410308e95f0d87cf7e35852cdedcea7927feb2efb65d568c6efbc132f4c873b799e36c8668801ce44", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, 0x0, &(0x7f0000000340)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x2) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000080)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000025c0), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r5, 0x0, 0xfffffffffffffffe}, 0x18) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r7 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002600)=ANY=[@ANYRES8=r2, @ANYRESOCT=r5, @ANYRES8=0x0, @ANYRESDEC=0x0, @ANYRESDEC], 0x0, 0x0, 0x0) read$FUSE(r6, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2058) write$FUSE_INIT(r6, &(0x7f0000002200)={0x50, 0x0, r8, {0x7, 0x27, 0x0, 0x1dd880}}, 0x50) read$FUSE(r6, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r6, &(0x7f0000002140)={0x20, 0x0, r9, {0x0, 0x0, 0x80003ff}}, 0x20) syz_fuse_handle_req(r6, &(0x7f0000004340)="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", 0x2000, &(0x7f0000008f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000008600)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000022c0)={{}, &(0x7f00000021c0), &(0x7f0000002280)}, 0x20) getdents64(r7, 0x0, 0x302) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 21.872701113s ago: executing program 2 (id=6232): syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000000)={0x18}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000300)={'ip6gre0\x00', 0x0, 0x4, 0x3d, 0x4, 0x2, 0x40, @empty, @remote, 0x10, 0x81, 0xfffffffe, 0x6}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0e00000004000000080000000620000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) 14.477298115s ago: executing program 0 (id=6249): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001300010000000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00.'], 0x44}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00'}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_usb_connect(0x2, 0x4f, &(0x7f0000000080)={{0x12, 0x1, 0x351, 0x29, 0xfb, 0xf0, 0x40, 0x738, 0x4540, 0xc6ce, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3d, 0x2, 0x2, 0x6, 0x10, 0x78, [{{0x9, 0x4, 0xd4, 0x9, 0x1, 0x78, 0x6d, 0x3d, 0x40, [], [{{0x9, 0x5, 0x1, 0x0, 0x200, 0x9, 0x4, 0x2}}]}}, {{0x9, 0x4, 0xe2, 0x0, 0x2, 0xb2, 0x26, 0x18, 0xbb, [], [{{0x9, 0x5, 0x1, 0x0, 0x200, 0x7c, 0x9e, 0x9, [@generic={0x7, 0x5, "85e371932d"}]}}, {{0x9, 0x5, 0x7, 0xb, 0x0, 0x9, 0x73, 0x3}}]}}]}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001ac0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) close_range(r4, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r6}, 0x10) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) 14.476532094s ago: executing program 1 (id=6250): open(0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xaa, &(0x7f00000006c0)={[{}, {@usrjquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@noload}, {@minixdf}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x23}, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@noacl}, {@data_err_abort}]}, 0xfe, 0x451, &(0x7f00000016c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x8, 0x42, 0x40, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r4}, 0x38) 14.475751504s ago: executing program 3 (id=6251): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_usb_connect$uac1(0x6, 0xa4, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x94, 0x30, 0xf, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfff9, 0x80}, [@extension_unit={0xb, 0x24, 0x8, 0x4, 0x5, 0x7f, "f0c16d65"}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x306, 0x5, 0x6, 0x9}, @selector_unit={0x5, 0x24, 0x5, 0x6, 0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x5, 0x4, 0x4f}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x7, 0x3, 0xf9, 0x2}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x7, 0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x1, 0x5, 0x4, {0x7, 0x25, 0x1, 0x2, 0x6, 0x81}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0xbe, 0x2, 0x66, {0x7, 0x25, 0x1, 0x1, 0x8, 0x7}}}}}}}]}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000880)={0x44, 0x0, 0x0, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000740)={0x20, 0x81, 0x1, "9b"}, &(0x7f00000009c0)=ANY=[], &(0x7f00000007c0)={0x20, 0x83, 0x1, "d7"}, 0x0, &(0x7f0000000840)={0x20, 0x85, 0x3, "097a15"}}) ptrace$ARCH_GET_GS(0x1e, 0xffffffffffffffff, 0x0, 0x1004) sendto$inet(0xffffffffffffffff, &(0x7f0000000d00)="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", 0x1e7, 0x20000851, 0x0, 0xfffffffffffffcda) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) chdir(&(0x7f00000005c0)='./bus\x00') setuid(0xee01) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) 10.584140177s ago: executing program 0 (id=6252): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a000090400000103010100092100080001220100"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x141201) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000024c0)=ANY=[@ANYRES32=0x1, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, 0x0, &(0x7f0000000340)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000080)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000025c0), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r4, 0x0, 0xfffffffffffffffe}, 0x18) r5 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002600)=ANY=[], 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006340)={0x2020}, 0x2058) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000002140)={0x20, 0x0, r6, {0x0, 0x0, 0x80003ff}}, 0x20) getdents64(r5, 0x0, 0x302) 10.583838667s ago: executing program 1 (id=6253): pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000020000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r4}, 0x10) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="3801"], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 10.583139937s ago: executing program 3 (id=6254): open(0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000eef8b90000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="a800000000010104000000000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808"], 0xa8}}, 0x0) 10.581761927s ago: executing program 4 (id=6255): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x11, &(0x7f0000000940)={[{@noauto_da_alloc}, {@nobh}, {@norecovery}, {@commit={'commit', 0x3d, 0x45}}, {@nombcache}]}, 0x8, 0x601, &(0x7f0000000ac0)="$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") r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b7040000000000008500000033000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) unshare(0x2040400) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/profiling', 0x280000, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000480)={r3, 0x0, 0x0, 0x4}, 0x20) syz_pidfd_open(0x0, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r4, 0x40383d0c, &(0x7f0000000080)={{}, {}, 0x0, 0x7}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x24c0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=0000000000000000010000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000580)=ANY=[], 0x81, 0x14fb, &(0x7f0000002a80)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x0, 0x0) fchmod(r6, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000380)={[{@fat=@quiet}, {@dots}, {@nodots}, {@nodots}, {@dots}, {}, {@nodots}, {@fat=@quiet}, {@nodots}, {@fat=@errors_continue}, {@fat=@umask}, {@dots}, {@fat=@check_strict}, {@nodots}, {@dots}, {@dots}, {@fat=@tz_utc}, {@dots}, {@fat=@discard}, {@fat=@usefree}, {@fat=@sys_immutable}, {@dots}]}, 0xfd, 0x1bf, &(0x7f0000000680)="$eJzs3TGL02AYB/Cn9bzmnG4TRCHg4nSon+BEThADgtJBJ4XT5SqCt0SX9mP4Af0A0qmLRGrSxkaHWmxS6++39En/edvnHZp26ZNXN99dnL+/fPvl+udIkl70T+M0Zr04jn4sTAIA2CezooivRanrXgCAdqzx/f+t5ZYAgC17/uLlkwdZdvYsTZOI6SQf5sPyscwfPc7O7qY/HNerpnk+vLLM76XN3w7z/Gpcq/L75fp0NT+MO7fLfJ49fJo18kGcb3frAAAAAAAAAAAAAAAAAAAAAADQmVuRLvx2vs/JSTM/qvLy6Kf5QI35PQdx46A6rMcDFeM2NgUAAAAAAAAAAAAAAAAAAAD/mMuPny5ej0ZvPtTFICJWn/mTole98IbL2y76sRNtKP5qke5GG6MNPwWHEbGtxmZFUax1cn2NGHR1cQIAAAAAAAAAAAAAAAAAgP9M/affX7Oki4YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoAP1/f83KMYRscbJyzc76nSrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7LHvAQAA///DgjXa") open_tree(0xffffffffffffff9c, 0x0, 0x89901) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$FUSE_NOTIFY_INVAL_INODE(r5, &(0x7f0000006200)={0x28, 0x2, 0x0, {0x1, 0xffffffffffff4dbd}}, 0x28) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="b400000000090000dd0a0000000000006313380000000000950017553ec1bed01b00000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_usb_connect$cdc_ecm(0x0, 0x44, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x51, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@mdlm_detail={0x4}, @call_mgmt={0x5}, @mdlm_detail={0x4}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x3}}}}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/3002], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffdbb, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$inet6(0xa, 0x6, 0x401) 9.057251277s ago: executing program 1 (id=6256): gettid() setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write(r1, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) write$tun(r0, &(0x7f0000000880)=ANY=[@ANYRES16, @ANYRES8, @ANYRESDEC, @ANYBLOB="4ffc2a94"], 0x46) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x1a, 0x0, 0x0) recvmmsg(r0, &(0x7f00000049c0), 0x0, 0x2000, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [], 'ip6tnl0\x00', 'nicvf0\x00', {}, {}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [], 'veth1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x386) r6 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @empty}, {0xa, 0x4e22, 0x0, @dev}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, 0x5c) ioctl$FIONCLEX(r6, 0x5450) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) 9.056531417s ago: executing program 3 (id=6257): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a000090400000103010100092100080001220100"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x141201) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000024c0)=ANY=[@ANYRES32=0x1, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, 0x0, &(0x7f0000000340)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000080)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000025c0), 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r4, 0x0, 0xfffffffffffffffe}, 0x18) r5 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002600)=ANY=[], 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006340)={0x2020}, 0x2058) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000002140)={0x20, 0x0, r6, {0x0, 0x0, 0x80003ff}}, 0x20) getdents64(r5, 0x0, 0x302) 7.450262154s ago: executing program 0 (id=6258): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000001", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LISTALL(r2, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x94, r3, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x28, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd8}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3353a640}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4a2cd9f}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x44, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xded3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x24d3}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3c65}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc44f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x497c1544}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd282}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x566a7ff5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x3, 0xffffffffffffffff}) close_range(r4, 0xffffffffffffffff, 0x2) r5 = syz_open_procfs$pagemap(0x0, &(0x7f00000000c0)) lseek(r5, 0x8, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000880)={'vxcan0\x00'}) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000400)={'sit0\x00', r7, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@bridge_delneigh={0x34, 0x1c, 0xc07, 0x0, 0x0, {0x7, 0x0, 0x0, r9, 0x2}, [@NDA_LLADDR={0xa, 0x2, @remote}, @NDA_FDB_EXT_ATTRS={0xc, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x4}]}]}, 0x34}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'vxcan1\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000900)) socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000c80)={'lo\x00'}) 7.449506244s ago: executing program 1 (id=6259): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="05010000000000107d1e222e00000000000109022400010000000009040000020300020009210000000122020009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x5, 0x8, 0x8, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r2, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r1}, 0x20) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvfrom$inet6(r1, &(0x7f0000000040)=""/87, 0x57, 0x2, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "78e4"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000459bb240580403500000000000010902"], 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000540)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x2f, 0xd8, 0x7f, 0xc5, 0x14, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, 0x1, 0x20, 0x6, 0xff}}) gettid() r6 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) r7 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000640)='bpf_lsm_inode_listsecurity\x00') bpf$PROG_LOAD(0x5, &(0x7f0000001c00)={0x19, 0x1a, &(0x7f0000000ac0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4d3, 0x0, 0x0, 0x0, 0x8}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x208b}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x7}, @jmp={0x5, 0x0, 0x5, 0x0, 0x0, 0x80, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xff}}, @jmp={0x5, 0x1, 0x7, 0x0, 0x3, 0x18}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000240)='syzkaller\x00', 0xa, 0x1000, &(0x7f0000000bc0)=""/4096, 0x41000, 0x0, '\x00', r5, @fallback=0x19, r6, 0x8, &(0x7f00000005c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0x10, 0x2, 0x8}, 0x10, r7, r3, 0x2, &(0x7f0000000780)=[r2, r4, 0xffffffffffffffff, r2, 0xffffffffffffffff], &(0x7f0000001bc0)=[{0x4, 0x4, 0x3, 0x6}, {0x5, 0x2, 0x2, 0xb}], 0x10, 0x70, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000680)={0x20, 0x1, 0xf8, {0xf8, 0x31, "49d4ce3eb1c42b3bdcb5642b5f546bcaba346ca21df3a7188e1d042ab4fd00675ad06d7d174af7292d94b3e6717172f6f4f2e1dce187edf68b6c82826eb4cba7ada6c62787b5f10bb6b9d8ac5d4a9e49bf76153170201392dc99bf717038beb6798e8396d2c3baf0e7f8850b0383b7debd3e567b6528caa3dbbba877ba7d257fe33d0edccd43439c58734b191d6d0d07afee4c080c5d4430db3b9ee2cb77df3c3f52d1452919e0c335841febebc05025bf7bc4bf5621f28c2ee61dd2b1fb2c11fabfb9f9fa780c04420ae0a263bcf27c6d30e30d5df03d61e1b0de8507d58393b1a997c290b19e1b1cf4a457deaa093185efc99e48c2"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x812}}, &(0x7f0000000200)={0x0, 0x22, 0x8, {[@global=@item_012={0x0, 0x1, 0xa}, @main=@item_012={0x1, 0x0, 0xa, "88"}, @main=@item_4={0x3, 0x0, 0x8, "ea21cf41"}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0xcd, 0x5, 0x1, {0x22, 0xa46}}}}, &(0x7f0000000800)={0x2c, &(0x7f0000000a00)=ANY=[@ANYBLOB="000061000000b9ec19c9fd78da646b456566e58d5f08944871a0e31731b2caf8bdb6b226ba94cbd285c3cd91351d9a0bc5ccb65e0477533f34349d0c25c9e6a67d9fb2e030a84ff4221aa1580da40d62ed64bc489183791e6e60e61cfcb87baf6e1d8f0e4bda9b5476c7bb65813e27c8e0ea8adf891db932bb0cbe38ce508d17e495c9039602e44d6eb617dd960f6e634f418be87fdd9f8bac783586c88ad385f13c0b996bb96cadfb83bfe0140cdf621d4418"], &(0x7f0000000300)={0x0, 0xa, 0x1, 0xba}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000580)={0x20, 0x3, 0x1, 0xfd}}) 7.448789994s ago: executing program 4 (id=6260): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000000), 0x8) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 5.73574742s ago: executing program 0 (id=6261): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000eef8b90000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x8, 0x42, 0x40, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r2}, 0x38) 5.73495626s ago: executing program 3 (id=6262): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401e04012810000000000109022400010000000009040000020300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0xfff, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) r2 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) 5.73463787s ago: executing program 4 (id=6263): gettid() setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write(r1, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) write$tun(r0, &(0x7f0000000880)=ANY=[@ANYRES16, @ANYRES8, @ANYRESDEC, @ANYBLOB="4ffc2a94"], 0x46) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x1a, 0x0, 0x0) recvmmsg(r0, &(0x7f00000049c0), 0x0, 0x2000, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [], 'ip6tnl0\x00', 'nicvf0\x00', {}, {}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [], 'veth1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x386) r6 