last executing test programs: 9.986048321s ago: executing program 4 (id=405): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x184) fcntl$lock(r2, 0x24, &(0x7f0000000400)={0x0, 0x1, 0x101, 0x80000001}) dup(r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r1}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r5}, 0x10) syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000380), 0x1, 0x2c4, &(0x7f00000003c0)="$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") syz_usb_connect$cdc_ecm(0x5, 0x5a, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024800010100200009040000ff02020000052406800005240004000d240f010900000000000000000424020a090581032000037fff090582020000000100090503"], 0x0) 9.36797028s ago: executing program 0 (id=407): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x22000406, &(0x7f0000000840)={[{@dioread_lock}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@journal_checksum}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nobh}, {@grpid}], [], 0x2c}, 0x84, 0x4d8, &(0x7f0000000900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x31, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r3, &(0x7f0000000040)={0x24, @short={0x2, 0x1, 0xaaa1}}, 0x14) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x4001, 0x3, 0x238, 0x0, 0x700001b, 0x148, 0xe0, 0x148, 0xe0, 0x206, 0x240, 0x1a0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @initdev={0xac, 0x1e, 0x2, 0x0}, 0x0, 0x0, 'tunl0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x1ea, 0xc0, 0xe0, 0x0, {0x390, 0x8f00}, [@common=@inet=@socket1={{0x28}}, @common=@inet=@socket3={{0x28}, 0x2}]}, @unspec=@TRACE={0x20}}, {{@ip={@multicast1, @empty, 0x0, 0x0, 'veth0_to_bond\x00', 'nr0\x00', {}, {0xff}}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000070000000000010003"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r5}, 0x10) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r6, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r7, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r7, 0x0) listen(r6, 0x0) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0) syz_clone3(&(0x7f0000000580)={0x100000080, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0), {0x13}, &(0x7f0000000400)=""/160, 0xa0, &(0x7f0000000500)=""/52, &(0x7f0000000540)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x4, {r0}}, 0x58) write$uinput_user_dev(r8, &(0x7f0000000700)={'syz1\x00', {}, 0x37, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001], [0x0, 0x0, 0x1, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x140}) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001100280400"/18, @ANYRES32=0x0, @ANYBLOB="4bd23e5f0910000024000e00090000000000000068000000000000000400000000000000ba1d0c0500000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x4814) 8.572787011s ago: executing program 1 (id=410): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090000000000000000000000850000002a000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r4, 0x801, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0xc000) rmdir(0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x25ac, &(0x7f0000002180)={@local, @empty, @void, {@mpls_mc={0x8848, {[{0xe5f, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x4}, {0x7f}, {0x7ff, 0x0, 0x1}], @ipv6=@icmpv6={0xe, 0x6, "d62ae9", 0x2562, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[@fragment={0xdb4f0f768bab6280, 0x0, 0x7f, 0x0, 0x0, 0x7, 0x68}, @dstopts={0x87}, @routing={0x32, 0xa, 0x1, 0xec, 0x0, [@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, @mcast2, @ipv4={'\x00', '\xff\xff', @multicast2}]}, @srh={0x89, 0x8, 0x4, 0x4, 0x7, 0x48, 0x5, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}]}, @hopopts={0xc, 0x19, '\x00', [@generic={0x31}, @padn={0x1, 0x2, [0x0, 0x0]}, @generic={0xd, 0x9f, "7af01f7ac4bd39ad53833215903b060ff9188a4893c39a249286f6308013ecd8ed8924767f4cafca1a6fab2333c8eaf77fa8017059785d631cec20d7c2ce571b6e5c4d0643aad93ea20b253d54a243c7107ea7fc612ebca9272c5122017307c5edb1db773f31b458b7e1dfb979c61b23f0cb133b8b45b9992c50d6ce5ca8f5c35ebedffb4b023618615d1f12938a1b0101187313e09fae24646a720c3cf442"}, @jumbo, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x19}}, @generic={0x93, 0x7, "a28d96ce8c8951"}, @padn={0x1, 0x1, [0x0]}]}, @srh={0x21, 0x4, 0x4, 0x2, 0xd, 0x40, 0x5250, [@private1={0xfc, 0x1, '\x00', 0x1}, @loopback]}, @fragment={0x5e, 0x0, 0x4, 0x0, 0x0, 0x1, 0x67}, @routing={0x2e, 0xe, 0x2, 0x9, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x20}, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @loopback, @ipv4={'\x00', '\xff\xff', @local}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @fragment={0xff, 0x0, 0x4, 0x0, 0x0, 0x5, 0x64}], @ndisc_ns={0x87, 0x0, 0x0, @local, [{0x5, 0x1d, "49b245f7837137e89508cc4eaf6aadbadeb1692abe4767bede3154a9e277d2becf4fb3ab0ec4c16793bc51d4540c8e5466bb612f3df3180ff38ba8cb62ee8319017f341a1732ad6992ab137577489df710867462155625f80fbfb1363572d93beb8562d8d00078ad5113b592df6ec71579b880d99eea82bb74c94e6b285350696b5c4bd88b10bcc5f9442079479d2c0ea86152a5d4c9b25a61e75103a10a89df7d7cabf325d3a5b690a3db338d737b457bea58262c55edb2956450c779f6b2a089508f47d9943a06203a60e010266d834a46ba65a9ea28b65746ecad4d3688c1ce962cc8abc2d0"}, {0x1f, 0x12, "6b120ab3dbc273e5552a5c15729572053338415d863607c402d3b68f2402b75d11d3ecfdd9ee4c077d89c23029cb677341f0a3ea5ec55503abd18b345d7d0473fde67de103189da38d6dc2d7ed34af3771f8af2c288ab94aac5065163636820a05f9a957562177e128b15465f4dacf1e9e74ef1912f97b280208006f4ff1668fed54b9f5644c7dfbc0cc8be8dd596e2b0cbf"}, {0x4, 0x13, "fca862b7c0cb85848ab1707cffe667da8c2930d8dae4cf9eac089f1be45594811f86a9233f12b58d297ccfc578f36e3be20d19137cca4ed5941608db4a77e178a620f5b252700ba1e72536a81a2df594151525dd772fda17031431853b8c980b36c8ef6f1188cde844b2921b65f8763552f4e5b414e3b10cc822743509438787589dc9a070f8eb459fccf939e93033e5ff266e687c7c71f81832db2efc"}, {0x4, 0x200, "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"}, {0x18, 0x200, "779925a7db5abd51c1fc42aa5331f1d05328308ee5a452f552499a3ce0940423a66794131af7635e9ec5e8844bc9eaef54a47e22b9fe44c817f4b1ae4ee6bba69b2e2f61bfdd9281dbabe79e4f73f4d75bde5ffa45259148fe442a130cb6cff87e1727dc705c7b262a8779babebde0ba6880912418f1c46fbd5fe10fce4613e62ce72c91c614d5504df7b6376565d6d529ac37d3cdb55d010d100e16c8b51dc2b4108827ff8783f1f05d1b4d5f5363be398057c14513c1e3ce67d1381fe811ced64eda49989fb104c4ee4eca49cbb72fc0c849fc2b2101c56c76f0a19d9ac4f793c8e9e7243a95500585eefead9ca6247bb9bc029d2691298f692a1ec25aa1a16b4f95f2111d47c17f18ee3d0321b380200679a71cf3cdb11c6593b2f8c40f032a67ba243978e3fa7b3dd7492558afba44b9785c8d061a7a8b97a2502dcfb2e81bedade519a5f3428bb63a490aac5e34eecd69692844db3ac3a1b27cfff8c6cf89af38fc0ebfbdf7260140ff66ab688b75aacdd66e70916b6aee3c7ad968d1da1a9b12b410b3d8346aa89d6dad0d7ba0961e4bf79484e4ac06cf2dfcc8b0a1351137853aa45612a89ca38695dc697b75039be793c7bbf0bd0e2350c8f14040d9ee723c65a1bd5cd4d589bcfd8da999448171d7ccba1b8b0d37068127508b0d796b37894f44e66156235318183f81525a9adbf683b286f78430e17108c97d460e7e1fe5d43c42fa93d8901bb12615fc85f03d23c1427f41d3f0b32ae8e5aaf88d506e52456dbad1d6268216c2f3ba6d440f162bf709b5d6c23d3f5ec9bed5fb95e4526585a850ed6be66a4e4d1103f1a758da5336e20567130e5b70b5281ffdd5cd147545c4e5959c37064b05aef1c81af7ba3d1ea061b50f41c13d21946ace0ff30abde8cdd2cf303052728744c358257e98bdcbb3557cf0291b57eb5368b317cfc67f0ad42705bf58ed6d7c70bc87fc147032cb5f359e11ecc6b6934bac61fa8d2a7757ef43e21b4488de0e85d2faa95a80965557652c1934b7988b43a08fc62cad039ee1906bd804ed3ee68d27603625a20a5605a2e86f66326ae1cd5d44066b2203f50b3578e7e24c2fd05b2d3b7f8ed5e12be7fd25c8fbaac83b9938e3d3d4ca87bc60f48406c23f7d74b49cdab9559a6a7d676f803e4d1623b45db8b2010cf9fe4f329f06dc482b3d0b6664f9774fa15402ab3a797cd5118911a7b3a45df7eecc655429c6e72bfd9874d7dc9f1ddc47bc91389197b201cab844cabdf4f282b1df7797845b314d180b637a432413c96b664aeee84c5ac8d2a3a057f6ac73132c7dd770a79708a763656197b29ca2e4382fa84fb061c9610a6a6d74378b11ac4d6d418b1d2dc5122dc61c3eb437d7a45a00e6c881ae4c098102b77657ac15446c34a6092f9a97c1d1254598bf4126e477a49722c53d71a731ea06962e5d726eabddaeac184a8412edc7464a49d348a153b5cbb1fcf2870b321421109c0729f1cb3b82e943d2fb51b7a756e4337c6444ab9742d7eb02bc0d4366ce00c11645f0dee9af64c9c5a491662f6336af134ddd037cb0d6292336beb9340788ac72779634759045a5cd520df1c2b026a439949b1baf0ee596fdb79b56e57e1ecf69ef8c2e8d2a4c0a68bd34188dacff37010408ada9e92d6d469870abe1ca3876d809652ef10e9adb5433c5171fb5a3499d054d676260dcd8baa56417198e8094886ab65a7df38ee54d99d0ad10185e3d5182cbe96c0da2412d6e87504f5a870dc32ae16142ceb897b2de9f7c09467bce7c2bad0237e8fc8520c3b218bc79ae4cd610ec648279bf2884965f15ae5ac21e2b71e3a0773de44b29374bc98013f3ac43607219aba50f9317370fe94199f30b4561a9882092e8155c06b3e943eaf773faa912474a78d343c306aa4b2af4f561f83ce8fa35ee524d382cd6fc48fcc07bb67e6fe0f888e64f110582ee8a8f35c32c014d785f5c8e6b6ec9fcd62c5ce80a780d5f22d70f03699cbff618cb991bf888be89f6acf499cc49b5d458cdea64b2390efd07fddc88334a8fc4aeb7472e32ed27aaba319c49145829444e28c76847a694f31accb689a3c0e6a2fd8bf06a1fb264b273ebb68525974e6389f1dad6532fd334ab600391fd727a8692b4c99dac208c9647ac31b705f17ab1421c613d284290572bd9a88f938dc7271879542b4beebb491c0dd12921f2e6a1ca8323924d2fd7bf50e1035a11103b6411e6bec72a83e8ba73007327bddf21b812a1b7f1a0208acdde2f29c282ad1dd7d82fdba9399adf20b7df6c3d10b56b389452c12252d366e7c5a9e2069cd24b199e42924694c358d225acaa84d8d61c38970f9b2b3ced1dcd88fa48a06066bf80a32c108f656fbdb9f665aefb0526a9035de6cb5b313e789d73a611bd5e71da1b03bb039a77ff16117ab7d306ab6a0848f8b540f4a1a9845c1f4a76421666661b06fe4f6ba1dc41afa329b14c875a5b3d887baac0d30f3e933f9d37c1ede3cc67f035f112d7573881de948d71d896e226685ced3f76b686bb8856470c0b38b691d0f7c0aadb2e90f7ba8bb6804a39f2de40a6f9e9b3b6a515c7109bb676bac293b1e2e160e3d0fbc02b5d84448780978cb46b6ecc8b55644afd42b80ad99c7e9ec2591d866dcbce8c05c72bafe24660369451dd277f498643a2309e95c2a71480e7ef14e04dc4b6075f028d2d2fd41d1499b1363e89f435727dcabb3d9b0fe606793103a6709d97a6ed1be35efc6619a9c38e2484890e8104036e38f1bf0cd0f42e51db2c546d2673d261f95ff68b47d763007c7e51f66ef70a029d2317b1ecf6d287eb0420a3f6fcbb7cd9e2b1e0623c4762e759e4af3b6487b32c1be9475073082297a249919935403436040aa3b72434da9aa34be5543f7eba1cc0bb675a91deb08b1f2d9e6040ec249f5b65357d05b9976008507022aac37015594031dcef6a3110199b176818007e95c14ec51d4b858cb83590b705a6212eef81b702072a407e091aec18ecacf62ef9befc534dc1ba239646c9fd23fa65ad57bf3da96d78afe87c28163b92a351745ac087a848de030b81620f248307e9625c9f3e6b392efb587960c272afa972f0f2791dbdc8f8a83122a3c7fb6b76d517dd660b1a3ef2d89f375d1e682f38e470ac49a62a456547f0742e00bb55ec1cb468953141a4e51af6461041a9c894a3b48676f934ea84066eb327f13d707ff7041c39487060066958f24cc9a16931c935ae3242924aae59d47dc9e0c12e0cdc51f19576e5bfbbe0387511a262f7cef751c0c82ac3b052471ea42dc8b2fa808b6367b6c2cc518303080302e49220c5d375bd9cb39b6e656a15f2e329daaaa7b5383f83a41a2d0e81769e908cc838e33aaf9fc71799296f872dbd80d073d374023e3b05f7b2e51eb87acd717459f5dd851b2da1f82f87ae1ea9d130dfbb505ab3ec2ad17a4a3bf9c1e56b65330be5ae656da7e420d5f7ed9a692404b627bcadeb2bfbcb159c5b8a51c5b8906f9587703d00c6bfac6c50d243b6c7b7a7a5acd16983056ef0bbab2d545bd0c2f3b7c2b5eeaae2976a4e563e975035d005771b455e5ff12286df3a64b5091424c489e45e9ada6319a0621924948ddc7c5b4ba56ca001276e3e128779003501d2360735016ed5b0e820bdbc23bc5db6c608115901d19474d87a17ba83d93222c4d1bfafb6fd64451896240898e6eb62e7b120f6a7780091a6e3040f778701b73b75c210eadbec3d4a265c3f62e81b1aea76e108b69d576f5a2f712a071f134ceb1f31b3c099a299a13b74b89eb618831ee29604b84e9b756ed3d51ef2e02ec36d4747d451d849ad79979896c086791afc1d38b107dc54ef5ee62700386ba383111da2d3b3dbe5eaf71f625d15ade80c818e928fed1d94bf04681ae400bbc0dfddf23a48fd45c4438c16389aae38d6bedfe776beac174b4a2002a37d519610b0f742b4208e3650d80fdf4ed8e395d7addb1f2fffb97677406f33de54f2c4ccebfbe48a848add4c4bce988477ce697464018d8cf352b5d66be22ac5a3d619036ef86fd0a5fdb5570b6e0c649cc0f18d591402423fa6bb199e8e89f72b72f1d9382c891a52c0dd2732d3392eb2684c05ca98fda4cfec3ccd82b32fe517209a5e2dbd4c6db000085e209a1edfc47225c440159d19b23f2401595b6d8cf8bba7b91a67b1025cd82e0c372809423a8907d212ec47f2ee8a8a17cc5193c5a61737240aa7c5561becb67c1c07f71096876629245484f117d6f117eae1aa048016907b5a81db837015094a36b833f0c902aa8df0be994394fbea7096bdd652325b94a43cf2ebcd24231abe306af6fa9017babb15671fff620bb9311cedab3ad92aa84d681c71a69f3db93d37eddb84b197a88b8492a1915cee0de2ba3b8943b1cc2a393757b94f41e2fc976dd53080033a264fd3736f8b16045ca77a914e47c851c905b11e9ee6a0da811e323ef1a21cc0ffce5593782f87f2c2049571e6c0a8b29e4dd701a032a63dc2edb6a271ec09d47d502436cea66e81957d369ab2d8639ea4488811d54dd0afa36a1af0807625dfa60aa1cc88a8a9d4d8c0b31b2d18bac18bbf0d88af58ddca77c762f3aed3278f33510f8088ce0cb94426d74b782217b69ab314438538b1b0798bb9265662a3362f13993c17e03cbfb07eb8098d52e3a9316dfa38056d956c4598e92e556d12b8d5aea0592a9cd40178091c1791f633fcbb3ecd3209f2b23ef0a3283b5008508712b5cff6af0094bdd179419f07bf856d58876977cce98fa1b3506fd17323f2eaa3e9191ecd77fc592e46b87078aed29a4bd74716288f194d5534b659e0262a5e2977e1d04e9d9f1752c28d661d4695e08cebc93a1dfdb9643f0dd22ef65e8e1127034f648e93845b132ecfe06714c322d7eb49930774a324d9a0ec43ff4f99542bfd5d8b5314f38cc941f9a3e7ace816b8de362ae7da6886fb0b93ec49e08106c756580b2d7e451a98f97b91d8c6f3c1ed610e5ced38ce151764c1f52a3c943d7bdbc8b25d3877d6b2d2e626b24e1e4af04a7b4a3e74b86acbe8a6c24cc7dbeb7c445a422bf4f81f8411ea7df3fb8449dddf5566af46898a7e94101427287e9925df92512321c9a355db85d33fd11ee1026d36aa7920169d080831758fd1c230fa484502ba60e57a12490e4623a67f868fe0db04ebf29b16185fb1ae6b09c58d55603e66158a9bd37e72226193b951d3ab92945277eedb595489af69ebcede3d6c107d6bcc7aebc647fa495c71a82ab94b5e5b08b4d07681f3810300616b4fea72aa5eb81f1d7900cb53313a8bc8a1635add1cfb71f4ef75aafc7fea46046ce8e40d72af596fcd2a8b917d7aacf19220539f57f83dd3bc07074e9bec7ee19a71121197dd025cba63934eff74ce8eda398603ed9eff2de81b41ccc2679dd82ec554921603f2e848912b7e03d4db068966aa8acc099a08bf6fe6e60498511a8bb89bec5fde34bcffcdb055df89373fdf194c3a22188ad5d2422e0e01db35e3084df49ba94e8ab5dfc61bc111bfc7737bf49df5804b704fcd2a12fb7864b3365e54352f3905a1bff41320347642a59e0581cb23924859c7c88b77a7ad726ae34064897b8843530babadd39628b728713c36c5d5884a545b1c9e17b6ccbd7f6492cea2657c297fb12aa4c8acf27cae33059ac1b9c18748396ace3582ad1161b627cbda3cad6a99110b413738629c30dbe4f8d3ae4890ac13d40c385ebf73d83b03ba24a204e68cc22ed035d72f03004104715c5ca59e52a68194037f92ffc367e20636e38e41b3f3b9"}, {0x4, 0x2, "85eee6a48bbdfede5b6f449dbf6b4db45c0c51"}, {0xe, 0x1c, "2357686278dd5e44dc7819a9494d1702d21731714a0ac6cc7c5af515ed7f5001ab84151535b42a542df99870e6e8c24320abaec2835d86a35ef738f737ab3f696f513cfc796b6038803b348b96e94b2a4a72a731499d6b24382a605e75b569226b1e67fc7aed4388c443d1bf25026469a8b3b5040bb888eba1367e0bd842ab3ad52ee826fdef63ffeb21ae7d6a681b1bc84203795a5e8574c15bfa0020d611e30ce94057e340cbb38ad35d6e8e2558746b60cae7a24e6b0f1951095119140a97da1b0781ba311c03f44e187faab8b70243225239d7906f502b771cbb14c4bc"}]}}}}}}}, 0x0) recvmmsg(r6, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1}, 0x1}], 0x1, 0x20, 0x0) r7 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "69dcaf20127e9a854529f45826cb35be51682e30944313e2080000000000000080221daeccfda5eb75cfe2bad94f000066b2ddab614fec2236da7d88ea07c9ee"}, 0x48, 0xfffffffffffffffe) keyctl$search(0xa, r7, &(0x7f0000000180)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r9, 0x40345410, &(0x7f0000000280)={{0x1}}) readv(r9, &(0x7f0000000080)=[{&(0x7f0000000140)=""/144, 0x90}], 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r9, 0x54a2) 8.569121701s ago: executing program 0 (id=411): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") 8.452809272s ago: executing program 0 (id=413): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r2}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r4}, 0x18) io_uring_setup(0x1de0, &(0x7f0000001e00)={0x0, 0x8ec5, 0x0, 0x0, 0x0, 0x0, r4}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r5 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) fcntl$addseals(r5, 0x409, 0xb) r6 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r6, 0x82, 0x5, &(0x7f0000002340)='hello') 8.135554947s ago: executing program 2 (id=414): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x18000, &(0x7f0000002f40)=ANY=[@ANYRES8=0x0, @ANYRES64, @ANYRES16=0x0, @ANYRESDEC, @ANYRES32, @ANYRES32], 0x1, 0x2ee, &(0x7f00000006c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) 8.035776618s ago: executing program 2 (id=415): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x20d, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x7, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f00000006c0)={[{@noquota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x3, 0x4d7, &(0x7f0000001480)="$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") r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000005300)=[{0x28, 0x0, 0xfb, 0xfffff034}, {0x80000006, 0x66}]}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @multicast1}}}}}, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80801, 0x80) renameat2(r3, &(0x7f0000000280)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x10000000, 0x81, 0xffffffff}) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800ffe000000000000000210d0000aaa8fa017242ba9380d440fe0000000000000100000024000000", 0xfe60) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000800)={{{@in=@multicast2, @in6=@empty, 0x4e23, 0x2, 0x4e22, 0x3, 0xa, 0x0, 0x20, 0x29, 0x0, 0xee01}, {0x7, 0x6, 0xd42, 0x3ff, 0x0, 0xfffffffffffffffb, 0x528, 0x8001}, {0x8, 0x8000000000000000, 0x389, 0x1}, 0x10000, 0x6e6bb3, 0x1, 0x0, 0x1}, {{@in=@remote, 0x4d4, 0x3c}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x12}, 0x3504, 0x2, 0x1, 0x7, 0xf, 0xa, 0x8}}, 0xe8) 7.988303409s ago: executing program 4 (id=416): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) 7.731208222s ago: executing program 2 (id=417): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) 7.449378866s ago: executing program 3 (id=418): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1900000004000000040000000800000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r5}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000200)='bridge0\x00') r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='host1x_cdma_push\x00', r7, 0x0, 0xffffffffffffffff}, 0x35) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') 6.48304038s ago: executing program 3 (id=419): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000500)=0x4fdc, 0x4) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000240)=0x2, 0x4) sendmmsg(r0, &(0x7f000000bb00)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x36}}, 0x80, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000001600)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x45833af92e4a39fd, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000092, &(0x7f00000008c0)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@grpjquota, 0x22}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@errors_remount}, {@noblock_validity}]}, 0xfe, 0x45f, &(0x7f0000000440)="$eJzs3M9PHFUcAPDvLiz9XbDWH8VW0Wok/oBCf9iDlxpNPGhioocaTwi0wW6LKZjYhih6wKNp4t14NPEv8GK9GPVk4lXvxoQYLlZPa2Z3BhbYhQUWFtnPJ5n2vX0D733nzVvevJndANpWX/JPLuJwRPwWEd2V7PId+ir/3VuYGf1nYWY0F6XSm3/lyvv9vTAzmu2a/dyhSqZUWqPeuXciRorF8ZtpfnD6+vuDU7duPz9xfeTq+NXxG8MXL547e6rrwvD5psR5JGlr70eTJ0+8+vad10cv33n3p2+S9h5Oy6vjaJa+ytGt6almV9ZiR6rSuc5VxR072hgalnRM0l2F8vjvjo44sFjWHa982tLGAduqVMqX9tUvni0Be1gyUQfaUfaHPrn+zbYdmnrsCvOXYnEd4166VUo6I5/uU0ivkbZDX0Rcnv33y2SLbVqHAACodvdSRDxXa/6Xjwer9jua3hvqiYj7IuJYRNwfEccj4oGI8r4PRcTDG6x/5R2S1fOfUvemAmtQMv97Mb23tXz+l83+oqcjzR0px1/IXZkojp9Jj0l/FPYl+aE16vj+5V8/z9L7V5RVz/+SLak/mwum7fizc8UC3djI9MhW487MfxLR27ky/qPLbgEmmRMR0bvJOiae+fpkvbL1419DEyblpa8inq70/2ws6/+lQ5Cre39y6IULw+cH90dx/Mxgdlas9vMvc2/Uq39L8TfB/N1SHKx5/i/G35PbHzF16/a18v3aqQ39+vL15dzvn9W9ptns+d+Ve6uc7kpf+3BkevrmUERX7rXVrw8v/WyWz/ZPzv/+07XH/7FYOhKPRERyEp+KiEcj4rG07Y9HxBMRcXqNg/DjS0++t/H411iVb6Ik/rH1+j+q+3/jiY5rP3y78fgzSf+fK6f601caef9rtIFbOXYAAADwf5EvPwOfyw+kDwMcjnx+YKDyDP/xOJgvTk5NP3tl8oMbY5Vn5XuikM9Wurqr1kOH0rXhLD+8In82XTf+ouNAOT8wOlkca3Xw0OYOZeN/8b2gMv4Tf/jUBux92/VwG7D7Gf/Qvox/aF/GP7Qv4x/aV63x/3EL2gHsvHX+/h/YqXYAO8/8H9qX8Q/ty/iHtlT3s/H5LX3kX6JFie+6tvZdDY0nIr9LQt4ziULULOps+MssNpnYV7Oo1e9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzfFfAAAA//8y4+gi") r3 = io_uring_setup(0x37ae, &(0x7f00000003c0)={0x0, 0x800000, 0x0, 0x2, 