last executing test programs: 10.022450199s ago: executing program 3 (id=1548): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x300c056, &(0x7f0000000380)={[{@noload}, {@data_err_abort}, {@noinit_itable}, {@dioread_lock}, {@errors_remount}, {@minixdf}, {@data_err_ignore}, {@grpquota}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@delalloc}, {@bh}, {@dioread_nolock}]}, 0x1, 0x55a, &(0x7f0000000480)="$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") r0 = open(&(0x7f0000000080)='./file2\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x1500, 0x0) close(r1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0xffffffffffffffa8, &(0x7f0000000000)=0x1002) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$inet(0x2, 0x4000000000000001, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) sendfile(r0, r0, 0x0, 0x800000009) 8.861421609s ago: executing program 1 (id=1555): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}, {@uuid_off}]}) 8.783038602s ago: executing program 3 (id=1556): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="11000000040000000400000002000000210000000a28c3a82fb7427eb008eaca0faf139786c01c500c068a5bf7cd3b370630098feff38407c69d89b54b7a25d26ce1b9778eb8b90ff1a35fd85b9dd61b3c72ab243ff195104a2724d2f8aa4b250c6adf22b3089917216c2e0ff95f66858dc0a32a3c456cb7bd2a417bb478c61c7b92a05998bdfe4882a65b20c2ee0ebdb870e712b324da2906a519acedabc1b9e742a693258180a2e85e4eff6058875004531dccf98f2a4f9909f374e8ce715cf0614634355b47dce04a24e1a36271b684ff92cc5ffec7f88d4f6b", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) setsockopt$inet_mreq(r0, 0x0, 0x23, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r6}, 0x18) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r7 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth1_vlan\x00'}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001000010021bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="858804000300000008001b000000000008000d00080000"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 7.985184787s ago: executing program 1 (id=1558): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) 7.791408415s ago: executing program 3 (id=1560): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6cb, 0x73f4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xfc}}}}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0x4, "e1186906"}, @global=@item_012={0x0, 0x1, 0x7}, @local=@item_012={0x0, 0x2, 0xa}]}}, 0x0}, 0x0) 6.477270811s ago: executing program 0 (id=1565): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x50) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c0001006272696467"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x6}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x8, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x14, 0x1}, {0x8, 0x9, 0x2}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) 5.415096677s ago: executing program 4 (id=1566): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r1}, 0x18) io_uring_setup(0x1de0, &(0x7f0000001e00)={0x0, 0x8ec5, 0x0, 0x0, 0x0, 0x0, r1}) 5.405924887s ago: executing program 2 (id=1567): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001e80)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) 5.399070648s ago: executing program 4 (id=1568): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000800000000001800038014000380"], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 5.261439154s ago: executing program 0 (id=1569): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}, {@uuid_off}]}) 5.252421464s ago: executing program 4 (id=1570): flock(0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="5e23c70f21ed66b809000f00d0b94a090000b8faffffffbaff7f00000f30c4e109f99f2b0000000f01cbf3ac66ba430066ed67800e416704660f38817e30", 0x3e}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000800000018000180140002"], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 5.182957317s ago: executing program 4 (id=1571): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="11000000040000000400000002000000210000000a28c3a82fb7427eb008eaca0faf139786c01c500c068a5bf7cd3b370630098feff38407c69d89b54b7a25d26ce1b9778eb8b90ff1a35fd85b9dd61b3c72ab243ff195104a2724d2f8aa4b250c6adf22b3089917216c2e0ff95f66858dc0a32a3c456cb7bd2a417bb478c61c7b92a05998bdfe4882a65b20c2ee0ebdb870e712b324da2906a519acedabc1b9e742a693258180a2e85e4eff6058875004531dccf98f2a4f9909f374e8ce715cf0614634355b47dce04a24e1a36271b684ff92cc5ffec7f88d4f6b", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) setsockopt$inet_mreq(r0, 0x0, 0x23, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r6}, 0x18) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r7 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth1_vlan\x00'}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001000010021bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="858804000300000008001b000000000008000d00080000"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 5.12408808s ago: executing program 3 (id=1572): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() ptrace$ARCH_GET_FS(0x1e, r0, &(0x7f0000000040), 0x1003) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x0, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x21, 0x0, [{}, {}, {0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xf}]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x3}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) 4.698246398s ago: executing program 1 (id=1573): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b0000000600000001000000ffbfffff01000000", @ANYRES32=0x1, @ANYBLOB="0000000000000053b8397f825b340a8979de4ad9", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/13], 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = socket(0xf, 0x3, 0x2) write(r5, &(0x7f0000a97ff0)="020baf010200000000067bbc8e1d4b48", 0x10) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x40a01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETFILTEREBPF(r6, 0x800454e1, &(0x7f00000005c0)=r7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) gettid() timer_create(0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), 0x0) 4.64815736s ago: executing program 2 (id=1574): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000040)="16", 0x1}], 0x1, 0x1, 0x9) 4.290594126s ago: executing program 2 (id=1575): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x300c056, &(0x7f0000000380)={[{@noload}, {@data_err_abort}, {@noinit_itable}, {@dioread_lock}, {@errors_remount}, {@minixdf}, {@data_err_ignore}, {@grpquota}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@delalloc}, {@bh}, {@dioread_nolock}]}, 