last executing test programs: 22.100181007s ago: executing program 3 (id=2093): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r5}, 0x18) sendmsg$nl_route(r4, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@bridge_getlink={0x34, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg0\x00'}]}, 0x34}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x5) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtaction={0x14, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}}, 0x14}}, 0x0) syz_usb_connect(0x5, 0x2f, &(0x7f00000007c0)={{0x12, 0x1, 0x310, 0x5c, 0x12, 0x3, 0x40, 0x856, 0xac25, 0x5b5d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1d, 0x1, 0x2, 0x8, 0x10, 0x4, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0xe, 0xe8, 0x1a, 0x4, [], [{{0x9, 0x5, 0x9, 0x10, 0x8, 0x3, 0xd, 0x4, [@generic={0x2, 0xb}]}}]}}]}}]}}, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0}) write$selinux_access(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaff"], 0x56) 19.159779621s ago: executing program 1 (id=2105): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x3, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000006c0)={{r0}, &(0x7f0000000640), &(0x7f0000000680)='%pi6 \x00'}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) ioperm(0x0, 0x2, 0x2) ioperm(0x0, 0x9d, 0x0) 19.05503586s ago: executing program 1 (id=2106): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'sit0\x00', 0x0}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000003540)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 14.802499761s ago: executing program 3 (id=2109): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@nouid32}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x567, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x141042, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000300)=ANY=[@ANYRES32], 0xfd, 0x1bf, &(0x7f0000000840)="$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") r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000380)=ANY=[], 0x0) recvmmsg(r1, &(0x7f0000009e80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000380)=""/123, 0x7b}], 0x1}, 0xfac4}, {{&(0x7f0000000480)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001080)=[{&(0x7f0000000500)=""/125, 0x7d}, {&(0x7f0000000580)=""/149, 0x95}, {&(0x7f0000000640)=""/69, 0x45}, {&(0x7f00000006c0)=""/238, 0xee}, {&(0x7f0000000a40)=""/109, 0x6d}], 0x5}, 0x164}, {{&(0x7f0000001100)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000400)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1}, 0x5964699c}, {{&(0x7f0000002180)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000002200)=""/198, 0xc6}, {&(0x7f0000002300)=""/87, 0x57}, {&(0x7f0000002380)=""/133, 0x85}], 0x3, &(0x7f0000002440)=""/100, 0x64}, 0x9}, {{&(0x7f00000024c0), 0x80, &(0x7f0000004980)=[{&(0x7f0000002540)=""/4096, 0x1000}, {&(0x7f0000003540)=""/232, 0xe8}, {&(0x7f0000003640)=""/211, 0xd3}, {&(0x7f0000003740)=""/4096, 0x1000}, {&(0x7f0000004740)=""/240, 0xf0}, {&(0x7f0000004840)=""/22, 0x16}, {&(0x7f0000004880)=""/237, 0xed}], 0x7, &(0x7f0000004a00)=""/203, 0xcb}, 0x3}, {{&(0x7f0000004b00)=@x25, 0x80, &(0x7f0000004c40)=[{&(0x7f0000004b80)=""/91, 0x5b}, {&(0x7f0000004c00)=""/11, 0xb}], 0x2, &(0x7f0000004c80)=""/105, 0x69}, 0x1000}, {{&(0x7f0000004d00)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000008200)=[{&(0x7f0000004d80)=""/138, 0x8a}, {&(0x7f0000004e40)=""/4096, 0x1000}, {&(0x7f0000005e40)=""/242, 0xf2}, {&(0x7f0000005f40)=""/4096, 0x1000}, {&(0x7f0000006f40)=""/171, 0xab}, {&(0x7f0000007000)=""/196, 0xc4}, {&(0x7f0000007100)=""/4096, 0x1000}, {&(0x7f0000008100)=""/202, 0xca}], 0x8, &(0x7f0000008280)=""/234, 0xea}, 0x5}, {{&(0x7f0000008380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000008800)=[{&(0x7f0000008400)=""/109, 0x6d}, {&(0x7f0000008480)=""/188, 0xbc}, {&(0x7f0000008540)=""/186, 0xba}, {&(0x7f0000008600)=""/114, 0x72}, {&(0x7f0000008680)=""/17, 0x11}, {&(0x7f00000086c0)=""/94, 0x5e}, {&(0x7f0000008740)=""/188, 0xbc}], 0x7, &(0x7f0000008880)=""/106, 0x6a}, 0x1}, {{&(0x7f0000008900)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000009e00)=[{&(0x7f0000008980)=""/124, 0x7c}, {&(0x7f0000008a00)=""/248, 0xf8}, {&(0x7f0000008b00)=""/4096, 0x1000}, {&(0x7f0000009b00)=""/29, 0x1d}, {&(0x7f0000009b40)=""/217, 0xd9}, {&(0x7f0000009c40)=""/11, 0xb}, {&(0x7f0000009c80)=""/191, 0xbf}, {&(0x7f0000009d40)=""/149, 0x95}], 0x8}, 0x6}], 0x9, 0x40020001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r2}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x20, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 13.349940508s ago: executing program 1 (id=2111): io_setup(0x8, &(0x7f0000004200)=0x0) io_pgetevents(r0, 0x3, 0x3, &(0x7f0000000440)=[{}, {}, {}], &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1812000003c74148f9caccf3c12eaec74dff08b21f0b59c0fee810c769cec12c2a8efc4f7394b7cf5a0ea9184012aa4627b5b89b4fa82b3ffc4ca31ebc1281b4395c780300e6afe8f92d1e1b37a62ac80d0d57c35871ce6b10ba3915151930bb70cf99e0e834c7ace3d1d9dfd32921efe246477255055a478e577c00020000000000002a79249c523137afa1f72a454ad0963c610303d657d843ee0b7e28df1d2770eff86bfd2ecc67e4c0e517ccfb37aaaf5d79a575d3e10a6d690d85ba65098209e2c1be9e510dd543055754d2807c07700f44456c947b830a53607251ac277a1ffaf04a2a1fb5c935f7e9a9c150a0a9fece5c90e0a8bb2cc179023a516a771398d1e21c9f67dfe654413b30c7754e41aa454006ab20545a71306357c613483d2ff265d7c996301677621cf59cb4fb11d024c329da65ed356fe672f48064306c562afae86485264f68907a526a912d2d6e6ca04bda981719ef0711d92c896bfec1701351", @ANYRES64=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000200000000000000001809"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="120004003300000008000000020000d0a1ae1d219ff83012d800", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth1_to_batadv\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000040)=0x200, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00', r5}, 0x10) sendto$packet(r3, &(0x7f00000000c0)="3f030e03f007120006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xb318, 0x0, &(0x7f0000000540)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_BT_SECURITY(r7, 0x112, 0x4, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x10) listen(r6, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r1, &(0x7f00000004c0), &(0x7f0000000180)=@tcp6=r6}, 0x20) socket$inet6_udp(0xa, 0x2, 0x0) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) sigaltstack(0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], 0x0}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000400)="9260ffff001d68dd5800488ced89024a", &(0x7f0000000140)=@tcp6=r6}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r1, &(0x7f00000002c0), 0x0}, 0x20) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000800)={0x44, 0x0, &(0x7f0000000fc0)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000980)={@ptr={0x70742a85, 0x1, &(0x7f0000000740)=""/183, 0xb7, 0x1, 0x3e}, @ptr={0x70742a85, 0x0, &(0x7f0000000900)=""/76, 0x4c, 0x2, 0x25}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000500)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='sys_enter\x00', r9, 0x0, 0x6}, 0x18) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) 11.916207335s ago: executing program 4 (id=2114): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r2}, 0x10) r3 = socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x5fa30ea8c91ad259, 0x70bd2d, 0x3, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x44080) 11.803769315s ago: executing program 3 (id=2115): socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000004000000e47f00000100000000000000f8be8a25a49f32bc07dddd08d62254b740", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0xda, 0x8c, &(0x7f0000000340)=""/140, 0x40f00, 0x81, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000002c0)=[r3, r2, r3, r3, r2, r2], &(0x7f0000000400)=[{0x1, 0x2, 0x9, 0x6}, {0x2, 0x5, 0xb, 0x2}, {0x3, 0x3, 0x10, 0xd}], 0x10, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='mlxsw_sp_acl_tcam_vregion_migrate\x00', r4, 0x0, 0xd1}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@loopback, @in=@remote, 0x4e20, 0xfffe, 0x804, 0x0, 0x2}, {0x7, 0x0, 0x0, 0x0, 0x2}, {0x2, 0x8000000, 0x80000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d2, 0x6c}, 0x0, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000540)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff303030303031373737373737373756c0f39fdb37372c004c0f1208ec0c34b7df4ba1c1e6b7669743ddb8574db9bcaef6a61a12c3f260bebc7ac5b1b11361119b83f1cf9f686b715b8e58fd37cea6623dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7"], 0x1, 0x29a, &(0x7f0000000a00)="$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") r7 = syz_open_dev$loop(0x0, 0x0, 0x22400) ioctl$LOOP_SET_STATUS(r7, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x40010001, 0x3, 0xa, 0x1d, "9e959f16b6787b08aa26e66c4056a51695284854c382ec6bcfeef4fb0efcc1d8a6078ed98e203fd5f0643902dd8f6fac274de9d940bba5e51e92bbd4ce85450d", "f625c1076e4c36c800def96015e0fb7e904d865c2fdc458ec58d347f41be5a08", [0x4, 0x7]}) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) 11.777022645s ago: executing program 4 (id=2116): syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6a3, 0x621, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0xf, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0xf1}}}}}]}}]}}, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3c0, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x168, 0x1d0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x420) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000200), 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x0, 0x0, 0x21) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454c9, 0x1) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 9.040340179s ago: executing program 2 (id=2122): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'sit0\x00', 0x0}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000003540)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 8.912953459s ago: executing program 1 (id=2123): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@nouid32}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x567, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x141042, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b000000000000"], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000300)=ANY=[@ANYRES32], 0xfd, 0x1bf, &(0x7f0000000840)="$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") r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000380)=ANY=[], 0x0) recvmmsg(r2, &(0x7f0000009e80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000380)=""/123, 0x7b}], 0x1}, 0xfac4}, {{&(0x7f0000000480)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001080)=[{&(0x7f0000000500)=""/125, 0x7d}, {&(0x7f0000000580)=""/149, 0x95}, {&(0x7f0000000640)=""/69, 0x45}, {&(0x7f00000006c0)=""/238, 0xee}, {&(0x7f0000000a40)=""/109, 0x6d}], 0x5}, 0x164}, {{&(0x7f0000001100)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000400)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1}, 0x5964699c}, {{&(0x7f0000002180)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000002200)=""/198, 0xc6}, {&(0x7f0000002300)=""/87, 0x57}, {&(0x7f0000002380)=""/133, 0x85}], 0x3, &(0x7f0000002440)=""/100, 0x64}, 0x9}, {{&(0x7f00000024c0), 0x80, &(0x7f0000004980)=[{&(0x7f0000002540)=""/4096, 0x1000}, {&(0x7f0000003540)=""/232, 0xe8}, {&(0x7f0000003640)=""/211, 0xd3}, {&(0x7f0000003740)=""/4096, 0x1000}, {&(0x7f0000004740)=""/240, 0xf0}, {&(0x7f0000004840)=""/22, 0x16}, {&(0x7f0000004880)=""/237, 0xed}], 0x7, &(0x7f0000004a00)=""/203, 0xcb}, 0x3}, {{&(0x7f0000004b00)=@x25, 0x80, &(0x7f0000004c40)=[{&(0x7f0000004b80)=""/91, 0x5b}, {&(0x7f0000004c00)=""/11, 0xb}], 0x2, &(0x7f0000004c80)=""/105, 0x69}, 0x1000}, {{&(0x7f0000004d00)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000008200)=[{&(0x7f0000004d80)=""/138, 0x8a}, {&(0x7f0000004e40)=""/4096, 0x1000}, {&(0x7f0000005e40)=""/242, 0xf2}, {&(0x7f0000005f40)=""/4096, 0x1000}, {&(0x7f0000006f40)=""/171, 0xab}, {&(0x7f0000007000)=""/196, 0xc4}, {&(0x7f0000007100)=""/4096, 0x1000}, {&(0x7f0000008100)=""/202, 0xca}], 0x8, &(0x7f0000008280)=""/234, 0xea}, 0x5}, {{&(0x7f0000008380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000008800)=[{&(0x7f0000008400)=""/109, 0x6d}, {&(0x7f0000008480)=""/188, 0xbc}, {&(0x7f0000008540)=""/186, 0xba}, {&(0x7f0000008600)=""/114, 0x72}, {&(0x7f0000008680)=""/17, 0x11}, {&(0x7f00000086c0)=""/94, 0x5e}, {&(0x7f0000008740)=""/188, 0xbc}], 0x7, &(0x7f0000008880)=""/106, 0x6a}, 0x1}, {{&(0x7f0000008900)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000009e00)=[{&(0x7f0000008980)=""/124, 0x7c}, {&(0x7f0000008a00)=""/248, 0xf8}, {&(0x7f0000008b00)=""/4096, 0x1000}, {&(0x7f0000009b00)=""/29, 0x1d}, {&(0x7f0000009b40)=""/217, 0xd9}, {&(0x7f0000009c40)=""/11, 0xb}, {&(0x7f0000009c80)=""/191, 0xbf}, {&(0x7f0000009d40)=""/149, 0x95}], 0x8}, 0x6}], 0x9, 0x40020001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10) mount$incfs(&(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 8.438312338s ago: executing program 4 (id=2124): socket$nl_xfrm(0x10, 0x3, 0x6) io_setup(0x80000000, &(0x7f0000000100)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000080)={0x0, 0x7f, 0x20f}) io_getevents(r0, 0x4, 0x0, 0x0, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r5, 0x29, 0xa5, &(0x7f0000000000)=0x1000084, 0x7d) tgkill(r2, r2, 0x23) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) sendto$inet6(r5, 0x0, 0x0, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e1c, 0x6, @mcast2}, 0x1c) sendto$inet6(r5, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) setsockopt$inet6_int(r5, 0x29, 0x21, &(0x7f0000000040)=0x6, 0x4) recvmmsg(r5, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000300)=""/216, 0xd8}, 0x4d4d}], 0x1, 0x40002023, 0x0) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) 8.185831147s ago: executing program 0 (id=2125): socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000004000000e47f00000100000000000000f8be8a25a49f32bc07dddd08d62254b740", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0xda, 0x8c, &(0x7f0000000340)=""/140, 0x40f00, 0x81, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000002c0)=[r4, r3, r4, r4, r3, r3], &(0x7f0000000400)=[{0x1, 0x2, 0x9, 0x6}, {0x2, 0x5, 0xb, 0x2}, {0x3, 0x3, 0x10, 0xd}], 0x10, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='mlxsw_sp_acl_tcam_vregion_migrate\x00', r5, 0x0, 0xd1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@loopback, @in=@remote, 0x4e20, 0xfffe, 0x804, 0x0, 0x2}, {0x7, 0x0, 0x0, 0x0, 0x2}, {0x2, 0x8000000, 0x80000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d2, 0x6c}, 0x0, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000540)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff303030303031373737373737373756c0f39fdb37372c004c0f1208ec0c34b7df4ba1c1e6b7669743ddb8574db9bcaef6a61a12c3f260bebc7ac5b1b11361119b83f1cf9f686b715b8e58fd37cea6623dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7"], 0x1, 0x29a, &(0x7f0000000a00)="$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") r7 = syz_open_dev$loop(0x0, 0x0, 0x22400) ioctl$LOOP_SET_STATUS(r7, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x40010001, 0x3, 0xa, 0x1d, "9e959f16b6787b08aa26e66c4056a51695284854c382ec6bcfeef4fb0efcc1d8a6078ed98e203fd5f0643902dd8f6fac274de9d940bba5e51e92bbd4ce85450d", "f625c1076e4c36c800def96015e0fb7e904d865c2fdc458ec58d347f41be5a08", [0x4, 0x7]}) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) 7.404111126s ago: executing program 4 (id=2126): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@nouid32}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x567, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x141042, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000300)=ANY=[@ANYRES32], 0xfd, 0x1bf, &(0x7f0000000840)="$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") r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000380)=ANY=[], 0x0) recvmmsg(r1, &(0x7f0000009e80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000380)=""/123, 0x7b}], 0x1}, 0xfac4}, {{&(0x7f0000000480)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001080)=[{&(0x7f0000000500)=""/125, 0x7d}, {&(0x7f0000000580)=""/149, 0x95}, {&(0x7f0000000640)=""/69, 0x45}, {&(0x7f00000006c0)=""/238, 0xee}, {&(0x7f0000000a40)=""/109, 0x6d}], 0x5}, 0x164}, {{&(0x7f0000001100)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000400)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1}, 0x5964699c}, {{&(0x7f0000002180)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000002200)=""/198, 0xc6}, {&(0x7f0000002300)=""/87, 0x57}, {&(0x7f0000002380)=""/133, 0x85}], 0x3, &(0x7f0000002440)=""/100, 0x64}, 0x9}, {{&(0x7f00000024c0), 0x80, &(0x7f0000004980)=[{&(0x7f0000002540)=""/4096, 0x1000}, {&(0x7f0000003540)=""/232, 0xe8}, {&(0x7f0000003640)=""/211, 0xd3}, {&(0x7f0000003740)=""/4096, 0x1000}, {&(0x7f0000004740)=""/240, 0xf0}, {&(0x7f0000004840)=""/22, 0x16}, {&(0x7f0000004880)=""/237, 0xed}], 0x7, &(0x7f0000004a00)=""/203, 0xcb}, 0x3}, {{&(0x7f0000004b00)=@x25, 0x80, &(0x7f0000004c40)=[{&(0x7f0000004b80)=""/91, 0x5b}, {&(0x7f0000004c00)=""/11, 0xb}], 0x2, &(0x7f0000004c80)=""/105, 0x69}, 0x1000}, {{&(0x7f0000004d00)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000008200)=[{&(0x7f0000004d80)=""/138, 0x8a}, {&(0x7f0000004e40)=""/4096, 0x1000}, {&(0x7f0000005e40)=""/242, 0xf2}, {&(0x7f0000005f40)=""/4096, 0x1000}, {&(0x7f0000006f40)=""/171, 0xab}, {&(0x7f0000007000)=""/196, 0xc4}, {&(0x7f0000007100)=""/4096, 0x1000}, {&(0x7f0000008100)=""/202, 0xca}], 0x8, &(0x7f0000008280)=""/234, 0xea}, 0x5}, {{&(0x7f0000008380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000008800)=[{&(0x7f0000008400)=""/109, 0x6d}, {&(0x7f0000008480)=""/188, 0xbc}, {&(0x7f0000008540)=""/186, 0xba}, {&(0x7f0000008600)=""/114, 0x72}, {&(0x7f0000008680)=""/17, 0x11}, {&(0x7f00000086c0)=""/94, 0x5e}, {&(0x7f0000008740)=""/188, 0xbc}], 0x7, &(0x7f0000008880)=""/106, 0x6a}, 0x1}, {{&(0x7f0000008900)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000009e00)=[{&(0x7f0000008980)=""/124, 0x7c}, {&(0x7f0000008a00)=""/248, 0xf8}, {&(0x7f0000008b00)=""/4096, 0x1000}, {&(0x7f0000009b00)=""/29, 0x1d}, {&(0x7f0000009b40)=""/217, 0xd9}, {&(0x7f0000009c40)=""/11, 0xb}, {&(0x7f0000009c80)=""/191, 