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @empty}, {0xa, 0x4e22, 0x0, @dev}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, 0x5c) ioctl$FIONCLEX(r6, 0x5450) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) 3.927552325s ago: executing program 0 (id=6264): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001300010000000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00.'], 0x44}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00'}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_usb_connect(0x2, 0x4f, &(0x7f0000000080)={{0x12, 0x1, 0x351, 0x29, 0xfb, 0xf0, 0x40, 0x738, 0x4540, 0xc6ce, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3d, 0x2, 0x2, 0x6, 0x10, 0x78, [{{0x9, 0x4, 0xd4, 0x9, 0x1, 0x78, 0x6d, 0x3d, 0x40, [], [{{0x9, 0x5, 0x1, 0x0, 0x200, 0x9, 0x4, 0x2}}]}}, {{0x9, 0x4, 0xe2, 0x0, 0x2, 0xb2, 0x26, 0x18, 0xbb, [], [{{0x9, 0x5, 0x1, 0x0, 0x200, 0x7c, 0x9e, 0x9, [@generic={0x7, 0x5, "85e371932d"}]}}, {{0x9, 0x5, 0x7, 0xb, 0x0, 0x9, 0x73, 0x3}}]}}]}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001ac0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) close_range(r4, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r6}, 0x10) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) 3.925789605s ago: executing program 1 (id=6265): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_usb_connect$uac1(0x6, 0xa4, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x94, 0x30, 0xf, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfff9, 0x80}, [@extension_unit={0xb, 0x24, 0x8, 0x4, 0x5, 0x7f, "f0c16d65"}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x306, 0x5, 0x6, 0x9}, @selector_unit={0x5, 0x24, 0x5, 0x6, 0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x5, 0x4, 0x4f}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x7, 0x3, 0xf9, 0x2}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x7, 0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x1, 0x5, 0x4, {0x7, 0x25, 0x1, 0x2, 0x6, 0x81}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0xbe, 0x2, 0x66, {0x7, 0x25, 0x1, 0x1, 0x8, 0x7}}}}}}}]}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000880)={0x44, 0x0, 0x0, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000740)={0x20, 0x81, 0x1, "9b"}, &(0x7f00000009c0)=ANY=[], &(0x7f00000007c0)={0x20, 0x83, 0x1, "d7"}, 0x0, &(0x7f0000000840)={0x20, 0x85, 0x3, "097a15"}}) ptrace$ARCH_GET_GS(0x1e, 0xffffffffffffffff, 0x0, 0x1004) sendto$inet(0xffffffffffffffff, &(0x7f0000000d00)="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", 0x1e7, 0x20000851, 0x0, 0xfffffffffffffcda) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) chdir(&(0x7f00000005c0)='./bus\x00') setuid(0xee01) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) 3.925084025s ago: executing program 3 (id=6266): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000401e04012810000000000109022400010000000009040000020300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0xfff, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) r2 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) 3.924647055s ago: executing program 4 (id=6267): pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000020000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r4}, 0x10) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="3801"], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 2.010376998s ago: executing program 4 (id=6268): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x7, 0x0, 0x2011, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000edc0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="94", 0x1}], 0x1}}], 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1810714, &(0x7f0000000440)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@init_itable_val}, {@nolazytime}, {@grpid}, {@prjquota}, {@norecovery}, {@lazytime}, {@errors_continue}, {@auto_da_alloc}, {@test_dummy_encryption}]}, 0xff, 0x468, &(0x7f0000000780)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000ffffffff9500000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0xfffffffe, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa50c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 2.346239ms ago: executing program 0 (id=6269): gettid() setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write(r1, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) write$tun(r0, &(0x7f0000000880)=ANY=[@ANYRES16, @ANYRES8, @ANYRESDEC, @ANYBLOB="4ffc2a94"], 0x46) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x1a, 0x0, 0x0) recvmmsg(r0, &(0x7f00000049c0), 0x0, 0x2000, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [], 'ip6tnl0\x00', 'nicvf0\x00', {}, {}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [], 'veth1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x386) r6 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @empty}, {0xa, 0x4e22, 0x0, @dev}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, 0x5c) ioctl$FIONCLEX(r6, 0x5450) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) 1.317959ms ago: executing program 1 (id=6270): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1807000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r5, &(0x7f0000003080)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1}, 0x1c, &(0x7f0000001b40)=[{0x0}, {&(0x7f0000000a40)="13ab3eeee593968811a98ce0eb08018efc054c8faeba6abd27c981fdbba854db371d3ef85fff0c5a815bce21f63166c801401f654ac3fd484338b4ccb726d2eb2e87f4a952aab9c6ab538365407a9b5b3f5d19b4d7d9afc8072d1d259130729a6745080c9db7398d70da7c1db8bc139e937a2a41f903526d5e15b06b01a068396389ed6dde3749593c274c153ecfa407e7aeb7f20f2eb436898fac9f0724b1894b286db08902dee46666f3af3c6a667eefa37e7eba83b8ddf74f0127ef456502cb08b0dcd36f", 0xc6}, {&(0x7f0000000b40)}, {0x0}, {0x0}], 0x5}}, {{&(0x7f0000002e40)={0xa, 0x0, 0x6, @mcast2, 0x2}, 0x1c, &(0x7f0000002f40), 0x0, &(0x7f0000000680)=ANY=[], 0x18}}], 0x2, 0x0) 749.81µs ago: executing program 3 (id=6271): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, 0x0, 0x0, 0xc2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000e40)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000ff000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'veth1\x00', 0x0}) sendto$packet(r4, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) dup(r6) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x1000}}) r8 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) unshare(0x20000400) fstat(r8, 0x0) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r9, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001500000127bd704b6d0800000000000000ec25280f0000"], 0x14}, 0x1, 0x0, 0x0, 0x20080005}, 0x20044000) 0s ago: executing program 4 (id=6272): open(0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000eef8b90000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="a800000000010104000000000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808"], 0xa8}}, 0x0) kernel console output (not intermixed with test programs): scriptor?? [ 1850.665716][T25320] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1850.763365][T21491] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1850.805715][T10252] usb 5-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 1850.814868][T10252] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1850.822126][T25339] loop2: detected capacity change from 0 to 40427 [ 1850.822993][T10252] usb 5-1: Product: syz [ 1850.834288][T10252] usb 5-1: Manufacturer: syz [ 1850.839602][T10252] usb 5-1: SerialNumber: syz [ 1850.848838][T25339] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1850.857694][T25339] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1850.869680][T25339] F2FS-fs (loop2): invalid crc value [ 1850.896125][T25339] F2FS-fs (loop2): invalid crc value [ 1850.901400][T25339] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 1851.125901][T21491] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1851.180269][T21491] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1851.280407][T25322] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5993'. [ 1851.292969][T21491] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1851.411253][T21491] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 1851.465024][T21491] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1851.477778][T10252] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:2.226/input/input186 [ 1851.548804][T10252] usb 5-1: USB disconnect, device number 10 [ 1851.579811][T21491] usb 2-1: config 0 descriptor?? [ 1851.644468][T25339] loop2: detected capacity change from 0 to 512 [ 1851.657282][T25339] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1851.667074][T25339] ext4 filesystem being mounted at /374/file0 supports timestamps until 2038 (0x7fffffff) [ 1851.679016][T25339] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #2: comm syz.2.6000: corrupted inode contents [ 1851.690973][T25339] EXT4-fs error (device loop2): ext4_dirty_inode:6074: inode #2: comm syz.2.6000: mark_inode_dirty error [ 1851.702414][T25339] EXT4-fs error (device loop2): ext4_do_update_inode:5212: inode #2: comm syz.2.6000: corrupted inode contents [ 1851.714255][T25339] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.6000: mark_inode_dirty error [ 1852.106163][T21491] prodikeys 0003:041E:2801.021D: item fetching failed at offset 0/5 [ 1852.114181][T21491] prodikeys 0003:041E:2801.021D: hid parse failed [ 1852.120661][T21491] prodikeys: probe of 0003:041E:2801.021D failed with error -22 [ 1852.225640][T10252] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1852.236632][T18269] EXT4-fs (loop2): unmounting filesystem. [ 1852.310826][T21491] usb 2-1: USB disconnect, device number 110 [ 1852.465692][T10252] usb 5-1: Using ep0 maxpacket: 16 [ 1852.585784][T10252] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1852.596681][T10252] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1852.606291][T10252] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1852.620066][T10252] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1852.629067][T10252] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1852.637279][T10252] usb 5-1: config 0 descriptor?? [ 1852.700182][ T6] usb 1-1: USB disconnect, device number 9 [ 1853.075667][ T6] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1853.118218][T10252] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.021E/input/input187 [ 1853.130276][T10252] microsoft 0003:045E:07DA.021E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1853.315644][ T6] usb 1-1: Using ep0 maxpacket: 32 [ 1853.328267][T21491] usb 5-1: USB disconnect, device number 11 [ 1853.435661][T10252] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1853.475747][ T6] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 1853.483984][ T6] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1853.492642][ T6] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1853.501552][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1853.511062][ T6] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1853.520499][ T6] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1853.533393][ T6] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1853.542206][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1853.550620][ T6] usb 1-1: config 0 descriptor?? [ 1853.672049][T25374] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6008'. [ 1853.795677][T10252] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1853.806829][T10252] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1853.818433][T10252] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1853.818498][ T6] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1853.831375][T10252] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 1853.871419][T10252] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1853.880828][T10252] usb 3-1: config 0 descriptor?? [ 1853.955622][T23919] usb 2-1: new full-speed USB device number 111 using dummy_hcd [ 1854.117155][T17845] usb 1-1: USB disconnect, device number 10 [ 1854.130931][T17845] usblp0: removed [ 1854.159688][T11798] Bluetooth: hci0: Frame reassembly failed (-84) [ 1854.379742][T10252] prodikeys 0003:041E:2801.021F: unknown main item tag 0x0 [ 1854.395146][T10252] prodikeys 0003:041E:2801.021F: unknown main item tag 0x0 [ 1854.416296][T10252] prodikeys 0003:041E:2801.021F: unknown main item tag 0x0 [ 1854.423507][T10252] prodikeys 0003:041E:2801.021F: unknown main item tag 0x0 [ 1854.431742][T10252] prodikeys 0003:041E:2801.021F: unknown main item tag 0x0 [ 1854.441922][T10252] prodikeys 0003:041E:2801.021F: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.2-1/input0 [ 1854.584351][T25372] loop2: detected capacity change from 0 to 1024 [ 1854.590819][T25372] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 1854.649952][T25372] loop2: detected capacity change from 0 to 1024 [ 1854.658535][T25372] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1854.669388][ T6] usb 3-1: USB disconnect, device number 103 [ 1854.815953][T23919] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1854.859666][T25392] FAULT_INJECTION: forcing a failure. [ 1854.859666][T25392] name failslab, interval 1, probability 0, space 0, times 0 [ 1854.872286][T25392] CPU: 0 PID: 25392 Comm: syz.4.6012 Tainted: G W 6.1.99-syzkaller-00010-gd41d398db683 #0 [ 1854.883386][T25392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1854.893283][T25392] Call Trace: [ 1854.896411][T25392] [ 1854.899198][T25392] dump_stack_lvl+0x151/0x1b7 [ 1854.903781][T25392] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 1854.909076][T25392] dump_stack+0x15/0x1b [ 1854.913067][T25392] should_fail_ex+0x3d0/0x520 [ 1854.917669][T25392] ? selinux_sk_alloc_security+0x7d/0x1a0 [ 1854.923232][T25392] __should_failslab+0xaf/0xf0 [ 1854.927821][T25392] should_failslab+0x9/0x20 [ 1854.932160][T25392] __kmem_cache_alloc_node+0x3d/0x250 [ 1854.937371][T25392] ? selinux_sk_alloc_security+0x7d/0x1a0 [ 1854.942924][T25392] kmalloc_trace+0x2a/0xa0 [ 1854.947178][T25392] selinux_sk_alloc_security+0x7d/0x1a0 [ 1854.952559][T25392] security_sk_alloc+0x72/0xb0 [ 1854.957158][T25392] sk_prot_alloc+0x114/0x330 [ 1854.961587][T25392] sk_alloc+0x38/0x440 [ 1854.965490][T25392] netlink_create+0x3e9/0x680 [ 1854.970003][T25392] ? nfnetlink_bind+0x200/0x200 [ 1854.974692][T25392] ? nfnetlink_rcv+0x24d0/0x24d0 [ 1854.979464][T25392] __sock_create+0x3a6/0x760 [ 1854.983988][T25392] __sys_socket+0x136/0x3a0 [ 1854.988330][T25392] ? __sys_socket_file+0x1d0/0x1d0 [ 1854.993276][T25392] ? debug_smp_processor_id+0x17/0x20 [ 1854.998484][T25392] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1855.004385][T25392] __x64_sys_socket+0x7a/0x90 [ 1855.008897][T25392] x64_sys_call+0x147/0x9a0 [ 1855.013238][T25392] do_syscall_64+0x3b/0xb0 [ 1855.017488][T25392] ? clear_bhb_loop+0x55/0xb0 [ 1855.021999][T25392] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1855.027737][T25392] RIP: 0033:0x7f95a3f7dff9 [ 1855.031982][T25392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1855.051423][T25392] RSP: 002b:00007f95a4ccb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1855.059754][T25392] RAX: ffffffffffffffda RBX: 00007f95a4136130 RCX: 00007f95a3f7dff9 [ 1855.067565][T25392] RDX: 000000000000000c RSI: 0000000000000003 RDI: 0000000000000010 [ 1855.075378][T25392] RBP: 00007f95a4ccb090 R08: 0000000000000000 R09: 0000000000000000 [ 1855.083192][T25392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1855.091087][T25392] R13: 0000000000000000 R14: 00007f95a4136130 R15: 00007ffd488a6f38 [ 1855.098908][T25392] [ 1855.102170][ T3771] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1855.109971][T23919] usb 2-1: not running at top speed; connect to a high speed hub [ 1855.195916][T23919] usb 2-1: config 2 has an invalid interface number: 212 but max is 1 [ 1855.204035][T23919] usb 2-1: config 2 has an invalid interface number: 226 but max is 1 [ 1855.212114][T23919] usb 2-1: config 2 has no interface number 0 [ 1855.217992][T23919] usb 2-1: config 2 has no interface number 1 [ 1855.223945][T23919] usb 2-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1855.234771][T23919] usb 2-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 1855.245856][T23919] usb 2-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64 [ 1855.256886][T23919] usb 2-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1855.266504][T23919] usb 2-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1855.279476][T23919] usb 2-1: config 2 interface 212 has no altsetting 0 [ 1855.421902][T18269] EXT4-fs (loop2): unmounting filesystem. [ 1855.456049][T23919] usb 2-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 1855.465172][T23919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1855.474203][T23919] usb 2-1: Product: syz [ 1855.479080][T23919] usb 2-1: Manufacturer: syz [ 1855.483556][T23919] usb 2-1: SerialNumber: syz [ 1855.495844][ T3771] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1855.507090][ T3771] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1855.517544][ T3771] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1855.530623][ T3771] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 1855.539561][ T3771] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1855.549756][ T3771] usb 4-1: config 0 descriptor?? [ 1855.628403][T25398] netlink: 'syz.4.6014': attribute type 1 has an invalid length. [ 1855.648902][T25400] loop4: detected capacity change from 0 to 512 [ 1855.679773][T25400] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1855.688852][T25400] ext4 filesystem being mounted at /141/file0 supports timestamps until 2038 (0x7fffffff) [ 1855.702900][T25400] EXT4-fs error (device loop4): ext4_do_update_inode:5212: inode #2: comm syz.4.6024: corrupted inode contents [ 1855.714892][T25400] EXT4-fs error (device loop4): ext4_dirty_inode:6074: inode #2: comm syz.4.6024: mark_inode_dirty error [ 1855.726301][T25400] EXT4-fs error (device loop4): ext4_do_update_inode:5212: inode #2: comm syz.4.6024: corrupted inode contents [ 1855.738320][T25400] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.6024: mark_inode_dirty error [ 1855.757755][T25374] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6008'. [ 1855.796377][T25400] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1855.804956][T25400] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1855.830087][T22831] EXT4-fs (loop4): unmounting filesystem. [ 1855.886247][T23919] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:2.226/input/input188 [ 1855.897521][T23919] usb 2-1: USB disconnect, device number 111 [ 1856.085675][ T3771] usbhid 4-1:0.0: can't add hid device: -71 [ 1856.091453][ T3771] usbhid: probe of 4-1:0.0 failed with error -71 [ 1856.098150][ T3771] usb 4-1: USB disconnect, device number 15 [ 1856.155710][T20205] Bluetooth: hci0: command 0x1003 tx timeout [ 1856.155726][T20215] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1856.177949][T25406] loop4: detected capacity change from 0 to 1024 [ 1856.184459][T25406] EXT4-fs: Ignoring removed nobh option [ 1856.190599][T25406] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 1856.200270][T25406] EXT4-fs (loop4): can't mount with commit=69, fs mounted w/o journal [ 1856.258594][T25406] fuse: Bad value for 'rootmode' [ 1856.264768][T25406] loop4: detected capacity change from 0 to 256 [ 1856.273737][T25406] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001023f, chksum : 0x0e440cfe, utbl_chksum : 0xe619d30d) [ 1856.561213][T25412] loop1: detected capacity change from 0 to 512 [ 1856.568224][T25412] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1856.575844][T25412] EXT4-fs error (device loop1): __ext4_fill_super:5386: inode #2: comm syz.1.6017: casefold flag without casefold feature [ 1856.589001][T25412] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 1856.599417][T25412] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1856.708131][T25421] loop2: detected capacity change from 0 to 512 [ 1856.826142][T22734] EXT4-fs (loop1): unmounting filesystem. [ 1856.835648][T21491] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1857.074848][T25435] netlink: 'syz.0.6025': attribute type 1 has an invalid length. [ 1857.082589][T21491] usb 5-1: Using ep0 maxpacket: 16 [ 1857.214869][T15431] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1857.245670][T21491] usb 5-1: config index 0 descriptor too short (expected 81, got 50) [ 1857.334137][T21491] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1857.344068][T21491] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1857.352313][T21491] usb 5-1: SerialNumber: syz [ 1857.424103][T21491] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 1857.463927][T21491] cdc_acm 5-1:1.0: This needs exactly 3 endpoints [ 1857.484078][T21491] cdc_acm: probe of 5-1:1.0 failed with error -22 [ 1857.539912][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 1857.539929][ T28] audit: type=1400 audit(1728759320.242:1017): avc: denied { lock } for pid=25440 comm="syz.3.6027" path="socket:[121144]" dev="sockfs" ino=121144 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 1857.585712][T15431] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 255, changing to 11 [ 1857.596765][T15431] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 59391, setting to 1024 [ 1857.765714][T15431] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1857.774584][T15431] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1857.782408][T15431] usb 3-1: Product: syz [ 1857.786392][T15431] usb 3-1: Manufacturer: syz [ 1857.790917][T15431] usb 3-1: SerialNumber: syz [ 1857.795828][T15431] usb 3-1: config 0 descriptor?? [ 1857.815718][T25432] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1857.875629][T23919] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1857.965641][T21491] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1858.099841][ T3423] usb 5-1: USB disconnect, device number 12 [ 1858.120098][T25451] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6030'. [ 1858.175626][T23919] usb 4-1: device descriptor read/64, error -71 [ 1858.205620][T21491] usb 2-1: Using ep0 maxpacket: 32 [ 1858.325675][T21491] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 1858.334093][T21491] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1858.342689][T21491] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1858.351753][T21491] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1858.361397][T21491] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1858.371151][T21491] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1858.384244][T21491] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1858.393251][T21491] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1858.401643][T21491] usb 2-1: config 0 descriptor?? [ 1858.535652][ T3423] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 1858.575666][T23919] usb 4-1: device descriptor read/64, error -71 [ 1858.666035][T21491] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 112 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1858.865679][T23919] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1858.867473][T10252] usb 2-1: USB disconnect, device number 112 [ 1858.881128][T10252] usblp0: removed [ 1858.885259][T23581] Bluetooth: hci0: Frame reassembly failed (-84) [ 1858.975691][ T3423] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1859.015678][ T3423] usb 5-1: not running at top speed; connect to a high speed hub [ 1859.095752][ T3423] usb 5-1: config 2 has an invalid interface number: 212 but max is 1 [ 1859.103772][ T3423] usb 5-1: config 2 has an invalid interface number: 226 but max is 1 [ 1859.111803][ T3423] usb 5-1: config 2 has no interface number 0 [ 1859.117651][ T3423] usb 5-1: config 2 has no interface number 1 [ 1859.123594][ T3423] usb 5-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1859.134246][ T3423] usb 5-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 1859.144738][ T3423] usb 5-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64 [ 1859.144764][T21491] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1859.155752][T23919] usb 4-1: device descriptor read/64, error -71 [ 1859.169128][ T3423] usb 5-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1859.178904][ T3423] usb 5-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1859.191733][ T3423] usb 5-1: config 2 interface 212 has no altsetting 0 [ 1859.415794][ T3423] usb 5-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 1859.424750][ T3423] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1859.432547][ T3423] usb 5-1: Product: syz [ 1859.436591][ T3423] usb 5-1: Manufacturer: syz [ 1859.440992][ T3423] usb 5-1: SerialNumber: syz [ 1859.515694][T21491] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1859.526560][T21491] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1859.536056][T21491] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1859.548755][T21491] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 1859.557577][T21491] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1859.565867][T21491] usb 1-1: config 0 descriptor?? [ 1859.605669][T23919] usb 4-1: device descriptor read/64, error -71 [ 1859.693850][T25451] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6030'. [ 1859.735886][T23919] usb usb4-port1: attempt power cycle [ 1859.816248][ T3423] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:2.226/input/input189 [ 1859.827572][ T3423] usb 5-1: USB disconnect, device number 13 [ 1859.937453][T15431] usb 3-1: USB disconnect, device number 104 [ 1859.953701][T25461] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6032'. [ 1860.105708][T21491] usbhid 1-1:0.0: can't add hid device: -71 [ 1860.111567][T21491] usbhid: probe of 1-1:0.0 failed with error -71 [ 1860.119022][T21491] usb 1-1: USB disconnect, device number 11 [ 1860.145695][T23919] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1860.277352][T25465] loop4: detected capacity change from 0 to 512 [ 1860.315678][T23919] usb 4-1: device descriptor read/8, error -71 [ 1860.335637][T15431] usb 3-1: new full-speed USB device number 105 using dummy_hcd [ 1860.431317][T25470] syz.4.6036[25470] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1860.431368][T25470] syz.4.6036[25470] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1860.595707][T23919] usb 4-1: device descriptor read/8, error -71 [ 1860.666588][T25477] loop3: detected capacity change from 0 to 512 [ 1860.674659][T25477] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1860.700499][T25477] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz.3.6027: casefold flag without casefold feature [ 1860.713376][T25477] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #12: comm syz.3.6027: missing EA_INODE flag [ 1860.725698][T25477] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.6027: error while reading EA inode 12 err=-117 [ 1860.737892][T15431] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1860.738083][T25477] EXT4-fs (loop3): 1 orphan inode deleted [ 1860.750944][T25477] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1860.775691][T15431] usb 3-1: not running at top speed; connect to a high speed hub [ 1860.815710][T21491] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1860.855691][T15431] usb 3-1: config 2 has an invalid interface number: 212 but max is 1 [ 1860.863673][T15431] usb 3-1: config 2 has an invalid interface number: 226 but max is 1 [ 1860.871922][T15431] usb 3-1: config 2 has no interface number 0 [ 1860.877861][T15431] usb 3-1: config 2 has no interface number 1 [ 1860.883715][T15431] usb 3-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1860.885633][T23919] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1860.894519][T15431] usb 3-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 1860.912371][T15431] usb 3-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64 [ 1860.923324][T15431] usb 3-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1860.932938][T15431] usb 3-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1860.945905][T15431] usb 3-1: config 2 interface 212 has no altsetting 0 [ 1860.955639][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 1860.955662][T20215] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1861.065615][T21491] usb 1-1: Using ep0 maxpacket: 32 [ 1861.116013][T15431] usb 3-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 1861.125680][T15431] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1861.133994][T15431] usb 3-1: Product: syz [ 1861.138439][T15431] usb 3-1: Manufacturer: syz [ 1861.143308][T15431] usb 3-1: SerialNumber: syz [ 1861.206879][T23919] usb 4-1: device descriptor read/8, error -71 [ 1861.245681][T21491] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1861.255788][T21491] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1861.268827][T21491] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1861.277719][T21491] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1861.286370][T21491] usb 1-1: config 0 descriptor?? [ 1861.335907][T21491] hub 1-1:0.0: bad descriptor, ignoring hub [ 1861.342836][T21491] hub: probe of 1-1:0.0 failed with error -5 [ 1861.352001][T21491] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1861.394385][T25461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6032'. [ 1861.495642][T23919] usb 4-1: device descriptor read/8, error -71 [ 1861.506638][T15431] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:2.226/input/input190 [ 1861.520377][T15431] usb 3-1: USB disconnect, device number 105 [ 1861.615683][T23919] usb usb4-port1: unable to enumerate USB device [ 1861.915875][T25499] loop2: detected capacity change from 0 to 512 [ 1861.937228][T25499] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1861.946078][T25499] ext4 filesystem being mounted at /384/file0 supports timestamps until 2038 (0x7fffffff) [ 1862.105036][T15431] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1862.155775][ T28] audit: type=1400 audit(1728759324.802:1018): avc: denied { create } for pid=25498 comm="syz.2.6043" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 1862.495671][T15431] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 255, changing to 11 [ 1862.506595][T15431] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 59391, setting to 1024 [ 1862.555666][T23919] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1862.675698][T15431] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1862.684639][T15431] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1862.692474][T15431] usb 2-1: Product: syz [ 1862.696413][T15431] usb 2-1: Manufacturer: syz [ 1862.700824][T15431] usb 2-1: SerialNumber: syz [ 1862.705903][T15431] usb 2-1: config 0 descriptor?? [ 1862.725680][T25496] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1862.767181][T18269] EXT4-fs (loop2): unmounting filesystem. [ 1862.780976][T25511] loop2: detected capacity change from 0 to 512 [ 1862.805762][T23919] usb 5-1: Using ep0 maxpacket: 16 [ 1862.879526][T25514] loop2: detected capacity change from 0 to 16 [ 1862.886067][T25514] erofs: (device loop2): mounted with root inode @ nid 36. [ 1862.935692][T23919] usb 5-1: config 0 has no interfaces? [ 1863.125653][T23919] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1863.136409][T23919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1863.144265][T23919] usb 5-1: Product: syz [ 1863.148535][T23919] usb 5-1: Manufacturer: syz [ 1863.152972][T23919] usb 5-1: SerialNumber: syz [ 1863.165662][ T3423] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1863.173342][T23919] r8152-cfgselector 5-1: config 0 descriptor?? [ 1863.565735][ T3423] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1863.576523][ T3423] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1863.586112][ T3423] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1863.598930][ T3423] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 1863.607752][ T3423] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1863.616150][ T3423] usb 3-1: config 0 descriptor?? [ 1863.648247][T25508] loop4: detected capacity change from 0 to 128 [ 1863.769259][T23919] usb 1-1: USB disconnect, device number 12 [ 1864.215672][ T3423] usbhid 3-1:0.0: can't add hid device: -71 [ 1864.221482][ T3423] usbhid: probe of 3-1:0.0 failed with error -71 [ 1864.227861][T23581] usb 5-1: config 0 descriptor?? [ 1864.232950][ T3423] usb 3-1: USB disconnect, device number 106 [ 1864.934974][T15431] usb 2-1: USB disconnect, device number 113 [ 1865.349664][T15431] usb 5-1: USB disconnect, device number 14 [ 1865.365738][T23581] usb 5-1: can't set config #0, error -71 [ 1865.806221][T15431] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1865.939075][T25552] loop1: detected capacity change from 0 to 512 [ 1866.393800][T25559] loop2: detected capacity change from 0 to 512 [ 1866.407332][T25559] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1866.416221][T25559] ext4 filesystem being mounted at /390/file0 supports timestamps until 2038 (0x7fffffff) [ 1866.495695][T15431] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1866.506404][T15431] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1866.516238][T15431] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1866.529029][T15431] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 1866.539119][T15431] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1866.548293][T15431] usb 5-1: config 0 descriptor?? [ 1866.665646][ T3771] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1866.935654][ T3771] usb 1-1: Using ep0 maxpacket: 32 [ 1867.105656][ T3771] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1867.115745][ T3771] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1867.125659][T15431] usbhid 5-1:0.0: can't add hid device: -71 [ 1867.128703][ T3771] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1867.134185][T15431] usbhid: probe of 5-1:0.0 failed with error -71 [ 1867.143209][ T3771] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1867.150621][T15431] usb 5-1: USB disconnect, device number 15 [ 1867.162639][ T3771] usb 1-1: config 0 descriptor?? [ 1867.205940][ T3771] hub 1-1:0.0: bad descriptor, ignoring hub [ 1867.211694][ T3771] hub: probe of 1-1:0.0 failed with error -5 [ 1867.217748][ T3771] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1867.244660][T18269] EXT4-fs (loop2): unmounting filesystem. [ 1867.255737][T25572] FAULT_INJECTION: forcing a failure. [ 1867.255737][T25572] name failslab, interval 1, probability 0, space 0, times 0 [ 1867.268266][T25572] CPU: 1 PID: 25572 Comm: syz.2.6062 Tainted: G W 6.1.99-syzkaller-00010-gd41d398db683 #0 [ 1867.279355][T25572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1867.289244][T25572] Call Trace: [ 1867.292363][T25572] [ 1867.295142][T25572] dump_stack_lvl+0x151/0x1b7 [ 1867.299655][T25572] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 1867.304952][T25572] dump_stack+0x15/0x1b [ 1867.309030][T25572] should_fail_ex+0x3d0/0x520 [ 1867.313541][T25572] ? kvmalloc_node+0x221/0x640 [ 1867.318142][T25572] __should_failslab+0xaf/0xf0 [ 1867.322744][T25572] should_failslab+0x9/0x20 [ 1867.327082][T25572] __kmem_cache_alloc_node+0x3d/0x250 [ 1867.332289][T25572] ? kvmalloc_node+0x221/0x640 [ 1867.337154][T25572] __kmalloc_node+0xa3/0x1e0 [ 1867.341529][T25572] kvmalloc_node+0x221/0x640 [ 1867.345956][T25572] ? vm_mmap+0xb0/0xb0 [ 1867.349867][T25572] ? tokenize_frame_descr+0x10/0xc0 [ 1867.354897][T25572] map_get_next_key+0x298/0x4e0 [ 1867.359587][T25572] __sys_bpf+0x3da/0x7f0 [ 1867.363659][T25572] ? bpf_link_show_fdinfo+0x2d0/0x2d0 [ 1867.368868][T25572] ? __ia32_sys_read+0x90/0x90 [ 1867.373496][T25572] ? debug_smp_processor_id+0x17/0x20 [ 1867.378674][T25572] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 1867.384600][T25572] __x64_sys_bpf+0x7c/0x90 [ 1867.388829][T25572] x64_sys_call+0x87f/0x9a0 [ 1867.393166][T25572] do_syscall_64+0x3b/0xb0 [ 1867.397422][T25572] ? clear_bhb_loop+0x55/0xb0 [ 1867.401941][T25572] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1867.407672][T25572] RIP: 0033:0x7fc774d7dff9 [ 1867.411921][T25572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1867.431363][T25572] RSP: 002b:00007fc775b5e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1867.439688][T25572] RAX: ffffffffffffffda RBX: 00007fc774f35f80 RCX: 00007fc774d7dff9 [ 1867.447499][T25572] RDX: 0000000000000020 RSI: 00000000200000c0 RDI: 0000000000000004 [ 1867.455399][T25572] RBP: 00007fc775b5e090 R08: 0000000000000000 R09: 0000000000000000 [ 1867.463208][T25572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1867.471020][T25572] R13: 0000000000000000 R14: 00007fc774f35f80 R15: 00007fffe7523928 [ 1867.478837][T25572] [ 1867.576083][T23585] EXT4-fs (loop3): unmounting filesystem. [ 1867.650899][T25578] bridge0: port 1(bridge_slave_0) entered blocking state [ 1867.657830][T25578] bridge0: port 1(bridge_slave_0) entered disabled state [ 1867.664919][T25578] device bridge_slave_0 entered promiscuous mode [ 1867.671712][T25578] bridge0: port 2(bridge_slave_1) entered blocking state [ 1867.678934][T25578] bridge0: port 2(bridge_slave_1) entered disabled state [ 1867.686353][T25578] device bridge_slave_1 entered promiscuous mode [ 1867.727884][T25578] bridge0: port 2(bridge_slave_1) entered blocking state [ 1867.734755][T25578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1867.741863][T25578] bridge0: port 1(bridge_slave_0) entered blocking state [ 1867.748638][T25578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1867.764696][ T3771] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1867.779241][ T525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1867.817484][ T525] bridge0: port 1(bridge_slave_0) entered disabled state [ 1867.824768][ T525] bridge0: port 2(bridge_slave_1) entered disabled state [ 1867.833528][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1867.841709][ T324] bridge0: port 1(bridge_slave_0) entered blocking state [ 1867.845664][T15431] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1867.848568][ T324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1867.868432][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1868.053404][ T324] bridge0: port 2(bridge_slave_1) entered blocking state [ 1868.060266][ T324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1868.075881][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1868.084056][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1868.091991][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1868.095787][T15431] usb 5-1: Using ep0 maxpacket: 32 [ 1868.104542][T25578] device veth0_vlan entered promiscuous mode [ 1868.110672][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1868.118505][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1868.125987][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1868.138884][ T525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1868.147638][T25578] device veth1_macvtap entered promiscuous mode [ 1868.156717][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1868.168944][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1868.215660][T15431] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1868.225670][T15431] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1868.238413][T15431] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1868.247231][T15431] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1868.255403][T15431] usb 5-1: config 0 descriptor?? [ 1868.285689][ T3771] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 255, changing to 11 [ 1868.296524][T15431] hub 5-1:0.0: bad descriptor, ignoring hub [ 1868.296544][T15431] hub: probe of 5-1:0.0 failed with error -5 [ 1868.296757][T15431] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1868.302900][ T3771] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 59391, setting to 1024 [ 1868.376337][T23581] device bridge_slave_1 left promiscuous mode [ 1868.382423][T23581] bridge0: port 2(bridge_slave_1) entered disabled state [ 1868.389817][T23581] device bridge_slave_0 left promiscuous mode [ 1868.395876][T23581] bridge0: port 1(bridge_slave_0) entered disabled state [ 1868.403481][T23581] device veth1_macvtap left promiscuous mode [ 1868.409361][T23581] device veth0_vlan left promiscuous mode [ 1868.455639][ T525] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1868.515707][ T3771] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1868.524688][ T3771] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1868.532576][ T3771] usb 3-1: Product: syz [ 1868.536616][ T3771] usb 3-1: Manufacturer: syz [ 1868.541003][ T3771] usb 3-1: SerialNumber: syz [ 1868.546032][ T3771] usb 3-1: config 0 descriptor?? [ 1868.565687][T25574] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1869.055689][ T525] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1869.066537][ T525] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1869.076156][ T525] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1869.085078][ T525] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1869.093563][ T525] usb 4-1: config 0 descriptor?? [ 1869.361319][T25597] fuse: Unknown parameter 'ÿ01777777777777777777777' [ 1869.516946][T10252] usb 1-1: USB disconnect, device number 13 [ 1869.582916][T25592] loop3: detected capacity change from 0 to 512 [ 1869.592464][T25592] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1869.608795][T25592] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 1869.657100][T25592] System zones: 1-12 [ 1869.669086][T25592] EXT4-fs (loop3): 1 truncate cleaned up [ 1869.674970][T25592] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1869.690623][T25592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1869.699034][T25592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1869.775650][ T525] usbhid 4-1:0.0: can't add hid device: -71 [ 1869.781573][ T525] usbhid: probe of 4-1:0.0 failed with error -71 [ 1869.788230][ T525] usb 4-1: USB disconnect, device number 20 [ 1870.216400][T25578] EXT4-fs (loop3): unmounting filesystem. [ 1870.848364][ T3771] usb 3-1: USB disconnect, device number 107 [ 1871.126894][ T324] usb 5-1: reset high-speed USB device number 16 using dummy_hcd [ 1871.148955][T10252] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1871.185674][ T324] usb 5-1: device reset changed ep0 maxpacket size! [ 1871.192744][ T324] usb 5-1: USB disconnect, device number 16 [ 1871.765842][T10252] usb 2-1: Using ep0 maxpacket: 32 [ 1871.885647][ T3771] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1871.885709][T10252] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 1871.901325][T10252] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1871.909745][T10252] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1871.918585][T10252] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1871.929845][T10252] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1871.939374][T10252] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1871.967948][T10252] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1871.977179][T10252] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1871.985797][T10252] usb 2-1: config 0 descriptor?? [ 1872.093845][T25645] loop3: detected capacity change from 0 to 40427 [ 1872.100620][T25645] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1872.108289][T25645] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1872.117187][T25645] F2FS-fs (loop3): invalid crc value [ 1872.123662][T25645] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1872.146529][T25645] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1872.153384][T25645] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1872.160728][ T324] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1872.246053][T10252] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 114 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1872.275662][ T3771] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1872.286501][ T3771] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1872.296086][ T3771] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1872.305652][T15431] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1872.316020][ T3771] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 1872.316049][ T3771] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1872.333120][ T3771] usb 3-1: config 0 descriptor?? [ 1872.405741][ T324] usb 5-1: Using ep0 maxpacket: 16 [ 1872.449182][T10252] usb 2-1: USB disconnect, device number 114 [ 1872.456264][T23581] Bluetooth: hci0: Frame reassembly failed (-84) [ 1872.456659][T10252] usblp0: removed [ 1872.545687][ T324] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1872.556432][ T324] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1872.565953][ T324] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1872.578545][ T324] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 1872.585624][T15431] usb 1-1: Using ep0 maxpacket: 32 [ 1872.587499][ T324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1872.600775][ T324] usb 5-1: config 0 descriptor?? [ 1872.705685][T15431] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1872.715802][T15431] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1872.728508][T15431] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1872.737940][T15431] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1872.746219][T15431] usb 1-1: config 0 descriptor?? [ 1872.785980][T15431] hub 1-1:0.0: bad descriptor, ignoring hub [ 1872.791712][T15431] hub: probe of 1-1:0.0 failed with error -5 [ 1872.797836][T15431] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1872.885701][ T3771] usbhid 3-1:0.0: can't add hid device: -71 [ 1872.891552][ T3771] usbhid: probe of 3-1:0.0 failed with error -71 [ 1872.898470][ T3771] usb 3-1: USB disconnect, device number 108 [ 1873.086153][ T324] koneplus 0003:1E7D:2E22.0220: unknown main item tag 0x0 [ 1873.093624][ T324] koneplus 0003:1E7D:2E22.0220: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.4-1/input0 [ 1873.286031][T25623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1873.294367][T25623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1873.312738][ T28] audit: type=1400 audit(1728759336.012:1019): avc: denied { map } for pid=25656 comm="syz.3.6083" path="socket:[122649]" dev="sockfs" ino=122649 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1873.568295][ T324] usb 5-1: USB disconnect, device number 17 [ 1873.605733][ T3771] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1873.615660][T23919] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1873.741956][T25658] fuse: Unknown parameter 'ÿ01777777777777777777777' [ 1873.875663][T23919] usb 4-1: Using ep0 maxpacket: 32 [ 1873.985737][ T3771] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1873.996630][ T3771] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1874.006244][T23919] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1874.016078][ T3771] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1874.024906][ T3771] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1874.032782][T23919] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1874.045435][T23919] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1874.054546][T23919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1874.062560][ T3771] usb 3-1: config 0 descriptor?? [ 1874.067797][T23919] usb 4-1: config 0 descriptor?? [ 1874.106308][T23919] hub 4-1:0.0: bad descriptor, ignoring hub [ 1874.112063][T23919] hub: probe of 4-1:0.0 failed with error -5 [ 1874.118367][T23919] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1874.345650][ T6] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1874.475651][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 1874.475732][T20215] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1874.528701][T25660] loop2: detected capacity change from 0 to 512 [ 1874.537743][T25660] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1874.548359][T25660] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 1874.556340][T25660] System zones: 1-12 [ 1874.560904][T25660] EXT4-fs (loop2): 1 truncate cleaned up [ 1874.566568][T25660] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1874.577946][T25660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1874.586237][T25660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1874.596863][T25676] loop1: detected capacity change from 0 to 512 [ 1874.607223][T25676] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1874.615994][T25676] ext4 filesystem being mounted at /157/bus supports timestamps until 2038 (0x7fffffff) [ 1874.695674][ T3771] usbhid 3-1:0.0: can't add hid device: -71 [ 1874.701540][ T3771] usbhid: probe of 3-1:0.0 failed with error -71 [ 1874.708382][ T3771] usb 3-1: USB disconnect, device number 109 [ 1874.755717][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 255, changing to 11 [ 1874.766718][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 59391, setting to 1024 [ 1874.965698][ T6] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1874.974664][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1874.982552][ T6] usb 5-1: Product: syz [ 1874.986531][ T6] usb 5-1: Manufacturer: syz [ 1874.990909][ T6] usb 5-1: SerialNumber: syz [ 1874.995834][ T6] usb 5-1: config 0 descriptor?? [ 1875.025713][T25669] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1875.061344][T25679] fuse: Unknown parameter 'ÿ01777777777777777777777' [ 1875.108474][T18269] EXT4-fs (loop2): unmounting filesystem. [ 1875.442201][T22734] EXT4-fs (loop1): unmounting filesystem. [ 1875.516239][T23919] usb 1-1: reset high-speed USB device number 14 using dummy_hcd [ 1877.317214][ T6] usb 5-1: USB disconnect, device number 18 [ 1877.505791][T15431] usb 4-1: reset high-speed USB device number 21 using dummy_hcd [ 1877.545714][T15431] usb 4-1: device reset changed ep0 maxpacket size! [ 1877.552261][T15431] usb 4-1: USB disconnect, device number 21 [ 1877.585641][T23919] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1877.825641][T23919] usb 3-1: Using ep0 maxpacket: 16 [ 1877.905642][T15431] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1877.975731][T23919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1877.986494][T23919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1877.995996][T23919] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1878.008610][T23919] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 1878.017427][T23919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1878.025650][T23919] usb 3-1: config 0 descriptor?? [ 1878.054348][T25718] fuse: Unknown parameter 'ÿ01777777777777777777777' [ 1878.265696][T15431] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1878.276551][T15431] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1878.286187][T15431] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1878.298874][T15431] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 1878.307752][T15431] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1878.316946][T15431] usb 4-1: config 0 descriptor?? [ 1878.465621][T10252] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1878.536158][T23919] koneplus 0003:1E7D:2E22.0221: unknown main item tag 0x0 [ 1878.543743][T23919] koneplus 0003:1E7D:2E22.0221: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.2-1/input0 [ 1878.705619][T10252] usb 5-1: Using ep0 maxpacket: 32 [ 