0x22a}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000003040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000001e80)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c646d61736b3d30313737373737373737373737373737373737373737332c73686f72746e616d653d6c6f7765722c636865636b3d7374726963742c2c756e695f786c6174653d302c726f6469722c726f6469722c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c756e695f786c6174653d312c756e695f786c6174653d312c6572726f72733d636f6e74696e75650000000000000003667365743d30121df478303030383030303030303030303465302c757466383d302c0077b5b28056fc4549d277ed7fab6b0be27ef17f888ccab55cccc917ad315c8ea56f5a89c104f92d058b92f5881e69e06002f5914c03fefbeb09121733eaf5ded73df976fbd4cfcb8b70b0bf44da1b46bc3935431d5e60a641f9e4ebbf71c77fc9a810ce726b8c6d6295a5f2e2b069b95ba8ecce52ded99b82923228c37d5e1ec11cdbcabb8a89cbf2cf2771d69e3cf0e676cc6e5b2e542e426bceaab9b2cf261046247bce0565d13a6ca8137aba85fe39756814fda1f0624b33a2025792a477ccfff09befb1d0cf1599d272628028b9786e1fbfb3d637c2561421488c9de8d3739a94bf13ac582f6b67de0cad933631794271b2259fe5d73a74ad7da615c31505c7c0c168052d38e5b64c4bb7d0599e5dcf0000000000000000000000000000002790cf17418aa278cfc0c9d1c81c63e58b877706a4b7eed8a5aff253298db2939adc0efdab4745ab0e09ef8beaaf04e5374c2e7e4656e47fe5a25502919954242f8d771fc2acf14f2cee04696a9d84091f20646210edf871d3f20ad66fcf4b816323b8abb307381d32da887dcc71e35f364baa1b93fd5ee36c02aa4628511442992ced893ab924472440b53fc08cc41403e167b1f2605e04d5f0c16ed49969b59d650d88642b10c7893f64421a40f4822ffcc284dfe9ae1c6e4a04293c970f2dae776decf07b085eb5fdeda7d365b0f86c7fcd8df00a87f4dbbf8e623667e3b65e4c487055a2e5cd64402a4de537bf113fc7370099e4faebe6ea9d4f155f8f5f4c5f9b205ce1bbc8c0002a19457e05a210d9e9820bc7f318ebfdfcc22f83150503b2c7fb0340a249135057f87882717e166ef509c14fdcf38f63141e4ed36737c6e55498b350f41c8caed3e347c149162b4c6ed629be8eaaa25d59747816197aff2cf68a42d73e8146c72fedb130521de285872a4ca5353cc354a0b0e2ce57275b34276d28d91b2c0c2fa1041f818ea96f65a3000057dfb8858cfd194f7431e4b734f848268c5a000f01000000010000000360236584faaf1a4d4fabd3b68929729fd006fa91186ac3d0d222e00c77ad726cdc16c8456d6f598254bda7c72b24a6b213162cd6e6f205d16a083b5bf85cd0ea669c5fb5535a49d95389c186be0d5d6aaf673c3b675e34dbc89407aa23b2cd4f0d7674421b4896983d7958b0cf1c7c1322b944e316711ed73c720ac25fea464ea96fdf6be3f67430188cb9f1ea81316df61c875ff59c8ffa9ffe954ccb28f037ca003109618cff0ec917fc7abe19b6a10a0eae6c72b067e29580d666042466d68ce5d192fae5bdea0b94a9bfbd0efae746ff081eb028e5566a25db8f43ddd07c39db9bed54a8a9d5763d42", @ANYRES8], 0xfc, 0x2b5, &(0x7f00000001c0)="$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") syz_mount_image$ext4(0x0, &(0x7f00000004c0)='./file0\x00', 0x2052809, 0x0, 0xf9, 0x0, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='signal_generate\x00', r4}, 0x10) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000740)={&(0x7f0000002000)={[{0x0, 0x0, 0x3}, {0x0}, {0x0, 0x0, 0xfffe}, {0x0}]}, 0x4}, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x208008d6, &(0x7f0000000480)=ANY=[@ANYBLOB='namecase=1,discard,errors=continue,uid=', @ANYRESDEC=0x0, @ANYBLOB=',=', @ANYRES64, @ANYRESDEC, @ANYRESHEX, @ANYRESDEC], 0x80, 0x1511, &(0x7f0000000540)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000d40)) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042402024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 6.100276705s ago: executing program 4 (id=420): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x184) fcntl$lock(r2, 0x24, &(0x7f0000000400)={0x0, 0x1, 0x101, 0x80000001}) dup(r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r1}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r4}, 0x10) exit(0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r6}, 0x10) syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000380), 0x1, 0x2c4, &(0x7f00000003c0)="$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") syz_usb_connect$cdc_ecm(0x5, 0x5a, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024800010100200009040000ff02020000052406800005240004000d240f010900000000000000000424020a090581032000037fff090582020000000100090503"], 0x0) 5.542037272s ago: executing program 1 (id=421): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x18000, &(0x7f0000002f40)=ANY=[@ANYRES8=0x0, @ANYRES64, @ANYRES16=0x0, @ANYRESDEC, @ANYRES32, @ANYRES32], 0x1, 0x2ee, &(0x7f00000006c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) 5.451311134s ago: executing program 1 (id=422): openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x13, 0x22c, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) r0 = socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x4e, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x7, 0x2, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x82000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) io_destroy(0x0) 4.939941851s ago: executing program 0 (id=423): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000bd1d000000000000000000d8131e3adb605ce98692dc52a1e61d4bbded7bd9034f9b"], 0x50) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x18000, &(0x7f0000002f40)=ANY=[@ANYRES8=0x0, @ANYRES64, @ANYRES16=0x0, @ANYRESDEC, @ANYRES32, @ANYRES32], 0x1, 0x2ee, &(0x7f00000006c0)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) fdatasync(r4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 4.921733791s ago: executing program 2 (id=424): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090000000000000000000000850000002a000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r4, 0x801, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0xc000) rmdir(0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x25ac, &(0x7f0000002180)={@local, @empty, @void, {@mpls_mc={0x8848, {[{0xe5f, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x4}, {0x7f}, {0x7ff, 0x0, 0x1}], @ipv6=@icmpv6={0xe, 0x6, "d62ae9", 0x2562, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[@fragment={0xdb4f0f768bab6280, 0x0, 0x7f, 0x0, 0x0, 0x7, 0x68}, @dstopts={0x87}, @routing={0x32, 0xa, 0x1, 0xec, 0x0, [@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, @mcast2, @ipv4={'\x00', '\xff\xff', @multicast2}]}, @srh={0x89, 0x8, 0x4, 0x4, 0x7, 0x48, 0x5, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}]}, @hopopts={0xc, 0x19, '\x00', [@generic={0x31}, @padn={0x1, 0x2, [0x0, 0x0]}, @generic={0xd, 0x9f, "7af01f7ac4bd39ad53833215903b060ff9188a4893c39a249286f6308013ecd8ed8924767f4cafca1a6fab2333c8eaf77fa8017059785d631cec20d7c2ce571b6e5c4d0643aad93ea20b253d54a243c7107ea7fc612ebca9272c5122017307c5edb1db773f31b458b7e1dfb979c61b23f0cb133b8b45b9992c50d6ce5ca8f5c35ebedffb4b023618615d1f12938a1b0101187313e09fae24646a720c3cf442"}, @jumbo, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x19}}, @generic={0x93, 0x7, "a28d96ce8c8951"}, @padn={0x1, 0x1, [0x0]}]}, @srh={0x21, 0x4, 0x4, 0x2, 0xd, 0x40, 0x5250, [@private1={0xfc, 0x1, '\x00', 0x1}, @loopback]}, @fragment={0x5e, 0x0, 0x4, 0x0, 0x0, 0x1, 0x67}, @routing={0x2e, 0xe, 0x2, 0x9, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x20}, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @loopback, @ipv4={'\x00', '\xff\xff', @local}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @fragment={0xff, 0x0, 0x4, 0x0, 0x0, 0x5, 0x64}], @ndisc_ns={0x87, 0x0, 0x0, @local, [{0x5, 0x1d, "49b245f7837137e89508cc4eaf6aadbadeb1692abe4767bede3154a9e277d2becf4fb3ab0ec4c16793bc51d4540c8e5466bb612f3df3180ff38ba8cb62ee8319017f341a1732ad6992ab137577489df710867462155625f80fbfb1363572d93beb8562d8d00078ad5113b592df6ec71579b880d99eea82bb74c94e6b285350696b5c4bd88b10bcc5f9442079479d2c0ea86152a5d4c9b25a61e75103a10a89df7d7cabf325d3a5b690a3db338d737b457bea58262c55edb2956450c779f6b2a089508f47d9943a06203a60e010266d834a46ba65a9ea28b65746ecad4d3688c1ce962cc8abc2d0"}, {0x1f, 0x12, "6b120ab3dbc273e5552a5c15729572053338415d863607c402d3b68f2402b75d11d3ecfdd9ee4c077d89c23029cb677341f0a3ea5ec55503abd18b345d7d0473fde67de103189da38d6dc2d7ed34af3771f8af2c288ab94aac5065163636820a05f9a957562177e128b15465f4dacf1e9e74ef1912f97b280208006f4ff1668fed54b9f5644c7dfbc0cc8be8dd596e2b0cbf"}, {0x4, 0x13, "fca862b7c0cb85848ab1707cffe667da8c2930d8dae4cf9eac089f1be45594811f86a9233f12b58d297ccfc578f36e3be20d19137cca4ed5941608db4a77e178a620f5b252700ba1e72536a81a2df594151525dd772fda17031431853b8c980b36c8ef6f1188cde844b2921b65f8763552f4e5b414e3b10cc822743509438787589dc9a070f8eb459fccf939e93033e5ff266e687c7c71f81832db2efc"}, {0x4, 0x200, "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"}, {0x18, 0x200, "779925a7db5abd51c1fc42aa5331f1d05328308ee5a452f552499a3ce0940423a66794131af7635e9ec5e8844bc9eaef54a47e22b9fe44c817f4b1ae4ee6bba69b2e2f61bfdd9281dbabe79e4f73f4d75bde5ffa45259148fe442a130cb6cff87e1727dc705c7b262a8779babebde0ba6880912418f1c46fbd5fe10fce4613e62ce72c91c614d5504df7b6376565d6d529ac37d3cdb55d010d100e16c8b51dc2b4108827ff8783f1f05d1b4d5f5363be398057c14513c1e3ce67d1381fe811ced64eda49989fb104c4ee4eca49cbb72fc0c849fc2b2101c56c76f0a19d9ac4f793c8e9e7243a95500585eefead9ca6247bb9bc029d2691298f692a1ec25aa1a16b4f95f2111d47c17f18ee3d0321b380200679a71cf3cdb11c6593b2f8c40f032a67ba243978e3fa7b3dd7492558afba44b9785c8d061a7a8b97a2502dcfb2e81bedade519a5f3428bb63a490aac5e34eecd69692844db3ac3a1b27cfff8c6cf89af38fc0ebfbdf7260140ff66ab688b75aacdd66e70916b6aee3c7ad968d1da1a9b12b410b3d8346aa89d6dad0d7ba0961e4bf79484e4ac06cf2dfcc8b0a1351137853aa45612a89ca38695dc697b75039be793c7bbf0bd0e2350c8f14040d9ee723c65a1bd5cd4d589bcfd8da999448171d7ccba1b8b0d37068127508b0d796b37894f44e66156235318183f81525a9adbf683b286f78430e17108c97d460e7e1fe5d43c42fa93d8901bb12615fc85f03d23c1427f41d3f0b32ae8e5aaf88d506e52456dbad1d6268216c2f3ba6d440f162bf709b5d6c23d3f5ec9bed5fb95e4526585a850ed6be66a4e4d1103f1a758da5336e20567130e5b70b5281ffdd5cd147545c4e5959c37064b05aef1c81af7ba3d1ea061b50f41c13d21946ace0ff30abde8cdd2cf303052728744c358257e98bdcbb3557cf0291b57eb5368b317cfc67f0ad42705bf58ed6d7c70bc87fc147032cb5f359e11ecc6b6934bac61fa8d2a7757ef43e21b4488de0e85d2faa95a80965557652c1934b7988b43a08fc62cad039ee1906bd804ed3ee68d27603625a20a5605a2e86f66326ae1cd5d44066b2203f50b3578e7e24c2fd05b2d3b7f8ed5e12be7fd25c8fbaac83b9938e3d3d4ca87bc60f48406c23f7d74b49cdab9559a6a7d676f803e4d1623b45db8b2010cf9fe4f329f06dc482b3d0b6664f9774fa15402ab3a797cd5118911a7b3a45df7eecc655429c6e72bfd9874d7dc9f1ddc47bc91389197b201cab844cabdf4f282b1df7797845b314d180b637a432413c96b664aeee84c5ac8d2a3a057f6ac73132c7dd770a79708a763656197b29ca2e4382fa84fb061c9610a6a6d74378b11ac4d6d418b1d2dc5122dc61c3eb437d7a45a00e6c881ae4c098102b77657ac15446c34a6092f9a97c1d1254598bf4126e477a49722c53d71a731ea06962e5d726eabddaeac184a8412edc7464a49d348a153b5cbb1fcf2870b321421109c0729f1cb3b82e943d2fb51b7a756e4337c6444ab9742d7eb02bc0d4366ce00c11645f0dee9af64c9c5a491662f6336af134ddd037cb0d6292336beb9340788ac72779634759045a5cd520df1c2b026a439949b1baf0ee596fdb79b56e57e1ecf69ef8c2e8d2a4c0a68bd34188dacff37010408ada9e92d6d469870abe1ca3876d809652ef10e9adb5433c5171fb5a3499d054d676260dcd8baa56417198e8094886ab65a7df38ee54d99d0ad10185e3d5182cbe96c0da2412d6e87504f5a870dc32ae16142ceb897b2de9f7c09467bce7c2bad0237e8fc8520c3b218bc79ae4cd610ec648279bf2884965f15ae5ac21e2b71e3a0773de44b29374bc98013f3ac43607219aba50f9317370fe94199f30b4561a9882092e8155c06b3e943eaf773faa912474a78d343c306aa4b2af4f561f83ce8fa35ee524d382cd6fc48fcc07bb67e6fe0f888e64f110582ee8a8f35c32c014d785f5c8e6b6ec9fcd62c5ce80a780d5f22d70f03699cbff618cb991bf888be89f6acf499cc49b5d458cdea64b2390efd07fddc88334a8fc4aeb7472e32ed27aaba319c49145829444e28c76847a694f31accb689a3c0e6a2fd8bf06a1fb264b273ebb68525974e6389f1dad6532fd334ab600391fd727a8692b4c99dac208c9647ac31b705f17ab1421c613d284290572bd9a88f938dc7271879542b4beebb491c0dd12921f2e6a1ca8323924d2fd7bf50e1035a11103b6411e6bec72a83e8ba73007327bddf21b812a1b7f1a0208acdde2f29c282ad1dd7d82fdba9399adf20b7df6c3d10b56b389452c12252d366e7c5a9e2069cd24b199e42924694c358d225acaa84d8d61c38970f9b2b3ced1dcd88fa48a06066bf80a32c108f656fbdb9f665aefb0526a9035de6cb5b313e789d73a611bd5e71da1b03bb039a77ff16117ab7d306ab6a0848f8b540f4a1a9845c1f4a76421666661b06fe4f6ba1dc41afa329b14c875a5b3d887baac0d30f3e933f9d37c1ede3cc67f035f112d7573881de948d71d896e226685ced3f76b686bb8856470c0b38b691d0f7c0aadb2e90f7ba8bb6804a39f2de40a6f9e9b3b6a515c7109bb676bac293b1e2e160e3d0fbc02b5d84448780978cb46b6ecc8b55644afd42b80ad99c7e9ec2591d866dcbce8c05c72bafe24660369451dd277f498643a2309e95c2a71480e7ef14e04dc4b6075f028d2d2fd41d1499b1363e89f435727dcabb3d9b0fe606793103a6709d97a6ed1be35efc6619a9c38e2484890e8104036e38f1bf0cd0f42e51db2c546d2673d261f95ff68b47d763007c7e51f66ef70a029d2317b1ecf6d287eb0420a3f6fcbb7cd9e2b1e0623c4762e759e4af3b6487b32c1be9475073082297a249919935403436040aa3b72434da9aa34be5543f7eba1cc0bb675a91deb08b1f2d9e6040ec249f5b65357d05b9976008507022aac37015594031dcef6a3110199b176818007e95c14ec51d4b858cb83590b705a6212eef81b702072a407e091aec18ecacf62ef9befc534dc1ba239646c9fd23fa65ad57bf3da96d78afe87c28163b92a351745ac087a848de030b81620f248307e9625c9f3e6b392efb587960c272afa972f0f2791dbdc8f8a83122a3c7fb6b76d517dd660b1a3ef2d89f375d1e682f38e470ac49a62a456547f0742e00bb55ec1cb468953141a4e51af6461041a9c894a3b48676f934ea84066eb327f13d707ff7041c39487060066958f24cc9a16931c935ae3242924aae59d47dc9e0c12e0cdc51f19576e5bfbbe0387511a262f7cef751c0c82ac3b052471ea42dc8b2fa808b6367b6c2cc518303080302e49220c5d375bd9cb39b6e656a15f2e329daaaa7b5383f83a41a2d0e81769e908cc838e33aaf9fc71799296f872dbd80d073d374023e3b05f7b2e51eb87acd717459f5dd851b2da1f82f87ae1ea9d130dfbb505ab3ec2ad17a4a3bf9c1e56b65330be5ae656da7e420d5f7ed9a692404b627bcadeb2bfbcb159c5b8a51c5b8906f9587703d00c6bfac6c50d243b6c7b7a7a5acd16983056ef0bbab2d545bd0c2f3b7c2b5eeaae2976a4e563e975035d005771b455e5ff12286df3a64b5091424c489e45e9ada6319a0621924948ddc7c5b4ba56ca001276e3e128779003501d2360735016ed5b0e820bdbc23bc5db6c608115901d19474d87a17ba83d93222c4d1bfafb6fd64451896240898e6eb62e7b120f6a7780091a6e3040f778701b73b75c210eadbec3d4a265c3f62e81b1aea76e108b69d576f5a2f712a071f134ceb1f31b3c099a299a13b74b89eb618831ee29604b84e9b756ed3d51ef2e02ec36d4747d451d849ad79979896c086791afc1d38b107dc54ef5ee62700386ba383111da2d3b3dbe5eaf71f625d15ade80c818e928fed1d94bf04681ae400bbc0dfddf23a48fd45c4438c16389aae38d6bedfe776beac174b4a2002a37d519610b0f742b4208e3650d80fdf4ed8e395d7addb1f2fffb97677406f33de54f2c4ccebfbe48a848add4c4bce988477ce697464018d8cf352b5d66be22ac5a3d619036ef86fd0a5fdb5570b6e0c649cc0f18d591402423fa6bb199e8e89f72b72f1d9382c891a52c0dd2732d3392eb2684c05ca98fda4cfec3ccd82b32fe517209a5e2dbd4c6db000085e209a1edfc47225c440159d19b23f2401595b6d8cf8bba7b91a67b1025cd82e0c372809423a8907d212ec47f2ee8a8a17cc5193c5a61737240aa7c5561becb67c1c07f71096876629245484f117d6f117eae1aa048016907b5a81db837015094a36b833f0c902aa8df0be994394fbea7096bdd652325b94a43cf2ebcd24231abe306af6fa9017babb15671fff620bb9311cedab3ad92aa84d681c71a69f3db93d37eddb84b197a88b8492a1915cee0de2ba3b8943b1cc2a393757b94f41e2fc976dd53080033a264fd3736f8b16045ca77a914e47c851c905b11e9ee6a0da811e323ef1a21cc0ffce5593782f87f2c2049571e6c0a8b29e4dd701a032a63dc2edb6a271ec09d47d502436cea66e81957d369ab2d8639ea4488811d54dd0afa36a1af0807625dfa60aa1cc88a8a9d4d8c0b31b2d18bac18bbf0d88af58ddca77c762f3aed3278f33510f8088ce0cb94426d74b782217b69ab314438538b1b0798bb9265662a3362f13993c17e03cbfb07eb8098d52e3a9316dfa38056d956c4598e92e556d12b8d5aea0592a9cd40178091c1791f633fcbb3ecd3209f2b23ef0a3283b5008508712b5cff6af0094bdd179419f07bf856d58876977cce98fa1b3506fd17323f2eaa3e9191ecd77fc592e46b87078aed29a4bd74716288f194d5534b659e0262a5e2977e1d04e9d9f1752c28d661d4695e08cebc93a1dfdb9643f0dd22ef65e8e1127034f648e93845b132ecfe06714c322d7eb49930774a324d9a0ec43ff4f99542bfd5d8b5314f38cc941f9a3e7ace816b8de362ae7da6886fb0b93ec49e08106c756580b2d7e451a98f97b91d8c6f3c1ed610e5ced38ce151764c1f52a3c943d7bdbc8b25d3877d6b2d2e626b24e1e4af04a7b4a3e74b86acbe8a6c24cc7dbeb7c445a422bf4f81f8411ea7df3fb8449dddf5566af46898a7e94101427287e9925df92512321c9a355db85d33fd11ee1026d36aa7920169d080831758fd1c230fa484502ba60e57a12490e4623a67f868fe0db04ebf29b16185fb1ae6b09c58d55603e66158a9bd37e72226193b951d3ab92945277eedb595489af69ebcede3d6c107d6bcc7aebc647fa495c71a82ab94b5e5b08b4d07681f3810300616b4fea72aa5eb81f1d7900cb53313a8bc8a1635add1cfb71f4ef75aafc7fea46046ce8e40d72af596fcd2a8b917d7aacf19220539f57f83dd3bc07074e9bec7ee19a71121197dd025cba63934eff74ce8eda398603ed9eff2de81b41ccc2679dd82ec554921603f2e848912b7e03d4db068966aa8acc099a08bf6fe6e60498511a8bb89bec5fde34bcffcdb055df89373fdf194c3a22188ad5d2422e0e01db35e3084df49ba94e8ab5dfc61bc111bfc7737bf49df5804b704fcd2a12fb7864b3365e54352f3905a1bff41320347642a59e0581cb23924859c7c88b77a7ad726ae34064897b8843530babadd39628b728713c36c5d5884a545b1c9e17b6ccbd7f6492cea2657c297fb12aa4c8acf27cae33059ac1b9c18748396ace3582ad1161b627cbda3cad6a99110b413738629c30dbe4f8d3ae4890ac13d40c385ebf73d83b03ba24a204e68cc22ed035d72f03004104715c5ca59e52a68194037f92ffc367e20636e38e41b3f3b9"}, {0x4, 0x2, "85eee6a48bbdfede5b6f449dbf6b4db45c0c51"}, {0xe, 0x1c, "2357686278dd5e44dc7819a9494d1702d21731714a0ac6cc7c5af515ed7f5001ab84151535b42a542df99870e6e8c24320abaec2835d86a35ef738f737ab3f696f513cfc796b6038803b348b96e94b2a4a72a731499d6b24382a605e75b569226b1e67fc7aed4388c443d1bf25026469a8b3b5040bb888eba1367e0bd842ab3ad52ee826fdef63ffeb21ae7d6a681b1bc84203795a5e8574c15bfa0020d611e30ce94057e340cbb38ad35d6e8e2558746b60cae7a24e6b0f1951095119140a97da1b0781ba311c03f44e187faab8b70243225239d7906f502b771cbb14c4bc"}]}}}}}}}, 0x0) recvmmsg(r6, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1}, 0x1}], 0x1, 0x20, 0x0) r7 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "69dcaf20127e9a854529f45826cb35be51682e30944313e2080000000000000080221daeccfda5eb75cfe2bad94f000066b2ddab614fec2236da7d88ea07c9ee"}, 0x48, 0xfffffffffffffffe) keyctl$search(0xa, r7, &(0x7f0000000180)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r10, 0x40345410, &(0x7f0000000280)={{0x1}}) readv(r10, &(0x7f0000000080)=[{&(0x7f0000000140)=""/144, 0x90}], 0x1) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001e00431b000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="28f94174f9f5ffff07003d"], 0x28}}, 0x0) syz_usb_control_io(r5, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 4.468292987s ago: executing program 3 (id=425): openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x13, 0x22c, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) r0 = socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x4e, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x7, 0x2, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x82000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) io_destroy(0x0) 4.025995044s ago: executing program 1 (id=426): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x18000, &(0x7f0000002f40)=ANY=[@ANYRES8=0x0, @ANYRES64, @ANYRES16=0x0, @ANYRESDEC, @ANYRES32, @ANYRES32], 0x1, 0x2ee, &(0x7f00000006c0)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) fdatasync(r3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 3.907034105s ago: executing program 0 (id=427): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x184) fcntl$lock(r2, 0x24, &(0x7f0000000400)={0x0, 0x1, 0x101, 0x80000001}) dup(r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r1}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r6}, 0x10) syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000380), 0x1, 0x2c4, &(0x7f00000003c0)="$eJzs3T1rW1ccBvBT1bWLi1+mQrv00C7tcnHdL1ARbDARJDhWSDIErvF1IqRIRlcQyWTwniVzxowmY7ZAyBfwB8iezUvw5CkKlhy/xSFDkC/Gvx+I88CD4BzEFf/lcnbvPHtUX8+T9bQTSv/HUAohlPZDmB2koR8O19Igj4eTtsI/7148f3rr7r3r5UplYTnGxfLKf/Mxxuk/3jx+8vLPt51fbr+afj0Rdmbv736Yf7/z685vux9XHtbyWMtjs9WJaVxttTrpaiOLa7W8nsR4s5GleRZrzTxrn+rXG62NjV5Mm2tTkxvtLM9j2uzFetaLnVbstHsxfZDWmjFJkjg1GfiW6vbycloueheMVrtdTg+e4Ykvmup2IRsCAApl/r/KzP9XwcH8P374/J5m/gcAAAAAAAAAAAAAgMtgv9+f6ff7M5/Xs5+i98do+f2vthMv7v0cwt5Wt9qtDtdhv7hUWZiLA7PH39rrdqs/HvX/Dvt4uv8pTB728+f24+Hvv4b9QXftRuVMPxHWRn98AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABhI4pFz7/dPkq/1w7S4VFmYO/d+/7Hw+9iFHQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvkve26ynjUbWFgRBOApF/zMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxTu+9LvonQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFCkvLdZTxuNrD3CUPQZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALpNPAQAA///JXtD+") syz_usb_connect$cdc_ecm(0x5, 0x5a, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024800010100200009040000ff02020000052406800005240004000d240f010900000000000000000424020a090581032000037fff090582020000000100090503"], 0x0) 3.062910247s ago: executing program 1 (id=428): openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x13, 0x22c, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) r0 = socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x4e, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x7, 0x2, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x82000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) io_destroy(0x0) 3.050331347s ago: executing program 3 (id=429): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x184) fcntl$lock(r2, 0x24, &(0x7f0000000400)={0x0, 0x1, 0x101, 0x80000001}) dup(r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r1}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r4}, 0x10) exit(0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r6}, 0x10) syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000380), 0x1, 0x2c4, &(0x7f00000003c0)="$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") syz_usb_connect$cdc_ecm(0x5, 0x5a, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024800010100200009040000ff02020000052406800005240004000d240f010900000000000000000424020a090581032000037fff090582020000000100090503"], 0x0) 3.043776467s ago: executing program 4 (id=430): openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x82000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) io_destroy(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4f0c3000) 2.275952688s ago: executing program 0 (id=431): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r2}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r4}, 0x18) io_uring_setup(0x1de0, &(0x7f0000001e00)={0x0, 0x8ec5, 0x0, 0x0, 0x0, 