0xbf}, {&(0x7f0000009d40)=""/149, 0x95}], 0x8}, 0x6}], 0x9, 0x40020001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r2}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x20, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 7.089322395s ago: executing program 2 (id=2127): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r2}, 0x10) r3 = socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x5fa30ea8c91ad259, 0x70bd2d, 0x3, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x44080) 5.972957092s ago: executing program 0 (id=2128): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = inotify_init1(0x0) r6 = dup(r5) inotify_rm_watch(r6, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r8}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)={0xd8, r10, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_PEERS={0x68, 0x8, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2000}, @WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010) preadv(r1, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 5.889316412s ago: executing program 3 (id=2129): mkdir(&(0x7f0000000000)='./file0\x00', 0x82) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=fscache']) utime(0x0, 0x0) r3 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r3, &(0x7f0000000440)={'#! ', './file0'}, 0xb) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x18) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 5.885748822s ago: executing program 2 (id=2130): eventfd(0xc) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f0000000200)=0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xae44, 0x1000) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xe24}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0) 4.61520403s ago: executing program 4 (id=2131): r0 = syz_usb_connect$cdc_ncm(0x3, 0x76, &(0x7f0000000940)=ANY=[@ANYBLOB="12015001020000402505a1a44000010203010902640002010070000904000001020d0000052406000105240000000d240f01ff000000fdff08000006241a02000808241c8bbc816c1309058103080004fd000904010000020d00000904010102020d000009058202100008040009050302ff"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000c00)="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", 0x1000}], 0x1}, 0x2004a081) recvmsg$unix(r1, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x1) recvmsg$unix(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/109, 0x6d}], 0x1}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a00000000000000fc010000000000000000000000000000000000001300000005000500000000000a00000000000000000000000000000000000000000000000000000000000000080012000200020000000000000000001200330002"], 0xa0}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000000201050000000000000000000700000a08000340000000000400198008000840000000100c000f80080002400000000308001a4000000006970944d4d7f853f3868692fddbfbd23abd96caa3e80c8abf7c37c68dc9ae22f11e54"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x80, 0x1c, {0x9, 0x80, 0x9, 0x8a, 0x1, 0x1003, 0x6, 0x7, 0x100, 0x7, 0x4, 0xca86}}, 0x0, 0x0, 0x0, 0x0}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6(0xa, 0x3, 0x3) unshare(0x20040600) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = eventfd2(0x400000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0xc162, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='mountinfo\x00') ppoll(&(0x7f0000000280)=[{r9}], 0x1, 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007b110e00000000008510000002000000850093050700000095003300000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) ioctl$KVM_HYPERV_EVENTFD(r6, 0x4018aebd, &(0x7f0000000880)={0x1, r7}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 4.299205289s ago: executing program 2 (id=2132): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@nouid32}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x567, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x141042, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000300)=ANY=[@ANYRES32], 0xfd, 0x1bf, &(0x7f0000000840)="$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") r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff85000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000380)=ANY=[], 0x0) recvmmsg(r1, &(0x7f0000009e80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000380)=""/123, 0x7b}], 0x1}, 0xfac4}, {{&(0x7f0000000480)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001080)=[{&(0x7f0000000500)=""/125, 0x7d}, {&(0x7f0000000580)=""/149, 0x95}, {&(0x7f0000000640)=""/69, 0x45}, {&(0x7f00000006c0)=""/238, 0xee}, {&(0x7f0000000a40)=""/109, 0x6d}], 0x5}, 0x164}, {{&(0x7f0000001100)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000400)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1}, 0x5964699c}, {{&(0x7f0000002180)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000002200)=""/198, 0xc6}, {&(0x7f0000002300)=""/87, 0x57}, {&(0x7f0000002380)=""/133, 0x85}], 0x3, &(0x7f0000002440)=""/100, 0x64}, 0x9}, {{&(0x7f00000024c0), 0x80, &(0x7f0000004980)=[{&(0x7f0000002540)=""/4096, 0x1000}, {&(0x7f0000003540)=""/232, 0xe8}, {&(0x7f0000003640)=""/211, 0xd3}, {&(0x7f0000003740)=""/4096, 0x1000}, {&(0x7f0000004740)=""/240, 0xf0}, {&(0x7f0000004840)=""/22, 0x16}, {&(0x7f0000004880)=""/237, 0xed}], 0x7, &(0x7f0000004a00)=""/203, 0xcb}, 0x3}, {{&(0x7f0000004b00)=@x25, 0x80, &(0x7f0000004c40)=[{&(0x7f0000004b80)=""/91, 0x5b}, {&(0x7f0000004c00)=""/11, 0xb}], 0x2, &(0x7f0000004c80)=""/105, 0x69}, 0x1000}, {{&(0x7f0000004d00)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000008200)=[{&(0x7f0000004d80)=""/138, 0x8a}, {&(0x7f0000004e40)=""/4096, 0x1000}, {&(0x7f0000005e40)=""/242, 0xf2}, {&(0x7f0000005f40)=""/4096, 0x1000}, {&(0x7f0000006f40)=""/171, 0xab}, {&(0x7f0000007000)=""/196, 0xc4}, {&(0x7f0000007100)=""/4096, 0x1000}, {&(0x7f0000008100)=""/202, 0xca}], 0x8, &(0x7f0000008280)=""/234, 0xea}, 0x5}, {{&(0x7f0000008380)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000008800)=[{&(0x7f0000008400)=""/109, 0x6d}, {&(0x7f0000008480)=""/188, 0xbc}, {&(0x7f0000008540)=""/186, 0xba}, {&(0x7f0000008600)=""/114, 0x72}, {&(0x7f0000008680)=""/17, 0x11}, {&(0x7f00000086c0)=""/94, 0x5e}, {&(0x7f0000008740)=""/188, 0xbc}], 0x7, &(0x7f0000008880)=""/106, 0x6a}, 0x1}, {{&(0x7f0000008900)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000009e00)=[{&(0x7f0000008980)=""/124, 0x7c}, {&(0x7f0000008a00)=""/248, 0xf8}, {&(0x7f0000008b00)=""/4096, 0x1000}, {&(0x7f0000009b00)=""/29, 0x1d}, {&(0x7f0000009b40)=""/217, 0xd9}, {&(0x7f0000009c40)=""/11, 0xb}, {&(0x7f0000009c80)=""/191, 0xbf}, {&(0x7f0000009d40)=""/149, 0x95}], 0x8}, 0x6}], 0x9, 0x40020001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r2}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x20, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 3.900708588s ago: executing program 0 (id=2133): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x3, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000006c0)={{r0}, &(0x7f0000000640), &(0x7f0000000680)='%pi6 \x00'}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) ioperm(0x0, 0x2, 0x2) ioperm(0x0, 0x9d, 0x0) 3.888277998s ago: executing program 3 (id=2134): syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000200), 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x0, 0x0, 0x21) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454c9, 0x1) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 3.828172638s ago: executing program 0 (id=2135): syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6a3, 0x621, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0xf, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0xf1}}}}}]}}]}}, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000200), 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x0, 0x0, 0x21) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454c9, 0x1) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.454631357s ago: executing program 1 (id=2136): socket$nl_xfrm(0x10, 0x3, 0x6) io_setup(0x80000000, &(0x7f0000000100)=0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000080)={0x0, 0x7f, 0x20f}) io_getevents(r0, 0x4, 0x0, 0x0, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r5, 0x29, 0xa5, &(0x7f0000000000)=0x1000084, 0x7d) tgkill(r2, r2, 0x23) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) sendto$inet6(r5, 0x0, 0x0, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e1c, 0x6, @mcast2}, 0x1c) sendto$inet6(r5, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) setsockopt$inet6_int(r5, 0x29, 0x21, &(0x7f0000000040)=0x6, 0x4) recvmmsg(r5, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000000300)=""/216, 0xd8}, 0x4d4d}], 0x1, 0x40002023, 0x0) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) 3.386509407s ago: executing program 2 (id=2137): syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6a3, 0x621, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0xf, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0xf1}}}}}]}}]}}, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) sendto$inet(r0, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000200), 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x0, 0x0, 0x21) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454c9, 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 2.027429034s ago: executing program 0 (id=2138): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = inotify_init1(0x0) r6 = dup(r5) inotify_rm_watch(r6, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r8}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)={0xd8, r10, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_PEERS={0x68, 0x8, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2000}, @WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010) preadv(r1, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 2.027019994s ago: executing program 1 (id=2139): io_setup(0x8, &(0x7f0000004200)=0x0) io_pgetevents(r0, 0x3, 0x3, &(0x7f0000000440)=[{}, {}, {}], &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1812000003c74148f9caccf3c12eaec74dff08b21f0b59c0fee810c769cec12c2a8efc4f7394b7cf5a0ea9184012aa4627b5b89b4fa82b3ffc4ca31ebc1281b4395c780300e6afe8f92d1e1b37a62ac80d0d57c35871ce6b10ba3915151930bb70cf99e0e834c7ace3d1d9dfd32921efe246477255055a478e577c00020000000000002a79249c523137afa1f72a454ad0963c610303d657d843ee0b7e28df1d2770eff86bfd2ecc67e4c0e517ccfb37aaaf5d79a575d3e10a6d690d85ba65098209e2c1be9e510dd543055754d2807c07700f44456c947b830a53607251ac277a1ffaf04a2a1fb5c935f7e9a9c150a0a9fece5c90e0a8bb2cc179023a516a771398d1e21c9f67dfe654413b30c7754e41aa454006ab20545a71306357c613483d2ff265d7c996301677621cf59cb4fb11d024c329da65ed356fe672f48064306c562afae86485264f68907a526a912d2d6e6ca04bda981719ef0711d92c896bfec1701351", @ANYRES64=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000200000000000000001809"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="120004003300000008000000020000d0a1ae1d219ff83012d800", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth1_to_batadv\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000040)=0x200, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00', r5}, 0x10) sendto$packet(r3, &(0x7f00000000c0)="3f030e03f007120006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xb318, 0x0, &(0x7f0000000540)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_BT_SECURITY(r7, 0x112, 0x4, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x10) listen(r6, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r1, &(0x7f00000004c0), &(0x7f0000000180)=@tcp6=r6}, 0x20) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) sigaltstack(0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], 0x0}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000400)="9260ffff001d68dd5800488ced89024a", &(0x7f0000000140)=@tcp6=r6}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r1, &(0x7f00000002c0), 0x0}, 0x20) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000800)={0x44, 0x0, &(0x7f0000000fc0)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000980)={@ptr={0x70742a85, 0x1, &(0x7f0000000740)=""/183, 0xb7, 0x1, 0x3e}, @ptr={0x70742a85, 0x0, &(0x7f0000000900)=""/76, 0x4c, 0x2, 0x25}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000500)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='sys_enter\x00', r9, 0x0, 0x6}, 0x18) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) 1.482818733s ago: executing program 2 (id=2140): socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000004000000e47f00000100000000000000f8be8a25a49f32bc07dddd08d62254b740", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0xda, 0x8c, &(0x7f0000000340)=""/140, 0x40f00, 0x81, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000002c0)=[r3, r2, r3, r3, r2, r2], &(0x7f0000000400)=[{0x1, 0x2, 0x9, 0x6}, {0x2, 0x5, 0xb, 0x2}, {0x3, 0x3, 0x10, 0xd}], 0x10, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='mlxsw_sp_acl_tcam_vregion_migrate\x00', r4, 0x0, 0xd1}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@loopback, @in=@remote, 0x4e20, 0xfffe, 0x804, 0x0, 0x2}, {0x7, 0x0, 0x0, 0x0, 0x2}, {0x2, 0x8000000, 0x80000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d2, 0x6c}, 0x0, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000540)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff303030303031373737373737373756c0f39fdb37372c004c0f1208ec0c34b7df4ba1c1e6b7669743ddb8574db9bcaef6a61a12c3f260bebc7ac5b1b11361119b83f1cf9f686b715b8e58fd37cea6623dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7"], 0x1, 0x29a, &(0x7f0000000a00)="$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") r7 = syz_open_dev$loop(0x0, 0x0, 0x22400) ioctl$LOOP_SET_STATUS(r7, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x40010001, 0x3, 0xa, 0x1d, "9e959f16b6787b08aa26e66c4056a51695284854c382ec6bcfeef4fb0efcc1d8a6078ed98e203fd5f0643902dd8f6fac274de9d940bba5e51e92bbd4ce85450d", "f625c1076e4c36c800def96015e0fb7e904d865c2fdc458ec58d347f41be5a08", [0x4, 0x7]}) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) 105.97044ms ago: executing program 3 (id=2141): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'sit0\x00', 0x0}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000003540)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 6.55418ms ago: executing program 0 (id=2142): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x3, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000006c0)={{r0}, 0x0, &(0x7f0000000680)='%pi6 \x00'}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]}) ioperm(0x0, 0x2, 0x2) ioperm(0x0, 0x9d, 0x0) 0s ago: executing program 4 (id=2143): syz_open_dev$loop(&(0x7f0000000140), 0x6, 0x185002) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = fsopen(&(0x7f0000000080)='devtmpfs\x00', 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x7c}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): gadget: fail, usb_ep_enable returned -22 [ 390.074485][ T5902] EXT4-fs (loop2): 1 truncate cleaned up [ 390.080031][ T5902] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 390.275371][ T5910] loop1: detected capacity change from 0 to 512 [ 390.282084][ T30] audit: type=1326 audit(1740957107.621:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5906 comm="syz.1.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c6d185169 code=0x7ffc0000 [ 390.309554][ T30] audit: type=1326 audit(1740957107.621:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5906 comm="syz.1.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c6d185169 code=0x7ffc0000 [ 390.370304][ T30] audit: type=1326 audit(1740957107.621:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5906 comm="syz.1.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0c6d185169 code=0x7ffc0000 [ 390.370360][ T5910] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 390.406078][ T5910] ext4 filesystem being mounted at /323/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 390.493361][ T5910] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1645'. [ 390.511753][ T30] audit: type=1326 audit(1740957107.621:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5906 comm="syz.1.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c6d185169 code=0x7ffc0000 [ 390.557819][ T30] audit: type=1326 audit(1740957107.621:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5906 comm="syz.1.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c6d185169 code=0x7ffc0000 [ 390.614198][ T30] audit: type=1326 audit(1740957107.621:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5906 comm="syz.1.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0c6d185169 code=0x7ffc0000 [ 390.639646][ T30] audit: type=1326 audit(1740957107.621:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5906 comm="syz.1.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c6d185169 code=0x7ffc0000 [ 390.676112][ T30] audit: type=1326 audit(1740957107.621:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5906 comm="syz.1.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c6d185169 code=0x7ffc0000 [ 390.703510][ T30] audit: type=1326 audit(1740957107.621:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5906 comm="syz.1.