0x1, 0x55a, &(0x7f0000000480)="$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") r0 = open(&(0x7f0000000080)='./file2\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x1500, 0x0) close(r1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0xffffffffffffffa8, &(0x7f0000000000)=0x1002) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x2, 0x0) sendfile(r0, r0, 0x0, 0x800000009) 4.250502597s ago: executing program 3 (id=1576): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6cb, 0x73f4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xfc}}}}}]}}]}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0x4, "e1186906"}, @global=@item_012={0x0, 0x1, 0x7}, @local=@item_012={0x0, 0x2, 0xa}]}}, 0x0}, 0x0) 4.215732289s ago: executing program 4 (id=1577): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f'], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000180)='kfree\x00', r2}, 0x18) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x8, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0200"}, @main=@item_4={0x3, 0x0, 0x8}, @global=@item_4={0x3, 0x1, 0x4, "2289d267"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) 4.083920285s ago: executing program 0 (id=1578): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x8a0c40, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYRES64=r4], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x39, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0xa, 0x200008, 0x5, 0x1ffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r5], 0x4c}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000010000108000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="b40200000000000008001b"], 0x28}}, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, 0x0) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000380)='./bus\x00', 0x322020, &(0x7f0000000140)=ANY=[], 0x1, 0x0, 0x0) 2.982009742s ago: executing program 1 (id=1579): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000800000000001800038014000380"], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 2.956174683s ago: executing program 1 (id=1580): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x50) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c0001006272696467"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x6}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x8, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x14, 0x1}, {0x8, 0x9, 0x2}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) 2.691391655s ago: executing program 2 (id=1581): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x300c056, &(0x7f0000000380)={[{@noload}, {@data_err_abort}, {@noinit_itable}, {@dioread_lock}, {@errors_remount}, {@minixdf}, {@data_err_ignore}, {@grpquota}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@delalloc}, {@bh}, {@dioread_nolock}]}, 0x1, 0x55a, &(0x7f0000000480)="$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") r0 = open(&(0x7f0000000080)='./file2\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x1500, 0x0) close(r1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0xffffffffffffffa8, &(0x7f0000000000)=0x1002) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000004c0)='./file1\x00', 0x3018446, &(0x7f0000000a00)={[{@dioread_nolock}, {@data_err_abort}, {@jqfmt_vfsold}, {@delalloc}, {@data_err_ignore}, {@discard}, {@data_err_ignore}, {@journal_path={'journal_path', 0x3d, './file2'}}, {@noblock_validity}, {@user_xattr}, {@block_validity}, {@errors_remount}], [{@smackfshat={'smackfshat', 0x3d, 'journal_dev'}}]}, 0x1, 0x553, &(0x7f0000001080)="$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") sendfile(r0, r0, 0x0, 0x800000009) 2.675864785s ago: executing program 0 (id=1582): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000, 0xe, &(0x7f0000ffc000/0x1000)=nil) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r2}, 0x10) sched_setscheduler(0x0, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 2.605468328s ago: executing program 0 (id=1583): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x8a0c40, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r4], 0x4c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000010000108000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="b40200000000000008001b"], 0x28}}, 0x0) 1.420638619s ago: executing program 0 (id=1584): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000000)=0x3) sched_setscheduler(0x0, 0x2, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bf"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x14010, 0x0) 1.352657832s ago: executing program 1 (id=1585): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001e80)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) 1.185080609s ago: executing program 2 (id=1586): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x19, &(0x7f0000000000)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="38010000100013070000000000000000ac1e0001000000000000000000000000e000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="200100000000000000000000000000020000000032000000640101020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000fdffffff00000000000000000200000000004055ac512e62d64e8400000000000048000200656362286369706865725f6e756c6c2900"/240], 0x138}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x4}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f0000000080)='/dev/vhost-vsock\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f00000001c0)='-\x00') futex(&(0x7f000000cffc)=0x4, 0x100, 0x4001, &(0x7f000000b000), &(0x7f0000048000)=0x2, 0x0) r6 = io_uring_setup(0x28d5, &(0x7f0000000100)={0x0, 0x0, 0x40, 0x0, 0x214}) close(r6) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) 1.177273989s ago: executing program 4 (id=1587): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() ptrace$ARCH_GET_FS(0x1e, r0, &(0x7f0000000040), 0x1003) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x340, 0x11, 0x148, 0x0, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x21, 0x0, [{}, {}, {0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xf}]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x3}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) 9.32227ms ago: executing program 2 (id=1588): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=r2}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x7, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x2000080) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r5, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_newrule={0x1c, 