0x0, r4}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r5 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) fcntl$addseals(r5, 0x409, 0xb) r6 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r6, 0x82, 0x5, &(0x7f0000002340)='hello') 2.027127721s ago: executing program 4 (id=432): openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x13, 0x22c, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) r0 = socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x4e, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x7, 0x2, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x82000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) io_destroy(0x0) 1.897905693s ago: executing program 2 (id=433): r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x9886) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x408083, 0x0) accept$inet(r1, &(0x7f0000000240)={0x2, 0x0, @multicast2}, &(0x7f00000002c0)=0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x18) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) ioctl$TIOCPKT(r6, 0x5420, &(0x7f00000000c0)=0x1) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) splice(r6, 0x0, r5, 0x0, 0x7ffff000, 0x0) r7 = io_uring_setup(0x3ece, &(0x7f0000000340)={0x0, 0x49d2, 0x2, 0x1, 0x402f}) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r7, 0x12, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r7, 0x13, &(0x7f0000000300)=[0xe, 0x9], 0x2) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, &(0x7f00000001c0)={0x0, @adiantum, 0x0, @desc2}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r8, 0xffffffffffffffff, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) 1.568280518s ago: executing program 1 (id=434): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r2}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r4}, 0x18) io_uring_setup(0x1de0, &(0x7f0000001e00)={0x0, 0x8ec5, 0x0, 0x0, 0x0, 0x0, r4}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r5 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) fcntl$addseals(r5, 0x409, 0xb) r6 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r6, 0x82, 0x5, &(0x7f0000002340)='hello') 1.512773808s ago: executing program 2 (id=435): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r2}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r4}, 0x18) io_uring_setup(0x1de0, &(0x7f0000001e00)={0x0, 0x8ec5, 0x0, 0x0, 0x0, 0x0, r4}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r5 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) r6 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r6, 0x82, 0x5, &(0x7f0000002340)='hello') 654.643361ms ago: executing program 4 (id=436): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000850000007d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) 22.331669ms ago: executing program 3 (id=437): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') read$FUSE(r0, &(0x7f0000001300)={0x2020}, 0x2020) 0s ago: executing program 3 (id=438): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002280)='/sys/power/wake_unlock', 0x14b704, 0x88) read$FUSE(r1, &(0x7f0000000140)={0x2020}, 0x2020) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) write$selinux_access(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="2a797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x54c, 0xce6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x20, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000000)={0xfffffee5, 0x0, 0x0, &(0x7f0000001200)={0x0, 0x22, 0x3, {[@local=@item_012={0x2, 0x2, 0x0, '@\t'}]}}, 0x0}, 0x0) kernel console output (not intermixed with test programs): USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.461108][ T323] usb 2-1: config 0 descriptor?? [ 73.469846][ T24] usb 4-1: USB disconnect, device number 6 [ 73.860189][ T24] usb 3-1: USB disconnect, device number 10 [ 73.902329][ T323] playstation 0003:054C:0CE6.000A: item fetching failed at offset 0/2 [ 74.482442][ T323] playstation 0003:054C:0CE6.000A: Parse failed [ 74.502403][ T323] playstation: probe of 0003:054C:0CE6.000A failed with error -22 [ 74.523067][ T323] usb 2-1: USB disconnect, device number 12 [ 74.565649][ T1290] loop3: detected capacity change from 0 to 128 [ 74.581861][ T1290] EXT4-fs (loop3): Test dummy encryption mode enabled [ 74.609167][ T1290] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 74.618205][ T1290] ext4 filesystem being mounted at /34/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 74.707989][ T223] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 74.715512][ T1294] can0: slcan on ptm0. [ 74.722505][ T1294] futex_wake_op: syz.3.171 tries to shift op by -1; fix this program [ 74.779518][ T1293] loop0: detected capacity change from 0 to 40427 [ 74.798706][ T1293] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 74.806368][ T1293] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 74.815914][ T1293] F2FS-fs (loop0): invalid crc value [ 74.824045][ T1293] F2FS-fs (loop0): Found nat_bits in checkpoint [ 74.864869][ T1293] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 74.871830][ T1293] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 74.898157][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): can0: link becomes ready [ 74.910155][ T223] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.926243][ T223] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.936187][ T223] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 74.945541][ T223] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.957466][ T223] usb 5-1: config 0 descriptor?? [ 74.982668][ T10] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 74.992009][ T10] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 75.018021][ T24] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 75.125027][ T1316] loop0: detected capacity change from 0 to 1024 [ 75.140245][ T1316] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 75.148954][ T1316] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.199169][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.210117][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.221032][ T24] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 75.236167][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.245739][ T1322] loop1: detected capacity change from 0 to 128 [ 75.255767][ T24] usb 3-1: config 0 descriptor?? [ 75.271678][ T1322] EXT4-fs (loop1): Test dummy encryption mode enabled [ 75.271807][ T295] EXT4-fs (loop0): unmounting filesystem. [ 75.285433][ T1322] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 75.294540][ T1322] ext4 filesystem being mounted at /31/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 75.318061][ T1325] loop0: detected capacity change from 0 to 512 [ 75.324557][ T1325] EXT4-fs: Ignoring removed nobh option [ 75.333357][ T1325] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 75.344973][ T1325] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 75.357320][ T1325] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.175: Corrupt directory, running e2fsck is recommended [ 75.370782][ T1325] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 75.378855][ T1325] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2186: inode #15: comm syz.0.175: corrupted in-inode xattr [ 75.390874][ T1325] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.175: couldn't read orphan inode 15 (err -117) [ 75.406226][ T1327] can1: slcan on ptm1. [ 75.412675][ T1325] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 75.431768][ T1327] futex_wake_op: syz.1.174 tries to shift op by -1; fix this program [ 75.440202][ T1325] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 75.451913][ T1325] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 75.463591][ T1325] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.175: Corrupt directory, running e2fsck is recommended [ 75.476690][ T1290] can0 (unregistered): slcan off ptm0. [ 75.495244][ T294] EXT4-fs (loop3): unmounting filesystem. [ 75.542471][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 75.549220][ T24] usbhid: probe of 3-1:0.0 failed with error -71 [ 75.557307][ T295] EXT4-fs (loop0): unmounting filesystem. [ 75.572302][ T24] usb 3-1: USB disconnect, device number 11 [ 75.599872][ T1348] 9pnet_fd: Insufficient options for proto=fd [ 75.682871][ T1356] loop3: detected capacity change from 0 to 1024 [ 75.769543][ T1356] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 75.780086][ T1356] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.908056][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): can1: link becomes ready [ 76.178596][ T1322] can1 (unregistered): slcan off ptm1. [ 76.210303][ T297] EXT4-fs (loop1): unmounting filesystem. [ 76.405027][ T1401] loop0: detected capacity change from 0 to 128 [ 76.477192][ T1384] loop2: detected capacity change from 0 to 40427 [ 76.487356][ T1384] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 76.498111][ T1384] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 76.521880][ T223] usbhid 5-1:0.0: can't add hid device: -71 [ 76.527682][ T223] usbhid: probe of 5-1:0.0 failed with error -71 [ 76.554023][ T1384] F2FS-fs (loop2): invalid crc value [ 76.564557][ T223] usb 5-1: USB disconnect, device number 6 [ 76.572293][ T294] EXT4-fs (loop3): unmounting filesystem. [ 76.604027][ T1384] F2FS-fs (loop2): Found nat_bits in checkpoint [ 76.625446][ T1420] loop3: detected capacity change from 0 to 1024 [ 76.635384][ T1421] loop4: detected capacity change from 0 to 128 [ 76.652149][ T1421] EXT4-fs (loop4): Test dummy encryption mode enabled [ 76.667995][ T6] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 76.677391][ T1421] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 76.697843][ T1421] ext4 filesystem being mounted at /37/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 76.708801][ T1384] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 76.717000][ T1384] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 76.728432][ T1420] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 76.751991][ T1420] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.804202][ T1434] can0: slcan on ptm0. [ 76.826100][ T1434] futex_wake_op: syz.4.186 tries to shift op by -1; fix this program [ 76.867962][ T6] usb 2-1: Using ep0 maxpacket: 16 [ 76.874261][ T6] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 76.895543][ T6] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.911597][ T294] EXT4-fs (loop3): unmounting filesystem. [ 76.919378][ T6] usb 2-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 76.932222][ T6] usb 2-1: config 0 interface 0 has no altsetting 0 [ 76.938788][ T6] usb 2-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 76.947593][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.947954][ T323] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 76.958731][ T6] usb 2-1: config 0 descriptor?? [ 77.020946][ T1384] syz.2.181: attempt to access beyond end of device [ 77.020946][ T1384] loop2: rw=2049, sector=77824, nr_sectors = 4096 limit=40427 [ 77.051954][ T1384] syz.2.181: attempt to access beyond end of device [ 77.051954][ T1384] loop2: rw=2049, sector=49152, nr_sectors = 4000 limit=40427 [ 77.169592][ T323] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.211252][ T323] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 77.244241][ T323] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.276981][ T323] usb 1-1: Product: syz [ 77.299976][ T323] usb 1-1: Manufacturer: syz [ 77.322923][ T323] usb 1-1: SerialNumber: syz [ 77.714305][ T1383] syz.2.181: attempt to access beyond end of device [ 77.714305][ T1383] loop2: rw=524288, sector=77824, nr_sectors = 256 limit=40427 [ 77.944073][ T1383] syz.2.181: attempt to access beyond end of device [ 77.944073][ T1383] loop2: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 77.987202][ T1383] syz.2.181: attempt to access beyond end of device [ 77.987202][ T1383] loop2: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 78.058125][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): can0: link becomes ready [ 78.081966][ T1383] syz.2.181: attempt to access beyond end of device [ 78.081966][ T1383] loop2: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 78.101284][ T1384] syz.2.181: attempt to access beyond end of device [ 78.101284][ T1384] loop2: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 78.115198][ T1383] syz.2.181: attempt to access beyond end of device [ 78.115198][ T1383] loop2: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 78.129081][ T1384] syz.2.181: attempt to access beyond end of device [ 78.129081][ T1384] loop2: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 78.142890][ T1383] syz.2.181: attempt to access beyond end of device [ 78.142890][ T1383] loop2: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 78.157860][ T6] playstation 0003:054C:0CE6.000B: item fetching failed at offset 0/2 [ 78.166133][ T6] playstation 0003:054C:0CE6.000B: Parse failed [ 78.172598][ T6] playstation: probe of 0003:054C:0CE6.000B failed with error -22 [ 78.197109][ T43] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 78.225360][ T43] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 78.238075][ T1421] can0 (unregistered): slcan off ptm0. [ 78.256979][ T298] EXT4-fs (loop4): unmounting filesystem. [ 78.278997][ T1475] loop3: detected capacity change from 0 to 128 [ 78.305097][ T1475] EXT4-fs (loop3): Test dummy encryption mode enabled [ 78.325972][ T1475] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 78.359000][ T1475] ext4 filesystem being mounted at /43/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 78.359029][ T634] usb 2-1: USB disconnect, device number 13 [ 78.461001][ T1491] can0: slcan on ptm0. [ 78.472691][ T1491] futex_wake_op: syz.3.192 tries to shift op by -1; fix this program [ 79.057975][ T6] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 79.068582][ T329] IPv6: ADDRCONF(NETDEV_CHANGE): can0: link becomes ready [ 79.080960][ T323] cdc_ncm 1-1:1.0: failed to get mac address [ 79.087011][ T323] cdc_ncm 1-1:1.0: bind() failure [ 79.104940][ T323] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 79.111562][ T323] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 79.123116][ T323] usb 1-1: USB disconnect, device number 9 [ 79.168402][ T1475] can0 (unregistered): slcan off ptm0. [ 79.188085][ T294] EXT4-fs (loop3): unmounting filesystem. [ 79.210340][ T1531] loop3: detected capacity change from 0 to 128 [ 79.259069][ T6] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.279253][ T6] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 79.296426][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.313368][ T6] usb 5-1: Product: syz [ 79.329821][ T6] usb 5-1: Manufacturer: syz [ 79.344576][ T6] usb 5-1: SerialNumber: syz [ 79.521886][ T1556] loop3: detected capacity change from 0 to 1024 [ 79.566824][ T1556] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 79.575830][ T1556] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.509609][ T294] EXT4-fs (loop3): unmounting filesystem. [ 82.209188][ T1577] 9pnet_fd: Insufficient options for proto=fd [ 82.222771][ T1578] loop2: detected capacity change from 0 to 512 [ 82.258262][ T1578] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 82.313289][ T1578] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 82.328796][ T1578] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.347638][ T1583] loop0: detected capacity change from 0 to 128 [ 82.365520][ T1583] EXT4-fs (loop0): Test dummy encryption mode enabled [ 82.399749][ T1583] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 82.412731][ T296] EXT4-fs (loop2): unmounting filesystem. [ 82.428217][ T1583] ext4 filesystem being mounted at /46/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 82.519451][ T1585] can0: slcan on ptm0. [ 82.534184][ T1585] futex_wake_op: syz.0.203 tries to shift op by -1; fix this program [ 82.638850][ T6] cdc_ncm 5-1:1.0: failed to get mac address [ 82.649665][ T6] cdc_ncm 5-1:1.0: bind() failure [ 82.657982][ T6] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 82.678367][ T6] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 82.685990][ T6] usb 5-1: USB disconnect, device number 7 [ 82.804737][ T1602] loop2: detected capacity change from 0 to 128 [ 82.842794][ T1602] EXT4-fs (loop2): Test dummy encryption mode enabled [ 82.880003][ T1602] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 82.889118][ T1602] ext4 filesystem being mounted at /35/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 82.903807][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): can0: link becomes ready [ 82.926171][ T1612] loop4: detected capacity change from 0 to 128 [ 82.947545][ T1612] EXT4-fs (loop4): Test dummy encryption mode enabled [ 83.027308][ T1615] can1: slcan on ptm1. [ 83.032657][ T1612] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 83.041310][ T1612] ext4 filesystem being mounted at /39/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 83.044960][ T1615] futex_wake_op: syz.2.204 tries to shift op by -1; fix this program [ 83.141030][ T1620] can2: slcan on ptm2. [ 83.172755][ T1620] futex_wake_op: syz.4.206 tries to shift op by -1; fix this program [ 83.248536][ T1583] can0 (unregistered): slcan off ptm0. [ 83.280007][ T295] EXT4-fs (loop0): unmounting filesystem. [ 83.348775][ T28] audit: type=1400 audit(1745862583.620:177): avc: denied { ioctl } for pid=1637 comm="syz.0.208" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=19258 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 83.417251][ T1642] loop0: detected capacity change from 0 to 512 [ 83.442828][ T1642] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 83.454020][ T1642] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 83.463463][ T1642] EXT4-fs error (device loop0): ext4_orphan_get:1426: comm syz.0.209: bad orphan inode 13 [ 83.487977][ T1642] EXT4-fs (loop0): Remounting filesystem read-only [ 83.497944][ T1642] ext4_test_bit(bit=12, block=4) = 1 [ 83.503246][ T1642] is_bad_inode(inode)=0 [ 83.518241][ T1642] NEXT_ORPHAN(inode)=17694720 [ 83.535975][ T1642] max_ino=32 [ 83.547619][ T1642] i_nlink=0 [ 83.556370][ T1642] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 83.586216][ T1642] EXT4-fs (loop0): unmounting filesystem. [ 83.638512][ T1642] loop0: detected capacity change from 0 to 256 [ 83.661431][ T1642] incfs: Error accessing: ./file0. [ 83.676580][ T1642] incfs: mount failed -20 [ 83.678667][ T1602] can1 (unregistered): slcan off ptm1. [ 83.684356][ T1642] loop0: detected capacity change from 0 to 256 [ 83.702603][ T1642] exfat: Deprecated parameter 'namecase' [ 83.715359][ T296] EXT4-fs (loop2): unmounting filesystem. [ 83.724774][ T1642] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 83.762120][ T1661] loop2: detected capacity change from 0 to 1024 [ 83.779588][ T1612] can2 (unregistered): slcan off ptm2. [ 83.801356][ T298] EXT4-fs (loop4): unmounting filesystem. [ 83.823517][ T1661] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 83.848025][ T1661] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.852527][ T1671] loop3: detected capacity change from 0 to 512 [ 83.905258][ T1671] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 83.924927][ T1679] loop4: detected capacity change from 0 to 512 [ 83.936222][ T1671] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 83.951098][ T1671] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.021401][ T294] EXT4-fs (loop3): unmounting filesystem. [ 85.988014][ T6] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 86.248931][ T296] EXT4-fs (loop2): unmounting filesystem. [ 87.002947][ T223] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 87.011765][ T1709] 9pnet_fd: Insufficient options for proto=fd [ 87.136324][ T1718] loop2: detected capacity change from 0 to 512 [ 87.168404][ T1718] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 87.184759][ T1716] loop0: detected capacity change from 0 to 128 [ 87.196125][ T1714] loop4: detected capacity change from 0 to 128 [ 87.242980][ T1714] EXT4-fs (loop4): Test dummy encryption mode enabled [ 87.263813][ T1718] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 87.294796][ T1718] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.306472][ T1714] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 87.336368][ T1714] ext4 filesystem being mounted at /41/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 87.458856][ T296] EXT4-fs (loop2): unmounting filesystem. [ 87.553036][ T1745] loop2: detected capacity change from 0 to 128 [ 87.599181][ T1745] EXT4-fs (loop2): Test dummy encryption mode enabled [ 87.613082][ T1745] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 87.614649][ T1746] can0: slcan on ptm0. [ 87.631468][ T1745] ext4 filesystem being mounted at /39/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 87.786269][ T1753] futex_wake_op: syz.4.218 tries to shift op by -1; fix this program [ 88.811264][ T1757] can1: slcan on ptm1. [ 88.920295][ T1754] futex_wake_op: syz.2.222 tries to shift op by -1; fix this program [ 88.933869][ T1767] loop0: detected capacity change from 0 to 512 [ 88.968932][ T1767] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 88.988022][ T1767] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 88.988277][ T1714] can0 (unregistered): slcan off ptm0. [ 88.996180][ T1767] EXT4-fs error (device loop0): ext4_orphan_get:1426: comm syz.0.225: bad orphan inode 13 [ 89.028371][ T1767] EXT4-fs (loop0): Remounting filesystem read-only [ 89.035947][ T1767] ext4_test_bit(bit=12, block=4) = 1 [ 89.148894][ T1767] is_bad_inode(inode)=0 [ 89.152979][ T1767] NEXT_ORPHAN(inode)=17694720 [ 89.157722][ T1767] max_ino=32 [ 89.160824][ T1767] i_nlink=0 [ 89.163844][ T1767] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 89.174092][ T298] EXT4-fs (loop4): unmounting filesystem. [ 89.182684][ T1767] EXT4-fs (loop0): unmounting filesystem. [ 89.238962][ T1745] can1 (unregistered): slcan off ptm1. [ 89.281900][ T1767] loop0: detected capacity change from 0 to 256 [ 89.289161][ T296] EXT4-fs (loop2): unmounting filesystem. [ 89.418947][ T1767] incfs: Error accessing: ./file0. [ 89.424048][ T1767] incfs: mount failed -20 [ 89.435654][ T1767] loop0: detected capacity change from 0 to 256 [ 89.459529][ T1767] exfat: Deprecated parameter 'namecase' [ 89.553934][ T1767] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 89.858714][ T1794] loop1: detected capacity change from 0 to 512 [ 89.904116][ T1794] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 89.912035][ T1794] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 89.928109][ T1794] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.228: bad orphan inode 13 [ 89.948171][ T1794] EXT4-fs (loop1): Remounting filesystem read-only [ 89.954550][ T1794] ext4_test_bit(bit=12, block=4) = 1 [ 89.977962][ T1794] is_bad_inode(inode)=0 [ 89.982037][ T1794] NEXT_ORPHAN(inode)=17694720 [ 89.986534][ T1794] max_ino=32 [ 89.989642][ T1794] i_nlink=0 [ 89.992730][ T1794] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 90.008946][ T1794] EXT4-fs (loop1): unmounting filesystem. [ 90.117928][ T223] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 90.173150][ T1801] 9pnet_fd: Insufficient options for proto=fd [ 90.329125][ T223] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 90.337956][ T223] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 90.348175][ T223] usb 1-1: config 220 has no interface number 2 [ 90.354655][ T223] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 90.460432][ T301] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 90.538073][ T323] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 90.650732][ T301] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.684870][ T301] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 90.728522][ T301] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.757962][ T323] usb 3-1: Using ep0 maxpacket: 16 [ 90.765219][ T323] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 90.787169][ T301] usb 2-1: Product: syz [ 90.808119][ T301] usb 2-1: Manufacturer: syz [ 90.825015][ T323] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.841375][ T301] usb 2-1: SerialNumber: syz [ 90.923574][ T323] usb 3-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 90.990311][ T323] usb 3-1: config 0 interface 0 has no altsetting 0 [ 91.024822][ T323] usb 3-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 91.070887][ T323] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.219190][ T323] usb 3-1: config 0 descriptor?? [ 91.224893][ T1809] loop4: detected capacity change from 0 to 40427 [ 91.272107][ T1809] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 91.288295][ T1809] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 91.308165][ T1809] F2FS-fs (loop4): invalid crc value [ 91.319202][ T1809] F2FS-fs (loop4): Found nat_bits in checkpoint [ 91.363678][ T1809] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 91.371036][ T1809] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 91.471478][ T10] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 91.480904][ T10] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 91.489602][ T223] usb 1-1: config 220 interface 0 has no altsetting 0 [ 91.489629][ T223] usb 1-1: config 220 interface 76 has no altsetting 0 [ 91.503212][ T223] usb 1-1: config 220 interface 1 has no altsetting 0 [ 91.545489][ T223] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 91.555292][ T223] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.563358][ T223] usb 1-1: Product: syz [ 91.567472][ T223] usb 1-1: Manufacturer: syz [ 91.572075][ T223] usb 1-1: SerialNumber: syz [ 91.651518][ T323] playstation 0003:054C:0CE6.000C: item fetching failed at offset 0/2 [ 91.660808][ T323] playstation 0003:054C:0CE6.000C: Parse failed [ 91.667037][ T323] playstation: probe of 0003:054C:0CE6.000C failed with error -22 [ 91.799425][ T223] usb 1-1: selecting invalid altsetting 0 [ 91.805317][ T223] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 91.817966][ T223] usb 1-1: No valid video chain found. [ 91.831244][ T223] usb 1-1: USB disconnect, device number 11 [ 91.867120][ T323] usb 3-1: USB disconnect, device number 12 [ 91.977994][ T6] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 92.169008][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.187914][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.197965][ T6] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 92.206933][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.225667][ T6] usb 5-1: config 0 descriptor?? [ 92.344162][ T1826] loop0: detected capacity change from 0 to 1024 [ 92.378963][ T1826] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 92.388063][ T1826] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.399369][ T301] cdc_ncm 2-1:1.0: failed to get mac address [ 92.408123][ T301] cdc_ncm 2-1:1.0: bind() failure [ 92.417062][ T301] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 92.429279][ T301] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 92.437094][ T301] usb 2-1: USB disconnect, device number 14 [ 92.522826][ T6] usbhid 5-1:0.0: can't add hid device: -71 [ 92.533879][ T6] usbhid: probe of 5-1:0.0 failed with error -71 [ 92.541720][ T1835] loop2: detected capacity change from 0 to 128 [ 92.553580][ T1835] EXT4-fs (loop2): Test dummy encryption mode enabled [ 92.571172][ T6] usb 5-1: USB disconnect, device number 9 [ 92.582281][ T1835] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 92.591068][ T1835] ext4 filesystem being mounted at /42/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 92.615480][ T295] EXT4-fs (loop0): unmounting filesystem. [ 92.640285][ T1839] loop0: detected capacity change from 0 to 128 [ 92.690386][ T1840] can0: slcan on ptm0. [ 92.699499][ T1840] futex_wake_op: syz.2.237 tries to shift op by -1; fix this program [ 92.809839][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): can0: link becomes ready [ 92.957976][ T223] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 93.027934][ T24] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 93.139126][ T223] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.155333][ T223] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 93.164565][ T223] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.172754][ T223] usb 4-1: Product: syz [ 93.358201][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 93.365640][ T24] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 93.415042][ T24] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.461379][ T24] usb 1-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 93.469249][ T223] usb 4-1: Manufacturer: syz [ 93.478827][ T223] usb 4-1: SerialNumber: syz [ 93.519809][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 93.526709][ T24] usb 1-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 93.537157][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.549885][ T24] usb 1-1: config 0 descriptor?? [ 93.649348][ T1835] can0 (unregistered): slcan off ptm0. [ 93.666945][ T296] EXT4-fs (loop2): unmounting filesystem. [ 93.704182][ T1881] 9pnet_fd: Insufficient options for proto=fd [ 93.759909][ T1884] loop2: detected capacity change from 0 to 512 [ 93.815686][ T1884] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 93.836725][ T1884] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 93.893997][ T296] EXT4-fs (loop2): unmounting filesystem. [ 93.959166][ T24] playstation 0003:054C:0CE6.000D: item fetching failed at offset 0/2 [ 93.967413][ T24] playstation 0003:054C:0CE6.000D: Parse failed [ 94.048097][ T24] playstation: probe of 0003:054C:0CE6.000D failed with error -22 [ 94.270435][ T24] usb 1-1: USB disconnect, device number 12 [ 94.917459][ T1913] loop1: detected capacity change from 0 to 512 [ 94.982474][ T1913] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 94.993676][ T1913] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 95.028101][ T1913] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.247: bad orphan inode 13 [ 95.059743][ T1913] EXT4-fs (loop1): Remounting filesystem read-only [ 95.080173][ T1913] ext4_test_bit(bit=12, block=4) = 1 [ 95.095076][ T1913] is_bad_inode(inode)=0 [ 95.108873][ T1913] NEXT_ORPHAN(inode)=17694720 [ 95.123161][ T1913] max_ino=32 [ 95.132999][ T1913] i_nlink=0 [ 95.148225][ T1913] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 95.169983][ T1913] EXT4-fs (loop1): unmounting filesystem. [ 95.193069][ T1920] loop2: detected capacity change from 0 to 512 [ 95.215506][ T1921] loop0: detected capacity change from 0 to 128 [ 95.222601][ T1920] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 95.238558][ T1921] EXT4-fs (loop0): Test dummy encryption mode enabled [ 95.249932][ T1920] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 95.268795][ T1921] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 95.288777][ T1913] loop1: detected capacity change from 0 to 256 [ 95.295153][ T1921] ext4 filesystem being mounted at /56/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 95.306113][ T1920] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.356641][ T296] EXT4-fs (loop2): unmounting filesystem. [ 95.371243][ T1913] incfs: Error accessing: ./file0. [ 95.393439][ T223] cdc_ncm 4-1:1.0: failed to get mac address [ 95.407958][ T223] cdc_ncm 4-1:1.0: bind() failure [ 95.409512][ T1913] incfs: mount failed -20 [ 95.414096][ T223] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 95.428818][ T223] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 95.436691][ T223] usb 4-1: USB disconnect, device number 7 [ 95.450034][ T1913] loop1: detected capacity change from 0 to 256 [ 95.566584][ T1913] exfat: Deprecated parameter 'namecase' [ 95.577982][ T1926] can0: slcan on ptm0. [ 95.592401][ T1926] futex_wake_op: syz.0.249 tries to shift op by -1; fix this program [ 95.604367][ T1913] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 96.838816][ T24] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 96.846820][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): can0: link becomes ready [ 96.900578][ T1955] loop2: detected capacity change from 0 to 512 [ 96.909668][ T1955] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 96.917580][ T1955] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 96.926704][ T1955] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.255: bad orphan inode 13 [ 96.944064][ T1955] EXT4-fs (loop2): Remounting filesystem read-only [ 96.953396][ T1960] loop4: detected capacity change from 0 to 128 [ 96.955678][ T1955] ext4_test_bit(bit=12, block=4) = 1 [ 96.964607][ T1955] is_bad_inode(inode)=0 [ 96.969134][ T1921] can0 (unregistered): slcan off ptm0. [ 96.969193][ T1955] NEXT_ORPHAN(inode)=17694720 [ 96.978990][ T1955] max_ino=32 [ 96.982028][ T1955] i_nlink=0 [ 96.986591][ T1955] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 96.996379][ T1955] EXT4-fs (loop2): unmounting filesystem. [ 97.005269][ T1963] loop3: detected capacity change from 0 to 512 [ 97.011686][ T1960] EXT4-fs (loop4): Test dummy encryption mode enabled [ 97.019945][ T295] EXT4-fs (loop0): unmounting filesystem. [ 97.020883][ T1963] EXT4-fs: Ignoring removed nobh option [ 97.035077][ T1963] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 97.047283][ T1960] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 97.058509][ T1960] ext4 filesystem being mounted at /46/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 97.060035][ T1963] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 97.076640][ T24] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 97.079322][ T1963] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.256: Corrupt directory, running e2fsck is recommended [ 97.111018][ T1963] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 97.114628][ T24] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 97.121113][ T1963] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2186: inode #15: comm syz.3.256: corrupted in-inode xattr [ 97.141233][ T1963] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.256: couldn't read orphan inode 15 (err -117) [ 97.153208][ T1963] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 97.184482][ T1963] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 97.196458][ T1963] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 97.217341][ T24] usb 2-1: config 220 has no interface number 2 [ 97.227554][ T24] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 97.240698][ T24] usb 2-1: config 220 interface 0 has no altsetting 0 [ 97.247490][ T24] usb 2-1: config 220 interface 76 has no altsetting 0 [ 97.250494][ T1963] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.256: Corrupt directory, running e2fsck is recommended [ 97.266779][ T24] usb 2-1: config 220 interface 1 has no altsetting 0 [ 97.294261][ T24] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 97.316998][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.355184][ T1963] input: syz1 as /devices/virtual/input/input15 [ 97.416139][ T1986] bridge0: port 3(gretap0) entered blocking state [ 97.422490][ T1986] bridge0: port 3(gretap0) entered disabled state [ 97.431739][ T1986] device gretap0 entered promiscuous mode [ 97.437955][ T1986] bridge0: port 3(gretap0) entered blocking state [ 97.444200][ T1986] bridge0: port 3(gretap0) entered forwarding state [ 97.546140][ T24] usb 2-1: Product: syz [ 97.566812][ T24] usb 2-1: Manufacturer: syz [ 97.571258][ T1983] can0: slcan on ptm0. [ 97.577801][ T1983] futex_wake_op: syz.4.254 tries to shift op by -1; fix this program [ 97.604632][ T24] usb 2-1: SerialNumber: syz [ 97.610703][ T294] EXT4-fs (loop3): unmounting filesystem. [ 97.859676][ T24] usb 2-1: selecting invalid altsetting 0 [ 97.865566][ T24] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 97.865929][ T6] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 97.872005][ T24] usb 2-1: No valid video chain found. [ 97.874597][ T24] usb 2-1: USB disconnect, device number 15 [ 97.886580][ T1960] can0 (unregistered): slcan off ptm0. [ 97.906666][ T298] EXT4-fs (loop4): unmounting filesystem. [ 98.322485][ T2026] loop4: detected capacity change from 0 to 512 [ 98.469755][ T2026] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 98.490896][ T2026] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 98.691942][ T2026] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.262: bad orphan inode 13 [ 98.704353][ T2026] EXT4-fs (loop4): Remounting filesystem read-only [ 98.711175][ T2026] ext4_test_bit(bit=12, block=4) = 1 [ 98.716485][ T2026] is_bad_inode(inode)=0 [ 98.721390][ T2026] NEXT_ORPHAN(inode)=17694720 [ 98.725884][ T2026] max_ino=32 [ 98.730567][ T2026] i_nlink=0 [ 98.733590][ T2026] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 99.953277][ T2026] EXT4-fs (loop4): unmounting filesystem. [ 100.048887][ T2052] loop1: detected capacity change from 0 to 128 [ 100.058031][ T2051] loop3: detected capacity change from 0 to 1024 [ 100.083128][ T2052] EXT4-fs (loop1): Test dummy encryption mode enabled [ 100.102708][ T2052] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 100.112824][ T2051] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 100.123395][ T2051] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.134570][ T2052] ext4 filesystem being mounted at /44/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 100.236188][ T2063] can0: slcan on ptm0. [ 100.256241][ T2063] futex_wake_op: syz.1.267 tries to shift op by -1; fix this program [ 100.496684][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): can0: link becomes ready [ 100.519866][ T2085] loop0: detected capacity change from 0 to 512 [ 100.727990][ T316] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 100.767968][ T223] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 100.886365][ T294] EXT4-fs (loop3): unmounting filesystem. [ 100.892079][ T6] usb 1-1: device not accepting address 13, error -71 [ 100.907952][ T316] usb 3-1: Using ep0 maxpacket: 16 [ 100.929105][ T316] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 100.940757][ T2052] can0 (unregistered): slcan off ptm0. [ 100.949365][ T223] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 100.961502][ T223] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 100.962997][ T2095] loop3: detected capacity change from 0 to 512 [ 100.973545][ T316] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.987673][ T297] EXT4-fs (loop1): unmounting filesystem. [ 100.993457][ T223] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 101.004157][ T316] usb 3-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 101.017520][ T223] usb 5-1: config 220 has no interface number 2 [ 101.023823][ T223] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 101.031200][ T2095] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 101.038764][ T316] usb 3-1: config 0 interface 0 has no altsetting 0 [ 101.051533][ T223] usb 5-1: config 220 interface 0 has no altsetting 0 [ 101.058363][ T316] usb 3-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 101.067561][ T223] usb 5-1: config 220 interface 76 has no altsetting 0 [ 101.069642][ T2095] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 101.074511][ T223] usb 5-1: config 220 interface 1 has no altsetting 0 [ 101.088618][ T316] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.097010][ T2095] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.271: bad orphan inode 13 [ 101.097510][ T316] usb 3-1: config 0 descriptor?? [ 101.112415][ T2095] EXT4-fs (loop3): Remounting filesystem read-only [ 101.119261][ T223] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 101.128758][ T223] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.136603][ T223] usb 5-1: Product: syz [ 101.140634][ T2095] ext4_test_bit(bit=12, block=4) = 1 [ 101.145700][ T2095] is_bad_inode(inode)=0 [ 101.149739][ T223] usb 5-1: Manufacturer: syz [ 101.154125][ T223] usb 5-1: SerialNumber: syz [ 101.158572][ T2095] NEXT_ORPHAN(inode)=17694720 [ 101.163059][ T2095] max_ino=32 [ 101.166103][ T2095] i_nlink=0 [ 101.169687][ T2095] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 101.180575][ T2095] EXT4-fs (loop3): unmounting filesystem. [ 101.236873][ T2095] loop3: detected capacity change from 0 to 256 [ 101.267959][ T6] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 101.278356][ T551] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 101.290247][ T2095] incfs: Error accessing: ./file0. [ 101.295389][ T2095] incfs: mount failed -20 [ 101.301930][ T2095] loop3: detected capacity change from 0 to 256 [ 101.315698][ T2095] exfat: Deprecated parameter 'namecase' [ 101.324699][ T2095] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 101.337999][ T799] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 101.381556][ T223] usb 5-1: selecting invalid altsetting 0 [ 101.388268][ T223] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 101.394571][ T223] usb 5-1: No valid video chain found. [ 101.410647][ T223] usb 5-1: USB disconnect, device number 10 [ 101.447982][ T6] usb 1-1: Using ep0 maxpacket: 16 [ 101.454032][ T6] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 101.464841][ T6] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 101.474602][ T6] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 101.484421][ T6] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 30442, setting to 1024 [ 101.495564][ T6] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 101.505283][ T6] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 101.519668][ T316] playstation 0003:054C:0CE6.000E: item fetching failed at offset 0/2 [ 101.528048][ T316] playstation 0003:054C:0CE6.000E: Parse failed [ 101.534205][ T316] playstation: probe of 0003:054C:0CE6.000E failed with error -22 [ 101.542096][ T6] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 101.547977][ T799] usb 2-1: Using ep0 