1878.736063][T25722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1878.744283][T25722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1878.825653][T10252] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1878.833861][T10252] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1878.842325][T10252] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1878.851035][T10252] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1878.860525][T15431] usbhid 4-1:0.0: can't add hid device: -71 [ 1878.866226][T15431] usbhid: probe of 4-1:0.0 failed with error -71 [ 1878.872826][T10252] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1878.883085][T15431] usb 4-1: USB disconnect, device number 22 [ 1878.889226][T10252] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1878.902392][T10252] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1878.911253][T10252] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1878.919479][T10252] usb 5-1: config 0 descriptor?? [ 1879.176292][T10252] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 19 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1879.195901][ T525] usb 1-1: USB disconnect, device number 14 [ 1879.359048][T25731] loop1: detected capacity change from 0 to 512 [ 1879.377249][T10252] usb 5-1: USB disconnect, device number 19 [ 1879.385982][T23581] Bluetooth: hci0: Frame reassembly failed (-84) [ 1879.392617][T10252] usblp0: removed [ 1879.427557][T25733] netlink: 'syz.3.6102': attribute type 1 has an invalid length. [ 1879.443576][T25735] loop3: detected capacity change from 0 to 512 [ 1879.525698][ T3771] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1879.825621][ T525] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1879.855618][ T3771] usb 1-1: device descriptor read/64, error -71 [ 1880.065612][ T525] usb 4-1: Using ep0 maxpacket: 32 [ 1880.185656][ T525] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1880.210487][ T525] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1880.223461][ T525] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1880.232507][ T525] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1880.233832][T25745] loop1: detected capacity change from 0 to 2048 [ 1880.241251][ T525] usb 4-1: config 0 descriptor?? [ 1880.257570][T25745] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1880.275669][ T3771] usb 1-1: device descriptor read/64, error -71 [ 1880.285991][ T525] hub 4-1:0.0: bad descriptor, ignoring hub [ 1880.291811][ T525] hub: probe of 4-1:0.0 failed with error -5 [ 1880.297785][ T525] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1880.315163][T10252] usb 3-1: USB disconnect, device number 110 [ 1880.317449][T25751] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6107'. [ 1880.503281][T22734] EXT4-fs (loop1): unmounting filesystem. [ 1880.555742][ T3771] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1880.715703][T10252] usb 3-1: new full-speed USB device number 111 using dummy_hcd [ 1880.775614][T15431] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1880.855626][ T3771] usb 1-1: device descriptor read/64, error -71 [ 1881.115841][T10252] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1881.135720][T15431] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1881.146433][T15431] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1881.156021][T10252] usb 3-1: not running at top speed; connect to a high speed hub [ 1881.163541][T15431] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1881.176306][T15431] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 1881.185098][T15431] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1881.193374][T15431] usb 2-1: config 0 descriptor?? [ 1881.235701][T10252] usb 3-1: config 2 has an invalid interface number: 212 but max is 1 [ 1881.243689][T10252] usb 3-1: config 2 has an invalid interface number: 226 but max is 1 [ 1881.246216][T25755] fuse: Unknown parameter 'ÿ01777777777777777777777' [ 1881.252307][T10252] usb 3-1: config 2 has no interface number 0 [ 1881.258507][ T3771] usb 1-1: device descriptor read/64, error -71 [ 1881.264250][T10252] usb 3-1: config 2 has no interface number 1 [ 1881.276095][T10252] usb 3-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1881.286779][T10252] usb 3-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 1881.297298][T10252] usb 3-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64 [ 1881.308212][T10252] usb 3-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1881.317885][T10252] usb 3-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1881.330707][T10252] usb 3-1: config 2 interface 212 has no altsetting 0 [ 1881.385742][ T3771] usb usb1-port1: attempt power cycle [ 1881.435714][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 1881.435730][T20215] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1881.495829][T10252] usb 3-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 1881.504741][T10252] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1881.512550][T10252] usb 3-1: Product: syz [ 1881.516525][T10252] usb 3-1: Manufacturer: syz [ 1881.520917][T10252] usb 3-1: SerialNumber: syz [ 1881.725671][T23919] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1881.745657][T15431] usbhid 2-1:0.0: can't add hid device: -71 [ 1881.751457][T15431] usbhid: probe of 2-1:0.0 failed with error -71 [ 1881.758146][T15431] usb 2-1: USB disconnect, device number 115 [ 1881.795659][ T3771] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1881.816331][T25751] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6107'. [ 1881.936312][T10252] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:2.226/input/input191 [ 1881.948211][T10252] usb 3-1: USB disconnect, device number 111 [ 1881.965660][T23919] usb 5-1: Using ep0 maxpacket: 32 [ 1881.970772][ T3771] usb 1-1: device descriptor read/8, error -71 [ 1882.085657][T23919] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1882.095742][T23919] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1882.108367][T23919] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1882.117181][T23919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1882.125418][T23919] usb 5-1: config 0 descriptor?? [ 1882.166110][T23919] hub 5-1:0.0: bad descriptor, ignoring hub [ 1882.173362][T23919] hub: probe of 5-1:0.0 failed with error -5 [ 1882.183754][T23919] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1882.205655][ T3771] usb 1-1: device descriptor read/8, error -71 [ 1882.741410][T25773] loop3: detected capacity change from 0 to 512 [ 1882.748231][T17845] usb 4-1: USB disconnect, device number 23 [ 1883.169772][T25775] fuse: Unknown parameter 'ÿ01777777777777777777777' [ 1883.245201][T25779] loop2: detected capacity change from 0 to 512 [ 1883.355656][ T6] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1883.535611][T10252] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1883.715669][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1883.726423][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1883.735935][ T6] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1883.748517][ T6] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 1883.757374][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1883.765674][ T6] usb 2-1: config 0 descriptor?? [ 1883.925707][T10252] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1883.936509][T10252] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1883.946168][T10252] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1883.958781][T10252] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 1883.967603][T10252] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1883.975824][T10252] usb 4-1: config 0 descriptor?? [ 1884.425690][ T6] usbhid 2-1:0.0: can't add hid device: -71 [ 1884.431558][ T6] usbhid: probe of 2-1:0.0 failed with error -71 [ 1884.438284][ T6] usb 2-1: USB disconnect, device number 116 [ 1884.545651][T10252] usbhid 4-1:0.0: can't add hid device: -71 [ 1884.551451][T10252] usbhid: probe of 4-1:0.0 failed with error -71 [ 1884.558230][T10252] usb 4-1: USB disconnect, device number 24 [ 1884.755769][ T3771] usb 5-1: reset high-speed USB device number 20 using dummy_hcd [ 1884.797348][ T3771] usb 5-1: device reset changed ep0 maxpacket size! [ 1884.804096][ T3771] usb 5-1: USB disconnect, device number 20 [ 1885.025622][T21491] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1885.071966][T25798] loop3: detected capacity change from 0 to 40427 [ 1885.078714][T25798] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1885.086330][T25798] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1885.094953][T25798] F2FS-fs (loop3): invalid crc value [ 1885.100319][T25798] F2FS-fs (loop3): invalid crc value [ 1885.105425][T25798] F2FS-fs (loop3): Failed to get valid F2FS checkpoint [ 1885.186138][T25798] loop3: detected capacity change from 0 to 512 [ 1885.186936][ T3771] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1885.207374][T25798] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1885.216269][T25798] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038 (0x7fffffff) [ 1885.227731][T25798] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #2: comm syz.3.6122: corrupted inode contents [ 1885.239604][T25798] EXT4-fs error (device loop3): ext4_dirty_inode:6074: inode #2: comm syz.3.6122: mark_inode_dirty error [ 1885.250911][T25798] EXT4-fs error (device loop3): ext4_do_update_inode:5212: inode #2: comm syz.3.6122: corrupted inode contents [ 1885.262769][T25798] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.6122: mark_inode_dirty error [ 1885.273983][ T6] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1885.275590][T21491] usb 2-1: Using ep0 maxpacket: 32 [ 1885.417255][T21491] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 1885.425940][T21491] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1885.434624][T21491] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1885.435789][ T3771] usb 5-1: Using ep0 maxpacket: 16 [ 1885.443567][T21491] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1885.458050][T21491] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1885.467712][T21491] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1885.480605][T21491] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1885.489576][T21491] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1885.498028][T21491] usb 2-1: config 0 descriptor?? [ 1885.555734][ T324] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1885.575690][ T3771] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1885.585634][ T3771] usb 5-1: config 0 has no interfaces? [ 1885.590881][ T3771] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1885.599871][ T3771] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1885.608149][ T3771] usb 5-1: config 0 descriptor?? [ 1885.635671][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1885.647572][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1885.657141][ T6] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1885.669741][ T6] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 1885.678565][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1885.686966][ T6] usb 3-1: config 0 descriptor?? [ 1885.756062][T21491] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 117 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1885.835618][ T324] usb 4-1: device descriptor read/64, error -71 [ 1886.168048][T21491] usb 2-1: USB disconnect, device number 117 [ 1886.196792][T21491] usblp0: removed [ 1886.207216][T23581] Bluetooth: hci0: Frame reassembly failed (-84) [ 1886.216095][T25810] FAULT_INJECTION: forcing a failure. [ 1886.216095][T25810] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1886.229062][T25810] CPU: 0 PID: 25810 Comm: syz.0.6124 Tainted: G W 6.1.99-syzkaller-00010-gd41d398db683 #0 [ 1886.240159][T25810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1886.250143][T25810] Call Trace: [ 1886.253259][T25810] [ 1886.256039][T25810] dump_stack_lvl+0x151/0x1b7 [ 1886.260553][T25810] ? nf_tcp_handle_invalid+0x3f1/0x3f1 [ 1886.265845][T25810] dump_stack+0x15/0x1b [ 1886.269837][T25810] should_fail_ex+0x3d0/0x520 [ 1886.274350][T25810] should_fail+0xb/0x10 [ 1886.278345][T25810] should_fail_usercopy+0x1a/0x20 [ 1886.283203][T25810] _copy_to_user+0x1e/0x90 [ 1886.287461][T25810] simple_read_from_buffer+0xc7/0x150 [ 1886.292665][T25810] proc_fail_nth_read+0x1a3/0x210 [ 1886.297527][T25810] ? proc_fault_inject_write+0x390/0x390 [ 1886.303167][T25810] ? fsnotify_perm+0x269/0x5b0 [ 1886.307767][T25810] ? security_file_permission+0x86/0xb0 [ 1886.313149][T25810] ? proc_fault_inject_write+0x390/0x390 [ 1886.318641][T25810] vfs_read+0x26c/0xae0 [ 1886.322608][T25810] ? kernel_read+0x1f0/0x1f0 [ 1886.327033][T25810] ? mutex_lock+0xb1/0x1e0 [ 1886.331319][T25810] ? bit_wait_io_timeout+0x120/0x120 [ 1886.336409][T25810] ? __fdget_pos+0x2e2/0x390 [ 1886.340832][T25810] ? ksys_read+0x77/0x2c0 [ 1886.345004][T25810] ksys_read+0x199/0x2c0 [ 1886.349169][T25810] ? vfs_write+0xed0/0xed0 [ 1886.353420][T25810] __x64_sys_read+0x7b/0x90 [ 1886.357759][T25810] x64_sys_call+0x28/0x9a0 [ 1886.362045][T25810] do_syscall_64+0x3b/0xb0 [ 1886.366265][T25810] ? clear_bhb_loop+0x55/0xb0 [ 1886.370785][T25810] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1886.376511][T25810] RIP: 0033:0x7fe796b7ca3c [ 1886.380757][T25810] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 1886.400199][T25810] RSP: 002b:00007fe7979ed030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1886.408445][T25810] RAX: ffffffffffffffda RBX: 00007fe796d35f80 RCX: 00007fe796b7ca3c [ 1886.416258][T25810] RDX: 000000000000000f RSI: 00007fe7979ed0a0 RDI: 0000000000000006 [ 1886.424066][T25810] RBP: 00007fe7979ed090 R08: 0000000000000000 R09: 0000000000000000 [ 1886.431879][T25810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1886.439688][T25810] R13: 0000000000000000 R14: 00007fe796d35f80 R15: 00007fff4db288b8 [ 1886.447505][T25810] [ 1886.465667][ T6] usbhid 3-1:0.0: can't add hid device: -71 [ 1886.471483][ T6] usbhid: probe of 3-1:0.0 failed with error -71 [ 1886.478167][ T6] usb 3-1: USB disconnect, device number 112 [ 1886.655614][ T324] usb 4-1: device descriptor read/64, error -71 [ 1886.725613][T23919] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1886.920214][T25817] loop2: detected capacity change from 0 to 512 [ 1886.926354][ T324] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1886.965646][T23919] usb 1-1: Using ep0 maxpacket: 32 [ 1887.085685][T23919] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1887.095672][T23919] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1887.108323][T23919] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1887.117133][T23919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1887.125375][T23919] usb 1-1: config 0 descriptor?? [ 1887.165918][T23919] hub 1-1:0.0: bad descriptor, ignoring hub [ 1887.171660][T23919] hub: probe of 1-1:0.0 failed with error -5 [ 1887.177691][T23919] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1887.195692][ T324] usb 4-1: device descriptor read/64, error -71 [ 1887.480626][T17845] usb 5-1: USB disconnect, device number 21 [ 1887.585659][ T324] usb 4-1: device descriptor read/64, error -71 [ 1887.823575][ T324] usb usb4-port1: attempt power cycle [ 1888.000508][T25578] EXT4-fs (loop3): unmounting filesystem. [ 1888.125629][T17845] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1888.167198][T25824] fuse: Unknown parameter 'ÿ01777777777777777777777' [ 1888.235602][T20215] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1888.730430][T17845] usb 3-1: Using ep0 maxpacket: 32 [ 1888.755639][ T324] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1888.865787][T17845] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1888.865828][ T324] usb 4-1: Using ep0 maxpacket: 16 [ 1888.881200][T17845] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1888.896091][T17845] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1888.905396][T17845] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1888.917553][T17845] usb 3-1: config 0 descriptor?? [ 1888.967973][T17845] hub 3-1:0.0: bad descriptor, ignoring hub [ 1888.973886][T17845] hub: probe of 3-1:0.0 failed with error -5 [ 1888.982371][T17845] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1889.049102][ T324] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1889.060076][ T324] usb 4-1: config 0 has no interfaces? [ 1889.065513][ T324] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1889.075412][ T324] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1889.673847][ T324] usb 4-1: config 0 descriptor?? [ 1889.786147][T17845] usb 1-1: reset high-speed USB device number 19 using dummy_hcd [ 1889.968331][T25847] fuse: Unknown parameter 'ÿ01777777777777777777777' [ 1890.495655][T10252] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1890.885700][T10252] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1890.896479][T10252] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1890.905962][T10252] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1890.918580][T10252] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 