0x20, 0x1, 0x0, 0x25dfdbfd, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6}}, 0x1c}}, 0x4000040) 0s ago: executing program 3 (id=1589): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f0000000540)={'syztnl1\x00', 0x0, 0x29, 0x81, 0xf8, 0x3, 0x5, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x8000, 0xb0, 0x7ff}}) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_clone3(&(0x7f0000000480)={0x8000000, &(0x7f0000000000), 0x0, &(0x7f0000000080), {0x5}, &(0x7f0000000300)=""/201, 0xc9, &(0x7f0000000400)=""/102, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x4}, 0x58) syz_open_procfs$namespace(0x0, &(0x7f0000000500)='ns/time\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={0x0, r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000640)='rxrpc_rtt_tx\x00', r1, 0x0, 0xad}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=r4}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0x7, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r7, &(0x7f000000a1c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2202, 0x0) sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1800000042008991"], 0x18}], 0x1}, 0x2000080) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_newrule={0x1c, 0x20, 0x1, 0x0, 0x25dfdbfd, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6}}, 0x1c}}, 0x4000040) kernel console output (not intermixed with test programs): CONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 211.454291][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 211.462843][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 211.471308][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 211.479700][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 211.488270][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 211.497592][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 211.506196][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 211.514669][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 211.522933][ T3558] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 211.549359][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 211.558108][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 211.566783][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 211.575401][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 211.584394][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 211.592736][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 211.601287][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 211.616731][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 211.634292][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 211.644496][ T284] attempt to access beyond end of device [ 211.644496][ T284] loop2: rw=2049, want=45104, limit=40427 [ 211.664738][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 211.673736][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 211.682568][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 211.690617][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 211.698578][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 211.981157][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 212.092674][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 212.101178][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 212.109111][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 212.118819][ T3593] loop3: detected capacity change from 0 to 1024 [ 212.195501][ T3593] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsdgroups,,errors=continue. Quota mode: none. [ 212.246390][ T3593] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 212.262363][ T3593] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 212.275063][ T3593] EXT4-fs (loop3): This should not happen!! Data will be lost [ 212.275063][ T3593] [ 212.285271][ T3593] EXT4-fs (loop3): Total free blocks count 0 [ 212.291441][ T3593] EXT4-fs (loop3): Free/Dirty block details [ 212.298141][ T3593] EXT4-fs (loop3): free_blocks=68451041280 [ 212.304513][ T3593] EXT4-fs (loop3): dirty_blocks=80 [ 212.309800][ T3593] EXT4-fs (loop3): Block reservation details [ 212.316205][ T3593] EXT4-fs (loop3): i_reserved_data_blocks=5 [ 212.324174][ T61] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 212.336159][ T45] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 212.348780][ T45] EXT4-fs (loop3): This should not happen!! Data will be lost [ 212.348780][ T45] [ 212.822195][ T2152] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 212.922253][ T61] usb 5-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 32 [ 212.932108][ T61] usb 5-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 213.117068][ T3616] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.124366][ T3616] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.131872][ T61] usb 5-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 213.142256][ T61] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.155445][ T61] usb 5-1: Product: syz [ 213.163895][ T61] usb 5-1: Manufacturer: syz [ 213.174898][ T61] usb 5-1: SerialNumber: syz [ 213.202236][ T2152] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.211691][ T3590] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 213.213491][ T2152] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 213.222842][ T61] usblp0: Disabling reads from problematic bidirectional printer [ 213.229709][ T2152] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.249014][ T2152] usb 1-1: config 0 descriptor?? [ 213.443424][ T61] usblp 5-1:4.