maxpacket: 16 [ 101.552422][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 101.563875][ T6] usb 1-1: SerialNumber: syz [ 101.567073][ T799] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 101.570942][ T2085] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 101.579136][ T799] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.587812][ T6] cdc_acm: probe of 1-1:1.0 failed with error -12 [ 101.595620][ T799] usb 2-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 101.614425][ T799] usb 2-1: config 0 interface 0 has no altsetting 0 [ 101.620872][ T799] usb 2-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 101.630023][ T799] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.638557][ T799] usb 2-1: config 0 descriptor?? [ 101.718006][ T316] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 101.732829][ T301] usb 3-1: USB disconnect, device number 13 [ 101.845090][ T799] usbhid 2-1:0.0: can't add hid device: -71 [ 101.851020][ T799] usbhid: probe of 2-1:0.0 failed with error -71 [ 101.858216][ T799] usb 2-1: USB disconnect, device number 16 [ 101.899008][ T316] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 101.907520][ T316] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 101.918463][ T316] usb 4-1: config 220 has no interface number 2 [ 101.924668][ T316] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 101.937828][ T316] usb 4-1: config 220 interface 0 has no altsetting 0 [ 101.944481][ T316] usb 4-1: config 220 interface 76 has no altsetting 0 [ 101.954926][ T316] usb 4-1: config 220 interface 1 has no altsetting 0 [ 101.963360][ T316] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 101.972323][ T316] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.980548][ T316] usb 4-1: Product: syz [ 101.984568][ T316] usb 4-1: Manufacturer: syz [ 101.989261][ T316] usb 4-1: SerialNumber: syz [ 103.337621][ T316] usb 4-1: selecting invalid altsetting 0 [ 103.356186][ T316] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 103.362994][ T316] usb 4-1: No valid video chain found. [ 103.372045][ T316] usb 4-1: USB disconnect, device number 8 [ 103.413051][ T2131] loop4: detected capacity change from 0 to 128 [ 103.794591][ T799] usb 1-1: USB disconnect, device number 14 [ 104.783020][ T2148] bridge0: port 3(gretap0) entered blocking state [ 104.789394][ T2148] bridge0: port 3(gretap0) entered disabled state [ 104.807657][ T2148] device gretap0 entered promiscuous mode [ 104.815676][ T2148] bridge0: port 3(gretap0) entered blocking state [ 104.821991][ T2148] bridge0: port 3(gretap0) entered forwarding state [ 106.069922][ T2155] loop4: detected capacity change from 0 to 128 [ 106.177084][ T2155] EXT4-fs (loop4): Test dummy encryption mode enabled [ 106.205971][ T2155] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 108.216990][ T2155] ext4 filesystem being mounted at /50/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 108.334823][ T2173] can0: slcan on ptm0. [ 108.340602][ T2173] futex_wake_op: syz.4.282 tries to shift op by -1; fix this program [ 108.344745][ T2175] loop1: detected capacity change from 0 to 512 [ 108.358191][ T2172] loop3: detected capacity change from 0 to 1024 [ 108.409383][ T2172] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 108.418352][ T2172] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.445883][ T294] EXT4-fs (loop3): unmounting filesystem. [ 108.518221][ T2155] can0 (unregistered): slcan off ptm0. [ 108.547941][ T19] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 108.559537][ T298] EXT4-fs (loop4): unmounting filesystem. [ 108.620849][ T2196] loop4: detected capacity change from 0 to 512 [ 108.643239][ T2196] EXT4-fs: Ignoring removed nobh option [ 108.688933][ T2196] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 108.906221][ T2196] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 108.984912][ T2196] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.289: Corrupt directory, running e2fsck is recommended [ 109.111709][ T2196] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 109.149991][ T2196] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2186: inode #15: comm syz.4.289: corrupted in-inode xattr [ 109.213224][ T2196] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.289: couldn't read orphan inode 15 (err -117) [ 109.325083][ T2196] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 109.930114][ T2196] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 109.962143][ T2196] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 109.987916][ T316] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 109.994613][ T2196] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.289: Corrupt directory, running e2fsck is recommended [ 110.018086][ T19] usb 3-1: Using ep0 maxpacket: 16 [ 110.024178][ T19] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 110.046351][ T298] EXT4-fs (loop4): unmounting filesystem. [ 110.077980][ T19] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.087601][ T19] usb 3-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 110.118109][ T19] usb 3-1: config 0 interface 0 has no altsetting 0 [ 110.124583][ T19] usb 3-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 110.147895][ T19] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.168338][ T19] usb 3-1: config 0 descriptor?? [ 110.197985][ T316] usb 2-1: Using ep0 maxpacket: 16 [ 110.204563][ T316] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 110.225543][ T316] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 110.241285][ T2222] loop4: detected capacity change from 0 to 512 [ 110.245700][ T316] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 110.277558][ T316] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 30442, setting to 1024 [ 110.307066][ T316] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 110.317769][ T316] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 110.341708][ T316] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 110.361498][ T316] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 110.370472][ T316] usb 2-1: SerialNumber: syz [ 110.380974][ T19] usbhid 3-1:0.0: can't add hid device: -71 [ 110.386776][ T19] usbhid: probe of 3-1:0.0 failed with error -71 [ 110.397470][ T2175] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 110.398698][ T19] usb 3-1: USB disconnect, device number 14 [ 110.411896][ T316] cdc_acm: probe of 2-1:1.0 failed with error -12 [ 110.477491][ T2226] loop0: detected capacity change from 0 to 128 [ 110.499075][ T2226] EXT4-fs (loop0): Test dummy encryption mode enabled [ 110.512556][ T2226] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 110.521276][ T2226] ext4 filesystem being mounted at /62/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 110.563566][ T634] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 110.606095][ T2232] can0: slcan on ptm0. [ 110.613258][ T2232] futex_wake_op: syz.0.292 tries to shift op by -1; fix this program [ 110.788143][ T634] usb 5-1: Using ep0 maxpacket: 16 [ 110.795877][ T634] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 110.850029][ T634] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 110.954643][ T634] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 111.039687][ T634] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 30442, setting to 1024 [ 111.172563][ T634] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 112.130358][ T634] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 112.155834][ T634] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 112.172893][ T634] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 112.189515][ T634] usb 5-1: SerialNumber: syz [ 112.206115][ T24] usb 2-1: USB disconnect, device number 17 [ 112.228993][ T1735] IPv6: ADDRCONF(NETDEV_CHANGE): can0: link becomes ready [ 112.237984][ T2222] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 112.249251][ T634] cdc_acm: probe of 5-1:1.0 failed with error -12 [ 112.392002][ T2259] loop1: detected capacity change from 0 to 512 [ 112.407043][ T2259] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 112.415126][ T2259] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 112.423532][ T2259] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.296: bad orphan inode 13 [ 112.436030][ T2259] EXT4-fs (loop1): Remounting filesystem read-only [ 112.442484][ T2259] ext4_test_bit(bit=12, block=4) = 1 [ 112.447743][ T2259] is_bad_inode(inode)=0 [ 112.451824][ T2259] NEXT_ORPHAN(inode)=17694720 [ 112.456278][ T2259] max_ino=32 [ 112.459397][ T2259] i_nlink=0 [ 112.462461][ T2259] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 112.478895][ T2226] can0 (unregistered): slcan off ptm0. [ 112.525282][ T2259] EXT4-fs (loop1): unmounting filesystem. [ 112.541286][ T2265] loop2: detected capacity change from 0 to 1024 [ 112.546506][ T295] EXT4-fs (loop0): unmounting filesystem. [ 112.840617][ T2265] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 112.853232][ T2265] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.295804][ T296] EXT4-fs (loop2): unmounting filesystem. [ 113.324789][ T2291] loop2: detected capacity change from 0 to 512 [ 113.344900][ T2291] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 113.354566][ T2291] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 113.363175][ T2291] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.300: bad orphan inode 13 [ 113.374114][ T2291] EXT4-fs (loop2): Remounting filesystem read-only [ 113.380532][ T2291] ext4_test_bit(bit=12, block=4) = 1 [ 113.385623][ T2291] is_bad_inode(inode)=0 [ 113.389640][ T2291] NEXT_ORPHAN(inode)=17694720 [ 113.394134][ T2291] max_ino=32 [ 113.397173][ T2291] i_nlink=0 [ 113.400308][ T2291] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 113.412461][ T2291] EXT4-fs (loop2): unmounting filesystem. [ 113.418123][ T19] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 113.480848][ T2306] loop2: detected capacity change from 0 to 512 [ 113.487304][ T2306] EXT4-fs: Ignoring removed nobh option [ 113.494822][ T2306] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 113.506315][ T2306] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 113.516376][ T2306] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.301: Corrupt directory, running e2fsck is recommended [ 113.529739][ T2306] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 113.537823][ T2306] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2186: inode #15: comm syz.2.301: corrupted in-inode xattr [ 113.541014][ T24] usb 5-1: USB disconnect, device number 11 [ 113.550039][ T2306] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.301: couldn't read orphan inode 15 (err -117) [ 113.593051][ T2306] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 113.627970][ T19] usb 2-1: device descriptor read/64, error -71 [ 113.634225][ T2306] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 113.653530][ T2306] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 113.654055][ T2309] 9pnet_fd: Insufficient options for proto=fd [ 113.676030][ T2306] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.301: Corrupt directory, running e2fsck is recommended [ 113.706897][ T296] EXT4-fs (loop2): unmounting filesystem. [ 113.770615][ T2320] loop4: detected capacity change from 0 to 128 [ 113.777485][ T2320] EXT4-fs (loop4): Test dummy encryption mode enabled [ 113.815467][ T2319] loop0: detected capacity change from 0 to 128 [ 113.825188][ T2319] EXT4-fs (loop0): Test dummy encryption mode enabled [ 113.834787][ T2320] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 113.845449][ T2319] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 113.857130][ T2320] ext4 filesystem being mounted at /54/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 113.988312][ T2319] ext4 filesystem being mounted at /65/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 114.995514][ T2331] can0: slcan on ptm1. [ 115.004315][ T2330] can1: slcan on ptm0. [ 115.013134][ T2331] futex_wake_op: syz.0.304 tries to shift op by -1; fix this program [ 115.019811][ T2330] futex_wake_op: syz.4.305 tries to shift op by -1; fix this program [ 115.053676][ T2324] loop3: detected capacity change from 0 to 128 [ 115.120189][ T2324] bio_check_eod: 15 callbacks suppressed [ 115.120211][ T2324] syz.3.307: attempt to access beyond end of device [ 115.120211][ T2324] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 115.127657][ T19] usb 2-1: device descriptor read/64, error -71 [ 115.165168][ T2324] syz.3.307: attempt to access beyond end of device [ 115.165168][ T2324] loop3: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 115.178887][ T2324] syz.3.307: attempt to access beyond end of device [ 115.178887][ T2324] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 115.192136][ T2324] syz.3.307: attempt to access beyond end of device [ 115.192136][ T2324] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 115.205163][ T2324] syz.3.307: attempt to access beyond end of device [ 115.205163][ T2324] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 115.220316][ T2324] syz.3.307: attempt to access beyond end of device [ 115.220316][ T2324] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 115.233908][ T2324] syz.3.307: attempt to access beyond end of device [ 115.233908][ T2324] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 115.261435][ T2324] syz.3.307: attempt to access beyond end of device [ 115.261435][ T2324] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 115.275984][ T2319] can0 (unregistered): slcan off ptm1. [ 115.277156][ T2324] syz.3.307: attempt to access beyond end of device [ 115.277156][ T2324] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 115.301875][ T295] EXT4-fs (loop0): unmounting filesystem. [ 115.302380][ T2324] syz.3.307: attempt to access beyond end of device [ 115.302380][ T2324] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 116.038660][ T19] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 116.060156][ T2320] can1 (unregistered): slcan off ptm0. [ 116.074479][ T298] EXT4-fs (loop4): unmounting filesystem. [ 116.124947][ T2348] syz.2.308 (2348) used greatest stack depth: 20656 bytes left [ 116.148203][ T2354] loop2: detected capacity change from 0 to 512 [ 116.200199][ T2354] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 116.219152][ T2365] loop1: detected capacity change from 0 to 128 [ 116.237422][ T2354] ext4 filesystem being mounted at /64/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 116.256451][ T2365] EXT4-fs (loop1): Test dummy encryption mode enabled [ 116.275562][ T2365] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 116.314188][ T2365] ext4 filesystem being mounted at /51/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 116.319212][ T2374] loop3: detected capacity change from 0 to 128 [ 116.330868][ T296] EXT4-fs (loop2): unmounting filesystem. [ 116.421724][ T2381] can0: slcan on ptm0. [ 116.427911][ T634] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 116.434783][ T2381] futex_wake_op: syz.1.312 tries to shift op by -1; fix this program [ 116.517311][ T2395] loop2: detected capacity change from 0 to 512 [ 116.554124][ T2395] EXT4-fs: Ignoring removed nobh option [ 116.563508][ T2395] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 116.575789][ T2395] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 116.585903][ T2395] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.316: Corrupt directory, running e2fsck is recommended [ 116.588030][ T24] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 116.599971][ T2395] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 116.614269][ T2395] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2186: inode #15: comm syz.2.316: corrupted in-inode xattr [ 116.627883][ T634] usb 1-1: Using ep0 maxpacket: 16 [ 116.628470][ T2395] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.316: couldn't read orphan inode 15 (err -117) [ 116.634837][ T634] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 116.644732][ T2395] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 116.691754][ T2395] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 116.710939][ T2395] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 116.711934][ T634] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.721288][ T2395] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.316: Corrupt directory, running e2fsck is recommended [ 116.763312][ T634] usb 1-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 116.779021][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.798202][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 116.816937][ T634] usb 1-1: config 0 interface 0 has no altsetting 0 [ 116.820400][ T1735] IPv6: ADDRCONF(NETDEV_CHANGE): can0: link becomes ready [ 116.826759][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.840973][ T296] EXT4-fs (loop2): unmounting filesystem. [ 116.842288][ T634] usb 1-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 116.862264][ T24] usb 5-1: Product: syz [ 116.870119][ T24] usb 5-1: Manufacturer: syz [ 116.874553][ T24] usb 5-1: SerialNumber: syz [ 116.880994][ T634] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.905195][ T634] usb 1-1: config 0 descriptor?? [ 116.933832][ T2417] 9pnet_fd: Insufficient options for proto=fd [ 117.325809][ T634] playstation 0003:054C:0CE6.000F: item fetching failed at offset 0/2 [ 117.334703][ T2365] can0 (unregistered): slcan off ptm0. [ 117.404628][ T634] playstation 0003:054C:0CE6.000F: Parse failed [ 117.475237][ T634] playstation: probe of 0003:054C:0CE6.000F failed with error -22 [ 117.563190][ T24] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 117.569169][ T24] cdc_ncm 5-1:1.0: bind() failure [ 117.576693][ T297] EXT4-fs (loop1): unmounting filesystem. [ 117.596591][ T634] usb 1-1: USB disconnect, device number 15 [ 117.611667][ T24] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 117.622616][ T24] cdc_ncm 5-1:1.1: bind() failure [ 117.850219][ T2434] loop1: detected capacity change from 0 to 128 [ 118.459239][ T2464] loop0: detected capacity change from 0 to 128 [ 118.475810][ T2464] EXT4-fs (loop0): Test dummy encryption mode enabled [ 118.488290][ T2464] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 118.498290][ T2464] ext4 filesystem being mounted at /67/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 118.891716][ T2469] can0: slcan on ptm0. [ 118.918360][ T2469] futex_wake_op: syz.0.321 tries to shift op by -1; fix this program [ 119.091968][ T1735] IPv6: ADDRCONF(NETDEV_CHANGE): can0: link becomes ready [ 119.180621][ T2156] usb 5-1: USB disconnect, device number 12 [ 119.268968][ T634] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 119.278794][ T2495] loop2: detected capacity change from 0 to 128 [ 119.338543][ T2464] can0 (unregistered): slcan off ptm0. [ 119.346751][ T2489] loop1: detected capacity change from 0 to 128 [ 119.369926][ T295] EXT4-fs (loop0): unmounting filesystem. [ 119.476426][ T2509] loop0: detected capacity change from 0 to 512 [ 119.486446][ T634] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.489805][ T2509] EXT4-fs: Ignoring removed nobh option [ 119.509084][ T2509] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 119.514862][ T634] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 119.520494][ T2509] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 119.548035][ T2509] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.328: Corrupt directory, running e2fsck is recommended [ 119.719085][ T2509] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 119.731533][ T634] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.814812][ T2509] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2186: inode #15: comm syz.0.328: corrupted in-inode xattr [ 119.828368][ T634] usb 4-1: Product: syz [ 119.836796][ T2509] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.328: couldn't read orphan inode 15 (err -117) [ 119.838195][ T634] usb 4-1: Manufacturer: syz [ 119.854632][ T2509] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 119.861834][ T2497] loop4: detected capacity change from 0 to 128 [ 119.873404][ T2509] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 119.886530][ T634] usb 4-1: SerialNumber: syz [ 119.923433][ T2509] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 119.992847][ T2509] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.328: Corrupt directory, running e2fsck is recommended [ 120.031316][ T295] EXT4-fs (loop0): unmounting filesystem. [ 120.129030][ T2489] bio_check_eod: 22773 callbacks suppressed [ 120.129056][ T2489] syz.1.324: attempt to access beyond end of device [ 120.129056][ T2489] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 120.177751][ T2489] syz.1.324: attempt to access beyond end of device [ 120.177751][ T2489] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 120.207342][ T2497] syz.4.326: attempt to access beyond end of device [ 