1890.927404][T10252] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1890.935635][T10252] usb 2-1: config 0 descriptor?? [ 1890.987968][T25858] netlink: 'syz.2.6137': attribute type 1 has an invalid length. [ 1891.143512][T25856] fuse: Unknown parameter 'ÿ01777777777777777777777' [ 1891.237002][T23919] usb 4-1: USB disconnect, device number 27 [ 1891.244953][T25862] loop3: detected capacity change from 0 to 512 [ 1891.275814][ T324] usb 3-1: reset high-speed USB device number 113 using dummy_hcd [ 1891.645685][T10252] usbhid 2-1:0.0: can't add hid device: -71 [ 1891.651508][T10252] usbhid: probe of 2-1:0.0 failed with error -71 [ 1891.658174][T10252] usb 2-1: USB disconnect, device number 118 [ 1891.985609][T21491] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1892.225622][T21491] usb 5-1: Using ep0 maxpacket: 32 [ 1892.345643][T21491] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1892.355820][T21491] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1892.368727][T10252] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1892.376338][T21491] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1892.385157][T21491] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1892.393505][T21491] usb 5-1: config 0 descriptor?? [ 1892.435951][T21491] hub 5-1:0.0: bad descriptor, ignoring hub [ 1892.441669][T21491] hub: probe of 5-1:0.0 failed with error -5 [ 1892.447723][T21491] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1892.625608][T10252] usb 4-1: Using ep0 maxpacket: 32 [ 1892.745889][T10252] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1892.756340][T10252] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1892.769530][T10252] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1892.778657][T10252] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1892.784837][ T324] usb 1-1: USB disconnect, device number 19 [ 1892.787220][T10252] usb 4-1: config 0 descriptor?? [ 1892.810944][T25877] fuse: Unknown parameter 'ÿ01777777777777777777777' [ 1892.835923][T10252] hub 4-1:0.0: bad descriptor, ignoring hub [ 1892.841687][T10252] hub: probe of 4-1:0.0 failed with error -5 [ 1892.847972][T10252] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1893.205611][T10252] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1893.396235][T25886] fuse: Unknown parameter 'ÿ01777777777777777777777' [ 1893.455605][T10252] usb 2-1: Using ep0 maxpacket: 32 [ 1893.575638][T10252] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1893.585623][T10252] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1893.598267][T10252] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1893.607157][T10252] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1893.615338][T10252] usb 2-1: config 0 descriptor?? [ 1893.655924][T10252] hub 2-1:0.0: bad descriptor, ignoring hub [ 1893.661648][T10252] hub: probe of 2-1:0.0 failed with error -5 [ 1893.667772][T10252] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1893.675628][ T525] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1893.797482][T25890] fuse: Unknown parameter 'ÿ01777777777777777777777' [ 1893.916583][ T525] usb 1-1: Using ep0 maxpacket: 32 [ 1894.055751][ T525] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 1894.063928][ T525] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1894.072360][ T525] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1894.081319][ T525] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1894.090767][ T525] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1894.100331][ T525] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1894.113344][ T525] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1894.122597][ T525] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1894.132212][T10252] usb 3-1: USB disconnect, device number 113 [ 1894.147169][ T525] usb 1-1: config 0 descriptor?? [ 1894.406005][ T525] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1894.608893][ T525] usb 1-1: USB disconnect, device number 20 [ 1894.615808][T25896] fuse: Unknown parameter 'ÿ01777777777777777777777' [ 1894.616530][ T525] usblp0: removed [ 1894.627298][ T450] Bluetooth: hci0: Frame reassembly failed (-84) [ 1894.864605][T25902] netlink: 'syz.2.6149': attribute type 1 has an invalid length. [ 1895.055711][T10252] usb 5-1: reset high-speed USB device number 22 using dummy_hcd [ 1895.415787][ T324] usb 4-1: reset high-speed USB device number 28 using dummy_hcd [ 1895.455655][ T324] usb 4-1: device reset changed ep0 maxpacket size! [ 1895.462220][ T324] usb 4-1: USB disconnect, device number 28 [ 1895.825608][ T324] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1896.005697][T23919] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1896.205642][ T324] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1896.216403][ T324] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1896.225896][ T324] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1896.238644][ T324] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 1896.245750][T10252] usb 2-1: reset high-speed USB device number 119 using dummy_hcd [ 1896.247688][ T324] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1896.263577][ T324] usb 4-1: config 0 descriptor?? [ 1896.295707][T10252] usb 2-1: device reset changed ep0 maxpacket size! [ 1896.302285][T10252] usb 2-1: USB disconnect, device number 119 [ 1896.370226][T25915] fuse: Unknown parameter 'ÿ01777777777777777777777' [ 1896.405644][T23919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1896.416403][T23919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1896.426016][T23919] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1896.438620][T23919] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 1896.447460][T23919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1896.455754][T23919] usb 3-1: config 0 descriptor?? [ 1896.635614][T20205] Bluetooth: hci0: command 0x1003 tx timeout [ 1896.635624][T20215] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1896.655637][T10252] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1896.805675][ T324] usbhid 4-1:0.0: can't add hid device: -71 [ 1896.811437][ T324] usbhid: probe of 4-1:0.0 failed with error -71 [ 1896.818641][ T324] usb 4-1: USB disconnect, device number 29 [ 1896.935659][ T525] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1897.005650][T23919] usbhid 3-1:0.0: can't add hid device: -71 [ 1897.011436][T23919] usbhid: probe of 3-1:0.0 failed with error -71 [ 1897.015673][T10252] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1897.018295][T23919] usb 3-1: USB disconnect, device number 114 [ 1897.036750][T10252] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1897.046353][T10252] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1897.059085][T10252] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 1897.067949][T10252] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1897.077009][T10252] usb 2-1: config 0 descriptor?? [ 1897.175602][ T525] usb 1-1: Using ep0 maxpacket: 16 [ 1897.295674][ T525] usb 1-1: config index 0 descriptor too short (expected 81, got 50) [ 1897.375680][ T525] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1897.384666][ T525] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1897.392462][ T525] usb 1-1: SerialNumber: syz [ 1897.435851][ T525] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 1897.443488][ T525] cdc_acm 1-1:1.0: This needs exactly 3 endpoints [ 1897.449905][ T525] cdc_acm: probe of 1-1:1.0 failed with error -22 [ 1897.555605][T23919] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1897.615750][T10252] usbhid 2-1:0.0: can't add hid device: -71 [ 1897.621974][T10252] usbhid: probe of 2-1:0.0 failed with error -71 [ 1897.632788][T10252] usb 2-1: USB disconnect, device number 120 [ 1897.815713][T23919] usb 4-1: Using ep0 maxpacket: 32 [ 1897.875997][ T525] usb 5-1: USB disconnect, device number 22 [ 1898.063721][T25936] loop1: detected capacity change from 0 to 512 [ 1898.145678][T23919] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1898.155717][T23919] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1898.168660][T23919] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1898.177735][T23919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1898.186256][T23919] usb 4-1: config 0 descriptor?? [ 1898.196515][ T525] usb 1-1: USB disconnect, device number 21 [ 1898.226167][T23919] hub 4-1:0.0: bad descriptor, ignoring hub [ 1898.231988][T23919] hub: probe of 4-1:0.0 failed with error -5 [ 1898.239184][T23919] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1898.435657][T10252] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1898.675633][T10252] usb 2-1: Using ep0 maxpacket: 16 [ 1898.765643][ T525] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1898.795657][T10252] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1898.805713][T10252] usb 2-1: config 0 has no interfaces? [ 1898.811005][T10252] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1898.820107][T10252] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1898.828455][T10252] usb 2-1: config 0 descriptor?? [ 1898.885659][T17845] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1899.005609][ T525] usb 3-1: Using ep0 maxpacket: 32 [ 1899.165625][ T525] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1899.175754][T17845] usb 5-1: Using ep0 maxpacket: 32 [ 1899.180657][ T525] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1899.894808][T25948] fuse: Unknown parameter 'ÿ01777777777777777777777' [ 1900.010801][ T525] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1900.034314][ T28] audit: type=1400 audit(1728759362.732:1020): avc: denied { getopt } for pid=25957 comm="syz.0.6167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1900.085742][T17845] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1900.100312][ T28] audit: type=1400 audit(1728759362.782:1021): avc: denied { ioctl } for pid=25957 comm="syz.0.6167" path="socket:[123142]" dev="sockfs" ino=123142 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1900.103348][ T525] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1900.127431][ T28] audit: type=1400 audit(1728759362.782:1022): avc: denied { map } for pid=25957 comm="syz.0.6167" path="socket:[123142]" dev="sockfs" ino=123142 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1900.135097][T17845] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1900.160206][ T28] audit: type=1400 audit(1728759362.782:1023): avc: denied { read accept } for pid=25957 comm="syz.0.6167" path="socket:[123142]" dev="sockfs" ino=123142 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1900.170662][ T525] usb 3-1: config 0 descriptor?? [ 1900.198083][T17845] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1900.206940][T17845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1900.225376][T17845] usb 5-1: config 0 descriptor?? [ 1900.266407][ T525] hub 3-1:0.0: bad descriptor, ignoring hub [ 1900.272145][ T525] hub: probe of 3-1:0.0 failed with error -5 [ 1900.278486][T17845] hub 5-1:0.0: bad descriptor, ignoring hub [ 1900.284190][T17845] hub: probe of 5-1:0.0 failed with error -5 [ 1900.290355][T17845] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1900.297703][ T525] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1900.520708][T25965] overlayfs: failed to resolve './file0': -2 [ 1901.099549][T25971] loop3: detected capacity change from 0 to 512 [ 1901.188932][ T525] usb 2-1: USB disconnect, device number 121 [ 1901.195709][ T324] usb 4-1: USB disconnect, device number 30 [ 1901.417483][T25966] fuse: Unknown parameter 'ÿ01777777777777777777777' [ 1901.448811][T25968] fuse: Unknown parameter 'ÿ01777777777777777777777' [ 1901.485640][T23919] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1901.675631][ T525] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1901.725631][T23919] usb 1-1: Using ep0 maxpacket: 32 [ 1901.845677][T23919] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1901.855870][T23919] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1901.868517][T23919] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1901.877331][T23919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1901.885477][T23919] usb 1-1: config 0 descriptor?? [ 1901.925961][T23919] hub 1-1:0.0: bad descriptor, ignoring hub [ 1901.932089][T23919] hub: probe of 1-1:0.0 failed with error -5 [ 1901.938238][T23919] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1901.959222][T25980] loop3: detected capacity change from 0 to 512 [ 1902.095666][ T525] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1902.106524][ T525] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1902.116078][ T525] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1902.128635][ T525] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 1902.137513][ T525] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1902.147099][ T525] usb 2-1: config 0 descriptor?? [ 1902.695632][ T525] usbhid 2-1:0.0: can't add hid device: -71 [ 1902.701412][ T525] usbhid: probe of 2-1:0.0 failed with error -71 [ 1902.708229][ T525] usb 2-1: USB disconnect, device number 122 [ 1902.725697][ T6] usb 3-1: reset high-speed USB device number 115 using dummy_hcd [ 1902.755691][T23919] usb 5-1: reset high-speed USB device number 23 using dummy_hcd [ 1902.795636][T23919] usb 5-1: device reset changed ep0 maxpacket size! [ 1902.802164][T23919] usb 5-1: USB disconnect, device number 23 [ 1902.884218][T25990] fuse: Unknown parameter 'ÿ01777777777777777777777' [ 1902.914254][T25995] netlink: 'syz.3.6178': attribute type 1 has an invalid length. [ 1903.155619][T23919] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1903.215634][ T324] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1903.385633][ T525] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1903.475648][ T324] usb 4-1: Using ep0 maxpacket: 16 [ 1903.545669][T23919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1903.556436][T23919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1903.565999][T23919] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1903.574768][T23919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1903.583026][T23919] usb 5-1: config 0 descriptor?? [ 1903.605655][ T324] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1903.616482][ T324] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1903.625595][ T525] usb 2-1: Using ep0 maxpacket: 32 [ 1903.626623][ T324] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1903.643655][ T324] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 1903.652520][ T324] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1903.660687][ T324] usb 4-1: config 0 descriptor?? [ 1903.745663][ T525] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1903.755739][ T525] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1903.768400][ T525] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1903.777193][ T525] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1903.785520][ T525] usb 2-1: config 0 descriptor?? [ 1903.825926][ T525] hub 2-1:0.0: bad descriptor, ignoring hub [ 1903.831722][ T525] hub: probe of 2-1:0.0 failed with error -5 [ 1903.837729][ T525] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1904.047763][T25989] loop4: detected capacity change from 0 to 512 [ 1904.054264][T25989] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1904.064848][T25989] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 1904.072664][T25989] System zones: 1-12 [ 1904.077445][T25989] EXT4-fs (loop4): 1 truncate cleaned up [ 1904.082898][T25989] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1904.093539][T25989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1904.101811][T25989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1904.136529][ T324] koneplus 0003:1E7D:2E22.0222: unknown main item tag 0x0 [ 1904.144209][ T324] koneplus 0003:1E7D:2E22.0222: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.3-1/input0 [ 1904.185627][T23919] usbhid 5-1:0.0: can't add hid device: -71 [ 1904.191380][T23919] usbhid: probe of 5-1:0.0 failed with error -71 [ 1904.198198][T23919] usb 5-1: USB disconnect, device number 24 [ 1904.225715][ T6] usb 1-1: USB disconnect, device number 22 [ 1904.343988][T25999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1904.352333][T25999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1904.385731][T26011] overlayfs: failed to resolve './file0': -2 [ 1904.617387][T22831] EXT4-fs (loop4): unmounting filesystem. [ 1904.662230][T23919] usb 4-1: USB disconnect, device number 31 [ 1904.837303][T26012] fuse: Unknown parameter 'ÿ01777777777777777777777' [ 1904.895612][T10252] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1905.135606][T10252] usb 5-1: Using ep0 maxpacket: 32 [ 1905.176639][T26022] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6186'. [ 1905.255648][T10252] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1905.265652][T10252] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1905.278315][T10252] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1905.287164][T10252] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1905.295491][T10252] usb 