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 213.581697][ T3622] loop1: detected capacity change from 0 to 1024 [ 213.633645][ T3622] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,,errors=continue. Quota mode: none. [ 213.649892][ T3622] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 213.662995][ T554] usb 5-1: USB disconnect, device number 18 [ 213.666571][ T3622] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 45 with error 28 [ 213.692638][ T3622] EXT4-fs (loop1): This should not happen!! Data will be lost [ 213.692638][ T3622] [ 213.709922][ T554] usblp0: removed [ 213.755309][ T3622] EXT4-fs (loop1): Total free blocks count 0 [ 213.761880][ T3622] EXT4-fs (loop1): Free/Dirty block details [ 213.769684][ T3622] EXT4-fs (loop1): free_blocks=68451041280 [ 213.776835][ T3622] EXT4-fs (loop1): dirty_blocks=48 [ 213.786876][ T3622] EXT4-fs (loop1): Block reservation details [ 213.794781][ T3622] EXT4-fs (loop1): i_reserved_data_blocks=3 [ 213.954843][ T2152] keytouch 0003:0926:3333.0015: fixing up Keytouch IEC report descriptor [ 213.965603][ T2152] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0015/input/input10 [ 214.053406][ T30] audit: type=1400 audit(1763954317.638:318): avc: denied { ioctl } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=984 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 214.079824][ T2152] keytouch 0003:0926:3333.0015: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 214.098916][ T2152] usb 1-1: USB disconnect, device number 12 [ 214.121301][ T3632] fido_id[3632]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 214.152768][ T3631] loop1: detected capacity change from 0 to 1024 [ 214.173494][ T3631] EXT4-fs (loop1): Ignoring removed nobh option [ 214.183997][ T3631] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #11: comm syz.1.1084: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 214.202778][ T3631] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.1084: couldn't read orphan inode 11 (err -117) [ 214.214873][ T3631] EXT4-fs (loop1): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 214.802219][ T2152] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 215.192316][ T2152] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.203858][ T2152] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 215.213021][ T2152] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.222353][ T6] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 215.234803][ T2152] usb 1-1: config 0 descriptor?? [ 215.622283][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.636100][ T6] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.677455][ T61] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 215.692930][ T2152] keytouch 0003:0926:3333.0016: fixing up Keytouch IEC report descriptor [ 215.702660][ T2152] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0016/input/input11 [ 215.732301][ T6] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 215.741437][ T6] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 215.749511][ T6] usb 2-1: Manufacturer: syz [ 215.754805][ T6] usb 2-1: config 0 descriptor?? [ 215.784454][ T2152] keytouch 0003:0926:3333.0016: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 215.898992][ T554] usb 1-1: USB disconnect, device number 13 [ 215.922264][ T296] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 216.062295][ T61] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 216.152305][ T61] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 216.161457][ T61] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 216.169508][ T61] usb 5-1: SerialNumber: syz [ 216.212896][ T61] cdc_acm 5-1:1.0: skipping garbage [ 216.218360][ T61] cdc_acm: probe of 5-1:1.0 failed with error -12 [ 216.292682][ T296] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 216.303966][ T296] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.313803][ T296] usb 3-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 216.322936][ T296] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.331993][ T296] usb 3-1: config 0 descriptor?? [ 216.418443][ T426] usb 5-1: USB disconnect, device number 19 [ 216.468871][ T3674] loop3: detected capacity change from 0 to 40427 [ 216.523164][ T3674] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 216.531062][ T3674] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 216.541157][ T3674] F2FS-fs (loop3): invalid crc value [ 216.548240][ T3674] F2FS-fs (loop3): Found nat_bits in checkpoint [ 216.577941][ T3674] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 216.585316][ T3674] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 216.613060][ T3674] attempt to access beyond end of device [ 216.613060][ T3674] loop3: rw=2049, want=77960, limit=40427 [ 216.640257][ T3674] attempt to access beyond end of device [ 216.640257][ T3674] loop3: rw=2049, want=45224, limit=40427 [ 216.651624][ T6] uclogic 0003:256C:006D.0017: failed retrieving string descriptor #200: -71 [ 216.660584][ T6] uclogic 0003:256C:006D.0017: failed retrieving pen parameters: -71 [ 216.668840][ T6] uclogic 0003:256C:006D.0017: failed probing pen v2 parameters: -71 [ 216.677347][ T6] uclogic 0003:256C:006D.0017: failed probing parameters: -71 [ 216.678030][ T2443] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 216.686046][ T6] uclogic: probe of 0003:256C:006D.0017 failed with error -71 [ 216.694732][ T2443] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 216.702222][ T2152] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 216.729199][ T6] usb 2-1: USB disconnect, device number 14 [ 216.802532][ T296] hid (null): bogus close delimiter [ 216.808623][ T296] itetech 0003:06CB:73F4.0018: bogus close delimiter [ 216.815512][ T296] itetech 0003:06CB:73F4.0018: item 0 0 2 10 parsing failed [ 216.823058][ T296] itetech: probe of 0003:06CB:73F4.0018 failed with error -22 [ 216.952557][ T3684] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1102'. [ 216.998240][ T3682] loop3: detected capacity change from 0 to 40427 [ 217.015802][ T6] usb 3-1: USB disconnect, device number 17 [ 217.030395][ T3682] F2FS-fs (loop3): invalid crc value [ 217.051621][ T3682] F2FS-fs (loop3): Found nat_bits in checkpoint [ 217.085617][ T3682] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 217.113214][ T3682] attempt to access beyond end of device [ 217.113214][ T3682] loop3: rw=2049, want=45104, limit=40427 [ 217.122384][ T2152] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.135436][ T2152] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 217.144849][ T2152] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.145209][ T283] attempt to access beyond end of device [ 217.145209][ T283] loop3: rw=2049, want=45112, limit=40427 [ 217.154695][ T2152] usb 1-1: config 0 descriptor?? [ 217.542318][ T3706] hub 9-0:1.0: USB hub found [ 217.547607][ T3706] hub 9-0:1.0: 1 port detected [ 217.795589][ T2152] keytouch 0003:0926:3333.0019: fixing up Keytouch IEC report descriptor [ 217.805657][ T2152] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0019/input/input12 [ 217.885039][ T2152] keytouch 0003:0926:3333.0019: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 217.910758][ T2152] usb 1-1: USB disconnect, device number 14 [ 217.996212][ T3717] xt_bpf: check failed: parse error [ 