120.207342][ T2497] loop4: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 120.221088][ T2497] syz.4.326: attempt to access beyond end of device [ 120.221088][ T2497] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 120.234339][ T28] audit: type=1400 audit(1745862620.470:178): avc: denied { unlink } for pid=84 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 120.414012][ T2497] syz.4.326: attempt to access beyond end of device [ 120.414012][ T2497] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 120.754325][ T2542] loop2: detected capacity change from 0 to 1024 [ 120.806762][ T2497] syz.4.326: attempt to access beyond end of device [ 120.806762][ T2497] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 121.384801][ T2497] syz.4.326: attempt to access beyond end of device [ 121.384801][ T2497] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 121.443122][ T634] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 121.450564][ T634] cdc_ncm 4-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 121.459419][ T634] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 121.463209][ T2497] syz.4.326: attempt to access beyond end of device [ 121.463209][ T2497] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 121.480496][ T2542] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 121.488926][ T2542] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.503050][ T2503] syz.4.326: attempt to access beyond end of device [ 121.503050][ T2503] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 121.553643][ T2497] syz.4.326: attempt to access beyond end of device [ 121.553643][ T2497] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 121.627888][ T2553] loop1: detected capacity change from 0 to 512 [ 121.642965][ T2553] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 121.862409][ T634] cdc_ncm 4-1:1.0: setting tx_max = 88 [ 121.956039][ T634] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 121.988694][ T2553] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 121.997674][ T2553] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.052172][ T634] usb 4-1: USB disconnect, device number 9 [ 122.075555][ T634] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 122.094733][ T297] EXT4-fs (loop1): unmounting filesystem. [ 122.190425][ T2572] loop1: detected capacity change from 0 to 128 [ 122.201548][ T2572] EXT4-fs (loop1): Test dummy encryption mode enabled [ 122.221536][ T2572] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 122.238157][ T2572] ext4 filesystem being mounted at /55/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 122.343431][ T2581] can0: slcan on ptm0. [ 122.378186][ T2590] loop4: detected capacity change from 0 to 128 [ 122.387638][ T296] EXT4-fs (loop2): unmounting filesystem. [ 122.394340][ T2581] futex_wake_op: syz.1.333 tries to shift op by -1; fix this program [ 122.402718][ T2590] EXT4-fs (loop4): Test dummy encryption mode enabled [ 122.438487][ T2590] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 122.447051][ T2590] ext4 filesystem being mounted at /57/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 122.898833][ T2617] loop3: detected capacity change from 0 to 512 [ 122.978110][ T821] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 123.048673][ T2572] can0 (unregistered): slcan off ptm0. [ 123.063950][ T297] EXT4-fs (loop1): unmounting filesystem. [ 123.097406][ T2635] loop1: detected capacity change from 0 to 128 [ 123.129958][ T298] EXT4-fs (loop4): unmounting filesystem. [ 123.177877][ T821] usb 1-1: Using ep0 maxpacket: 16 [ 123.184037][ T821] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 123.197935][ T2540] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 123.203199][ T821] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.222949][ T821] usb 1-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 123.235790][ T821] usb 1-1: config 0 interface 0 has no altsetting 0 [ 123.242428][ T821] usb 1-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 123.253115][ T821] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.278437][ T821] usb 1-1: config 0 descriptor?? [ 123.437889][ T2540] usb 4-1: Using ep0 maxpacket: 16 [ 123.483851][ T2540] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 123.494968][ T2540] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 123.505776][ T2540] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 123.516245][ T2540] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 30442, setting to 1024 [ 123.527980][ T2540] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 123.538525][ T2540] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 123.585366][ T2540] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 123.594915][ T2540] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 123.605722][ T2540] usb 4-1: SerialNumber: syz [ 123.651396][ T821] usbhid 1-1:0.0: can't add hid device: -71 [ 123.657185][ T821] usbhid: probe of 1-1:0.0 failed with error -71 [ 123.680125][ T821] usb 1-1: USB disconnect, device number 16 [ 123.686286][ T2617] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 123.694491][ T2540] cdc_acm: probe of 4-1:1.0 failed with error -12 [ 123.797903][ T2156] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 123.805353][ T316] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 123.895154][ T2540] usb 4-1: USB disconnect, device number 10 [ 123.987920][ T316] usb 3-1: Using ep0 maxpacket: 16 [ 123.994227][ T2156] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.005032][ T316] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.016526][ T2156] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 124.025495][ T316] usb 3-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 124.034373][ T2156] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.042185][ T316] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.050116][ T2156] usb 5-1: Product: syz [ 124.054047][ T2156] usb 5-1: Manufacturer: syz [ 124.058515][ T316] usb 3-1: Product: syz [ 124.062463][ T316] usb 3-1: Manufacturer: syz [ 124.066891][ T316] usb 3-1: SerialNumber: syz [ 124.071360][ T2156] usb 5-1: SerialNumber: syz [ 124.077951][ T316] usb 3-1: config 0 descriptor?? [ 124.084007][ T316] usb 3-1: Found UVC 0.00 device syz (046d:0721) [ 124.094785][ T316] usb 3-1: No valid video chain found. [ 124.388371][ T2540] usb 3-1: USB disconnect, device number 15 [ 124.563682][ T2652] loop3: detected capacity change from 0 to 1024 [ 124.619824][ T2652] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 124.629058][ T2652] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.728674][ T2156] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 124.734722][ T2156] cdc_ncm 5-1:1.0: bind() failure [ 124.745850][ T2156] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 124.753805][ T2156] cdc_ncm 5-1:1.1: bind() failure [ 125.311347][ T2666] loop2: detected capacity change from 0 to 128 [ 125.399109][ T2666] bio_check_eod: 10060 callbacks suppressed [ 125.399129][ T2666] syz.2.346: attempt to access beyond end of device [ 125.399129][ T2666] loop2: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 125.454835][ T294] EXT4-fs (loop3): unmounting filesystem. [ 125.462865][ T2666] syz.2.346: attempt to access beyond end of device [ 125.462865][ T2666] loop2: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 125.500600][ T2666] syz.2.346: attempt to access beyond end of device [ 125.500600][ T2666] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 125.544624][ T2666] syz.2.346: attempt to access beyond end of device [ 125.544624][ T2666] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 125.567790][ T2666] syz.2.346: attempt to access beyond end of device [ 125.567790][ T2666] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 125.592071][ T2669] syz.2.346: attempt to access beyond end of device [ 125.592071][ T2669] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 125.636110][ T2666] syz.2.346: attempt to access beyond end of device [ 125.636110][ T2666] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 125.666685][ T2669] syz.2.346: attempt to access beyond end of device [ 125.666685][ T2669] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 125.688460][ T2669] syz.2.346: attempt to access beyond end of device [ 125.688460][ T2669] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 125.718054][ T2666] syz.2.346: attempt to access beyond end of device [ 125.718054][ T2666] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 125.865023][ T2681] loop1: detected capacity change from 0 to 128 [ 125.907936][ T2540] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 126.082160][ T2540] usb 4-1: device descriptor read/64, error -71 [ 126.245485][ T2691] loop0: detected capacity change from 0 to 128 [ 126.366383][ T301] usb 5-1: USB disconnect, device number 13 [ 126.372446][ T2540] usb 4-1: device descriptor read/64, error -71 [ 126.379766][ T2691] EXT4-fs (loop0): Test dummy encryption mode enabled [ 126.480076][ T2691] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 126.489045][ T2691] ext4 filesystem being mounted at /74/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 126.570846][ T2691] can0: slcan on ptm0. [ 126.585885][ T2691] futex_wake_op: syz.0.353 tries to shift op by -1; fix this program [ 126.637897][ T821] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 126.677921][ T2540] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 126.684877][ T356] IPv6: ADDRCONF(NETDEV_CHANGE): can0: link becomes ready [ 126.817923][ T821] usb 3-1: Using ep0 maxpacket: 16 [ 126.824114][ T821] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 126.835177][ T821] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.837954][ T2540] usb 4-1: device descriptor read/64, error -71 [ 126.869716][ T821] usb 3-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 126.885755][ T821] usb 3-1: config 0 interface 0 has no altsetting 0 [ 126.892936][ T821] usb 3-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 126.902273][ T821] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.908954][ T2715] loop1: detected capacity change from 0 to 512 [ 126.915169][ T821] usb 3-1: config 0 descriptor?? [ 126.927907][ T301] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 127.038729][ T2689] can0 (unregistered): slcan off ptm0. [ 127.051920][ T295] EXT4-fs (loop0): unmounting filesystem. [ 127.118398][ T2540] usb 4-1: device descriptor read/64, error -71 [ 127.126934][ T821] usbhid 3-1:0.0: can't add hid device: -71 [ 127.132934][ T301] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.138202][ T821] usbhid: probe of 3-1:0.0 failed with error -71 [ 127.150354][ T301] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.164094][ T821] usb 3-1: USB disconnect, device number 16 [ 127.170034][ T301] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 127.183981][ T301] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.206098][ T301] usb 5-1: config 0 descriptor?? [ 127.207911][ T316] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 127.246359][ T2727] loop0: detected capacity change from 0 to 128 [ 127.249439][ T2540] usb usb4-port1: attempt power cycle [ 127.407881][ T316] usb 2-1: Using ep0 maxpacket: 16 [ 127.418613][ T316] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 127.429276][ T316] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 127.438822][ T316] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 127.448416][ T316] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 30442, setting to 1024 [ 127.459390][ T316] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 127.469499][ T316] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 127.498263][ T316] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 127.507139][ T316] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 127.527868][ T316] usb 2-1: SerialNumber: syz [ 127.533777][ T2715] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 127.542277][ T316] cdc_acm: probe of 2-1:1.0 failed with error -12 [ 127.667881][ T2540] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 127.700647][ T2540] usb 4-1: device descriptor read/8, error -71 [ 127.784327][ T316] usb 2-1: USB disconnect, device number 20 [ 127.868984][ T2540] usb 4-1: device descriptor read/8, error -71 [ 128.147923][ T2540] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 128.198972][ T2540] usb 4-1: device descriptor read/8, error -71 [ 128.369089][ T2540] usb 4-1: device descriptor read/8, error -71 [ 128.557237][ T2540] usb usb4-port1: unable to enumerate USB device [ 128.707942][ T323] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 128.801969][ T2761] loop3: detected capacity change from 0 to 128 [ 128.927954][ T323] usb 2-1: Using ep0 maxpacket: 16 [ 128.934154][ T323] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 128.946593][ T323] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.957183][ T323] usb 2-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 128.969911][ T323] usb 2-1: config 0 interface 0 has no altsetting 0 [ 128.976506][ T323] usb 2-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 128.985844][ T323] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.380883][ T323] usb 2-1: config 0 descriptor?? [ 129.535722][ T301] usbhid 5-1:0.0: can't add hid device: -71 [ 129.541748][ T301] usbhid: probe of 5-1:0.0 failed with error -71 [ 129.559276][ T301] usb 5-1: USB disconnect, device number 14 [ 129.667913][ T2156] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 129.808343][ T323] playstation 0003:054C:0CE6.0010: item fetching failed at offset 0/2 [ 129.817647][ T323] playstation 0003:054C:0CE6.0010: Parse failed [ 129.823907][ T323] playstation: probe of 0003:054C:0CE6.0010 failed with error -22 [ 129.859031][ T2156] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.878594][ T2156] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.888251][ T2156] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 129.907895][ T2156] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.916622][ T2156] usb 1-1: config 0 descriptor?? [ 130.007893][ T301] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 130.020078][ T323] usb 2-1: USB disconnect, device number 21 [ 130.176526][ T2781] loop2: detected capacity change from 0 to 128 [ 130.197899][ T301] usb 5-1: Using ep0 maxpacket: 16 [ 130.204754][ T301] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 130.242788][ T301] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.271236][ T301] usb 5-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 130.303611][ T301] usb 5-1: config 0 interface 0 has no altsetting 0 [ 130.330105][ T301] usb 5-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 130.347547][ T301] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.358434][ T301] usb 5-1: config 0 descriptor?? [ 130.556255][ T2788] loop1: detected capacity change from 0 to 1024 [ 130.589801][ T2788] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 130.598817][ T2788] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.785016][ T301] playstation 0003:054C:0CE6.0011: item fetching failed at offset 0/2 [ 130.824078][ T301] playstation 0003:054C:0CE6.0011: Parse failed [ 130.849753][ T301] playstation: probe of 0003:054C:0CE6.0011 failed with error -22 [ 131.120844][ T301] usb 5-1: USB disconnect, device number 15 [ 131.651187][ T297] EXT4-fs (loop1): unmounting filesystem. [ 132.128952][ T2809] loop3: detected capacity change from 0 to 128 [ 132.147958][ T2809] EXT4-fs (loop3): Test dummy encryption mode enabled [ 132.192035][ T2809] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 132.218133][ T2809] ext4 filesystem being mounted at /83/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 132.243740][ T2804] loop4: detected capacity change from 0 to 40427 [ 132.299010][ T2804] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 132.306601][ T2804] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 132.325425][ T2812] futex_wake_op: syz.3.371 tries to shift op by -1; fix this program [ 132.333732][ T2804] F2FS-fs (loop4): invalid crc value [ 132.347888][ T301] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 132.369101][ T2804] F2FS-fs (loop4): Found nat_bits in checkpoint [ 132.393429][ T2156] usbhid 1-1:0.0: can't add hid device: -71 [ 132.400255][ T2156] usbhid: probe of 1-1:0.0 failed with error -71 [ 132.421848][ T2156] usb 1-1: USB disconnect, device number 17 [ 132.439141][ T2804] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 132.446737][ T2804] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 132.512342][ T10] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 132.521521][ T10] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 132.537908][ T301] usb 2-1: Using ep0 maxpacket: 16 [ 132.544984][ T301] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 132.556342][ T301] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.566120][ T301] usb 2-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 132.579265][ T301] usb 2-1: config 0 interface 0 has no altsetting 0 [ 132.585786][ T301] usb 2-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 132.594929][ T301] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.603941][ T301] usb 2-1: config 0 descriptor?? [ 132.767990][ T316] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 132.811486][ T301] usbhid 2-1:0.0: can't add hid device: -71 [ 132.817340][ T301] usbhid: probe of 2-1:0.0 failed with error -71 [ 132.824271][ T301] usb 2-1: USB disconnect, device number 22 [ 132.857993][ T2156] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 132.917925][ T316] usb 3-1: device descriptor read/64, error -71 [ 132.953772][ T294] EXT4-fs (loop3): unmounting filesystem. [ 132.957940][ T634] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 133.038134][ T2156] usb 1-1: Using ep0 maxpacket: 16 [ 133.044574][ T2156] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 133.055441][ T2156] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.064964][ T2156] usb 1-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 133.077963][ T2156] usb 1-1: config 0 interface 0 has no altsetting 0 [ 133.154188][ T634] usb 5-1: Using ep0 maxpacket: 16 [ 133.161148][ T634] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.175299][ T634] usb 5-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 133.185886][ T634] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.194487][ T634] usb 5-1: Product: syz [ 133.202161][ T634] usb 5-1: Manufacturer: syz [ 133.206738][ T634] usb 5-1: SerialNumber: syz [ 133.241023][ T634] usb 5-1: config 0 descriptor?? [ 133.259125][ T634] usb 5-1: Found UVC 0.00 device syz (046d:0721) [ 133.265547][ T634] usb 5-1: No valid video chain found. [ 133.333098][ T2156] usb 1-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 133.342052][ T2156] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.375663][ T2156] usb 1-1: config 0 descriptor?? [ 133.397957][ T316] usb 3-1: device descriptor read/64, error -71 [ 133.449319][ T301] usb 5-1: USB disconnect, device number 16 [ 133.667906][ T316] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 133.687903][ T634] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 133.783170][ T2156] playstation 0003:054C:0CE6.0012: item fetching failed at offset 0/2 [ 133.791377][ T2156] playstation 0003:054C:0CE6.0012: Parse failed [ 133.797474][ T2156] playstation: probe of 0003:054C:0CE6.0012 failed with error -22 [ 133.831182][ T316] usb 3-1: device descriptor read/64, error -71 [ 133.867956][ T634] usb 2-1: Using ep0 maxpacket: 16 [ 133.874511][ T634] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.885646][ T634] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 133.899028][ T634] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 133.907969][ T634] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.916274][ T634] usb 2-1: config 0 descriptor?? [ 133.984832][ T301] usb 1-1: USB disconnect, device number 18 [ 134.097882][ T316] usb 3-1: device descriptor read/64, error -71 [ 134.138079][ T2837] loop4: detected capacity change from 0 to 128 [ 134.178949][ T2837] bio_check_eod: 63994 callbacks suppressed [ 134.178964][ T2837] syz.4.378: attempt to access beyond end of device [ 134.178964][ T2837] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 134.209468][ T2837] syz.4.378: attempt to access beyond end of device [ 134.209468][ T2837] loop4: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 134.223336][ T316] usb usb3-port1: attempt power cycle [ 134.223482][ T2837] syz.4.378: attempt to access beyond end of device [ 134.223482][ T2837] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 134.228601][ T2156] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 134.242337][ T2837] syz.4.378: attempt to access beyond end of device [ 134.242337][ T2837] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 134.261938][ T2837] syz.4.378: attempt to