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f0c6d185169 code=0x7ffc0000 [ 391.057287][ T30] audit: type=1326 audit(1740957107.621:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5906 comm="syz.1.1645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0c6d1851a3 code=0x7ffc0000 [ 391.147244][ T5911] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 391.155538][ T5915] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 391.159988][ T5911] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 391.166651][ T5915] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 391.738954][ T349] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 391.745352][ T6] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 391.753042][ T6] cdc_ncm 1-1:1.0: dwNtbInMaxSize=9 is too small. Using 2048 [ 391.760814][ T349] cdc_ncm 4-1:1.0: dwNtbInMaxSize=9 is too small. Using 2048 [ 391.768090][ T349] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 391.774185][ T6] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 391.830963][ T5935] loop2: detected capacity change from 0 to 1024 [ 392.197570][ T5935] EXT4-fs (loop2): Ignoring removed nobh option [ 392.203893][ T5935] EXT4-fs (loop2): Ignoring removed bh option [ 392.215846][ T5935] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 392.230667][ T5935] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,nouid32,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 392.802053][ T5951] loop2: detected capacity change from 0 to 1024 [ 392.819399][ T5951] EXT4-fs (loop2): Ignoring removed nobh option [ 392.825675][ T5951] EXT4-fs (loop2): Ignoring removed bh option [ 392.838893][ T5951] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 392.872392][ T5951] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,nouid32,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 393.308952][ T6] cdc_ncm 1-1:1.0: setting tx_max = 184 [ 393.330492][ T6] cdc_ncm 1-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 393.340645][ T349] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 393.360430][ T349] cdc_ncm 4-1:1.0 eth2: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM, 42:42:42:42:42:42 [ 393.374876][ T6] usb 1-1: USB disconnect, device number 33 [ 394.592373][ T5965] loop0: detected capacity change from 0 to 128 [ 394.600587][ T5968] loop3: detected capacity change from 0 to 128 [ 394.761402][ T6] cdc_ncm 1-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM [ 394.941928][ T349] usb 4-1: USB disconnect, device number 35 [ 394.947963][ T349] cdc_ncm 4-1:1.0 eth2: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM [ 395.525625][ T5998] loop2: detected capacity change from 0 to 512 [ 395.658859][ T5999] loop4: detected capacity change from 0 to 128 [ 395.668941][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 395.669031][ T30] audit: type=1326 audit(1740957112.871:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5979 comm="syz.2.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620800b169 code=0x7ffc0000 [ 396.924470][ T30] audit: type=1326 audit(1740957112.871:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5979 comm="syz.2.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620800b169 code=0x7ffc0000 [ 397.005635][ T30] audit: type=1326 audit(1740957112.871:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5979 comm="syz.2.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f620800b169 code=0x7ffc0000 [ 397.064720][ T5998] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 397.077007][ T5998] ext4 filesystem being mounted at /337/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 397.152074][ T5998] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1658'. [ 397.308113][ T30] audit: type=1326 audit(1740957112.871:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5979 comm="syz.2.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620800b169 code=0x7ffc0000 [ 397.368089][ T30] audit: type=1326 audit(1740957112.871:1041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5979 comm="syz.2.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620800b169 code=0x7ffc0000 [ 397.489298][ T30] audit: type=1326 audit(1740957112.871:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5979 comm="syz.2.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f620800b169 code=0x7ffc0000 [ 397.552223][ T30] audit: type=1326 audit(1740957112.871:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5979 comm="syz.2.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620800b169 code=0x7ffc0000 [ 397.575546][ T30] audit: type=1326 audit(1740957112.871:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5979 comm="syz.2.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620800b169 code=0x7ffc0000 [ 397.598774][ T30] audit: type=1326 audit(1740957112.871:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5979 comm="syz.2.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f620800b169 code=0x7ffc0000 [ 397.624252][ T30] audit: type=1326 audit(1740957112.871:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5979 comm="syz.2.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f620800b1a3 code=0x7ffc0000 [ 399.095873][ T904] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 399.205951][ T6035] loop2: detected capacity change from 0 to 512 [ 399.649973][ T6035] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 399.671307][ T6035] EXT4-fs (loop2): 1 truncate cleaned up [ 399.688243][ T6035] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 399.699865][ T6053] loop1: detected capacity change from 0 to 1024 [ 399.760295][ T6053] EXT4-fs (loop1): Ignoring removed nobh option [ 399.776624][ T6053] EXT4-fs (loop1): Ignoring removed bh option [ 399.786637][ T6053] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 400.043816][ T6053] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,nouid32,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 400.069997][ T904] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 400.081016][ T904] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 400.095544][ T6063] loop0: detected capacity change from 0 to 128 [ 400.285519][ T904] usb 5-1: config 0 interface 0 has no altsetting 0 [ 400.292506][ T904] usb 5-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 400.301707][ T904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.310857][ T904] usb 5-1: config 0 descriptor?? [ 401.405524][ T6069] loop3: detected capacity change from 0 to 512 [ 401.412381][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 401.412397][ T30] audit: type=1326 audit(1740957118.741:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6066 comm="syz.3.1677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7fcf72169 code=0x7ffc0000 [ 401.462844][ T30] audit: type=1326 audit(1740957118.741:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6066 comm="syz.3.1677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7fcf72169 code=0x7ffc0000 [ 401.488159][ T6069] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 401.500673][ T6069] ext4 filesystem being mounted at /330/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 401.516060][ T6069] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1677'. [ 404.169095][ T904] usbhid 5-1:0.0: can't add hid device: -71 [ 404.175322][ T904] usbhid: probe of 5-1:0.0 failed with error -71 [ 404.394811][ T904] usb 5-1: USB disconnect, device number 38 [ 404.727920][ T6086] loop1: detected capacity change from 0 to 1024 [ 404.814511][ T6086] EXT4-fs (loop1): Ignoring removed nobh option [ 404.839301][ T6086] EXT4-fs (loop1): Ignoring removed bh option [ 404.849096][ T6086] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 404.890343][ T6086] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,nouid32,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 405.697814][ T6111] loop3: detected capacity change from 0 to 512 [ 405.771018][ T6111] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 405.802641][ T6111] EXT4-fs (loop3): 1 truncate cleaned up [ 405.812330][ T6111] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 405.961955][ T6121] loop0: detected capacity change from 0 to 1024 [ 406.035514][ T6121] EXT4-fs (loop0): Ignoring removed nobh option [ 406.045509][ T6121] EXT4-fs (loop0): Ignoring removed bh option [ 406.051456][ T6121] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 406.100959][ T6121] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,nouid32,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 406.231440][ T6125] loop1: detected capacity change from 0 to 512 [ 406.635500][ T6125] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 406.659608][ T6125] EXT4-fs (loop1): 1 truncate cleaned up [ 406.665167][ T6125] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 407.127519][ T6141] loop0: detected capacity change from 0 to 128 [ 408.414275][ T6151] loop3: detected capacity change from 0 to 512 [ 408.539082][ T6151] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.1694: casefold flag without casefold feature [ 408.559479][ T6151] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.1694: couldn't read orphan inode 15 (err -117) [ 408.583814][ T6156] loop1: detected capacity change from 0 to 1024 [ 408.653529][ T6156] EXT4-fs (loop1): Ignoring removed nobh option [ 408.689160][ T6151] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 408.700086][ T6156] EXT4-fs (loop1): Ignoring removed bh option [ 408.705996][ T6156] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 408.718920][ T488] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 408.839726][ T6156] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,nouid32,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 408.988904][ T488] usb 1-1: Using ep0 maxpacket: 16 [ 409.000323][ T6163] loop4: detected capacity change from 0 to 256 [ 409.045093][ T6163] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 409.115874][ T6165] loop2: detected capacity change from 0 to 1024 [ 409.138973][ T488] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 409.154943][ T488] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 409.172798][ T488] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 409.186532][ T6165] EXT4-fs (loop2): Ignoring removed nobh option [ 409.193746][ T6165] EXT4-fs (loop2): Ignoring removed bh option [ 409.204896][ T6165] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 409.221966][ T488] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 409.240153][ T488] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.263978][ T488] usb 1-1: config 0 descriptor?? [ 409.271034][ T6165] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,nouid32,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 409.875486][ T488] microsoft 0003:045E:07DA.0021: invalid report_count 1243787297 [ 409.895190][ T488] microsoft 0003:045E:07DA.0021: item 0 4 1 9 parsing failed [ 409.919030][ T488] microsoft 0003:045E:07DA.0021: parse failed [ 409.939082][ T488] microsoft: probe of 0003:045E:07DA.0021 failed with error -22 [ 410.235490][ T488] usb 1-1: USB disconnect, device number 34 [ 410.710353][ T6186] netlink: 'syz.3.1703': attribute type 4 has an invalid length. [ 410.717910][ T6186] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1703'. [ 410.834676][ T6193] loop0: detected capacity change from 0 to 128 [ 410.893211][ T6195] loop3: detected capacity change from 0 to 128 [ 411.815141][ T6205] loop2: detected capacity change from 0 to 512 [ 411.821543][ T30] audit: type=1326 audit(1740957129.151:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6197 comm="syz.2.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620800b169 code=0x7ffc0000 [ 411.876591][ T6207] loop0: detected capacity change from 0 to 1024 [ 411.925217][ T6207] EXT4-fs (loop0): Ignoring removed nobh option [ 411.934952][ T30] audit: type=1326 audit(1740957129.151:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6197 comm="syz.2.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f620800b169 code=0x7ffc0000 [ 411.988983][ T6207] EXT4-fs (loop0): Ignoring removed bh option [ 412.006171][ T6207] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 412.028836][ T39] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 412.070017][ T30] audit: type=1326 audit(1740957129.151:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6197 comm="syz.2.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620800b169 code=0x7ffc0000 [ 412.182213][ T30] audit: type=1326 audit(1740957129.161:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6197 comm="syz.2.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f620800b169 code=0x7ffc0000 [ 412.201088][ T6207] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,nouid32,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 412.205609][ T30] audit: type=1326 audit(1740957129.161:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6197 comm="syz.2.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620800b169 code=0x7ffc0000 [ 412.255134][ T6205] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 412.267435][ T6205] ext4 filesystem being mounted at /345/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 412.277771][ T30] audit: type=1326 audit(1740957129.161:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6197 comm="syz.2.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f620800b169 code=0x7ffc0000 [ 412.349768][ T30] audit: type=1326 audit(1740957129.161:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6197 comm="syz.2.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f620800b1a3 code=0x7ffc0000 [ 412.390271][ T6205] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1707'. [ 412.448592][ T30] audit: type=1326 audit(1740957129.161:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6197 comm="syz.2.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6208009c1f code=0x7ffc0000 [ 412.472262][ T30] audit: type=1326 audit(1740957129.161:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6197 comm="syz.2.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f620800b1f7 code=0x7ffc0000 [ 412.495560][ T30] audit: type=1326 audit(1740957129.161:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6197 comm="syz.2.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6208009ad0 code=0x7ffc0000 [ 412.518920][ T39] usb 5-1: unable to get BOS descriptor or descriptor too short [ 412.629144][ T39] usb 5-1: config 2 has an invalid interface association descriptor of length 2, skipping [ 412.648981][ T39] usb 5-1: config 2 interface 0 has no altsetting 0 [ 412.839253][ T39] usb 5-1: New USB device found, idVendor=0856, idProduct=ac25, bcdDevice=5b.5d [ 412.858366][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.879963][ T39] usb 5-1: Product: syz [ 412.883963][ T39] usb 5-1: Manufacturer: syz [ 412.962977][ T39] usb 5-1: SerialNumber: syz [ 413.081296][ T6227] loop3: detected capacity change from 0 to 512 [ 413.216731][ T6227] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.1713: casefold flag without casefold feature [ 413.248088][ T6227] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.1713: couldn't read orphan inode 15 (err -117) [ 413.275848][ T6227] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 413.300678][ T39] ftdi_sio 5-1:2.0: FTDI USB Serial Device converter detected [ 413.315593][ T39] usb 5-1: Detected FT-X [ 413.349161][ T39] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 413.368931][ T39] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 413.388934][ T39] ftdi_sio 5-1:2.0: GPIO initialisation failed: -71 [ 413.400545][ T39] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 413.414121][ T39] usb 5-1: USB disconnect, device number 39 [ 413.423619][ T39] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 413.433762][ T39] ftdi_sio 5-1:2.0: device disconnected [ 414.088946][ T39] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 414.099507][ T6248] loop2: detected capacity change from 0 to 128 [ 414.298859][ T349] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 414.411655][ T39] usb 1-1: Using ep0 maxpacket: 16 [ 414.544829][ T349] usb 2-1: Using ep0 maxpacket: 16 [ 414.669180][ T349] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 414.680347][ T349] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 414.692288][ T349] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 414.707747][ T349] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 414.719264][ T349] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.785040][ T349] usb 2-1: config 0 descriptor?? [ 414.798040][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 414.810829][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 415.253056][ T39] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 415.902083][ T39] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 415.911044][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.923583][ T39] usb 1-1: config 0 descriptor?? [ 416.045284][ T6261] loop4: detected capacity change from 0 to 512 [ 416.272796][ T6261] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.1720: casefold flag without casefold feature [ 416.287586][ T6261] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.1720: couldn't read orphan inode 15 (err -117) [ 416.300901][ T6261] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 416.933469][ T39] microsoft 0003:045E:07DA.0022: invalid report_count 1243787297 [ 416.952143][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 416.952160][ T30] audit: type=1326 audit(1740957134.301:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6255 comm="syz.2.1722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620800b169 code=0x7ffc0000 [ 416.985022][ T39] microsoft 0003:045E:07DA.0022: item 0 4 1 9 parsing failed [ 417.014928][ T39] microsoft 0003:045E:07DA.0022: parse failed [ 417.019913][ T349] microsoft 0003:045E:07DA.0023: invalid report_count 1243787297 [ 417.028395][ T349] microsoft 0003:045E:07DA.0023: item 0 4 1 9 parsing failed [ 417.030629][ T39] microsoft: probe of 0003:045E:07DA.0022 failed with error -22 [ 417.035846][ T349] microsoft 0003:045E:07DA.0023: parse failed [ 417.049011][ T349] microsoft: probe of 0003:045E:07DA.0023 failed with error -22 [ 417.057491][ T30] audit: type=1326 audit(1740957134.331:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6255 comm="syz.2.1722" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620800b169 code=0x7ffc0000 [ 417.134975][ T39] usb 1-1: USB disconnect, device number 35 [ 417.160475][ T349] usb 2-1: USB disconnect, device number 35 [ 417.309927][ T6274] loop4: detected capacity change from 0 to 128 [ 418.461723][ T6276] loop1: detected capacity change from 0 to 1024 [ 418.529761][ T6276] EXT4-fs (loop1): Ignoring removed nobh option [ 418.535849][ T6276] EXT4-fs (loop1): Ignoring removed bh option [ 418.561890][ T6276] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 418.640005][ T6276] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,nouid32,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 418.682467][ T6283] loop4: detected capacity change from 0 to 1024 [ 419.948496][ T6285] loop2: detected capacity change from 0 to 512 [ 419.976978][ T6283] EXT4-fs (loop4): Ignoring removed nobh option [ 419.986200][ T6283] EXT4-fs (loop4): Ignoring removed bh option [ 419.992432][ T6283] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 420.036764][ T6285] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.1728: casefold flag without casefold