218.254779][ T6] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 218.992261][ T6] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 219.082256][ T6] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 219.091438][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 219.099532][ T6] usb 5-1: SerialNumber: syz [ 219.142215][ T61] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 219.142763][ T6] cdc_acm 5-1:1.0: skipping garbage [ 219.155943][ T6] cdc_acm: probe of 5-1:1.0 failed with error -12 [ 219.242305][ T477] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 219.351521][ T1454] usb 5-1: USB disconnect, device number 20 [ 219.357855][ T3734] loop3: detected capacity change from 0 to 40427 [ 219.382237][ T61] usb 3-1: Using ep0 maxpacket: 16 [ 219.408481][ T3734] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 219.416535][ T3734] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 219.422219][ T2152] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 219.432982][ T3734] F2FS-fs (loop3): invalid crc value [ 219.439975][ T3734] F2FS-fs (loop3): Found nat_bits in checkpoint [ 219.469364][ T3734] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 219.476469][ T3734] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 219.494706][ T3734] overlayfs: failed to resolve './bus': -2 [ 219.507334][ T2443] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 219.516355][ T61] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 219.516796][ T2443] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 219.529608][ T61] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 219.548031][ T61] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.558315][ T61] usb 3-1: config 0 descriptor?? [ 219.602879][ T61] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 219.622252][ T477] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.633345][ T477] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.722483][ T477] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 219.732351][ T477] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 219.740721][ T477] usb 1-1: Manufacturer: syz [ 219.750790][ T477] usb 1-1: config 0 descriptor?? [ 220.067444][ T2152] usb 2-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 32 [ 220.077453][ T2152] usb 2-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 220.422271][ T2152] usb 2-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 220.431422][ T2152] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.439504][ T2152] usb 2-1: Product: syz [ 220.443738][ T2152] usb 2-1: Manufacturer: syz [ 220.448367][ T2152] usb 2-1: SerialNumber: syz [ 220.472260][ T3730] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 220.492636][ T2152] usblp0: Disabling reads from problematic bidirectional printer [ 220.772361][ T477] uclogic 0003:256C:006D.001A: failed retrieving string descriptor #200: -71 [ 220.783342][ T477] uclogic 0003:256C:006D.001A: failed retrieving pen parameters: -71 [ 220.792304][ T477] uclogic 0003:256C:006D.001A: failed probing pen v2 parameters: -71 [ 220.800888][ T477] uclogic 0003:256C:006D.001A: failed probing parameters: -71 [ 220.816979][ T477] uclogic: probe of 0003:256C:006D.001A failed with error -71 [ 220.934546][ T2152] usblp 2-1:4.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 220.971483][ T2152] usb 2-1: USB disconnect, device number 15 [ 220.981041][ T2152] usblp0: removed [ 220.999880][ T477] usb 1-1: USB disconnect, device number 15 [ 221.127192][ T3757] xt_bpf: check failed: parse error [ 221.448313][ T3761] loop0: detected capacity change from 0 to 16 [ 221.482717][ T3761] erofs: Unknown parameter '0000000000000000000018446744073709551615ÿÿ' [ 221.538720][ T3764] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.546123][ T3764] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.033417][ T6] usb 3-1: USB disconnect, device number 18 [ 222.612201][ T2152] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 222.708534][ T3781] loop0: detected capacity change from 0 to 40427 [ 222.768480][ T3781] F2FS-fs (loop0): invalid crc value [ 222.790224][ T3781] F2FS-fs (loop0): Found nat_bits in checkpoint [ 222.836408][ T3781] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 222.860095][ T282] attempt to access beyond end of device [ 222.860095][ T282] loop0: rw=2049, want=45104, limit=40427 [ 222.972384][ T2152] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.992213][ T2152] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.112267][ T2152] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 223.124862][ T2152] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 223.140595][ T2152] usb 5-1: Manufacturer: syz [ 223.154375][ T2152] usb 5-1: config 0 descriptor?? [ 223.342176][ T6] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 223.419911][ T3799] loop1: detected capacity change from 0 to 512 [ 223.481453][ T3799] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (33357!=0) [ 223.490868][ T3799] EXT4-fs (loop1): group descriptors corrupted! [ 223.702240][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.713299][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.802319][ T6] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 223.811559][ T6] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 223.819687][ T6] usb 1-1: Manufacturer: syz [ 223.828351][ T6] usb 1-1: config 0 descriptor?? [ 224.198682][ T2152] uclogic 0003:256C:006D.001B: failed retrieving string descriptor #200: -71 [ 224.207684][ T2152] uclogic 0003:256C:006D.001B: failed retrieving pen parameters: -71 [ 224.216057][ T2152] uclogic 0003:256C:006D.001B: failed probing pen v2 parameters: -71 [ 224.224432][ T2152] uclogic 0003:256C:006D.001B: failed probing parameters: -71 [ 224.231942][ T2152] uclogic: probe of 0003:256C:006D.001B failed with error -71 [ 224.247214][ T2152] usb 5-1: USB disconnect, device number 21 [ 224.802257][ T6] uclogic 0003:256C:006D.001C: failed retrieving string descriptor #200: -71 [ 224.816779][ T6] uclogic 0003:256C:006D.001C: failed retrieving pen parameters: -71 [ 224.871890][ T6] uclogic 0003:256C:006D.001C: failed probing pen v2 parameters: -71 [ 224.887860][ T6] uclogic 0003:256C:006D.001C: failed probing parameters: -71 [ 224.903739][ T6] uclogic: probe of 0003:256C:006D.001C failed with error -71 [ 225.210964][ T6] usb 1-1: USB disconnect, device number 16 [ 225.704358][ T3841] loop0: detected capacity change from 0 to 1024 [ 225.773112][ T3841] EXT4-fs (loop0): Ignoring removed nobh option [ 225.807169][ T3841] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #11: comm syz.0.1151: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 225.836400][ T3841] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.1151: couldn't read orphan inode 11 (err -117) [ 225.862422][ T3841] EXT4-fs (loop0): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 226.166439][ T30] audit: type=1400 audit(1763954329.748:319): avc: denied { write } for pid=3852 comm="syz.1.1154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 227.706755][ T3868] loop0: detected capacity change from 0 to 40427 [ 227.754345][ T3868] F2FS-fs (loop0): invalid crc value [ 227.795335][ T3868] F2FS-fs (loop0): Found nat_bits in checkpoint [ 228.005132][ T3885] xt_bpf: check failed: parse error [ 228.032230][ T477] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 228.135868][ T3868] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 228.437233][ T3868] attempt to access beyond end of device [ 228.437233][ T3868] loop0: rw=2049, want=45104, limit=40427 [ 228.457603][ T282] attempt to access beyond end of device [ 228.457603][ T282] loop0: rw=2049, want=45112, limit=40427 [ 228.572229][ T477] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.592177][ T477] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.692240][ T477] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 228.707788][ T477] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 228.716479][ T477] usb 4-1: Manufacturer: syz [ 228.727481][ T477] usb 4-1: config 0 descriptor?? [ 228.902169][ T61] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 229.262252][ T61] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.273265][ T61] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.362285][ T61] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 229.371557][ T61] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 229.379698][ T61] usb 3-1: Manufacturer: syz [ 229.391228][ T61] usb 3-1: config 0 descriptor?? [ 229.521656][ T3911] loop4: detected capacity change from 0 to 512 [ 229.586221][ T3911] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (33357!=0) [ 229.600244][ T3911] EXT4-fs (loop4): group descriptors corrupted! [ 229.642299][ T477] uclogic 0003:256C:006D.001D: failed retrieving string descriptor #200: -71 [ 229.655225][ T477] uclogic 0003:256C:006D.001D: failed retrieving pen parameters: -71 [ 229.672194][ T477] uclogic 0003:256C:006D.001D: failed probing pen v2 parameters: -71 [ 229.690463][ T477] uclogic 0003:256C:006D.001D: failed probing parameters: -71 [ 229.712194][ T477] uclogic: probe of 0003:256C:006D.001D failed with error -71 [ 229.727925][ T477] usb 4-1: USB disconnect, device number 18 [ 229.806238][ T3915] loop0: detected capacity change from 0 to 40427 [ 229.864645][ T3915] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 229.872605][ T3915] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 229.881741][ T3915] F2FS-fs (loop0): invalid crc value [ 229.888701][ T3915] F2FS-fs (loop0): Found nat_bits in checkpoint [ 230.095152][ T3915] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 230.103391][ T3915] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 230.204946][ T55] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 230.214909][ T55] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 230.305248][ T3931] loop3: detected capacity change from 0 to 1024 [ 230.400546][ T3931] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,,errors=continue. Quota mode: writeback. [ 230.445206][ T3931] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3871: comm syz.3.1179: Allocating blocks 385-513 which overlap fs metadata [ 230.505912][ T3931] EXT4-fs (loop3): pa ffff8881115b37e0: logic 16, phys. 129, len 24 [ 230.514032][ T3931] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 8 [ 230.542247][ T61] uclogic 0003:256C:006D.001E: failed retrieving string descriptor #100: -71 [ 230.725352][ T3942] xt_bpf: check failed: parse error [ 230.818085][ T61] uclogic 0003:256C:006D.001E: failed retrieving pen parameters: -71 [ 230.856651][ T61] uclogic 0003:256C:006D.001E: failed probing pen v1 parameters: -71 [ 230.878408][ T61] uclogic 0003:256C:006D.001E: failed probing parameters: -71 [ 230.888204][ T61] uclogic: probe of 0003:256C:006D.001E failed with error -71 [ 230.903819][ T61] usb 3-1: USB disconnect, device number 19 [ 231.737092][ T3964] xt_bpf: check failed: parse error [ 232.452686][ T554] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 232.646997][ T477] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 232.932643][ T554] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.953579][ T554] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.052515][ T477] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 233.065553][ T477] usb 2-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 233.076522][ T554] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 233.094235][ T554] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 233.120799][ T477] usb 2-1: config 0 has no interface number 0 [ 233.128294][ T554] usb 4-1: Manufacturer: syz [ 233.136335][ T554] usb 4-1: config 0 descriptor?? [ 233.442304][ T477] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 233.451506][ T477] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.472196][ T477] usb 2-1: Product: syz [ 233.476392][ T477] usb 2-1: Manufacturer: syz [ 233.481015][ T477] usb 2-1: SerialNumber: syz [ 233.492939][ T477] usb 2-1: config 0 descriptor?? [ 233.962200][ T39] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 233.972304][ T477] usb 2-1: Found UVC 0.00 device syz (046d:0823) [ 233.978797][ T477] usb 2-1: No valid video chain found. [ 234.102222][ T554] uclogic 0003:256C:006D.001F: failed retrieving string descriptor #200: -71 [ 234.111233][ T554] uclogic 0003:256C:006D.001F: failed retrieving pen parameters: -71 [ 234.119633][ T554] uclogic 0003:256C:006D.001F: failed probing pen v2 parameters: -71 [ 234.128262][ T554] uclogic 0003:256C:006D.001F: failed probing parameters: -71 [ 234.136005][ T554] uclogic: probe of 0003:256C:006D.001F failed with error -71 [ 234.158689][ T554] usb 4-1: USB disconnect, device number 19 [ 234.183656][ T6] usb 2-1: USB disconnect, device number 16 [ 234.204756][ T4001] loop0: detected capacity change from 0 to 256 [ 234.225590][ T4001] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 