access beyond end of device [ 134.261938][ T2837] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 134.275300][ T2837] syz.4.378: attempt to access beyond end of device [ 134.275300][ T2837] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 134.288602][ T2837] syz.4.378: attempt to access beyond end of device [ 134.288602][ T2837] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 134.301789][ T2837] syz.4.378: attempt to access beyond end of device [ 134.301789][ T2837] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 134.314783][ T2837] syz.4.378: attempt to access beyond end of device [ 134.314783][ T2837] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 134.325443][ T634] HID 045e:07da: Invalid code 65791 type 1 [ 134.328430][ T2837] syz.4.378: attempt to access beyond end of device [ 134.328430][ T2837] loop4: rw=0, sector=145, nr_sectors = 8 limit=128 [ 134.338912][ T634] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0013/input/input22 [ 134.360095][ T634] microsoft 0003:045E:07DA.0013: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 134.438979][ T2156] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.451362][ T2156] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 134.460490][ T2156] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.468352][ T2156] usb 4-1: Product: syz [ 134.472380][ T2156] usb 4-1: Manufacturer: syz [ 134.476748][ T2156] usb 4-1: SerialNumber: syz [ 134.533216][ T634] usb 2-1: USB disconnect, device number 23 [ 134.677886][ T316] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 135.038586][ T316] usb 3-1: device descriptor read/8, error -71 [ 135.148405][ T2156] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 135.154299][ T2156] cdc_ncm 4-1:1.0: bind() failure [ 135.175854][ T2156] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 135.192874][ T2156] cdc_ncm 4-1:1.1: bind() failure [ 135.198936][ T316] usb 3-1: device descriptor read/8, error -71 [ 135.239298][ T2849] loop4: detected capacity change from 0 to 1024 [ 135.268566][ T2849] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 135.288248][ T2849] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.467892][ T316] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 135.507887][ T316] usb 3-1: device descriptor read/8, error -71 [ 135.596319][ T2858] loop2: detected capacity change from 0 to 128 [ 135.658498][ T316] usb 3-1: device descriptor read/8, error -71 [ 135.777969][ T316] usb usb3-port1: unable to enumerate USB device [ 136.098999][ T298] EXT4-fs (loop4): unmounting filesystem. [ 136.247438][ T301] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 136.405555][ T323] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 136.438029][ T301] usb 1-1: Using ep0 maxpacket: 16 [ 136.445562][ T301] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 136.496123][ T301] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.544862][ T301] usb 1-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 136.597898][ T323] usb 2-1: Using ep0 maxpacket: 16 [ 136.605190][ T323] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.628018][ T301] usb 1-1: config 0 interface 0 has no altsetting 0 [ 136.640251][ T323] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 136.650359][ T301] usb 1-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 136.664748][ T301] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.673205][ T323] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 136.691833][ T301] usb 1-1: config 0 descriptor?? [ 136.696941][ T323] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.717216][ T323] usb 2-1: config 0 descriptor?? [ 136.850052][ T323] usb 4-1: USB disconnect, device number 15 [ 136.917292][ T2873] loop3: detected capacity change from 0 to 1024 [ 136.938910][ T2873] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 136.948039][ T2873] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.111752][ T301] playstation 0003:054C:0CE6.0014: item fetching failed at offset 0/2 [ 137.120430][ T301] playstation 0003:054C:0CE6.0014: Parse failed [ 137.126517][ T301] playstation: probe of 0003:054C:0CE6.0014 failed with error -22 [ 137.314413][ T301] usb 1-1: USB disconnect, device number 19 [ 137.704615][ T2879] loop2: detected capacity change from 0 to 128 [ 137.772687][ T294] EXT4-fs (loop3): unmounting filesystem. [ 137.819070][ T2888] loop3: detected capacity change from 0 to 512 [ 137.856875][ T2890] loop0: detected capacity change from 0 to 512 [ 137.864252][ T2888] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 137.879751][ T2888] ext4 filesystem being mounted at /87/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 137.920296][ T2890] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 137.930591][ T294] EXT4-fs (loop3): unmounting filesystem. [ 137.945202][ T2890] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 138.010291][ T2890] EXT4-fs error (device loop0): ext4_orphan_get:1426: comm syz.0.391: bad orphan inode 13 [ 138.030312][ T2890] EXT4-fs (loop0): Remounting filesystem read-only [ 138.057472][ T2890] ext4_test_bit(bit=12, block=4) = 1 [ 138.077894][ T2890] is_bad_inode(inode)=0 [ 138.083897][ T2890] NEXT_ORPHAN(inode)=17694720 [ 138.093957][ T2890] max_ino=32 [ 138.098356][ T2890] i_nlink=0 [ 138.101495][ T2890] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 138.333146][ T2890] EXT4-fs (loop0): unmounting filesystem. [ 138.934579][ T2890] loop0: detected capacity change from 0 to 256 [ 139.015923][ T2890] incfs: Error accessing: ./file0. [ 139.029772][ T2890] incfs: mount failed -20 [ 139.051801][ T2890] loop0: detected capacity change from 0 to 256 [ 139.080979][ T2890] exfat: Deprecated parameter 'namecase' [ 139.106739][ T2890] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 139.145179][ T2898] usb 2-1: USB disconnect, device number 24 [ 139.195255][ T2901] loop1: detected capacity change from 0 to 512 [ 139.213113][ T2879] bio_check_eod: 70055 callbacks suppressed [ 139.213134][ T2879] syz.2.388: attempt to access beyond end of device [ 139.213134][ T2879] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 139.274640][ T2901] EXT4-fs: Ignoring removed nobh option [ 139.290007][ T2879] syz.2.388: attempt to access beyond end of device [ 139.290007][ T2879] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 139.303321][ T2879] syz.2.388: attempt to access beyond end of device [ 139.303321][ T2879] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 139.304482][ T2901] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 139.316258][ T2879] syz.2.388: attempt to access beyond end of device [ 139.316258][ T2879] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 139.316306][ T2879] syz.2.388: attempt to access beyond end of device [ 139.316306][ T2879] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 139.358001][ T2901] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 139.368671][ T2901] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.393: Corrupt directory, running e2fsck is recommended [ 139.378003][ T2879] syz.2.388: attempt to access beyond end of device [ 139.378003][ T2879] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 139.394813][ T2901] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 139.408043][ T2901] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2186: inode #15: comm syz.1.393: corrupted in-inode xattr [ 139.428248][ T2901] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.393: couldn't read orphan inode 15 (err -117) [ 139.447957][ T2879] syz.2.388: attempt to access beyond end of device [ 139.447957][ T2879] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 139.450543][ T2901] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 139.460987][ T2879] syz.2.388: attempt to access beyond end of device [ 139.460987][ T2879] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 139.482505][ T2879] syz.2.388: attempt to access beyond end of device [ 139.482505][ T2879] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 139.502205][ T2879] syz.2.388: attempt to access beyond end of device [ 139.502205][ T2879] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 139.517880][ T799] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 139.569024][ T2901] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 139.587874][ T2901] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 139.607871][ T2901] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.393: Corrupt directory, running e2fsck is recommended [ 139.632604][ T2903] loop3: detected capacity change from 0 to 40427 [ 139.653640][ T2903] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 139.670008][ T2903] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 139.682923][ T2903] F2FS-fs (loop3): invalid crc value [ 139.695520][ T297] EXT4-fs (loop1): unmounting filesystem. [ 139.704358][ T2903] F2FS-fs (loop3): Found nat_bits in checkpoint [ 139.737460][ T2914] loop2: detected capacity change from 0 to 128 [ 139.758966][ T799] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 139.760596][ T2916] loop1: detected capacity change from 0 to 512 [ 139.773400][ T799] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 139.778362][ T2914] EXT4-fs (loop2): Test dummy encryption mode enabled [ 139.782216][ T799] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 139.792813][ T2916] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 139.800349][ T799] usb 1-1: config 220 has no interface number 2 [ 139.813841][ T2903] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 139.813888][ T799] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 139.827985][ T2903] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 139.836782][ T799] usb 1-1: config 220 interface 0 has no altsetting 0 [ 139.847992][ T799] usb 1-1: config 220 interface 76 has no altsetting 0 [ 139.855504][ T799] usb 1-1: config 220 interface 1 has no altsetting 0 [ 139.861830][ T2914] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 139.863876][ T799] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 139.879414][ T2914] ext4 filesystem being mounted at /86/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 139.886172][ T799] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.897423][ T799] usb 1-1: Product: syz [ 139.901999][ T799] usb 1-1: Manufacturer: syz [ 139.906474][ T799] usb 1-1: SerialNumber: syz [ 139.908412][ T2916] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 139.922751][ T2916] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.952051][ T10] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 139.964524][ T10] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 139.985609][ T2923] can0: slcan on ptm0. [ 139.998384][ T297] EXT4-fs (loop1): unmounting filesystem. [ 140.003136][ T2923] futex_wake_op: syz.2.395 tries to shift op by -1; fix this program [ 140.150519][ T799] usb 1-1: selecting invalid altsetting 0 [ 140.156151][ T799] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 140.162648][ T799] usb 1-1: No valid video chain found. [ 140.171284][ T799] usb 1-1: USB disconnect, device number 20 [ 140.583896][ T2938] loop3: detected capacity change from 0 to 512 [ 140.611053][ T2938] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 140.619433][ T2938] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 140.637934][ T2938] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.398: bad orphan inode 13 [ 140.659110][ T2938] EXT4-fs (loop3): Remounting filesystem read-only [ 140.675793][ T2938] ext4_test_bit(bit=12, block=4) = 1 [ 140.688168][ T2914] can0 (unregistered): slcan off ptm0. [ 140.694592][ T2938] is_bad_inode(inode)=0 [ 140.704923][ T2938] NEXT_ORPHAN(inode)=17694720 [ 140.711069][ T296] EXT4-fs (loop2): unmounting filesystem. [ 140.717282][ T2938] max_ino=32 [ 140.721074][ T2938] i_nlink=0 [ 140.724140][ T2938] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 140.748842][ T2938] EXT4-fs (loop3): unmounting filesystem. [ 142.427968][ T323] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 143.027889][ T323] usb 3-1: Using ep0 maxpacket: 16 [ 143.033983][ T323] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 143.046186][ T323] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.056250][ T323] usb 3-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 143.069131][ T323] usb 3-1: config 0 interface 0 has no altsetting 0 [ 143.075599][ T323] usb 3-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 143.084918][ T323] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.096938][ T323] usb 3-1: config 0 descriptor?? [ 143.588744][ T2986] loop4: detected capacity change from 0 to 512 [ 143.682607][ T323] playstation 0003:054C:0CE6.0015: item fetching failed at offset 0/2 [ 143.690949][ T323] playstation 0003:054C:0CE6.0015: Parse failed [ 143.697030][ T323] playstation: probe of 0003:054C:0CE6.0015 failed with error -22 [ 143.764957][ T316] usb 3-1: USB disconnect, device number 21 [ 143.927909][ T19] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 144.155916][ T19] usb 5-1: Using ep0 maxpacket: 16 [ 144.160808][ T2992] loop0: detected capacity change from 0 to 512 [ 144.162804][ T19] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 144.172884][ T2992] EXT4-fs: Ignoring removed nobh option [ 144.178887][ T19] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 144.194248][ T19] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 144.196905][ T2992] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 144.204247][ T19] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 30442, setting to 1024 [ 144.216209][ T2992] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 144.226709][ T19] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 144.236355][ T2992] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.407: Corrupt directory, running e2fsck is recommended [ 144.261844][ T2992] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 144.271836][ T2992] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2186: inode #15: comm syz.0.407: corrupted in-inode xattr [ 144.344594][ T2994] bridge0: port 3(gretap0) entered blocking state [ 144.350911][ T2994] bridge0: port 3(gretap0) entered disabled state [ 144.360423][ T2994] device gretap0 entered promiscuous mode [ 144.366574][ T2994] bridge0: port 3(gretap0) entered blocking state [ 144.372829][ T2994] bridge0: port 3(gretap0) entered forwarding state [ 144.459368][ T2992] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.407: couldn't read orphan inode 15 (err -117) [ 144.495821][ T19] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 144.508230][ T2992] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 144.513374][ T19] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 144.612993][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 144.633787][ T19] usb 5-1: SerialNumber: syz [ 144.658502][ T2992] EXT4-fs warning (device loop0): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 144.659374][ T2986] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 144.670069][ T2992] EXT4-fs warning (device loop0): dx_probe:881: Enable large directory feature to access it [ 144.686897][ T2992] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.407: Corrupt directory, running e2fsck is recommended [ 144.693501][ T19] cdc_acm: probe of 5-1:1.0 failed with error -12 [ 144.955284][ T295] EXT4-fs (loop0): unmounting filesystem. [ 144.983430][ T3004] loop3: detected capacity change from 0 to 128 [ 144.991349][ T3008] loop0: detected capacity change from 0 to 512 [ 145.009625][ T2422] usb 5-1: USB disconnect, device number 17 [ 145.027422][ T3008] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 145.036451][ T3008] ext4 filesystem being mounted at /84/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 145.051470][ T3002] bio_check_eod: 673 callbacks suppressed [ 145.051487][ T3002] syz.3.409: attempt to access beyond end of device [ 145.051487][ T3002] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 145.071431][ T295] EXT4-fs (loop0): unmounting filesystem. [ 145.091712][ T3002] syz.3.409: attempt to access beyond end of device [ 145.091712][ T3002] loop3: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 145.105542][ T3002] syz.3.409: attempt to access beyond end of device [ 145.105542][ T3002] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 145.119049][ T3002] syz.3.409: attempt to access beyond end of device [ 145.119049][ T3002] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 145.132367][ T3002] syz.3.409: attempt to access beyond end of device [ 145.132367][ T3002] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 145.148606][ T3004] syz.3.409: attempt to access beyond end of device [ 145.148606][ T3004] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 145.161706][ T3002] syz.3.409: attempt to access beyond end of device [ 145.161706][ T3002] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 145.174796][ T3004] syz.3.409: attempt to access beyond end of device [ 145.174796][ T3004] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 145.187920][ T3002] syz.3.409: attempt to access beyond end of device [ 145.187920][ T3002] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 145.201008][ T3004] syz.3.409: attempt to access beyond end of device [ 145.201008][ T3004] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 145.267885][ T323] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 145.399524][ T3017] loop2: detected capacity change from 0 to 128 [ 145.448966][ T323] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.460681][ T323] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.472112][ T323] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 145.486999][ T323] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.499170][ T323] usb 2-1: config 0 descriptor?? [ 145.521837][ T3019] loop2: detected capacity change from 0 to 512 [ 145.540694][ T2422] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 145.553113][ T3019] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 145.659301][ T3019] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 145.678065][ T3019] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.749871][ T2422] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.778960][ T2422] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 145.796693][ T296] EXT4-fs (loop2): unmounting filesystem. [ 145.803502][ T2422] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.813205][ T2422] usb 1-1: Product: syz [ 145.817346][ T2422] usb 1-1: Manufacturer: syz [ 145.823560][ T2422] usb 1-1: SerialNumber: syz [ 146.239840][ T316] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 146.840988][ T2422] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 146.846946][ T2422] cdc_ncm 1-1:1.0: bind() failure [ 146.853755][ T2422] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 146.860725][ T2422] cdc_ncm 1-1:1.1: bind() failure [ 147.050412][ T3037] loop3: detected capacity change from 0 to 512 [ 147.068739][ T3037] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 147.076747][ T3037] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 147.085370][ T3037] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.419: bad orphan inode 13 [ 147.095673][ T3037] EXT4-fs (loop3): Remounting filesystem read-only [ 147.102654][ T3037] ext4_test_bit(bit=12, block=4) = 1 [ 147.108122][ T3037] is_bad_inode(inode)=0 [ 147.112128][ T3037] NEXT_ORPHAN(inode)=17694720 [ 147.116644][ T3037] max_ino=32 [ 147.120065][ T3037] i_nlink=0 [ 147.123120][ T3037] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 147.132142][ T316] usb 3-1: Using ep0 maxpacket: 16 [ 147.140553][ T316] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.151818][ T3037] EXT4-fs (loop3): unmounting filesystem. [ 147.158616][ T316] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 147.171583][ T316] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 147.180925][ T316] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.193544][ T316] usb 3-1: config 0 descriptor?? [ 147.468756][ T3037] loop3: detected capacity change from 0 to 256 [ 147.491737][ T3042] loop4: detected capacity change from 0 to 512 [ 147.511000][ T550] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 147.521397][ T3037] incfs: Error accessing: ./file0. [ 147.526675][ T3037] incfs: mount failed -20 [ 147.545422][ T3037] loop3: detected capacity change from 0 to 256 [ 147.552102][ T3037] exfat: Deprecated parameter 'namecase' [ 147.563516][ T3037] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 147.607849][ T316] HID 045e:07da: Invalid code 65791 type 1 [ 147.617509][ T316] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0016/input/input25 [ 147.630185][ T316] microsoft 0003:045E:07DA.0016: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 147.797974][ T2422] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 147.809697][ T2540] usb 3-1: USB disconnect, device number 22 [ 