feature [ 420.050756][ T6285] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.1728: couldn't read orphan inode 15 (err -117) [ 420.056778][ T6283] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,nouid32,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 420.068560][ T6285] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 421.131309][ T6300] netlink: 'syz.1.1731': attribute type 4 has an invalid length. [ 421.138892][ T6300] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1731'. [ 421.491722][ T6] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 421.707566][ T6314] loop4: detected capacity change from 0 to 128 [ 422.408915][ T6] usb 4-1: unable to get BOS descriptor or descriptor too short [ 422.462722][ T6324] loop2: detected capacity change from 0 to 512 [ 422.489252][ T6] usb 4-1: config 2 has an invalid interface association descriptor of length 2, skipping [ 422.499820][ T6] usb 4-1: config 2 interface 0 has no altsetting 0 [ 422.540680][ T30] audit: type=1326 audit(1740957139.891:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6320 comm="syz.1.1736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c6d185169 code=0x7ffc0000 [ 422.565098][ T6324] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 422.580822][ T6326] loop1: detected capacity change from 0 to 512 [ 422.587014][ T30] audit: type=1326 audit(1740957139.911:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6320 comm="syz.1.1736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0c6d185169 code=0x7ffc0000 [ 422.611118][ T30] audit: type=1326 audit(1740957139.921:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6320 comm="syz.1.1736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c6d185169 code=0x7ffc0000 [ 422.618504][ T6324] EXT4-fs (loop2): 1 truncate cleaned up [ 422.635007][ T30] audit: type=1326 audit(1740957139.921:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6320 comm="syz.1.1736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0c6d185169 code=0x7ffc0000 [ 422.648832][ T6324] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 422.739679][ T6331] loop4: detected capacity change from 0 to 128 [ 422.923241][ T6] usb 4-1: New USB device found, idVendor=0856, idProduct=ac25, bcdDevice=5b.5d [ 423.043085][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.252578][ T6] usb 4-1: Product: syz [ 423.323286][ T6] usb 4-1: Manufacturer: syz [ 423.418912][ T6326] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 423.439923][ T30] audit: type=1326 audit(1740957139.921:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6320 comm="syz.1.1736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c6d185169 code=0x7ffc0000 [ 423.471534][ T6] usb 4-1: SerialNumber: syz [ 423.488874][ T6] usb 4-1: can't set config #2, error -71 [ 423.494954][ T6] usb 4-1: USB disconnect, device number 36 [ 423.624640][ T30] audit: type=1326 audit(1740957139.921:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6320 comm="syz.1.1736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f0c6d185169 code=0x7ffc0000 [ 423.711438][ T6326] ext4 filesystem being mounted at /337/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 423.717070][ T30] audit: type=1326 audit(1740957139.921:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6320 comm="syz.1.1736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0c6d1851a3 code=0x7ffc0000 [ 423.855671][ T30] audit: type=1326 audit(1740957139.931:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6320 comm="syz.1.1736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0c6d183c1f code=0x7ffc0000 [ 424.008863][ T6326] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1736'. [ 424.018602][ T30] audit: type=1326 audit(1740957139.931:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6320 comm="syz.1.1736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f0c6d1851f7 code=0x7ffc0000 [ 424.141278][ T30] audit: type=1326 audit(1740957139.931:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6320 comm="syz.1.1736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0c6d183ad0 code=0x7ffc0000 [ 424.552048][ T6348] loop3: detected capacity change from 0 to 1024 [ 424.643220][ T6348] EXT4-fs (loop3): Ignoring removed nobh option [ 424.658885][ T6348] EXT4-fs (loop3): Ignoring removed bh option [ 424.664820][ T6348] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 424.734358][ T6348] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,nouid32,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 424.765057][ T6355] 9p: Unknown Cache mode fscach [ 424.826064][ T6352] loop1: detected capacity change from 0 to 512 [ 424.856859][ T488] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 424.894627][ T6362] loop2: detected capacity change from 0 to 1024 [ 424.901688][ T6352] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 424.920380][ T6352] EXT4-fs (loop1): 1 truncate cleaned up [ 424.942904][ T6352] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 424.974406][ T6362] EXT4-fs (loop2): Ignoring removed nobh option [ 425.084336][ T6362] EXT4-fs (loop2): Ignoring removed bh option [ 425.182911][ T488] usb 5-1: Using ep0 maxpacket: 16 [ 425.293894][ T6362] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 425.310264][ T6362] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,nouid32,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 426.440794][ T488] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 426.464598][ T488] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 426.474588][ T488] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 426.555711][ T488] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 426.565091][ T488] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.599331][ T488] usb 5-1: config 0 descriptor?? [ 427.471592][ T6387] loop2: detected capacity change from 0 to 1024 [ 427.556382][ T6392] loop0: detected capacity change from 0 to 128 [ 427.662139][ T6387] EXT4-fs (loop2): Ignoring removed nobh option [ 427.668821][ T6] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 427.755989][ T6387] EXT4-fs (loop2): Ignoring removed bh option [ 427.864177][ T6387] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 428.038362][ T6394] loop4: detected capacity change from 0 to 1024 [ 428.052503][ T6387] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,nouid32,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 428.128914][ T6] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 428.183955][ T6] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 428.231360][ T6] usb 4-1: config 0 interface 0 has no altsetting 0 [ 428.630765][ T6] usb 4-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 428.639959][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.691031][ T6] usb 4-1: config 0 descriptor?? [ 428.696955][ T6394] EXT4-fs (loop4): Ignoring removed nobh option [ 428.705324][ T6394] EXT4-fs (loop4): Ignoring removed bh option [ 428.727669][ T6394] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 428.744578][ T6389] loop1: detected capacity change from 0 to 512 [ 428.766290][ T6394] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,nouid32,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 428.778870][ T6389] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 428.822250][ T6389] EXT4-fs (loop1): 1 truncate cleaned up [ 428.841566][ T6389] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 428.858896][ T488] usbhid 5-1:0.0: can't add hid device: -71 [ 428.864664][ T488] usbhid: probe of 5-1:0.0 failed with error -71 [ 428.956466][ T6404] loop0: detected capacity change from 0 to 128 [ 429.279131][ T6] usbhid 4-1:0.0: can't add hid device: -71 [ 429.285307][ T6] usbhid: probe of 4-1:0.0 failed with error -71 [ 429.386827][ T6] usb 4-1: USB disconnect, device number 37 [ 430.299117][ T488] usb 5-1: USB disconnect, device number 40 [ 431.311968][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 431.311985][ T30] audit: type=1326 audit(1740957148.661:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6426 comm="syz.3.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7fcf72169 code=0x7ffc0000 [ 431.347878][ T30] audit: type=1326 audit(1740957148.691:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6426 comm="syz.3.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7fcf72169 code=0x7ffc0000 [ 431.387934][ T30] audit: type=1326 audit(1740957148.721:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6426 comm="syz.3.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7fd7fcf72169 code=0x7ffc0000 [ 431.412228][ T30] audit: type=1326 audit(1740957148.721:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6426 comm="syz.3.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7fcf72169 code=0x7ffc0000 [ 431.436252][ T30] audit: type=1326 audit(1740957148.721:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6426 comm="syz.3.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7fd7fcf72169 code=0x7ffc0000 [ 431.459812][ T30] audit: type=1326 audit(1740957148.721:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6426 comm="syz.3.1759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7fcf72169 code=0x7ffc0000 [ 432.293031][ T30] audit: type=1326 audit(1740957149.641:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6428 comm="syz.0.1760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce79cf0169 code=0x7ffc0000 [ 432.368858][ T30] audit: type=1326 audit(1740957149.671:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6428 comm="syz.0.1760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce79cf0169 code=0x7ffc0000 [ 432.400130][ T6448] loop0: detected capacity change from 0 to 512 [ 432.459467][ T30] audit: type=1326 audit(1740957149.681:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6428 comm="syz.0.1760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce79cf0169 code=0x7ffc0000 [ 432.484600][ T30] audit: type=1326 audit(1740957149.691:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6428 comm="syz.0.1760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce79cf0169 code=0x7ffc0000 [ 432.629335][ T6455] loop3: detected capacity change from 0 to 128 [ 433.793120][ T6448] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 433.861667][ T6448] ext4 filesystem being mounted at /364/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 434.918173][ T6471] loop4: detected capacity change from 0 to 128 [ 435.012568][ T409] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 435.577620][ T6476] loop3: detected capacity change from 0 to 1024 [ 435.700523][ T6476] EXT4-fs (loop3): Ignoring removed nobh option [ 435.719191][ T6476] EXT4-fs (loop3): Ignoring removed bh option [ 435.732351][ T6476] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 436.088150][ T6476] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,nouid32,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 436.188015][ T6484] 9pnet: Insufficient options for proto=fd [ 438.639491][ T409] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 438.647233][ T409] usb 3-1: can't read configurations, error -71 [ 438.656709][ T6503] loop2: detected capacity change from 0 to 1024 [ 441.349830][ T6510] loop1: detected capacity change from 0 to 128 [ 441.725654][ T6512] loop0: detected capacity change from 0 to 128 [ 442.782467][ T6523] loop1: detected capacity change from 0 to 128 [ 443.410631][ T6529] loop2: detected capacity change from 0 to 128 [ 443.479349][ T349] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 444.558031][ T6534] loop0: detected capacity change from 0 to 512 [ 444.639005][ T6537] loop3: detected capacity change from 0 to 512 [ 444.658944][ T349] usb 5-1: Using ep0 maxpacket: 16 [ 444.798863][ T349] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.824846][ T349] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 444.835710][ T6537] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 444.861041][ T6537] EXT4-fs (loop3): 1 truncate cleaned up [ 444.866632][ T349] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 444.888838][ T6537] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 444.908841][ T349] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 444.922186][ T349] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.025242][ T349] usb 5-1: config 0 descriptor?? [ 445.157026][ T6546] loop2: detected capacity change from 0 to 128 [ 445.228840][ T6] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 445.549330][ T6534] loop0: detected capacity change from 0 to 256 [ 445.569277][ T349] usbhid 5-1:0.0: can't add hid device: -71 [ 445.575374][ T349] usbhid: probe of 5-1:0.0 failed with error -71 [ 445.609127][ T6] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 445.642035][ T349] usb 5-1: USB disconnect, device number 41 [ 445.703279][ T6] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 445.801960][ T6534] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 445.814238][ T6] usb 2-1: config 0 interface 0 has no altsetting 0 [ 445.822213][ T6] usb 2-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 446.202056][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.291367][ T6] usb 2-1: config 0 descriptor?? [ 446.561639][ T6553] loop4: detected capacity change from 0 to 1024 [ 446.629691][ T6553] EXT4-fs (loop4): Ignoring removed nobh option [ 446.636069][ T6553] EXT4-fs (loop4): Ignoring removed bh option [ 446.852588][ T6553] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 446.981993][ T6553] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,nouid32,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 447.113717][ T6569] loop3: detected capacity change from 0 to 128 [ 447.132818][ T6561] loop0: detected capacity change from 0 to 512 [ 447.197539][ T6] usbhid 2-1:0.0: can't add hid device: -71 [ 447.203609][ T6] usbhid: probe of 2-1:0.0 failed with error -71 [ 447.213703][ T6] usb 2-1: USB disconnect, device number 36 [ 447.227238][ T6561] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 447.244466][ T6561] EXT4-fs (loop0): 1 truncate cleaned up [ 447.269181][ T6561] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 448.471375][ T6581] loop3: detected capacity change from 0 to 128 [ 449.639665][ T6589] loop4: detected capacity change from 0 to 128 [ 450.026037][ T6584] loop1: detected capacity change from 0 to 512 [ 450.043111][ T6584] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 450.054237][ T6584] EXT4-fs (loop1): 1 truncate cleaned up [ 450.103997][ T6584] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 451.221323][ T6600] loop3: detected capacity change from 0 to 128 [ 451.388964][ T417] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 452.088821][ T417] usb 3-1: Using ep0 maxpacket: 16 [ 453.426947][ T6616] loop3: detected capacity change from 0 to 512 [ 453.438898][ T417] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 453.456586][ T417] usb 3-1: can't read configurations, error -71 [ 453.519881][ T6616] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 453.603246][ T6622] loop2: detected capacity change from 0 to 128 [ 456.485520][ T6642] loop0: detected capacity change from 0 to 128 [ 456.584428][ T6616] EXT4-fs: error -4 creating inode table initialization thread [ 456.652234][ T6616] EXT4-fs (loop3): mount failed [ 456.816601][ T6647] loop1: detected capacity change from 0 to 1024 [ 456.889608][ T6647] EXT4-fs (loop1): Ignoring removed nobh option [ 456.896874][ T6647] EXT4-fs (loop1): Ignoring removed bh option [ 456.909373][ T6647] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 456.951973][ T6647] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,nouid32,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 457.765379][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 457.765396][ T30] audit: type=1326 audit(1740957175.111:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6664 comm="syz.3.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7fcf72169 code=0x7ffc0000 [ 457.801765][ T30] audit: type=1326 audit(1740957175.141:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6664 comm="syz.3.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7fcf72169 code=0x7ffc0000 [ 457.825637][ T30] audit: type=1326 audit(1740957175.141:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6664 comm="syz.3.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7fd7fcf72169 code=0x7ffc0000 [ 457.859206][ T30] audit: type=1326 audit(1740957175.141:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6664 comm="syz.3.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7fcf72169 code=0x7ffc0000 [ 457.892851][ T30] audit: type=1326 audit(1740957175.141:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6664 comm="syz.3.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7fcf72169 code=0x7ffc0000 [ 457.918909][ T417] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 457.940851][ T30] audit: type=1326 audit(1740957175.141:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6664 comm="syz.3.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7fd7fcf72169 code=0x7ffc0000 [ 457.948869][ T6] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 457.964851][ T30] audit: type=1326 audit(1740957175.141:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6664 comm="syz.3.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7fcf72169 code=0x7ffc0000 [ 458.033352][ T6673] loop3: detected capacity change from 0 to 512 [ 458.060471][ T30] audit: type=1326 audit(1740957175.141:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6664 comm="syz.3.