234.332275][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.343391][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.152346][ T39] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 235.161609][ T39] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 235.169676][ T39] usb 3-1: Manufacturer: syz [ 235.175588][ T39] usb 3-1: config 0 descriptor?? [ 235.853130][ T30] audit: type=1400 audit(1763954339.178:320): avc: denied { create } for pid=4017 comm="syz.1.1207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 236.484315][ T4034] loop0: detected capacity change from 0 to 256 [ 236.493508][ T39] uclogic 0003:256C:006D.0020: interface is invalid, ignoring [ 236.557234][ T4034] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 236.710422][ T426] usb 3-1: USB disconnect, device number 20 [ 236.867697][ T477] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 238.161367][ T4051] xt_bpf: check failed: parse error [ 238.207662][ T4043] loop3: detected capacity change from 0 to 512 [ 238.272283][ T39] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 238.372691][ T477] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 238.445684][ T4043] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (33357!=0) [ 238.455514][ T4043] EXT4-fs (loop3): group descriptors corrupted! [ 238.482292][ T477] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 238.491872][ T477] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 238.500192][ T477] usb 2-1: SerialNumber: syz [ 238.543252][ T477] cdc_acm 2-1:1.0: skipping garbage [ 238.561645][ T477] cdc_acm: probe of 2-1:1.0 failed with error -12 [ 238.662240][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.673197][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.753121][ T6] usb 2-1: USB disconnect, device number 17 [ 238.762228][ T39] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 238.781892][ T39] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 238.801311][ T39] usb 1-1: Manufacturer: syz [ 238.807189][ T39] usb 1-1: config 0 descriptor?? [ 239.967084][ T4067] incfs: Backing dir is not set, filesystem can't be mounted. [ 239.981642][ T4067] incfs: mount failed -2 [ 240.049525][ T30] audit: type=1326 audit(1763954343.618:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4074 comm="syz.3.1227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1c24aa749 code=0x7ffc0000 [ 240.066560][ T1454] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 240.592193][ T1454] usb 3-1: Using ep0 maxpacket: 16 [ 240.722389][ T1454] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.733392][ T1454] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.743302][ T1454] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 240.756163][ T1454] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 240.765273][ T1454] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.777399][ T1454] usb 3-1: config 0 descriptor?? [ 240.942246][ T39] uclogic 0003:256C:006D.0021: failed retrieving string descriptor #100: -71 [ 240.971364][ T39] uclogic 0003:256C:006D.0021: failed retrieving pen parameters: -71 [ 240.981443][ T39] uclogic 0003:256C:006D.0021: failed probing pen v1 parameters: -71 [ 241.001712][ T39] uclogic 0003:256C:006D.0021: failed probing parameters: -71 [ 241.011817][ T39] uclogic: probe of 0003:256C:006D.0021 failed with error -71 [ 241.041720][ T39] usb 1-1: USB disconnect, device number 17 [ 241.228370][ T4095] loop4: detected capacity change from 0 to 512 [ 241.248060][ T4095] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (33357!=0) [ 241.261540][ T4095] EXT4-fs (loop4): group descriptors corrupted! [ 241.275340][ T1454] microsoft 0003:045E:07DA.0022: No inputs registered, leaving [ 241.288352][ T1454] microsoft 0003:045E:07DA.0022: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 241.302920][ T1454] microsoft 0003:045E:07DA.0022: no inputs found [ 241.309360][ T1454] microsoft 0003:045E:07DA.0022: could not initialize ff, continuing anyway [ 241.607603][ T1454] usb 3-1: USB disconnect, device number 21 [ 242.170289][ T30] audit: type=1326 audit(1763954345.748:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4114 comm="syz.4.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4911090749 code=0x7ffc0000 [ 242.213993][ T30] audit: type=1326 audit(1763954345.778:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4114 comm="syz.4.1239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4911090749 code=0x7ffc0000 [ 242.408400][ T4130] loop2: detected capacity change from 0 to 256 [ 242.420281][ T4130] exfat: Bad value for 'uid' [ 242.782167][ T426] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 242.812972][ T4137] loop2: detected capacity change from 0 to 8192 [ 243.042245][ T30] audit: type=1326 audit(1763954346.598:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4143 comm="syz.1.1251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865c2c0749 code=0x7ffc0000 [ 243.454756][ T426] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.466820][ T426] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.552215][ T1454] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 243.552272][ T426] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 243.569004][ T426] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 243.577071][ T426] usb 1-1: Manufacturer: syz [ 243.582718][ T426] usb 1-1: config 0 descriptor?? [ 243.752278][ T39] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 243.922241][ T1454] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 243.942368][ T1454] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.952328][ T1454] usb 2-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 243.961376][ T1454] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.985070][ T1454] usb 2-1: config 0 descriptor?? [ 244.142562][ T39] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 244.163044][ T4158] device veth0_vlan left promiscuous mode [ 244.170724][ T4158] device veth0_vlan entered promiscuous mode [ 244.187737][ T4158] device veth1_macvtap left promiscuous mode [ 244.201336][ T4158] device veth1_macvtap entered promiscuous mode [ 244.224245][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 244.231852][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 244.242886][ T39] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 244.252443][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 244.252947][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 244.260545][ T39] usb 5-1: SerialNumber: syz [ 