147.857988][ T2934] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 147.976692][ T323] usbhid 2-1:0.0: can't add hid device: -71 [ 147.982555][ T2422] usb 5-1: Using ep0 maxpacket: 16 [ 147.987574][ T323] usbhid: probe of 2-1:0.0 failed with error -71 [ 147.988613][ T3044] loop1: detected capacity change from 0 to 128 [ 147.995589][ T2422] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 148.010977][ T323] usb 2-1: USB disconnect, device number 25 [ 148.017349][ T2422] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 148.030153][ T2422] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 148.039968][ T2422] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 30442, setting to 1024 [ 148.051271][ T2422] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 148.061386][ T2422] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 148.074790][ T2934] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 148.087794][ T2934] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 148.096593][ T2934] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 148.106737][ T2934] usb 4-1: config 220 has no interface number 2 [ 148.112918][ T2934] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 148.126146][ T2422] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 148.135257][ T2934] usb 4-1: config 220 interface 0 has no altsetting 0 [ 148.141986][ T2422] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 148.149865][ T2934] usb 4-1: config 220 interface 76 has no altsetting 0 [ 148.201288][ T2422] usb 5-1: SerialNumber: syz [ 148.206125][ T2934] usb 4-1: config 220 interface 1 has no altsetting 0 [ 148.214338][ T2934] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 148.223243][ T2934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.231040][ T2934] usb 4-1: Product: syz [ 148.235122][ T2934] usb 4-1: Manufacturer: syz [ 148.239672][ T2934] usb 4-1: SerialNumber: syz [ 148.249879][ T3042] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 148.259201][ T2422] cdc_acm: probe of 5-1:1.0 failed with error -12 [ 148.259480][ T316] usb 1-1: USB disconnect, device number 21 [ 148.489858][ T2934] usb 4-1: selecting invalid altsetting 0 [ 148.609979][ T2934] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 148.616234][ T2934] usb 4-1: No valid video chain found. [ 148.626410][ T2934] usb 4-1: USB disconnect, device number 16 [ 148.787553][ T3051] loop0: detected capacity change from 0 to 128 [ 148.887879][ T223] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 149.073715][ T223] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.091081][ T223] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.117918][ T223] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 149.126777][ T223] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.143695][ T223] usb 3-1: config 0 descriptor?? [ 149.635313][ T3063] loop1: detected capacity change from 0 to 128 [ 149.665737][ T223] cp2112 0003:10C4:EA90.0017: unknown main item tag 0x0 [ 149.675902][ T223] cp2112 0003:10C4:EA90.0017: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 149.695694][ T3068] loop0: detected capacity change from 0 to 512 [ 149.987877][ T2422] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 150.057842][ T3063] bio_check_eod: 87271 callbacks suppressed [ 150.057858][ T3063] syz.1.426: attempt to access beyond end of device [ 150.057858][ T3063] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 150.076805][ T3063] syz.1.426: attempt to access beyond end of device [ 150.076805][ T3063] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 150.089642][ T3063] syz.1.426: attempt to access beyond end of device [ 150.089642][ T3063] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 150.102550][ T3063] syz.1.426: attempt to access beyond end of device [ 150.102550][ T3063] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 150.115468][ T3063] syz.1.426: attempt to access beyond end of device [ 150.115468][ T3063] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 150.128492][ T3063] syz.1.426: attempt to access beyond end of device [ 150.128492][ T3063] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 150.141401][ T3063] syz.1.426: attempt to access beyond end of device [ 150.141401][ T3063] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 150.154300][ T3063] syz.1.426: attempt to access beyond end of device [ 150.154300][ T3063] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 150.167244][ T3063] syz.1.426: attempt to access beyond end of device [ 150.167244][ T3063] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 150.180108][ T3063] syz.1.426: attempt to access beyond end of device [ 150.180108][ T3063] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 150.187902][ T2422] usb 1-1: Using ep0 maxpacket: 16 [ 150.199511][ T2422] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 150.210537][ T2422] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 150.220439][ T2422] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 150.230279][ T2422] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 30442, setting to 1024 [ 150.241510][ T2422] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 150.251627][ T2422] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 150.265885][ T2422] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 150.275071][ T2422] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 150.283168][ T2422] usb 1-1: SerialNumber: syz [ 150.292314][ T3068] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 150.301596][ T2422] cdc_acm: probe of 1-1:1.0 failed with error -12 [ 150.434142][ T2422] usb 5-1: USB disconnect, device number 18 [ 150.530540][ T316] usb 1-1: USB disconnect, device number 22 [ 150.576129][ T3076] loop3: detected capacity change from 0 to 512 [ 150.907914][ T301] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 151.097931][ T301] usb 4-1: Using ep0 maxpacket: 16 [ 151.104161][ T301] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 151.127986][ T301] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 151.147323][ T301] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 151.166842][ T301] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 30442, setting to 1024 [ 151.203374][ T301] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 151.285533][ T301] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 151.319103][ T301] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 151.333171][ T301] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 151.345513][ T301] usb 4-1: SerialNumber: syz [ 151.379309][ T3076] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 151.388921][ T301] cdc_acm: probe of 4-1:1.0 failed with error -12 [ 151.616621][ T223] cp2112 0003:10C4:EA90.0017: error requesting version [ 151.628329][ T223] cp2112: probe of 0003:10C4:EA90.0017 failed with error -71 [ 151.638307][ T223] usb 3-1: USB disconnect, device number 23 [ 151.737944][ T301] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 151.978986][ T301] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.992660][ T301] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 152.002105][ T301] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.010506][ T301] usb 1-1: Product: syz [ 152.027072][ T301] usb 1-1: Manufacturer: syz [ 152.035747][ T301] usb 1-1: SerialNumber: syz [ 152.317910][ T316] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 152.347896][ T223] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 152.499056][ T316] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.511357][ T316] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 152.520270][ T316] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.528137][ T316] usb 2-1: Product: syz [ 152.532155][ T316] usb 2-1: Manufacturer: syz [ 152.536667][ T316] usb 2-1: SerialNumber: syz [ 152.542025][ T223] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.555144][ T223] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 152.564256][ T223] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.572113][ T223] usb 3-1: Product: syz [ 152.576065][ T223] usb 3-1: Manufacturer: syz [ 152.580557][ T223] usb 3-1: SerialNumber: syz [ 152.691245][ T301] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 152.697215][ T301] cdc_ncm 1-1:1.0: bind() failure [ 152.703458][ T301] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 152.710171][ T301] cdc_ncm 1-1:1.1: bind() failure [ 153.137975][ T2540] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 153.189202][ T316] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 153.195064][ T316] cdc_ncm 2-1:1.0: bind() failure [ 153.201028][ T316] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 153.207654][ T316] cdc_ncm 2-1:1.1: bind() failure [ 153.317909][ T2540] usb 5-1: Using ep0 maxpacket: 16 [ 153.324022][ T2540] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.334137][ T2540] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 153.342951][ T2540] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 153.351787][ T2540] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.360566][ T2540] usb 5-1: config 0 descriptor?? [ 153.490345][ T316] usb 4-1: USB disconnect, device number 17 [ 153.622259][ T223] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 153.628674][ T223] cdc_ncm 3-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 153.635955][ T223] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 153.897866][ T316] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 154.031037][ T223] cdc_ncm 3-1:1.0: setting tx_max = 88 [ 154.038971][ T223] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 154.066344][ T223] usb 3-1: USB disconnect, device number 24 [ 154.075261][ T223] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 154.084455][ T316] usb 4-1: Using ep0 maxpacket: 16 [ 154.091940][ T316] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 154.106219][ T316] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.118147][ T316] usb 4-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 154.131486][ T316] usb 4-1: config 0 interface 0 has no altsetting 0 [ 154.137996][ T316] usb 4-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 154.153750][ T316] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.162207][ T2156] ================================================================== [ 154.170105][ T2156] BUG: KASAN: use-after-free in __list_del_entry_valid+0xa6/0x130 [ 154.177852][ T2156] Read of size 8 at addr ffff88813a3bccf0 by task kworker/0:6/2156 [ 154.185658][ T2156] [ 154.187830][ T2156] CPU: 0 PID: 2156 Comm: kworker/0:6 Not tainted 6.1.134-syzkaller-00030-g1c4f8fb026ac #0 [ 154.197551][ T2156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 154.207456][ T2156] Workqueue: events kernfs_notify_workfn [ 154.212928][ T2156] Call Trace: [ 154.216039][ T2156] [ 154.218812][ T2156] __dump_stack+0x21/0x24 [ 154.222976][ T2156] dump_stack_lvl+0xee/0x150 [ 154.227402][ T2156] ? __cfi_dump_stack_lvl+0x8/0x8 [ 154.232264][ T2156] ? __list_del_entry_valid+0xa6/0x130 [ 154.237555][ T2156] print_address_description+0x71/0x210 [ 154.242962][ T2156] print_report+0x4a/0x60 [ 154.247114][ T2156] kasan_report+0x122/0x150 [ 154.251450][ T2156] ? __list_del_entry_valid+0xa6/0x130 [ 154.256747][ T2156] __asan_report_load8_noabort+0x14/0x20 [ 154.262305][ T2156] __list_del_entry_valid+0xa6/0x130 [ 154.267417][ T2156] process_one_work+0x4b9/0xc40 [ 154.272103][ T2156] worker_thread+0xa29/0x11f0 [ 154.276621][ T2156] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 154.281912][ T2156] kthread+0x281/0x320 [ 154.285815][ T2156] ? __cfi_worker_thread+0x10/0x10 [ 154.290962][ T2156] ? __cfi_kthread+0x10/0x10 [ 154.295388][ T2156] ret_from_fork+0x1f/0x30 [ 154.299644][ T2156] [ 154.302764][ T2156] [ 154.304905][ T2156] Allocated by task 223: [ 154.308973][ T2156] kasan_set_track+0x4b/0x70 [ 154.313396][ T2156] kasan_save_alloc_info+0x25/0x30 [ 154.318343][ T2156] __kasan_kmalloc+0x95/0xb0 [ 154.322777][ T2156] __kmalloc_node+0xb2/0x1e0 [ 154.327200][ T2156] kvmalloc_node+0x294/0x480 [ 154.331624][ T2156] alloc_netdev_mqs+0x8d/0xf90 [ 154.336223][ T2156] alloc_etherdev_mqs+0x37/0x40 [ 154.340920][ T2156] usbnet_probe+0x20c/0x2780 [ 154.345510][ T2156] usb_probe_interface+0x610/0xaf0 [ 154.350457][ T2156] really_probe+0x2cb/0x960 [ 154.354797][ T2156] __driver_probe_device+0x198/0x280 [ 154.359915][ T2156] driver_probe_device+0x54/0x3e0 [ 154.364867][ T2156] __device_attach_driver+0x2e9/0x4a0 [ 154.370171][ T2156] bus_for_each_drv+0x183/0x210 [ 154.374849][ T2156] __device_attach+0x2a2/0x400 [ 154.379453][ T2156] device_initial_probe+0x1a/0x20 [ 154.384306][ T2156] bus_probe_device+0xc0/0x1f0 [ 154.388935][ T2156] device_add+0xb4d/0xef0 [ 154.393072][ T2156] usb_set_configuration+0x19c2/0x1f10 [ 154.398377][ T2156] usb_generic_driver_probe+0x91/0x150 [ 154.403662][ T2156] usb_probe_device+0x159/0x270 [ 154.408347][ T2156] really_probe+0x2cb/0x960 [ 154.412718][ T2156] __driver_probe_device+0x198/0x280 [ 154.417816][ T2156] driver_probe_device+0x54/0x3e0 [ 154.422676][ T2156] __device_attach_driver+0x2e9/0x4a0 [ 154.427883][ T2156] bus_for_each_drv+0x183/0x210 [ 154.432564][ T2156] __device_attach+0x2a2/0x400 [ 154.437165][ T2156] device_initial_probe+0x1a/0x20 [ 154.442027][ T2156] bus_probe_device+0xc0/0x1f0 [ 154.446627][ T2156] device_add+0xb4d/0xef0 [ 154.450790][ T2156] usb_new_device+0xa70/0x1520 [ 154.455390][ T2156] hub_event+0x2a5d/0x4680 [ 154.459644][ T2156] process_one_work+0x71f/0xc40 [ 154.464329][ T2156] worker_thread+0xa29/0x11f0 [ 154.468851][ T2156] kthread+0x281/0x320 [ 154.472749][ T2156] ret_from_fork+0x1f/0x30 [ 154.477009][ T2156] [ 154.479178][ T2156] Freed by task 223: [ 154.482905][ T2156] kasan_set_track+0x4b/0x70 [ 154.487331][ T2156] kasan_save_free_info+0x31/0x50 [ 154.492199][ T2156] ____kasan_slab_free+0x132/0x180 [ 154.497512][ T2156] __kasan_slab_free+0x11/0x20 [ 154.502112][ T2156] slab_free_freelist_hook+0xc2/0x190 [ 154.507310][ T2156] __kmem_cache_free+0xb7/0x1b0 [ 154.512002][ T2156] kfree+0x6f/0xf0 [ 154.515559][ T2156] kvfree+0x35/0x40 [ 154.519201][ T2156] netdev_freemem+0x3f/0x60 [ 154.523540][ T2156] netdev_release+0x7f/0xb0 [ 154.527876][ T2156] device_release+0xa4/0x1d0 [ 154.532311][ T2156] kobject_put+0x19d/0x280 [ 154.536557][ T2156] put_device+0x1f/0x30 [ 154.540550][ T2156] free_netdev+0x392/0x490 [ 154.544802][ T2156] usbnet_disconnect+0x25a/0x3b0 [ 154.549576][ T2156] usb_unbind_interface+0x223/0x8d0 [ 154.554612][ T2156] device_release_driver_internal+0x508/0x820 [ 154.560521][ T2156] device_release_driver+0x19/0x20 [ 154.565473][ T2156] bus_remove_device+0x2ee/0x350 [ 154.570363][ T2156] device_del+0x6a4/0xeb0 [ 154.574528][ T2156] usb_disable_device+0x3a8/0x750 [ 154.579389][ T2156] usb_disconnect+0x31e/0x860 [ 154.583906][ T2156] hub_event+0x1bd5/0x4680 [ 154.588153][ T2156] process_one_work+0x71f/0xc40 [ 154.592989][ T2156] worker_thread+0xd2e/0x11f0 [ 154.597560][ T2156] kthread+0x281/0x320 [ 154.601403][ T2156] ret_from_fork+0x1f/0x30 [ 154.605658][ T2156] [ 154.607834][ T2156] Last potentially related work creation: [ 154.613377][ T2156] kasan_save_stack+0x3a/0x60 [ 154.618064][ T2156] __kasan_record_aux_stack+0xb6/0xc0 [ 154.623506][ T2156] kasan_record_aux_stack_noalloc+0xb/0x10 [ 154.629145][ T2156] insert_work+0x51/0x300 [ 154.633306][ T2156] __queue_work+0x9b1/0xd30 [ 154.637646][ T2156] queue_work_on+0xd2/0x140 [ 154.641983][ T2156] usbnet_link_change+0x176/0x1a0 [ 154.646844][ T2156] usbnet_probe+0x1d55/0x2780 [ 154.651357][ T2156] usb_probe_interface+0x610/0xaf0 [ 154.656304][ T2156] really_probe+0x2cb/0x960 [ 154.660643][ T2156] __driver_probe_device+0x198/0x280 [ 154.665764][ T2156] driver_probe_device+0x54/0x3e0 [ 154.670634][ T2156] __device_attach_driver+0x2e9/0x4a0 [ 154.675835][ T2156] bus_for_each_drv+0x183/0x210 [ 154.680522][ T2156] __device_attach+0x2a2/0x400 [ 154.685120][ T2156] device_initial_probe+0x1a/0x20 [ 154.689980][ T2156] bus_probe_device+0xc0/0x1f0 [ 154.694725][ T2156] device_add+0xb4d/0xef0 [ 154.698976][ T2156] usb_set_configuration+0x19c2/0x1f10 [ 154.704282][ T2156] usb_generic_driver_probe+0x91/0x150 [ 154.709560][ T2156] usb_probe_device+0x159/0x270 [ 154.714246][ T2156] really_probe+0x2cb/0x960 [ 154.718584][ T2156] __driver_probe_device+0x198/0x280 [ 154.723703][ T2156] driver_probe_device+0x54/0x3e0 [ 154.728570][ T2156] __device_attach_driver+0x2e9/0x4a0 [ 154.733770][ T2156] bus_for_each_drv+0x183/0x210 [ 154.738489][ T2156] __device_attach+0x2a2/0x400 [ 154.743060][ T2156] device_initial_probe+0x1a/0x20 [ 154.747921][ T2156] bus_probe_device+0xc0/0x1f0 [ 154.752529][ T2156] device_add+0xb4d/0xef0 [ 154.756685][ T2156] usb_new_device+0xa70/0x1520 [ 154.761315][ T2156] hub_event+0x2a5d/0x4680 [ 154.765548][ T2156] process_one_work+0x71f/0xc40 [ 154.770223][ T2156] worker_thread+0xa29/0x11f0 [ 154.774740][ T2156] kthread+0x281/0x320 [ 154.778648][ T2156] ret_from_fork+0x1f/0x30 [ 154.782897][ T2156] [ 154.785070][ T2156] The buggy address belongs to the object at ffff88813a3bc000 [ 154.785070][ T2156] which belongs to the cache kmalloc-4k of size 4096 [ 154.798961][ T2156] The buggy address is located 3312 bytes inside of [ 154.798961][ T2156] 4096-byte region [ffff88813a3bc000, ffff88813a3bd000) [ 154.812329][ T2156] [ 154.814488][ T2156] The buggy address belongs to the physical page: [ 154.820745][ T2156] page:ffffea0004e8ee00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x13a3b8 [ 154.830929][ T2156] head:ffffea0004e8ee00 order:3 compound_mapcount:0 compound_pincount:0 [ 154.839211][ T2156] flags: 0x4000000000010200(slab|head|zone=1) [ 154.845113][ T2156] raw: 4000000000010200 ffffea0004757400 dead000000000002 ffff888100043380 [ 154.853531][ T2156] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 154.861949][ T2156] page dumped because: kasan: bad access detected [ 154.868204][ T2156] page_owner tracks the page as allocated [ 154.873756][ T2156] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 102, tgid 102 (udevd), ts 113834681720, free_ts 113671798366 [ 154.895707][ T2156] post_alloc_hook+0x1f5/0x210 [ 154.900303][ T2156] prep_new_page+0x1c/0x110 [ 154.904646][ T2156] get_page_from_freelist+0x2c6e/0x2ce0 [ 154.910025][ T2156] __alloc_pages+0x19e/0x3a0 [ 154.914450][ T2156] alloc_slab_page+0x6e/0xf0 [ 154.918883][ T2156] new_slab+0x98/0x3d0 [ 154.922782][ T2156] ___slab_alloc+0x6f6/0xb50 [ 154.927219][ T2156] __slab_alloc+0x5e/0xa0 [ 154.931376][ T2156] __kmem_cache_alloc_node+0x203/0x2c0 [ 154.936672][ T2156] __kmalloc_node+0xa1/0x1e0 [ 154.941098][ T2156] kvmalloc_node+0x294/0x480 [ 154.945528][ T2156] seq_read_iter+0x1fc/0xdd0 [ 154.949953][ T2156] kernfs_fop_read_iter+0x147/0x480 [ 154.954986][ T2156] vfs_read+0x41e/0x8c0 [ 154.958978][ T2156] ksys_read+0x140/0x240 [ 154.963057][ T2156] __x64_sys_read+0x7b/0x90 [ 154.967398][ T2156] page last free stack trace: [ 154.971915][ T2156] free_unref_page_prepare+0x742/0x750 [ 154.977203][ T2156] free_unref_page+0x8f/0x530 [ 154.981717][ T2156] __free_pages+0x67/0x100 [ 154.985971][ T2156] __free_slab+0xca/0x1a0 [ 154.990146][ T2156] __unfreeze_partials+0x160/0x190 [ 154.995126][ T2156] put_cpu_partial+0xa9/0x100 [ 154.999692][ T2156] __slab_free+0x1c4/0x280 [ 155.004041][ T2156] ___cache_free+0xbf/0xd0 [ 155.008292][ T2156] qlist_free_all+0xc6/0x140 [ 155.012718][ T2156] kasan_quarantine_reduce+0x14a/0x170 [ 155.018012][ T2156] __kasan_slab_alloc+0x24/0x80 [ 155.022718][ T2156] slab_post_alloc_hook+0x4f/0x2d0 [ 155.027674][ T2156] kmem_cache_alloc+0x16e/0x330 [ 155.032333][ T2156] getname_flags+0xb9/0x500 [ 155.036673][ T2156] user_path_at_empty+0x30/0x1c0 [ 155.041447][ T2156] __x64_sys_umount+0xf1/0x160 [ 155.046139][ T2156] [ 155.048302][ T2156] Memory state around the buggy address: [ 155.053896][ T2156] ffff88813a3bcb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 155.062255][ T2156] ffff88813a3bcc00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 155.070777][ T2156] >ffff88813a3bcc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 155.079348][ T2156] ^ [ 155.086898][ T2156] ffff88813a3bcd00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 155.095012][ T2156] ffff88813a3bcd80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 155.102903][ T2156] ================================================================== [ 155.110887][ T2156] Disabling lock debugging due to kernel taint [ 155.134212][ T316] usb 4-1: config 0 descriptor?? [ 155.174125][ T821] usb 2-1: USB disconnect, device number 26 [ 155.180165][ T19] usb 1-1: USB disconnect, device number 23 [ 155.557797][ T316] playstation 0003:054C:0CE6.0018: item fetching failed at offset 0/2 [ 155.566038][ T316] playstation 0003:054C:0CE6.0018: Parse failed [ 155.572130][ T316] playstation: probe of 0003:054C:0CE6.0018 failed with error -22 [ 155.771231][ T2540] usb 4-1: USB disconnect, device number 18 [ 155.883302][ T316] usb 5-1: USB disconnect, device number 19