5-1: config 0 descriptor?? [ 1905.300297][T21491] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1905.345921][T10252] hub 5-1:0.0: bad descriptor, ignoring hub [ 1905.351822][T10252] hub: probe of 5-1:0.0 failed with error -5 [ 1905.358206][T10252] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1905.465636][T23919] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 1905.545632][T21491] usb 1-1: Using ep0 maxpacket: 32 [ 1905.555675][T10252] usb 3-1: USB disconnect, device number 115 [ 1905.665687][T21491] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1905.676073][T21491] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1905.690532][T21491] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1905.699396][T21491] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1905.707637][T21491] usb 1-1: config 0 descriptor?? [ 1905.745889][T21491] hub 1-1:0.0: bad descriptor, ignoring hub [ 1905.751608][T21491] hub: probe of 1-1:0.0 failed with error -5 [ 1905.757651][T21491] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1905.905637][T23919] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1905.945625][T23919] usb 4-1: not running at top speed; connect to a high speed hub [ 1906.035674][T23919] usb 4-1: config 2 has an invalid interface number: 212 but max is 1 [ 1906.043655][T23919] usb 4-1: config 2 has an invalid interface number: 226 but max is 1 [ 1906.051756][T23919] usb 4-1: config 2 has no interface number 0 [ 1906.057653][T23919] usb 4-1: config 2 has no interface number 1 [ 1906.063560][T23919] usb 4-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1906.074236][T23919] usb 4-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 1906.084934][T23919] usb 4-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64 [ 1906.096001][T23919] usb 4-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1906.105636][T23919] usb 4-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1906.118517][T23919] usb 4-1: config 2 interface 212 has no altsetting 0 [ 1906.348787][T26028] fuse: Unknown parameter 'ÿ01777777777777777777777' [ 1906.437595][ T324] usb 2-1: USB disconnect, device number 123 [ 1906.485748][T23919] usb 4-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 1906.494896][T23919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1906.502739][T23919] usb 4-1: Product: syz [ 1906.506703][T23919] usb 4-1: Manufacturer: syz [ 1906.511138][T23919] usb 4-1: SerialNumber: syz [ 1906.779876][T26035] fuse: Unknown parameter 'ÿ01777777777777777777777' [ 1906.793142][T26022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6186'. [ 1906.926155][T23919] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:2.226/input/input192 [ 1906.937287][T23919] usb 4-1: USB disconnect, device number 32 [ 1906.999283][T26044] loop1: detected capacity change from 0 to 1024 [ 1907.017226][T26044] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1907.025622][T26044] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038 (0x7fffffff) [ 1907.041148][T22734] EXT4-fs (loop1): unmounting filesystem. [ 1907.317303][ T324] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1907.585600][ T324] usb 2-1: Using ep0 maxpacket: 32 [ 1907.585605][T17845] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1907.642825][T26061] loop4: detected capacity change from 0 to 1024 [ 1907.649194][T26061] EXT4-fs: Ignoring removed nobh option [ 1907.654911][T26061] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 1907.664307][T26061] EXT4-fs (loop4): can't mount with commit=69, fs mounted w/o journal [ 1907.700359][T26061] fuse: Bad value for 'rootmode' [ 1907.706673][T26061] loop4: detected capacity change from 0 to 256 [ 1907.715057][T26061] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001023f, chksum : 0x0e440cfe, utbl_chksum : 0xe619d30d) [ 1907.727022][ T324] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 1907.735238][ T324] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1907.743657][ T324] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1907.752463][ T324] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1907.761965][ T324] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1907.771403][ T324] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1907.784155][ T324] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1907.793025][ T324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1907.801244][ T324] usb 2-1: config 0 descriptor?? [ 1907.945651][T17845] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1907.956413][T17845] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1907.965905][T17845] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1907.974772][T17845] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1907.983060][T17845] usb 3-1: config 0 descriptor?? [ 1907.995855][ T3771] usb 5-1: reset high-speed USB device number 25 using dummy_hcd [ 1908.035660][ T3771] usb 5-1: device reset changed ep0 maxpacket size! [ 1908.042429][ T3771] usb 5-1: USB disconnect, device number 25 [ 1908.056223][ T324] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 124 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1908.155951][T10252] usb 1-1: USB disconnect, device number 23 [ 1908.268816][T23581] Bluetooth: hci0: Frame reassembly failed (-84) [ 1908.275875][T23581] Bluetooth: hci0: Frame reassembly failed (-84) [ 1908.533184][T26057] loop2: detected capacity change from 0 to 512 [ 1908.597992][T26068] loop3: detected capacity change from 0 to 512 [ 1908.607873][T26057] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1908.627025][T26057] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 1908.635448][T26057] System zones: 1-12 [ 1908.644656][T26057] EXT4-fs (loop2): 1 truncate cleaned up [ 1908.651828][T26057] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1908.674585][T26057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1908.683745][T26057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1908.765826][T17845] usbhid 3-1:0.0: can't add hid device: -71 [ 1908.807303][T17845] usbhid: probe of 3-1:0.0 failed with error -71 [ 1908.845231][T17845] usb 3-1: USB disconnect, device number 116 [ 1909.223069][ T324] usb 2-1: USB disconnect, device number 124 [ 1909.230139][T18269] EXT4-fs (loop2): unmounting filesystem. [ 1909.236253][ T324] usblp0: removed [ 1909.485586][ T3771] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1909.515657][T17845] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1909.725614][ T3771] usb 5-1: Using ep0 maxpacket: 16 [ 1909.756367][T17845] usb 3-1: Using ep0 maxpacket: 32 [ 1909.865630][ T3771] usb 5-1: config index 0 descriptor too short (expected 81, got 50) [ 1909.875733][T17845] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1909.885717][T17845] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1909.898365][T17845] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1909.907156][T17845] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1909.915344][T17845] usb 3-1: config 0 descriptor?? [ 1909.945662][ T3771] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1909.954578][ T3771] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1909.956046][T17845] hub 3-1:0.0: bad descriptor, ignoring hub [ 1909.962669][ T3771] usb 5-1: SerialNumber: syz [ 1909.968180][T17845] hub: probe of 3-1:0.0 failed with error -5 [ 1909.978535][T17845] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1910.016227][ T3771] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 1910.023985][ T3771] cdc_acm 5-1:1.0: This needs exactly 3 endpoints [ 1910.030197][ T3771] cdc_acm: probe of 5-1:1.0 failed with error -22 [ 1910.315659][T20215] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1910.315672][T20205] Bluetooth: hci0: command 0x1003 tx timeout [ 1910.334422][T26085] loop1: detected capacity change from 0 to 512 [ 1910.385630][ T3771] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1910.973246][T17845] usb 5-1: USB disconnect, device number 26 [ 1911.082465][T26091] syz.4.6203[26091] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1911.082563][T26091] syz.4.6203[26091] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1911.448367][ T3771] usb 4-1: Using ep0 maxpacket: 16 [ 1911.655605][T17845] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1911.658117][ T3771] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1911.673208][ T3771] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1911.682006][ T3771] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1911.690827][ T3771] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1911.699119][ T3771] usb 4-1: config 0 descriptor?? [ 1911.905626][T17845] usb 2-1: Using ep0 maxpacket: 32 [ 1912.025697][T17845] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1912.035955][T17845] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1912.048680][T17845] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1912.057512][T17845] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1912.065790][T17845] usb 2-1: config 0 descriptor?? [ 1912.105913][T17845] hub 2-1:0.0: bad descriptor, ignoring hub [ 1912.111673][T17845] hub: probe of 2-1:0.0 failed with error -5 [ 1912.117818][T17845] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1912.225628][ T3771] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1912.262530][T26108] loop2: detected capacity change from 0 to 512 [ 1912.375725][T23919] usb 3-1: USB disconnect, device number 117 [ 1912.505601][ T6] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1912.595654][ T3771] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1912.606348][ T3771] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1912.615975][ T3771] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1912.628842][ T3771] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 1912.637688][ T3771] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1912.645979][ T3771] usb 1-1: config 0 descriptor?? [ 1912.725657][T23919] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1912.925650][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1912.936415][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1912.945906][ T6] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1912.954731][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1912.963168][ T6] usb 5-1: config 0 descriptor?? [ 1913.061312][T26120] fuse: Unknown parameter 'ÿ01777777777777777777777' [ 1913.105667][T23919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1913.116433][T23919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1913.126010][T23919] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1913.138653][T23919] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 1913.147470][T23919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1913.155792][T23919] usb 3-1: config 0 descriptor?? [ 1913.385697][ T3771] usbhid 1-1:0.0: can't add hid device: -71 [ 1913.391639][ T3771] usbhid: probe of 1-1:0.0 failed with error -71 [ 1913.399080][ T3771] usb 1-1: USB disconnect, device number 24 [ 1913.428581][T26106] loop4: detected capacity change from 0 to 512 [ 1913.435235][T26106] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1913.445818][T26106] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 1913.453630][T26106] System zones: 1-12 [ 1913.458224][T26106] EXT4-fs (loop4): 1 truncate cleaned up [ 1913.463673][T26106] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1913.474358][T26106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1913.482709][T26106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1913.565709][ T6] usbhid 5-1:0.0: can't add hid device: -71 [ 1913.571505][ T6] usbhid: probe of 5-1:0.0 failed with error -71 [ 1913.578446][ T6] usb 5-1: USB disconnect, device number 27 [ 1913.677364][T17845] usb 4-1: USB disconnect, device number 33 [ 1913.688330][T26125] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6212'. [ 1913.697264][T23919] usbhid 3-1:0.0: can't add hid device: -71 [ 1913.702997][T23919] usbhid: probe of 3-1:0.0 failed with error -71 [ 1913.709792][T23919] usb 3-1: USB disconnect, device number 118 [ 1914.034998][T22831] EXT4-fs (loop4): unmounting filesystem. [ 1914.075775][T17845] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 1917.093644][T26148] loop3: detected capacity change from 0 to 512 [ 1917.175698][T23919] usb 2-1: USB disconnect, device number 125 [ 1917.351791][ T3771] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1917.555623][T17845] usb 4-1: device not accepting address 34, error -71 [ 1917.895665][ T3771] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1917.906467][ T3771] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1917.931919][ T3771] usb 3-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 1917.940825][ T3771] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1917.955966][ T3771] usb 3-1: config 0 descriptor?? [ 1918.365609][ T525] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1918.675638][T17845] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1918.695693][ T3771] usbhid 3-1:0.0: can't add hid device: -71 [ 1918.701540][ T3771] usbhid: probe of 3-1:0.0 failed with error -71 [ 1918.708296][ T3771] usb 3-1: USB disconnect, device number 119 [ 1918.725687][ T525] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1918.736599][ T525] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1918.746371][ T525] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1918.755168][ T525] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1918.763438][ T525] usb 5-1: config 0 descriptor?? [ 1918.857967][T26169] loop1: detected capacity change from 0 to 512 [ 1918.864548][T26169] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1918.872641][T26169] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:164: inode #12: comm syz.1.6226: inline data xattr refers to an external xattr inode [ 1918.887597][T26169] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.6226: couldn't read orphan inode 12 (err -117) [ 1918.899560][T26169] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1919.055779][T17845] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1919.077406][T17845] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1919.104702][T17845] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1919.125656][T17845] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 1919.134935][T17845] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1919.148843][T17845] usb 4-1: config 0 descriptor?? [ 1919.172406][T26177] loop2: detected capacity change from 0 to 1024 [ 1919.179480][T26177] EXT4-fs: Mount option(s) incompatible with ext2 [ 1919.232083][T26164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1919.240619][T26164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1919.315761][ T525] usbhid 5-1:0.0: can't add hid device: -71 [ 1919.322060][ T525] usbhid: probe of 5-1:0.0 failed with error -71 [ 1919.331135][ T525] usb 5-1: USB disconnect, device number 28 [ 1919.363280][T26179] syz.2.6227[26179] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1919.363568][T26179] syz.2.6227[26179] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1919.743560][T22734] EXT4-fs (loop1): unmounting filesystem. [ 1919.760531][T17845] usbhid 4-1:0.0: can't add hid device: -71 [ 1919.766354][T17845] usbhid: probe of 4-1:0.0 failed with error -71 [ 1919.773193][T17845] usb 4-1: USB disconnect, device number 35 [ 1919.780978][T26183] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6228'. [ 1920.145689][ T525] usb 2-1: new full-speed USB device number 126 using dummy_hcd [ 1920.545630][ T525] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1920.585698][ T525] usb 2-1: not running at top speed; connect to a high speed hub [ 1920.656368][T11798] device bridge_slave_1 left promiscuous mode [ 1920.662372][T11798] bridge0: port 2(bridge_slave_1) entered disabled state [ 1920.669756][T11798] device bridge_slave_0 left promiscuous mode [ 1920.675786][T11798] bridge0: port 1(bridge_slave_0) entered disabled state [ 1920.685832][ T525] usb 2-1: config 2 has an invalid interface number: 212 but max is 1 [ 1920.704462][ T525] usb 2-1: config 2 has an invalid interface number: 226 but max is 1 [ 1920.712754][ T525] usb 2-1: config 2 has no interface number 0 [ 1920.718824][ T525] usb 2-1: config 2 has no interface number 1 [ 1920.724740][ T525] usb 2-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1920.735419][ T525] usb 2-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 1920.746054][ T525] usb 2-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64 [ 1920.756958][ T525] usb 2-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1920.766561][ T525] usb 2-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1920.779416][ T525] usb 2-1: config 2 interface 212 has no altsetting 0 [ 1920.965647][ T525] usb 2-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 1920.974522][ T525] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1920.982368][ T525] usb 2-1: Product: syz [ 1920.986314][ T525] usb 2-1: Manufacturer: syz [ 1920.990745][ T525] usb 2-1: SerialNumber: syz [ 