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7fcf72169 code=0x7ffc0000 [ 458.066988][ T6673] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 458.095014][ T6673] EXT4-fs (loop3): 1 truncate cleaned up [ 458.100563][ T6673] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 458.148868][ T409] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 458.596331][ T6] usb 5-1: Using ep0 maxpacket: 16 [ 459.097593][ T417] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 459.109669][ T417] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.119334][ T417] usb 1-1: config 0 interface 0 has no altsetting 0 [ 459.125759][ T417] usb 1-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 459.135104][ T417] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.144053][ T417] usb 1-1: config 0 descriptor?? [ 459.208858][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.219619][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.229295][ T409] usb 2-1: Using ep0 maxpacket: 16 [ 459.234362][ T6] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 459.247306][ T6] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 459.376139][ T6682] loop3: detected capacity change from 0 to 1024 [ 459.511530][ T6682] EXT4-fs (loop3): Ignoring removed nobh option [ 459.524553][ T6682] EXT4-fs (loop3): Ignoring removed bh option [ 459.532476][ T6682] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 459.539066][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.560588][ T6682] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,nouid32,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 459.583365][ T6] usb 5-1: config 0 descriptor?? [ 459.618903][ T409] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.630114][ T409] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.640099][ T409] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 459.653188][ T417] usbhid 1-1:0.0: can't add hid device: -71 [ 459.665016][ T409] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 459.673978][ T417] usbhid: probe of 1-1:0.0 failed with error -71 [ 459.680853][ T417] usb 1-1: USB disconnect, device number 36 [ 459.687062][ T409] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.700281][ T409] usb 2-1: config 0 descriptor?? [ 461.171045][ T6696] netlink: 'syz.0.1817': attribute type 4 has an invalid length. [ 461.178605][ T6696] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.1817'. [ 461.425017][ T6700] netlink: 'syz.2.1820': attribute type 4 has an invalid length. [ 461.432613][ T6700] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1820'. [ 461.462496][ T409] microsoft 0003:045E:07DA.0025: invalid report_count 1243787297 [ 461.470507][ T6] microsoft 0003:045E:07DA.0024: invalid report_count 1243787297 [ 461.478140][ T6] microsoft 0003:045E:07DA.0024: item 0 4 1 9 parsing failed [ 461.485463][ T409] microsoft 0003:045E:07DA.0025: item 0 4 1 9 parsing failed [ 461.493510][ T409] microsoft 0003:045E:07DA.0025: parse failed [ 461.508200][ T6704] 9pnet: Insufficient options for proto=fd [ 461.515025][ T6] microsoft 0003:045E:07DA.0024: parse failed [ 461.521116][ T409] microsoft: probe of 0003:045E:07DA.0025 failed with error -22 [ 461.538809][ T6] microsoft: probe of 0003:045E:07DA.0024 failed with error -22 [ 461.566338][ T6706] loop3: detected capacity change from 0 to 1024 [ 461.593939][ T6] usb 5-1: USB disconnect, device number 42 [ 461.624550][ T6706] EXT4-fs (loop3): Ignoring removed nobh option [ 461.631137][ T6706] EXT4-fs (loop3): Ignoring removed bh option [ 461.648290][ T6706] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 461.744950][ T488] usb 2-1: USB disconnect, device number 37 [ 461.839597][ T6706] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,nouid32,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 461.900162][ T6711] loop2: detected capacity change from 0 to 512 [ 461.987186][ T6711] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 461.998705][ T6711] EXT4-fs (loop2): 1 truncate cleaned up [ 462.004256][ T6711] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 462.535256][ T30] audit: type=1326 audit(1740957179.881:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6723 comm="syz.3.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7fcf72169 code=0x7ffc0000 [ 462.603927][ T30] audit: type=1326 audit(1740957179.881:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6723 comm="syz.3.1825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7fcf72169 code=0x7ffc0000 [ 462.630568][ T6728] loop0: detected capacity change from 0 to 512 [ 462.681731][ T6730] loop3: detected capacity change from 0 to 1024 [ 462.709515][ T6730] EXT4-fs (loop3): Ignoring removed nobh option [ 462.725903][ T6730] EXT4-fs (loop3): Ignoring removed bh option [ 462.746141][ T6730] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 462.830436][ T6728] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.1824: casefold flag without casefold feature [ 462.843542][ T6728] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.1824: couldn't read orphan inode 15 (err -117) [ 462.856429][ T6728] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 462.990152][ T6730] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,nouid32,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 463.018946][ T6740] loop1: detected capacity change from 0 to 128 [ 463.027872][ T6738] loop2: detected capacity change from 0 to 512 [ 463.162198][ T6738] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 463.193316][ T6738] EXT4-fs (loop2): 1 truncate cleaned up [ 463.199123][ T6738] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 464.030426][ T6754] 9pnet: Insufficient options for proto=fd [ 464.384893][ T6756] netlink: 'syz.0.1834': attribute type 4 has an invalid length. [ 464.392549][ T6756] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.1834'. [ 464.799898][ T6765] netlink: 'syz.1.1831': attribute type 4 has an invalid length. [ 464.822756][ T6767] loop2: detected capacity change from 0 to 1024 [ 464.829084][ T6765] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1831'. [ 464.875929][ T6767] EXT4-fs (loop2): Ignoring removed nobh option [ 464.885419][ T6767] EXT4-fs (loop2): Ignoring removed bh option [ 464.897967][ T6767] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 464.937224][ T6767] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,nouid32,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 465.550777][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 465.550795][ T30] audit: type=1326 audit(1740957182.901:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6787 comm="syz.3.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7fcf72169 code=0x7ffc0000 [ 465.580404][ T30] audit: type=1326 audit(1740957182.901:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6787 comm="syz.3.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7fcf72169 code=0x7ffc0000 [ 465.604683][ T30] audit: type=1326 audit(1740957182.901:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6787 comm="syz.3.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7fd7fcf72169 code=0x7ffc0000 [ 465.628159][ T30] audit: type=1326 audit(1740957182.901:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6787 comm="syz.3.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7fcf72169 code=0x7ffc0000 [ 465.652940][ T30] audit: type=1326 audit(1740957182.901:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6787 comm="syz.3.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7fcf72169 code=0x7ffc0000 [ 465.653777][ T6788] loop1: detected capacity change from 0 to 512 [ 465.676640][ T30] audit: type=1326 audit(1740957182.901:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6787 comm="syz.3.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7fd7fcf72169 code=0x7ffc0000 [ 465.758193][ T30] audit: type=1326 audit(1740957182.901:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6787 comm="syz.3.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7fcf72169 code=0x7ffc0000 [ 465.782597][ T30] audit: type=1326 audit(1740957182.901:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6787 comm="syz.3.1842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7fcf72169 code=0x7ffc0000 [ 465.821106][ T6793] loop3: detected capacity change from 0 to 128 [ 465.995768][ T6788] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.1841: casefold flag without casefold feature [ 466.010033][ T6788] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.1841: couldn't read orphan inode 15 (err -117) [ 466.022282][ T6788] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 466.828907][ T6802] netlink: 'syz.4.1845': attribute type 4 has an invalid length. [ 466.836492][ T6802] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.1845'. [ 467.726578][ T6805] 9pnet: Insufficient options for proto=fd [ 468.952314][ T6812] loop1: detected capacity change from 0 to 128 [ 468.960714][ T6815] loop3: detected capacity change from 0 to 128 [ 469.183823][ T6821] loop4: detected capacity change from 0 to 128 [ 469.669697][ T39] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 471.148339][ T6837] netlink: 'syz.0.1852': attribute type 4 has an invalid length. [ 471.682305][ T6837] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.1852'. [ 471.973504][ T1931] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 472.348937][ T1931] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 472.360019][ T1931] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 472.388584][ T1931] usb 4-1: config 0 interface 0 has no altsetting 0 [ 472.395382][ T1931] usb 4-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 472.404496][ T1931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.416655][ T1931] usb 4-1: config 0 descriptor?? [ 473.938845][ T6] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 475.411568][ T1931] usbhid 4-1:0.0: can't add hid device: -71 [ 475.417381][ T1931] usbhid: probe of 4-1:0.0 failed with error -71 [ 475.477730][ T1931] usb 4-1: USB disconnect, device number 38 [ 475.594122][ T6875] loop2: detected capacity change from 0 to 128 [ 479.160809][ T6884] loop2: detected capacity change from 0 to 1024 [ 479.231768][ T6] usb 5-1: device not accepting address 43, error -71 [ 479.310214][ T6890] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1865'. [ 479.319082][ T6890] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1865'. [ 479.518011][ T6891] netlink: 'syz.0.1864': attribute type 4 has an invalid length. [ 479.525765][ T6891] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.1864'. [ 479.546558][ T6884] EXT4-fs (loop2): Ignoring removed nobh option [ 479.552755][ T6884] EXT4-fs (loop2): Ignoring removed bh option [ 479.559092][ T6884] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 479.571444][ T409] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 479.712659][ T6884] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,nouid32,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 480.507528][ T6895] netlink: 'syz.3.1866': attribute type 4 has an invalid length. [ 480.515111][ T6895] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1866'. [ 480.560226][ T409] usb 2-1: Using ep0 maxpacket: 16 [ 481.363964][ T409] usb 2-1: device descriptor read/all, error -71 [ 481.928916][ T6914] netlink: 'syz.1.1871': attribute type 4 has an invalid length. [ 481.936480][ T6914] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1871'. [ 483.261342][ T6931] loop1: detected capacity change from 0 to 128 [ 485.513377][ T6950] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1880'. [ 485.522242][ T6950] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1880'. [ 485.539250][ T488] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 485.938857][ T488] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 485.958785][ T488] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 485.980160][ T488] usb 2-1: config 0 interface 0 has no altsetting 0 [ 486.058977][ T488] usb 2-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 486.067932][ T488] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.087056][ T488] usb 2-1: config 0 descriptor?? [ 486.108998][ T409] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 486.588962][ T488] usbhid 2-1:0.0: can't add hid device: -71 [ 486.595160][ T488] usbhid: probe of 2-1:0.0 failed with error -71 [ 486.632122][ T6966] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1885'. [ 486.640981][ T6966] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1885'. [ 486.674336][ T39] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 486.757940][ T488] usb 2-1: USB disconnect, device number 40 [ 487.154595][ T409] usb 3-1: unable to get BOS descriptor or descriptor too short [ 487.158904][ T39] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 487.229779][ T39] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 487.307923][ T39] usb 4-1: config 0 interface 0 has no altsetting 0 [ 487.314574][ T39] usb 4-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 487.323595][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.348262][ T39] usb 4-1: config 0 descriptor?? [ 487.767652][ T6980] loop0: detected capacity change from 0 to 512 [ 488.028234][ T6980] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.1898: casefold flag without casefold feature [ 488.040980][ T6980] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.1898: couldn't read orphan inode 15 (err -117) [ 488.053443][ T6980] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 489.996767][ T409] usb 3-1: unable to read config index 0 descriptor/all [ 490.026936][ T409] usb 3-1: can't read configurations, error -71 [ 490.457659][ T7003] loop4: detected capacity change from 0 to 128 [ 492.250362][ T39] usbhid 4-1:0.0: can't add hid device: -71 [ 492.296088][ T39] usbhid: probe of 4-1:0.0 failed with error -71 [ 492.355866][ T7023] netlink: 'syz.4.1895': attribute type 4 has an invalid length. [ 492.363541][ T7023] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.1895'. [ 492.430483][ T39] usb 4-1: USB disconnect, device number 39 [ 492.818806][ T1931] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 495.268579][ T7053] loop0: detected capacity change from 0 to 128 [ 497.129009][ T1931] usb 2-1: unable to read config index 0 descriptor/all [ 497.138620][ T7073] loop3: detected capacity change from 0 to 128 [ 497.144873][ T1931] usb 2-1: can't read configurations, error -71 [ 497.402984][ T7076] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1907'. [ 497.411836][ T7076] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1907'. [ 497.619837][ T931] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 497.858861][ T931] usb 5-1: Using ep0 maxpacket: 16 [ 498.340110][ T931] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 498.362669][ T931] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 498.382281][ T931] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 498.456142][ T7084] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1912'. [ 498.464993][ T7084] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1912'. [ 498.791618][ T931] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 498.819044][ T931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.849070][ T931] usb 5-1: config 0 descriptor?? [ 499.167351][ T30] audit: type=1326 audit(1740957216.511:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7096 comm="syz.3.1918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7fcf72169 code=0x7ffc0000 [ 499.208918][ T931] usbhid 5-1:0.0: can't add hid device: -71 [ 499.215182][ T931] usbhid: probe of 5-1:0.0 failed with error -71 [ 499.276303][ T931] usb 5-1: USB disconnect, device number 45 [ 499.283111][ T30] audit: type=1326 audit(1740957216.511:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7096 comm="syz.3.1918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7fcf72169 code=0x7ffc0000 [ 499.495915][ T30] audit: type=1326 audit(1740957216.511:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7096 comm="syz.3.1918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7fd7fcf72169 code=0x7ffc0000 [ 499.565452][ T30] audit: type=1326 audit(1740957216.511:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7096 comm="syz.3.1918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7fcf72169 code=0x7ffc0000 [ 499.588990][ T30] audit: type=1326 audit(1740957216.511:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7096 comm="syz.3.1918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7fcf72169 code=0x7ffc0000 [ 499.635058][ T30] audit: type=1326 audit(1740957216.511:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7096 comm="syz.3.1918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7fd7fcf72169 code=0x7ffc0000 [ 499.678089][ T30] audit: type=1326 audit(1740957216.511:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7096 comm="syz.3.1918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7fcf72169 code=0x7ffc0000 [ 499.715830][ T30] audit: type=1326 audit(1740957216.511:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7096 comm="syz.3.1918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7fcf72169 code=0x7ffc0000 [ 499.771109][ T1931] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 500.273504][ T1931] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 500.476679][ T1931] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 500.487956][ T1931] usb 2-1: config 0 interface 0 has no altsetting 0 [ 502.893181][ T1931] usb 2-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 502.906836][ T1931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.943951][ T1931] usb 2-1: config 0 descriptor?? [ 502.998905][ T1931] usb 2-1: can't set config #0, error -71 [ 503.033359][ T1931] usb 2-1: USB disconnect, device number 43 [ 503.090981][ T7124] loop2: detected capacity change from 0 to 1024 [ 503.277421][ T7124] EXT4-fs (loop2): Ignoring removed nobh option [ 503.287718][ T7124] EXT4-fs (loop2): Ignoring removed bh option [ 503.300293][ T7124] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 503.385483][ T7124] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,nouid32,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 505.377279][ T7150] loop0: detected capacity change from 0 to 128 [ 505.415761][ T30] audit: type=1326 audit(1740957222.761:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7147 comm="syz.2.1930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620800b169 code=0x7ffc0000 [ 505.439358][ T30] audit: type=1326 audit(1740957222.781:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7147 comm="syz.2.1930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620800b169 code=0x7ffc0000 [ 505.659711][ T30] audit: type=1326 audit(1740957222.791:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7147 comm="syz.2.1930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f620800b169 code=0x7ffc0000 [ 505.909612][ T7152] loop3: detected capacity change from 0 to 128 [ 506.021186][ T30] audit: type=1326 audit(1740957222.791:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7147 comm="syz.2.1930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620800b169 code=0x7ffc0000 [ 506.068810][ T30] audit: type=1326 audit(1740957222.791:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7147 comm="syz.2.1930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620800b169 code=0x7ffc0000 [ 506.098848][ T30] audit: type=1326 audit(1740957222.791:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7147 comm="syz.2.1930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f620800b169 code=0x7ffc0000 [ 506.122203][ T30] audit: type=1326 audit(1740957222.791:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7147 comm="syz.2.1930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620800b169 code=0x7ffc0000 [ 506.146052][ T30] audit: type=1326 audit(1740957222.791:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7147 comm="syz.2.1930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620800b169 code=0x7ffc0000 [ 506.368798][ T488] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 506.781486][ T7171] loop4: detected capacity change from 0 to 128 [ 507.802099][ T488] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 507.818810][ T488] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 507.828365][ T488] usb 3-1: config 0 interface 0 has no altsetting 0 [ 507.845915][ T488] usb 3-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 507.854806][ T488] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.863372][ T488] usb 3-1: config 0 descriptor?? [ 508.717236][ T7193] netlink: 'syz.4.1943': attribute type 4 has an invalid length. [ 508.724902][ T7193] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.1943'. [ 509.450377][ T7200] loop4: detected capacity change from 0 to 1024 [ 509.512826][ T7200] EXT4-fs (loop4): Ignoring removed nobh option [ 509.536347][ T7200] EXT4-fs (loop4): Ignoring removed bh option [ 509.549003][ T7200] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 509.692454][ T7200] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,nouid32,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 509.756238][ T7211] loop1: detected capacity change from 0 to 128 [ 509.829354][ T488] usbhid 3-1:0.0: can't add hid device: -71 [ 509.850116][ T488] usbhid: probe of 3-1:0.0 failed with error -71 [ 510.050243][ T488] usb 3-1: USB disconnect, device number 46 [ 511.133366][ T7229] loop1: detected capacity change from 0 to 128 [ 513.889862][ T7239] loop3: detected capacity change from 0 to 128 [ 515.374487][ T488] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 515.885917][ T7256] loop0: detected capacity change from 0 to 128 [ 517.345227][ T7263] loop1: detected capacity change from 0 to 1024 [ 517.439654][ T7263] EXT4-fs (loop1): Ignoring removed nobh option [ 517.448811][ T7263] EXT4-fs (loop1): Ignoring removed bh option [ 517.465992][ T7263] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 517.603253][ T7263] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,nouid32,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 517.682212][ T488] usb 3-1: device descriptor read/all, error -71 [ 517.785292][ T7280] loop0: detected capacity change from 0 to 128 [ 520.838941][ T1931] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 521.049373][ T7312] loop1: detected capacity change from 0 to 1024 [ 521.110134][ T7312] EXT4-fs (loop1): Ignoring removed nobh option [ 521.116369][ T7312] EXT4-fs (loop1): Ignoring removed bh option [ 521.122566][ T7312] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 521.140813][ T7312] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,nouid32,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 521.348943][ T1931] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 523.147330][ T7323] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1974'. [ 523.156158][ T7323] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1974'. [ 523.167246][ T1931] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 523.177553][ T1931] usb 5-1: config 0 interface 0 has no altsetting 0 [ 523.453040][ T1931] usb 5-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 523.461970][ T1931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.539033][ T1931] usb 5-1: config 0 descriptor?? [ 523.572575][ T7329] loop0: detected capacity change from 0 to 128 [ 523.600291][ T1931] usb 5-1: can't set config #0, error -71 [ 523.616128][ T1931] usb 5-1: USB disconnect, device number 46 [ 523.751067][ T30] audit: type=1326 audit(1740957241.101:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7342 comm="syz.0.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce79cf0169 code=0x7ffc0000 [ 523.777258][ T7337] loop3: detected capacity change from 0 to 512 [ 523.789708][ T30] audit: type=1326 audit(1740957241.121:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7342 comm="syz.0.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce79cf0169 code=0x7ffc0000 [ 523.819404][ T7345] loop4: detected capacity change from 0 to 128 [ 523.844204][ T30] audit: type=1326 audit(1740957241.121:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7342 comm="syz.0.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7fce79cf0169 code=0x7ffc0000 [ 523.912176][ T30] audit: type=1326 audit(1740957241.121:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7342 comm="syz.0.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce79cf0169 code=0x7ffc0000 [ 523.953843][ T7337] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.1979: casefold flag without casefold feature [ 523.966610][ T7337] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.1979: couldn't read orphan inode 15 (err -117) [ 523.978789][ T7337] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 524.037961][ T30] audit: type=1326 audit(1740957241.121:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7342 comm="syz.0.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce79cf0169 code=0x7ffc0000 [ 524.112166][ T30] audit: type=1326 audit(1740957241.121:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7342 comm="syz.0.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7fce79cf0169 code=0x7ffc0000 [ 524.183085][ T30] audit: type=1326 audit(1740957241.121:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7342 comm="syz.0.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce79cf0169 code=0x7ffc0000 [ 524.206410][ T30] audit: type=1326 audit(1740957241.121:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7342 comm="syz.0.1981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce79cf0169 code=0x7ffc0000 [ 524.653483][ T7360] loop3: detected capacity change from 0 to 128 [ 525.812992][ T7366] loop4: detected capacity change from 0 to 128 [ 525.921784][ T7369] 9pnet: Could not find request transport: fd0x0000000000000003 [ 526.187268][ T7373] loop3: detected capacity change from 0 to 1024 [ 526.625630][ T7377] netlink: 'syz.1.1988': attribute type 4 has an invalid length. [ 526.633251][ T7377] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1988'. [ 527.138923][ T7379] netlink: 'syz.2.1989': attribute type 4 has an invalid length. [ 527.146518][ T7379] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1989'. [ 527.731695][ T7373] EXT4-fs (loop3): Ignoring removed nobh option [ 527.738898][ T7373] EXT4-fs (loop3): Ignoring removed bh option [ 527.749015][ T7373] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 527.903791][ T7373] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,nouid32,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 527.934626][ T7382] loop1: detected capacity change from 0 to 1024 [ 527.958539][ T7382] EXT4-fs (loop1): Ignoring removed nobh option [ 527.964856][ T7382] EXT4-fs (loop1): Ignoring removed bh option [ 527.971178][ T7382] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 528.034805][ T7382] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,nouid32,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 528.489524][ T7397] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1993'. [ 528.498307][ T7397] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1993'. [ 529.033198][ T7409] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1994'. [ 529.042099][ T7409] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1994'. [ 529.338793][ T1931] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 529.589196][ T7414] netlink: 'syz.3.1995': attribute type 4 has an invalid length. [ 529.596812][ T7414] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1995'. [ 529.807725][ T7422] 9pnet: Could not find request transport: fd0x0000000000000003 [ 529.899133][ T7424] loop2: detected capacity change from 0 to 512 [ 530.042032][ T7424] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.1998: casefold flag without casefold feature [ 530.055323][ T7424] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.1998: couldn't read orphan inode 15 (err -117) [ 530.069481][ T7424] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 530.399766][ T1931] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 530.424331][ T1931] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 530.436659][ T1931] usb 1-1: config 0 interface 0 has no altsetting 0 [ 530.637713][ T7433] loop3: detected capacity change from 0 to 512 [ 530.786313][ T7434] loop1: detected capacity change from 0 to 128 [ 531.398986][ T1931] usb 1-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 531.407964][ T1931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.423856][ T1931] usb 1-1: config 0 descriptor?? [ 531.429215][ T30] audit: type=1326 audit(1740957247.871:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7428 comm="syz.3.2002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7fcf72169 code=0x7ffc0000 [ 531.619615][ T7433] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 531.632166][ T7433] ext4 filesystem being mounted at /399/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 531.707739][ T30] audit: type=1326 audit(1740957247.881:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7428 comm="syz.3.2002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7fcf72169 code=0x7ffc0000 [ 531.731850][ T7433] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2002'. [ 531.744475][ T30] audit: type=1326 audit(1740957247.891:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7428 comm="syz.3.2002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd7fcf72169 code=0x7ffc0000 [ 531.767868][ T30] audit: type=1326 audit(1740957247.891:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7428 comm="syz.3.2002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7fcf72169 code=0x7ffc0000 [ 531.792505][ T30] audit: type=1326 audit(1740957247.901:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7428 comm="syz.3.2002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7fcf72169 code=0x7ffc0000 [ 531.920869][ T30] audit: type=1326 audit(1740957247.951:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7428 comm="syz.3.2002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd7fcf72169 code=0x7ffc0000 [ 532.064622][ T30] audit: type=1326 audit(1740957247.951:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7428 comm="syz.3.2002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7fcf72169 code=0x7ffc0000 [ 532.324946][ T30] audit: type=1326 audit(1740957247.951:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7428 comm="syz.3.2002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7fcf72169 code=0x7ffc0000 [ 532.366613][ T30] audit: type=1326 audit(1740957247.961:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7428 comm="syz.3.2002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd7fcf72169 code=0x7ffc0000 [ 532.390348][ T1931] usbhid 1-1:0.0: can't add hid device: -71 [ 532.396263][ T1931] usbhid: probe of 1-1:0.0 failed with error -71 [ 532.424571][ T7449] loop0: detected capacity change from 0 to 128 [ 532.522697][ T1931] usb 1-1: USB disconnect, device number 38 [ 532.788366][ T30] audit: type=1326 audit(1740957247.961:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7428 comm="syz.3.2002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd7fcf721a3 code=0x7ffc0000 [ 533.811465][ T7466] 9pnet: Could not find request transport: fd0x0000000000000003 [ 534.814790][ T7474] loop3: detected capacity change from 0 to 512 [ 535.056952][ T7479] loop4: detected capacity change from 0 to 1024 [ 535.089588][ T7474] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.2014: casefold flag without casefold feature [ 535.102884][ T7474] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.2014: couldn't read orphan inode 15 (err -117) [ 535.115774][ T7474] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 535.399853][ T7479] EXT4-fs (loop4): Ignoring removed nobh option [ 535.405940][ T7479] EXT4-fs (loop4): Ignoring removed bh option [ 535.429066][ T7479] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 535.485073][ T7479] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,nouid32,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 536.553416][ T409] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 536.725684][ T7500] loop2: detected capacity change from 0 to 128 [ 536.998902][ T409] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 537.124660][ T409] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 537.787341][ T409] usb 1-1: config 0 interface 0 has no altsetting 0 [ 537.797418][ T409] usb 1-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 537.817596][ T409] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.863895][ T409] usb 1-1: config 0 descriptor?? [ 538.218214][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 538.218231][ T30] audit: type=1326 audit(1740957255.561:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7512 comm="syz.2.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620800b169 code=0x7ffc0000 [ 538.300833][ T30] audit: type=1326 audit(1740957255.561:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7512 comm="syz.2.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620800b169 code=0x7ffc0000 [ 538.348904][ T409] usbhid 1-1:0.0: can't add hid device: -71 [ 538.363473][ T409] usbhid: probe of 1-1:0.0 failed with error -71 [ 538.402524][ T30] audit: type=1326 audit(1740957255.601:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7512 comm="syz.2.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f620800b169 code=0x7ffc0000 [ 538.406254][ T409] usb 1-1: USB disconnect, device number 39 [ 538.426335][ T30] audit: type=1326 audit(1740957255.601:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7512 comm="syz.2.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620800b169 code=0x7ffc0000 [ 538.454748][ T30] audit: type=1326 audit(1740957255.601:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7512 comm="syz.2.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620800b169 code=0x7ffc0000 [ 538.527535][ T30] audit: type=1326 audit(1740957255.601:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7512 comm="syz.2.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f620800b169 code=0x7ffc0000 [ 538.594910][ T30] audit: type=1326 audit(1740957255.601:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7512 comm="syz.2.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620800b169 code=0x7ffc0000 [ 538.653784][ T30] audit: type=1326 audit(1740957255.601:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7512 comm="syz.2.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620800b169 code=0x7ffc0000 [ 538.668807][ T7521] 9pnet: Insufficient options for proto=fd [ 538.964092][ T7527] loop1: detected capacity change from 0 to 512 [ 539.338903][ T7527] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.2025: casefold flag without casefold feature [ 539.352248][ T7527] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.2025: couldn't read orphan inode 15 (err -117) [ 539.365292][ T7527] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 541.130315][ T7547] loop2: detected capacity change from 0 to 1024 [ 541.200739][ T7547] EXT4-fs (loop2): Ignoring removed nobh option [ 541.206813][ T7547] EXT4-fs (loop2): Ignoring removed bh option [ 541.212785][ T7547] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 541.402609][ T7547] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,nouid32,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 541.571232][ T7564] loop0: detected capacity change from 0 to 128 [ 541.590595][ T7568] loop3: detected capacity change from 0 to 512 [ 541.952101][ T7568] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 542.037240][ T7568] EXT4-fs (loop3): 1 truncate cleaned up [ 542.158342][ T7568] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 542.838236][ T409] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 543.017867][ T7583] loop4: detected capacity change from 0 to 512 [ 543.173643][ T7583] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.2039: casefold flag without casefold feature [ 543.186898][ T7583] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.2039: couldn't read orphan inode 15 (err -117) [ 543.200658][ T7583] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 543.598265][ T7589] netlink: 'syz.2.2040': attribute type 4 has an invalid length. [ 543.605884][ T7589] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.2040'. [ 544.598907][ T409] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 544.621040][ T409] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 544.638784][ T409] usb 2-1: config 0 interface 0 has no altsetting 0 [ 544.655554][ T409] usb 2-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 544.685850][ T409] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.698823][ T409] usb 2-1: config 0 descriptor?? [ 544.887580][ T7607] loop3: detected capacity change from 0 to 1024 [ 545.153036][ T7607] EXT4-fs (loop3): Ignoring removed nobh option [ 545.181625][ T7607] EXT4-fs (loop3): Ignoring removed bh option [ 545.198075][ T7607] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 545.268028][ T7607] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,nouid32,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 545.348806][ T409] usbhid 2-1:0.0: can't add hid device: -71 [ 