1921.292918][T26209] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6228'. [ 1921.395630][ T3423] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1921.403137][ T3771] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1921.466153][ T525] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:2.226/input/input193 [ 1921.477215][ T525] usb 2-1: USB disconnect, device number 126 [ 1921.755670][ T3423] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1921.766488][ T3771] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 255, changing to 11 [ 1921.777415][ T3423] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1921.787040][ T3771] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 59391, setting to 1024 [ 1921.797890][ T3423] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1921.810524][ T3423] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 1921.819326][ T3423] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1921.827658][ T3423] usb 1-1: config 0 descriptor?? [ 1921.965692][ T3771] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1921.974537][ T3771] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1921.982385][ T3771] usb 5-1: Product: syz [ 1921.986374][ T3771] usb 5-1: Manufacturer: syz [ 1921.990765][ T3771] usb 5-1: SerialNumber: syz [ 1921.995751][ T3771] usb 5-1: config 0 descriptor?? [ 1922.015670][T26203] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1922.565662][ T3423] usbhid 1-1:0.0: can't add hid device: -71 [ 1922.571410][ T3423] usbhid: probe of 1-1:0.0 failed with error -71 [ 1922.578138][ T3423] usb 1-1: USB disconnect, device number 25 [ 1922.705604][ T6] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1922.713034][T23919] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1922.955603][ T6] usb 4-1: Using ep0 maxpacket: 32 [ 1922.960594][T23919] usb 2-1: Using ep0 maxpacket: 32 [ 1923.075685][ T6] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1923.085659][T23919] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1923.095482][T23919] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1923.108513][ T6] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1923.121283][ T6] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1923.130076][T23919] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1923.138926][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1923.146727][T23919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1923.155228][ T6] usb 4-1: config 0 descriptor?? [ 1923.160182][T23919] usb 2-1: config 0 descriptor?? [ 1923.196037][ T6] hub 4-1:0.0: bad descriptor, ignoring hub [ 1923.201762][ T6] hub: probe of 4-1:0.0 failed with error -5 [ 1923.207933][T23919] hub 2-1:0.0: bad descriptor, ignoring hub [ 1923.213635][T23919] hub: probe of 2-1:0.0 failed with error -5 [ 1923.219706][ T6] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1923.226997][T23919] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1924.147202][ T3771] usb 5-1: USB disconnect, device number 29 [ 1924.320050][T26235] loop4: detected capacity change from 0 to 40427 [ 1924.326927][T26235] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1924.334565][T26235] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1924.343287][T26235] F2FS-fs (loop4): invalid crc value [ 1924.349864][T26235] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1924.387467][T26235] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1924.394477][T26235] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1925.021467][T11798] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1925.030701][T11798] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1925.179988][T26248] loop4: detected capacity change from 0 to 512 [ 1925.615912][ T6] usb 2-1: USB disconnect, device number 127 [ 1925.625665][ T733] usb 4-1: USB disconnect, device number 36 [ 1926.345765][T26255] netlink: 'syz.0.6245': attribute type 1 has an invalid length. [ 1926.605629][T23919] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1926.845637][T23919] usb 5-1: Using ep0 maxpacket: 16 [ 1926.965695][T23919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1926.976397][T23919] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1926.985938][T23919] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1926.998639][T23919] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 1927.007656][T23919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1927.015935][T23919] usb 5-1: config 0 descriptor?? [ 1927.496113][T23919] koneplus 0003:1E7D:2E22.0223: unknown main item tag 0x0 [ 1927.503517][T23919] koneplus 0003:1E7D:2E22.0223: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.4-1/input0 [ 1927.554628][T26264] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6249'. [ 1927.567560][T26266] loop1: detected capacity change from 0 to 512 [ 1927.697425][T26259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1929.985751][ T733] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 1929.996283][T26259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1930.299155][T23919] usb 5-1: USB disconnect, device number 30 [ 1930.405632][ T733] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1930.445627][ T733] usb 1-1: not running at top speed; connect to a high speed hub [ 1930.525714][ T733] usb 1-1: config 2 has an invalid interface number: 212 but max is 1 [ 1930.533732][ T733] usb 1-1: config 2 has an invalid interface number: 226 but max is 1 [ 1930.541749][ T733] usb 1-1: config 2 has no interface number 0 [ 1930.547612][ T733] usb 1-1: config 2 has no interface number 1 [ 1930.553505][ T733] usb 1-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1930.564248][ T733] usb 1-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 1930.574726][ T733] usb 1-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64 [ 1930.585669][ T733] usb 1-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1930.595260][ T733] usb 1-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1930.608148][ T733] usb 1-1: config 2 interface 212 has no altsetting 0 [ 1930.645652][ T733] usb 1-1: string descriptor 0 read error: -71 [ 1930.651736][ T733] usb 1-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 1930.660583][ T733] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1930.685676][ T733] usb 1-1: can't set config #2, error -71 [ 1930.691571][ T733] usb 1-1: USB disconnect, device number 26 [ 1931.459150][T26279] loop4: detected capacity change from 0 to 1024 [ 1931.465969][T26279] EXT4-fs: Ignoring removed nobh option [ 1931.471783][T26279] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 1931.481678][T26279] EXT4-fs (loop4): can't mount with commit=69, fs mounted w/o journal [ 1931.527915][T26279] fuse: Bad value for 'rootmode' [ 1931.533897][T26279] loop4: detected capacity change from 0 to 256 [ 1931.542405][T26279] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001023f, chksum : 0x0e440cfe, utbl_chksum : 0xe619d30d) [ 1931.615178][T26286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6254'. [ 1931.715584][ T733] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1931.825603][T23919] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1931.955580][ T733] usb 1-1: Using ep0 maxpacket: 32 [ 1932.075891][ T733] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1932.085837][ T733] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1932.095592][T23919] usb 5-1: Using ep0 maxpacket: 16 [ 1932.098763][ T733] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1932.112305][ T733] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1932.120498][ T733] usb 1-1: config 0 descriptor?? [ 1932.158333][ T733] hub 1-1:0.0: bad descriptor, ignoring hub [ 1932.164055][ T733] hub: probe of 1-1:0.0 failed with error -5 [ 1932.170102][ T733] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1932.255628][T23919] usb 5-1: config index 0 descriptor too short (expected 81, got 50) [ 1932.335681][T23919] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1932.344524][T23919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1932.352687][T23919] usb 5-1: SerialNumber: syz [ 1932.405897][T23919] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 1932.413703][T23919] cdc_acm 5-1:1.0: This needs exactly 3 endpoints [ 1932.419916][T23919] cdc_acm: probe of 5-1:1.0 failed with error -22 [ 1933.109437][ T525] usb 5-1: USB disconnect, device number 31 [ 1933.235577][T23919] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1933.495588][T23919] usb 4-1: Using ep0 maxpacket: 32 [ 1933.615647][T23919] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1933.625780][T23919] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1933.638705][T23919] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1933.647504][T23919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1933.655735][T23919] usb 4-1: config 0 descriptor?? [ 1933.695900][T23919] hub 4-1:0.0: bad descriptor, ignoring hub [ 1933.701754][T23919] hub: probe of 4-1:0.0 failed with error -5 [ 1933.707760][T23919] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1934.565679][ T525] usb 1-1: USB disconnect, device number 27 [ 1934.586799][T26307] netlink: 'syz.0.6258': attribute type 1 has an invalid length. [ 1934.875629][ T3423] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1935.135582][ T3423] usb 2-1: Using ep0 maxpacket: 16 [ 1935.255615][ T3423] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1935.266343][ T3423] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1935.275872][ T3423] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1935.288454][ T3423] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 1935.297289][ T3423] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1935.305513][ T3423] usb 2-1: config 0 descriptor?? [ 1935.766155][ T3423] koneplus 0003:1E7D:2E22.0224: unknown main item tag 0x0 [ 1935.773514][ T3423] koneplus 0003:1E7D:2E22.0224: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.1-1/input0 [ 1935.966010][T26306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1935.974496][T26306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1936.095719][ T525] usb 4-1: USB disconnect, device number 37 [ 1936.239045][ T525] usb 2-1: USB disconnect, device number 2 [ 1936.565632][T10252] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1936.925661][T10252] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1936.936410][T10252] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1936.945916][T10252] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1936.958516][T10252] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 1936.967361][T10252] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1936.975631][T10252] usb 4-1: config 0 descriptor?? [ 1937.495686][T10252] usbhid 4-1:0.0: can't add hid device: -71 [ 1937.501449][T10252] usbhid: probe of 4-1:0.0 failed with error -71 [ 1937.508269][T10252] usb 4-1: USB disconnect, device number 38 [ 1938.102711][T26325] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6264'. [ 1939.045603][ T3771] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 1939.053107][ T3423] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1939.435663][ T3423] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1939.446458][ T3423] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1939.456035][ T3423] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1939.468891][ T3423] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 1939.477842][ T3423] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1939.485696][ T3771] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1939.493519][ T3423] usb 4-1: config 0 descriptor?? [ 1939.525633][ T3771] usb 1-1: not running at top speed; connect to a high speed hub [ 1939.605635][ T3771] usb 1-1: config 2 has an invalid interface number: 212 but max is 1 [ 1939.613630][ T3771] usb 1-1: config 2 has an invalid interface number: 226 but max is 1 [ 1939.621637][ T3771] usb 1-1: config 2 has no interface number 0 [ 1939.627598][ T3771] usb 1-1: config 2 has no interface number 1 [ 1939.633493][ T3771] usb 1-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1939.644204][ T3771] usb 1-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 1939.654687][ T3771] usb 1-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64 [ 1939.665641][ T3771] usb 1-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1939.675233][ T3771] usb 1-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1939.688143][ T3771] usb 1-1: config 2 interface 212 has no altsetting 0 [ 1939.865651][ T3771] usb 1-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce [ 1939.874654][ T3771] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1939.882417][ T3771] usb 1-1: Product: syz [ 1939.886445][ T3771] usb 1-1: Manufacturer: syz [ 1939.890811][ T3771] usb 1-1: SerialNumber: syz [ 1940.019701][T26337] loop4: detected capacity change from 0 to 512 [ 1940.026290][T26337] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1940.034227][T26337] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:164: inode #12: comm syz.4.6268: inline data xattr refers to an external xattr inode [ 1940.048993][ T3423] usbhid 4-1:0.0: can't add hid device: -71 [ 1940.050298][T26337] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.6268: couldn't read orphan inode 12 (err -117) [ 1940.054737][ T3423] usbhid: probe of 4-1:0.0 failed with error -71 [ 1940.066866][T26337] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1940.074010][ T3423] usb 4-1: USB disconnect, device number 39 [ 1940.191363][T26325] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6264'. [ 1940.316501][ T3771] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:2.226/input/input194 [ 1940.328354][ T3771] usb 1-1: USB disconnect, device number 28 [ 1940.868503][T22831] EXT4-fs (loop4): unmounting filesystem. SYZFAIL: mmap of output file failed want 0x1b30a20000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b30b20000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b30c20000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b30d20000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b31320000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b31e20000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b32320000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b32920000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b33420000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b2c020000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b2c820000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b2d220000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b2dd20000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b2e020000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b2ee20000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b2f920000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b30320000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b30f20000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b31b20000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: mmap of output file failed want 0x1b32520000, got 0xffffffffffffffff (errno 13: Permission denied) SYZFAIL: repeatedly failed to execute the program proc=2 req=6232 state=1 status=67 (errno 9: Bad file descriptor) [ 1942.045721][ T28] audit: type=1400 audit(1728759404.742:1024): avc: denied { write } for pid=282 comm="syz-executor" path="pipe:[8144]" dev="pipefs" ino=8144 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1943.336064][ T450] device bridge_slave_1 left promiscuous mode [ 1943.341987][ T450] bridge0: port 2(bridge_slave_1) entered disabled state [ 1943.349277][ T450] device bridge_slave_0 left promiscuous mode [ 1943.355216][ T450] bridge0: port 1(bridge_slave_0) entered disabled state [ 1943.362743][ T450] device veth1_macvtap left promiscuous mode [ 1943.368636][ T450] device veth0_vlan left promiscuous mode [ 1944.166477][ T450] device bridge_slave_1 left promiscuous mode [ 1944.172490][ T450] bridge0: port 2(bridge_slave_1) entered disabled state [ 1944.179688][ T450] device bridge_slave_0 left promiscuous mode [ 1944.185694][ T450] bridge0: port 1(bridge_slave_0) entered disabled state [ 1944.193214][ T450] device bridge_slave_1 left promiscuous mode [ 1944.199175][ T450] bridge0: port 2(bridge_slave_1) entered disabled state [ 1944.206340][ T450] device bridge_slave_0 left promiscuous mode [ 1944.212245][ T450] bridge0: port 1(bridge_slave_0) entered disabled state [ 1944.219986][ T450] device bridge_slave_1 left promiscuous mode [ 1944.226069][ T450] bridge0: port 2(bridge_slave_1) entered disabled state [ 1944.233271][ T450] device bridge_slave_0 left promiscuous mode [ 1944.239256][ T450] bridge0: port 1(bridge_slave_0) entered disabled state [ 1944.246999][ T450] device veth1_macvtap left promiscuous mode [ 1944.252809][ T450] device veth0_vlan left promiscuous mode [ 1944.258709][ T450] device veth1_macvtap left promiscuous mode [ 1944.264514][ T450] device veth0_vlan left promiscuous mode [ 1944.270436][ T450] device veth1_macvtap left promiscuous mode [ 1944.276285][ T450] device veth0_vlan left promiscuous mode