545.354669][ T409] usbhid: probe of 2-1:0.0 failed with error -71 [ 545.372142][ T409] usb 2-1: USB disconnect, device number 44 [ 546.063367][ T7630] loop1: detected capacity change from 0 to 1024 [ 546.129774][ T7630] EXT4-fs (loop1): Ignoring removed nobh option [ 546.135991][ T7630] EXT4-fs (loop1): Ignoring removed bh option [ 546.142226][ T7630] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 546.160494][ T7630] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,nouid32,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 546.227180][ T7634] 9pnet: Insufficient options for proto=fd [ 546.287929][ T417] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 547.101709][ T7640] loop3: detected capacity change from 0 to 512 [ 548.293450][ T30] audit: type=1326 audit(1740957264.441:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7636 comm="syz.3.2053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7fcf72169 code=0x7ffc0000 [ 548.320702][ T30] audit: type=1326 audit(1740957264.441:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7636 comm="syz.3.2053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7fcf72169 code=0x7ffc0000 [ 548.356801][ T30] audit: type=1326 audit(1740957264.441:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7636 comm="syz.3.2053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd7fcf72169 code=0x7ffc0000 [ 548.403900][ T30] audit: type=1326 audit(1740957264.441:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7636 comm="syz.3.2053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7fcf72169 code=0x7ffc0000 [ 548.440650][ T30] audit: type=1326 audit(1740957264.441:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7636 comm="syz.3.2053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7fcf72169 code=0x7ffc0000 [ 548.465765][ T7640] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 548.477954][ T7640] ext4 filesystem being mounted at /411/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 548.500798][ T30] audit: type=1326 audit(1740957264.441:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7636 comm="syz.3.2053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd7fcf72169 code=0x7ffc0000 [ 548.524131][ T30] audit: type=1326 audit(1740957264.441:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7636 comm="syz.3.2053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7fcf72169 code=0x7ffc0000 [ 548.547624][ T7639] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2053'. [ 548.547645][ T30] audit: type=1326 audit(1740957264.441:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7636 comm="syz.3.2053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7fcf72169 code=0x7ffc0000 [ 548.579862][ T30] audit: type=1326 audit(1740957264.441:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7636 comm="syz.3.2053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd7fcf72169 code=0x7ffc0000 [ 548.933265][ T30] audit: type=1326 audit(1740957264.441:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7636 comm="syz.3.2053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd7fcf721a3 code=0x7ffc0000 [ 549.453681][ T417] usb 1-1: unable to read config index 0 descriptor/all [ 549.494402][ T7663] netlink: 'syz.3.2057': attribute type 4 has an invalid length. [ 549.502053][ T7663] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.2057'. [ 549.755807][ T417] usb 1-1: can't read configurations, error -71 [ 550.817277][ T7664] loop2: detected capacity change from 0 to 128 [ 550.826711][ T7669] loop4: detected capacity change from 0 to 512 [ 550.876625][ T7669] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 550.894912][ T7669] EXT4-fs (loop4): 1 truncate cleaned up [ 550.908826][ T7669] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 551.238752][ T1931] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 551.368785][ T488] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 551.518323][ T1931] usb 2-1: Using ep0 maxpacket: 16 [ 551.729012][ T488] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 551.779616][ T488] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 551.872869][ T488] usb 4-1: config 0 interface 0 has no altsetting 0 [ 551.898780][ T488] usb 4-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 551.918309][ T488] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.941913][ T488] usb 4-1: config 0 descriptor?? [ 551.958834][ T1931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 551.977775][ T1931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 551.995664][ T1931] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 552.019579][ T1931] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 552.036673][ T1931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.049198][ T1931] usb 2-1: config 0 descriptor?? [ 552.447174][ T409] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 552.488806][ T488] usbhid 4-1:0.0: can't add hid device: -71 [ 552.494586][ T488] usbhid: probe of 4-1:0.0 failed with error -71 [ 552.504561][ T488] usb 4-1: USB disconnect, device number 40 [ 552.811045][ T7702] loop2: detected capacity change from 0 to 512 [ 553.004022][ T7702] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.2067: casefold flag without casefold feature [ 553.017491][ T7702] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.2067: couldn't read orphan inode 15 (err -117) [ 553.031368][ T7702] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 553.835121][ T1931] microsoft 0003:045E:07DA.0026: invalid report_count 1243787297 [ 553.998471][ T1931] microsoft 0003:045E:07DA.0026: item 0 4 1 9 parsing failed [ 554.005898][ T1931] microsoft 0003:045E:07DA.0026: parse failed [ 554.011820][ T1931] microsoft: probe of 0003:045E:07DA.0026 failed with error -22 [ 554.021121][ T1931] usb 2-1: USB disconnect, device number 45 [ 554.039257][ T7712] loop2: detected capacity change from 0 to 1024 [ 554.149381][ T7712] EXT4-fs (loop2): Ignoring removed nobh option [ 554.155722][ T7712] EXT4-fs (loop2): Ignoring removed bh option [ 554.161715][ T7712] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 554.194640][ T7712] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,nouid32,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 554.268875][ T409] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 554.278707][ T409] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 255 [ 554.679181][ T409] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 554.688256][ T409] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.696437][ T409] usb 1-1: Product: syz [ 554.724184][ T409] usb 1-1: Manufacturer: syz [ 554.728650][ T409] usb 1-1: SerialNumber: syz [ 554.748834][ T1931] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 555.588846][ T409] cdc_ncm 1-1:1.0: bind() failure [ 555.594786][ T409] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 555.608790][ T409] cdc_ncm 1-1:1.1: bind() failure [ 555.614850][ T409] usb 1-1: USB disconnect, device number 42 [ 555.848289][ T7744] loop4: detected capacity change from 0 to 128 [ 555.869093][ T1931] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 555.892832][ T1931] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 556.009682][ T488] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 556.024304][ T1931] usb 2-1: config 0 interface 0 has no altsetting 0 [ 556.049472][ T1931] usb 2-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 556.120519][ T1931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.210138][ T1931] usb 2-1: config 0 descriptor?? [ 556.400696][ T488] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 556.462342][ T488] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 556.472011][ T488] usb 3-1: config 0 interface 0 has no altsetting 0 [ 557.048771][ T488] usb 3-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 557.057656][ T488] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.068831][ T1931] usbhid 2-1:0.0: can't add hid device: -71 [ 557.074794][ T1931] usbhid: probe of 2-1:0.0 failed with error -71 [ 557.103628][ T1931] usb 2-1: USB disconnect, device number 46 [ 557.209476][ T488] usb 3-1: config 0 descriptor?? [ 557.588954][ T488] usbhid 3-1:0.0: can't add hid device: -71 [ 557.596385][ T488] usbhid: probe of 3-1:0.0 failed with error -71 [ 557.606655][ T488] usb 3-1: USB disconnect, device number 49 [ 557.748796][ T409] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 557.756221][ T417] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 557.878464][ T7758] loop1: detected capacity change from 0 to 1024 [ 557.969270][ T7758] EXT4-fs (loop1): Ignoring removed nobh option [ 557.975422][ T7758] EXT4-fs (loop1): Ignoring removed bh option [ 557.981589][ T7758] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 557.998797][ T409] usb 1-1: Using ep0 maxpacket: 16 [ 558.001570][ T7758] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,nouid32,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 558.158992][ T417] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 558.169877][ T409] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 558.624986][ T409] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 558.638992][ T417] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 558.650712][ T409] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 558.664386][ T417] usb 5-1: config 0 interface 0 has no altsetting 0 [ 558.674996][ T417] usb 5-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 558.736615][ T409] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 558.747585][ T417] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.756497][ T409] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.579154][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 559.579175][ T30] audit: type=1326 audit(1740957276.601:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7772 comm="syz.2.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620800b169 code=0x7ffc0000 [ 559.628615][ T7774] loop2: detected capacity change from 0 to 512 [ 559.658385][ T30] audit: type=1326 audit(1740957276.601:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7772 comm="syz.2.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620800b169 code=0x7ffc0000 [ 559.717111][ T30] audit: type=1326 audit(1740957276.601:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7772 comm="syz.2.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f620800b169 code=0x7ffc0000 [ 559.756351][ T7774] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 559.768585][ T7774] ext4 filesystem being mounted at /427/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 559.784296][ T7774] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2086'. [ 559.794360][ T417] usb 5-1: config 0 descriptor?? [ 559.801294][ T30] audit: type=1326 audit(1740957276.611:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7772 comm="syz.2.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620800b169 code=0x7ffc0000 [ 559.827005][ T409] usb 1-1: config 0 descriptor?? [ 559.843239][ T30] audit: type=1326 audit(1740957276.611:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7772 comm="syz.2.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620800b169 code=0x7ffc0000 [ 559.889928][ T30] audit: type=1326 audit(1740957276.621:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7772 comm="syz.2.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f620800b169 code=0x7ffc0000 [ 559.940038][ T30] audit: type=1326 audit(1740957276.971:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7772 comm="syz.2.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620800b169 code=0x7ffc0000 [ 559.986831][ T30] audit: type=1326 audit(1740957276.971:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7772 comm="syz.2.2086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620800b169 code=0x7ffc0000 [ 560.288302][ T417] usbhid 5-1:0.0: can't add hid device: -71 [ 560.294100][ T417] usbhid: probe of 5-1:0.0 failed with error -71 [ 560.303937][ T417] usb 5-1: USB disconnect, device number 47 [ 560.319747][ T409] microsoft 0003:045E:07DA.0027: invalid report_count 1243787297 [ 560.331757][ T409] microsoft 0003:045E:07DA.0027: item 0 4 1 9 parsing failed [ 561.008435][ T7799] 9pnet: Insufficient options for proto=fd [ 561.486023][ T7807] loop4: detected capacity change from 0 to 1024 [ 561.549984][ T7807] EXT4-fs (loop4): Ignoring removed nobh option [ 561.556134][ T7807] EXT4-fs (loop4): Ignoring removed bh option [ 561.562355][ T7807] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 561.571578][ T409] microsoft 0003:045E:07DA.0027: parse failed [ 561.580146][ T409] microsoft: probe of 0003:045E:07DA.0027 failed with error -22 [ 561.591453][ T409] usb 1-1: USB disconnect, device number 43 [ 561.610655][ T7807] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,nouid32,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 561.728951][ T904] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 561.808876][ T488] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 561.906656][ T7817] loop0: detected capacity change from 0 to 1024 [ 561.989539][ T7817] EXT4-fs (loop0): Ignoring removed nobh option [ 562.003010][ T7817] EXT4-fs (loop0): Ignoring removed bh option [ 562.009230][ T7817] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 562.039930][ T7817] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,nouid32,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 562.198882][ T904] usb 4-1: unable to get BOS descriptor or descriptor too short [ 562.228881][ T488] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 562.239844][ T488] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 562.249402][ T488] usb 2-1: config 0 interface 0 has no altsetting 0 [ 562.255919][ T488] usb 2-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 562.264892][ T488] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.279040][ T904] usb 4-1: config 2 has an invalid interface association descriptor of length 2, skipping [ 562.289604][ T904] usb 4-1: config 2 interface 0 has no altsetting 0 [ 562.871402][ T488] usb 2-1: config 0 descriptor?? [ 563.038972][ T904] usb 4-1: New USB device found, idVendor=0856, idProduct=ac25, bcdDevice=5b.5d [ 563.080569][ T904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.088577][ T904] usb 4-1: Product: syz [ 563.112913][ T904] usb 4-1: Manufacturer: syz [ 563.117382][ T904] usb 4-1: SerialNumber: syz [ 563.341627][ T7832] loop0: detected capacity change from 0 to 128 [ 563.458822][ T488] usbhid 2-1:0.0: can't add hid device: -71 [ 563.464738][ T488] usbhid: probe of 2-1:0.0 failed with error -71 [ 563.487403][ T488] usb 2-1: USB disconnect, device number 47 [ 563.689344][ T904] ftdi_sio 4-1:2.0: FTDI USB Serial Device converter detected [ 563.697423][ T904] usb 4-1: Detected FT-X [ 563.718826][ T904] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 563.738945][ T904] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 563.758817][ T904] ftdi_sio 4-1:2.0: GPIO initialisation failed: -71 [ 563.766434][ T904] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 563.785896][ T904] usb 4-1: USB disconnect, device number 41 [ 563.800102][ T904] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 563.812176][ T904] ftdi_sio 4-1:2.0: device disconnected [ 563.921874][ T39] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 564.569256][ T7857] loop1: detected capacity change from 0 to 512 [ 564.736782][ T7858] loop2: detected capacity change from 0 to 128 [ 565.489574][ T39] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 568.212818][ T39] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 568.229840][ T39] usb 5-1: config 0 interface 0 has no altsetting 0 [ 568.253252][ T7857] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.2106: casefold flag without casefold feature [ 568.568848][ T7866] netlink: 'syz.0.2108': attribute type 4 has an invalid length. [ 568.576407][ T7866] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.2108'. [ 569.596786][ T7857] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.2106: couldn't read orphan inode 15 (err -117) [ 569.618067][ T7857] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 569.666111][ T39] usb 5-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 569.675221][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.684442][ T39] usb 5-1: config 0 descriptor?? [ 569.696722][ T7871] loop3: detected capacity change from 0 to 1024 [ 569.739036][ T7871] EXT4-fs (loop3): Ignoring removed nobh option [ 569.765450][ T7871] EXT4-fs (loop3): Ignoring removed bh option [ 569.775546][ T7871] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 569.827962][ T39] usb 5-1: can't set config #0, error -71 [ 569.836784][ T39] usb 5-1: USB disconnect, device number 48 [ 569.971989][ T7871] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,nouid32,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 571.608794][ T39] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 571.749003][ T409] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 571.888429][ T7903] loop3: detected capacity change from 0 to 128 [ 571.969366][ T39] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 572.002444][ T39] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 572.015927][ T39] usb 5-1: config 0 interface 0 has no altsetting 0 [ 572.038787][ T409] usb 2-1: Using ep0 maxpacket: 16 [ 572.039178][ T39] usb 5-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 572.136118][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.181691][ T39] usb 5-1: config 0 descriptor?? [ 572.199021][ T409] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 572.229120][ T409] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 572.263627][ T7906] loop0: detected capacity change from 0 to 512 [ 572.270810][ T409] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 572.363343][ T409] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 572.389311][ T409] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.450900][ T409] usb 2-1: config 0 descriptor?? [ 572.455874][ T7906] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 572.480452][ T7906] EXT4-fs (loop0): 1 truncate cleaned up [ 572.485928][ T7906] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 572.486551][ T7910] loop2: detected capacity change from 0 to 1024 [ 572.639508][ T7910] EXT4-fs (loop2): Ignoring removed nobh option [ 572.646399][ T7910] EXT4-fs (loop2): Ignoring removed bh option [ 572.652952][ T7910] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 572.789998][ T7910] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,nouid32,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 572.815882][ T39] usbhid 5-1:0.0: can't add hid device: -71 [ 572.821701][ T39] usbhid: probe of 5-1:0.0 failed with error -71 [ 572.846540][ T39] usb 5-1: USB disconnect, device number 49 [ 573.447261][ T409] usbhid 2-1:0.0: can't add hid device: -71 [ 573.459925][ T409] usbhid: probe of 2-1:0.0 failed with error -71 [ 573.479354][ T409] usb 2-1: USB disconnect, device number 48 [ 573.585573][ T7923] loop0: detected capacity change from 0 to 512 [ 573.753377][ T7923] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.2120: casefold flag without casefold feature [ 573.766519][ T7923] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.2120: couldn't read orphan inode 15 (err -117) [ 573.779838][ T7923] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 574.755016][ T7930] loop1: detected capacity change from 0 to 1024 [ 574.838567][ T7934] loop2: detected capacity change from 0 to 512 [ 575.024215][ T7934] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.2122: casefold flag without casefold feature [ 575.036946][ T7934] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.2122: couldn't read orphan inode 15 (err -117) [ 575.049290][ T7934] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 575.084912][ T7930] EXT4-fs (loop1): Ignoring removed nobh option [ 575.111656][ T7930] EXT4-fs (loop1): Ignoring removed bh option [ 575.118787][ T7930] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 575.637796][ T7943] loop4: detected capacity change from 0 to 1024 [ 575.934159][ T7946] loop0: detected capacity change from 0 to 128 [ 576.029747][ T7943] EXT4-fs (loop4): Ignoring removed nobh option [ 576.043513][ T7930] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,nouid32,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 576.123354][ T7943] EXT4-fs (loop4): Ignoring removed bh option [ 576.152609][ T7943] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 576.329530][ T7943] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,nouid32,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 578.763895][ T7969] loop2: detected capacity change from 0 to 1024 [ 578.839867][ T7969] EXT4-fs (loop2): Ignoring removed nobh option [ 578.848909][ T7969] EXT4-fs (loop2): Ignoring removed bh option [ 578.861555][ T7969] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 578.959676][ T7969] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,nouid32,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 579.008874][ T39] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 579.449112][ T39] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 579.478672][ T39] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 255 [ 579.639466][ T488] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 579.724109][ T39] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 579.733626][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.741908][ T39] usb 5-1: Product: syz [ 579.745896][ T39] usb 5-1: Manufacturer: syz [ 579.750585][ T39] usb 5-1: SerialNumber: syz [ 579.990081][ T7967] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 579.996927][ T7967] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 580.048839][ T488] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 580.059676][ T488] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 580.069310][ T488] usb 1-1: config 0 interface 0 has no altsetting 0 [ 580.075704][ T488] usb 1-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 580.084811][ T488] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.093679][ T488] usb 1-1: config 0 descriptor?? [ 580.148820][ T904] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 580.524383][ T904] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 580.535296][ T904] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 580.545214][ T904] usb 3-1: config 0 interface 0 has no altsetting 0 [ 580.551987][ T904] usb 3-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 580.561033][ T904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.569453][ T904] usb 3-1: config 0 descriptor?? [ 580.598864][ T488] usbhid 1-1:0.0: can't add hid device: -71 [ 580.604620][ T488] usbhid: probe of 1-1:0.0 failed with error -71 [ 580.612395][ T488] usb 1-1: USB disconnect, device number 44 [ 580.653950][ T7967] fuse: Unknown parameter 'grou00000000000000000000' [ 580.713071][ T7992] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 580.719994][ T7992] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 580.948815][ T904] usbhid 3-1:0.0: can't add hid device: -71 [ 580.954646][ T39] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 580.960951][ T904] usbhid: probe of 3-1:0.0 failed with error -71 [ 580.967200][ T39] cdc_ncm 5-1:1.0: dwNtbInMaxSize=9 is too small. Using 2048 [ 580.975386][ T904] usb 3-1: USB disconnect, device number 50 [ 580.981281][ T39] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 581.348813][ T931] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 581.588861][ T931] usb 2-1: Using ep0 maxpacket: 16 [ 581.718951][ T931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 581.732192][ T931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 581.743933][ T931] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 581.758061][ T931] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 581.768290][ T931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.806405][ T931] usb 2-1: config 0 descriptor?? [ 583.038883][ T39] cdc_ncm 5-1:1.0: setting tx_max = 184 [ 583.061176][ T39] cdc_ncm 5-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM, 42:42:42:42:42:42 [ 583.072141][ T30] audit: type=1326 audit(1740957300.421:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8011 comm="syz.0.2142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce79cf0169 code=0x7ffc0000 [ 583.175161][ T8015] loop3: detected capacity change from 0 to 512 [ 583.201494][ T39] usb 5-1: USB disconnect, device number 50 [ 583.305636][ T39] cdc_ncm 5-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM [ 583.333833][ T931] microsoft 0003:045E:07DA.0028: invalid report_count 1243787297 [ 583.366297][ T8015] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.2141: casefold flag without casefold feature [ 583.379637][ T8015] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.2141: couldn't read orphan inode 15 (err -117) [ 583.392581][ T8015] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 583.456493][ T30] audit: type=1326 audit(1740957300.421:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8011 comm="syz.0.2142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce79cf0169 code=0x7ffc0000 [ 583.517076][ T931] microsoft 0003:045E:07DA.0028: item 0 4 1 9 parsing failed [ 583.599196][ T30] audit: type=1326 audit(1740957300.421:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8011 comm="syz.0.2142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7fce79cf0169 code=0x7ffc0000 [ 583.667101][ T931] microsoft 0003:045E:07DA.0028: parse failed [ 583.760544][ T30] audit: type=1326 audit(1740957300.421:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8011 comm="syz.0.2142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce79cf0169 code=0x7ffc0000 [ 584.178877][ T931] microsoft: probe of 0003:045E:07DA.0028 failed with error -22 [ 584.195305][ T931] usb 2-1: USB disconnect, device number 49 [ 584.226107][ T904] ================================================================== [ 584.234006][ T904] BUG: KASAN: use-after-free in __list_del_entry_valid+0xa6/0x120 [ 584.241642][ T904] Read of size 8 at addr ffff8881150d8c70 by task kworker/1:8/904 [ 584.249279][ T904] [ 584.251448][ T904] CPU: 1 PID: 904 Comm: kworker/1:8 Not tainted 5.15.178-syzkaller-00013-g7d1f9b5c2ff5 #0 [ 584.261178][ T904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 584.271068][ T904] Workqueue: rcu_gp process_srcu [ 584.275841][ T904] Call Trace: [ 584.278960][ T904] [ 584.281743][ T904] dump_stack_lvl+0x151/0x1c0 [ 584.286263][ T904] ? io_uring_drop_tctx_refs+0x190/0x190 [ 584.291730][ T904] ? panic+0x760/0x760 [ 584.295631][ T904] print_address_description+0x87/0x3b0 [ 584.297573][ T30] audit: type=1326 audit(1740957300.421:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8011 comm="syz.0.2142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce79cf0169 code=0x7ffc0000 [ 584.301437][ T904] ? _raw_spin_unlock+0x4d/0x70 [ 584.301464][ T904] kasan_report+0x179/0x1c0 [ 584.301486][ T904] ? __list_del_entry_valid+0xa6/0x120 [ 584.324745][ T30] audit: type=1326 audit(1740957300.421:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8011 comm="syz.0.2142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7fce79cf0169 code=0x7ffc0000 [ 584.329298][ T904] ? __list_del_entry_valid+0xa6/0x120 [ 584.333647][ T30] audit: type=1326 audit(1740957300.421:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8011 comm="syz.0.2142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce79cf0169 code=0x7ffc0000 [ 584.338931][ T904] __asan_report_load8_noabort+0x14/0x20 [ 584.338956][ T904] __list_del_entry_valid+0xa6/0x120 [ 584.338981][ T904] process_one_work+0x458/0xc10 [ 584.339003][ T904] worker_thread+0xad5/0x12a0 [ 584.339021][ T904] ? _raw_spin_lock+0x1b0/0x1b0 [ 584.339043][ T904] kthread+0x421/0x510 [ 584.339063][ T904] ? worker_clr_flags+0x180/0x180 [ 584.339080][ T904] ? kthread_blkcg+0xd0/0xd0 [ 584.339099][ T904] ret_from_fork+0x1f/0x30 [ 584.339122][ T904] [ 584.339129][ T904] [ 584.339134][ T904] Allocated by task 39: [ 584.399068][ T30] audit: type=1326 audit(1740957300.421:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8011 comm="syz.0.2142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce79cf0169 code=0x7ffc0000 [ 584.401320][ T904] ____kasan_kmalloc+0xdb/0x110 [ 584.469643][ T904] __kasan_kmalloc+0x9/0x10 [ 584.473981][ T904] __kmalloc+0x13f/0x2c0 [ 584.478056][ T904] kvmalloc_node+0x1f0/0x4d0 [ 584.482485][ T904] alloc_netdev_mqs+0x8c/0xc90 [ 584.487095][ T904] alloc_etherdev_mqs+0x33/0x40 [ 584.491773][ T904] usbnet_probe+0x1fa/0x2860 [ 584.496196][ T904] usb_probe_interface+0x5b6/0xa90 [ 584.501141][ T904] really_probe+0x28d/0x970 [ 584.505486][ T904] __driver_probe_device+0x1a0/0x310 [ 584.510604][ T904] driver_probe_device+0x54/0x3d0 [ 584.515464][ T904] __device_attach_driver+0x2c5/0x470 [ 584.520703][ T904] bus_for_each_drv+0x183/0x200 [ 584.525361][ T904] __device_attach+0x312/0x510 [ 584.529960][ T904] device_initial_probe+0x1a/0x20 [ 584.534817][ T904] bus_probe_device+0xbe/0x1e0 [ 584.539418][ T904] device_add+0xb60/0xf10 [ 584.543584][ T904] usb_set_configuration+0x190f/0x1e80 [ 584.548881][ T904] usb_generic_driver_probe+0x8b/0x150 [ 584.554171][ T904] usb_probe_device+0x144/0x260 [ 584.558863][ T904] really_probe+0x28d/0x970 [ 584.563207][ T904] __driver_probe_device+0x1a0/0x310 [ 584.568318][ T904] driver_probe_device+0x54/0x3d0 [ 584.573188][ T904] __device_attach_driver+0x2c5/0x470 [ 584.578387][ T904] bus_for_each_drv+0x183/0x200 [ 584.583073][ T904] __device_attach+0x312/0x510 [ 584.587725][ T904] device_initial_probe+0x1a/0x20 [ 584.592543][ T904] bus_probe_device+0xbe/0x1e0 [ 584.597140][ T904] device_add+0xb60/0xf10 [ 584.601299][ T904] usb_new_device+0x1038/0x1c10 [ 584.605986][ T904] hub_event+0x2def/0x4770 [ 584.610243][ T904] process_one_work+0x6bb/0xc10 [ 584.614935][ T904] worker_thread+0xad5/0x12a0 [ 584.619443][ T904] kthread+0x421/0x510 [ 584.623345][ T904] ret_from_fork+0x1f/0x30 [ 584.627603][ T904] [ 584.629768][ T904] Freed by task 39: [ 584.633412][ T904] kasan_set_track+0x4b/0x70 [ 584.637844][ T904] kasan_set_free_info+0x23/0x40 [ 584.642615][ T904] ____kasan_slab_free+0x126/0x160 [ 584.647562][ T904] __kasan_slab_free+0x11/0x20 [ 584.652160][ T904] slab_free_freelist_hook+0xbd/0x190 [ 584.657368][ T904] kfree+0xcc/0x270 [ 584.661016][ T904] kvfree+0x35/0x40 [ 584.664663][ T904] netdev_freemem+0x3f/0x60 [ 584.669000][ T904] netdev_release+0x7f/0xb0 [ 584.673512][ T904] device_release+0x95/0x1c0 [ 584.677942][ T904] kobject_put+0x178/0x260 [ 584.682627][ T904] put_device+0x1f/0x30 [ 584.686624][ T904] free_netdev+0x34f/0x440 [ 584.690870][ T904] usbnet_disconnect+0x25f/0x3b0 [ 584.695652][ T904] usb_unbind_interface+0x1fa/0x8c0 [ 584.700690][ T904] device_release_driver_internal+0x50b/0x7d0 [ 584.706677][ T904] device_release_driver+0x19/0x20 [ 584.711615][ T904] bus_remove_device+0x2f8/0x360 [ 584.716391][ T904] device_del+0x663/0xe90 [ 584.720553][ T904] usb_disable_device+0x380/0x720 [ 584.725416][ T904] usb_disconnect+0x32a/0x890 [ 584.729928][ T904] hub_event+0x1d42/0x4770 [ 584.734193][ T904] process_one_work+0x6bb/0xc10 [ 584.738868][ T904] worker_thread+0xe02/0x12a0 [ 584.743381][ T904] kthread+0x421/0x510 [ 584.747283][ T904] ret_from_fork+0x1f/0x30 [ 584.751539][ T904] [ 584.753708][ T904] Last potentially related work creation: [ 584.759260][ T904] kasan_save_stack+0x3b/0x60 [ 584.763773][ T904] __kasan_record_aux_stack+0xd3/0xf0 [ 584.768982][ T904] kasan_record_aux_stack_noalloc+0xb/0x10 [ 584.774711][ T904] insert_work+0x56/0x320 [ 584.778877][ T904] __queue_work+0x92a/0xcd0 [ 584.783217][ T904] queue_work_on+0x105/0x170 [ 584.787647][ T904] usbnet_link_change+0x182/0x1a0 [ 584.792502][ T904] usbnet_probe+0x1dad/0x2860 [ 584.797013][ T904] usb_probe_interface+0x5b6/0xa90 [ 584.801965][ T904] really_probe+0x28d/0x970 [ 584.806302][ T904] __driver_probe_device+0x1a0/0x310 [ 584.811421][ T904] driver_probe_device+0x54/0x3d0 [ 584.816285][ T904] __device_attach_driver+0x2c5/0x470 [ 584.821492][ T904] bus_for_each_drv+0x183/0x200 [ 584.826183][ T904] __device_attach+0x312/0x510 [ 584.830781][ T904] device_initial_probe+0x1a/0x20 [ 584.835657][ T904] bus_probe_device+0xbe/0x1e0 [ 584.840241][ T904] device_add+0xb60/0xf10 [ 584.844409][ T904] usb_set_configuration+0x190f/0x1e80 [ 584.849700][ T904] usb_generic_driver_probe+0x8b/0x150 [ 584.854995][ T904] usb_probe_device+0x144/0x260 [ 584.859769][ T904] really_probe+0x28d/0x970 [ 584.864112][ T904] __driver_probe_device+0x1a0/0x310 [ 584.869227][ T904] driver_probe_device+0x54/0x3d0 [ 584.874086][ T904] __device_attach_driver+0x2c5/0x470 [ 584.879296][ T904] bus_for_each_drv+0x183/0x200 [ 584.883979][ T904] __device_attach+0x312/0x510 [ 584.888581][ T904] device_initial_probe+0x1a/0x20 [ 584.893441][ T904] bus_probe_device+0xbe/0x1e0 [ 584.898048][ T904] device_add+0xb60/0xf10 [ 584.902218][ T904] usb_new_device+0x1038/0x1c10 [ 584.906915][ T904] hub_event+0x2def/0x4770 [ 584.911149][ T904] process_one_work+0x6bb/0xc10 [ 584.915834][ T904] worker_thread+0xad5/0x12a0 [ 584.920348][ T904] kthread+0x421/0x510 [ 584.924251][ T904] ret_from_fork+0x1f/0x30 [ 584.928507][ T904] [ 584.930675][ T904] The buggy address belongs to the object at ffff8881150d8000 [ 584.930675][ T904] which belongs to the cache kmalloc-4k of size 4096 [ 584.944565][ T904] The buggy address is located 3184 bytes inside of [ 584.944565][ T904] 4096-byte region [ffff8881150d8000, ffff8881150d9000) [ 584.957939][ T904] The buggy address belongs to the page: [ 584.963409][ T904] page:ffffea0004543600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1150d8 [ 584.973468][ T904] head:ffffea0004543600 order:3 compound_mapcount:0 compound_pincount:0 [ 584.981627][ T904] flags: 0x4000000000010200(slab|head|zone=1) [ 584.987535][ T904] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043380 [ 584.995961][ T904] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 585.004360][ T904] page dumped because: kasan: bad access detected [ 585.010618][ T904] page_owner tracks the page as allocated [ 585.016172][ T904] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 3386, ts 200621405904, free_ts 200535225339 [ 585.036655][ T904] post_alloc_hook+0x1a3/0x1b0 [ 585.041247][ T904] prep_new_page+0x1b/0x110 [ 585.045586][ T904] get_page_from_freelist+0x3550/0x35d0 [ 585.050968][ T904] __alloc_pages+0x27e/0x8f0 [ 585.055394][ T904] new_slab+0x9a/0x4e0 [ 585.059299][ T904] ___slab_alloc+0x39e/0x830 [ 585.063738][ T904] __slab_alloc+0x4a/0x90 [ 585.067900][ T904] kmem_cache_alloc_trace+0x147/0x270 [ 585.073103][ T904] kernfs_iop_get_link+0x65/0x5f0 [ 585.077961][ T904] pick_link+0x6c8/0xdf0 [ 585.082042][ T904] step_into+0xb8c/0xe70 [ 585.086120][ T904] path_openat+0x1816/0x2f40 [ 585.090548][ T904] do_filp_open+0x21c/0x460 [ 585.094887][ T904] do_sys_openat2+0x13f/0x820 [ 585.099406][ T904] __x64_sys_openat+0x243/0x290 [ 585.104089][ T904] x64_sys_call+0x6bf/0x9a0 [ 585.108430][ T904] page last free stack trace: [ 585.112942][ T904] free_unref_page_prepare+0x7c8/0x7d0 [ 585.118233][ T904] free_unref_page+0xe8/0x750 [ 585.122745][ T904] __free_pages+0x61/0xf0 [ 585.126911][ T904] __free_slab+0xec/0x1d0 [ 585.131081][ T904] discard_slab+0x29/0x40 [ 585.135242][ T904] __slab_free+0x205/0x290 [ 585.139496][ T904] ___cache_free+0x109/0x120 [ 585.143924][ T904] qlink_free+0x4d/0x90 [ 585.147918][ T904] qlist_free_all+0x44/0xb0 [ 585.152258][ T904] kasan_quarantine_reduce+0x15a/0x180 [ 585.157548][ T904] __kasan_slab_alloc+0x2f/0xe0 [ 585.162236][ T904] slab_post_alloc_hook+0x53/0x2c0 [ 585.167291][ T904] kmem_cache_alloc+0xf5/0x250 [ 585.171880][ T904] getname_flags+0xba/0x520 [ 585.176218][ T904] user_path_at_empty+0x2d/0x1a0 [ 585.180995][ T904] vfs_statx+0xfd/0x720 [ 585.184988][ T904] [ 585.187153][ T904] Memory state around the buggy address: [ 585.192635][ T904] ffff8881150d8b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 585.200532][ T904] ffff8881150d8b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 585.208426][ T904] >ffff8881150d8c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 585.216405][ T904] ^ [ 585.223959][ T904] ffff8881150d8c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 585.231868][ T904] ffff8881150d8d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 585.239760][ T904] ================================================================== [ 585.247649][ T904] Disabling lock debugging due to kernel taint