244.268779][ T346] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.280281][ T346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.288128][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 244.296599][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 244.305248][ T346] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.312330][ T346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.320451][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 244.322732][ T39] cdc_acm 5-1:1.0: skipping garbage [ 244.329041][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 244.334279][ T39] cdc_acm: probe of 5-1:1.0 failed with error -12 [ 244.350462][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 244.369081][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 244.377531][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 244.386027][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 244.394378][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 244.402874][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 244.411045][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 244.419538][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 244.428322][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 244.436925][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 244.445619][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 244.452561][ T1454] hid (null): bogus close delimiter [ 244.454428][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 244.464461][ T1454] itetech 0003:06CB:73F4.0024: bogus close delimiter [ 244.467451][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 244.481776][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 244.482187][ T1454] itetech 0003:06CB:73F4.0024: item 0 0 2 10 parsing failed [ 244.498738][ T1454] itetech: probe of 0003:06CB:73F4.0024 failed with error -22 [ 244.502753][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 244.522353][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 244.541260][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 244.556449][ T2152] usb 5-1: USB disconnect, device number 22 [ 244.563053][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 244.571320][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 244.581900][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 244.590161][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 244.597800][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 244.606395][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 244.615454][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 244.623600][ T346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 244.667649][ T554] usb 2-1: USB disconnect, device number 18 [ 244.742277][ T426] uclogic 0003:256C:006D.0023: failed retrieving string descriptor #100: -71 [ 244.751218][ T426] uclogic 0003:256C:006D.0023: failed retrieving pen parameters: -71 [ 244.759646][ T426] uclogic 0003:256C:006D.0023: failed probing pen v1 parameters: -71 [ 244.768009][ T426] uclogic 0003:256C:006D.0023: failed probing parameters: -71 [ 244.775729][ T426] uclogic: probe of 0003:256C:006D.0023 failed with error -71 [ 244.787626][ T426] usb 1-1: USB disconnect, device number 18 [ 245.176739][ T4168] loop2: detected capacity change from 0 to 8192 [ 245.370711][ T4173] xt_bpf: check failed: parse error [ 246.316890][ T4199] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 246.324188][ T4199] IPv6: NLM_F_CREATE should be set when creating new route [ 246.375212][ T4199] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.382477][ T4199] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.941427][ T4216] loop1: detected capacity change from 0 to 1024 [ 246.993137][ T4216] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,,errors=continue. Quota mode: writeback. [ 247.073307][ T4216] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3871: comm syz.1.1278: Allocating blocks 385-513 which overlap fs metadata [ 247.095843][ T4216] EXT4-fs (loop1): pa ffff88811169b540: logic 16, phys. 129, len 24 [ 247.103931][ T4216] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 8 [ 247.186803][ T4237] loop2: detected capacity change from 0 to 256 [ 247.227335][ T4237] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 247.528891][ T4240] loop0: detected capacity change from 0 to 512 [ 247.647492][ T4240] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (33357!=0) [ 247.757211][ T4240] EXT4-fs (loop0): group descriptors corrupted! [ 248.218379][ T4244] loop4: detected capacity change from 0 to 512 [ 248.237572][ T4244] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (33357!=0) [ 248.251564][ T4244] EXT4-fs (loop4): group descriptors corrupted! [ 248.412006][ T30] audit: type=1326 audit(1763954351.988:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4250 comm="syz.2.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdee6b88749 code=0x7ffc0000 [ 248.435598][ T554] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 248.445160][ T30] audit: type=1326 audit(1763954352.018:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4250 comm="syz.2.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdee6b88749 code=0x7ffc0000 [ 248.512177][ T426] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 248.762199][ T6] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 248.842620][ T554] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 248.856445][ T554] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 248.926440][ T554] usb 4-1: config 0 has no interface number 0 [ 249.059342][ T426] usb 2-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 32 [ 249.103193][ T554] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 249.124853][ T554] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.153355][ T426] usb 2-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 249.158058][ T554] usb 4-1: Product: syz [ 249.201314][ T554] usb 4-1: Manufacturer: syz [ 249.221415][ T554] usb 4-1: SerialNumber: syz [ 249.276282][ T554] usb 4-1: config 0 descriptor?? [ 249.422260][ T6] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 249.430769][ T426] usb 2-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 249.439877][ T6] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 249.450180][ T426] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.458247][ T426] usb 2-1: Product: syz [ 249.462607][ T6] usb 3-1: config 0 has no interface number 0 [ 249.468760][ T426] usb 2-1: Manufacturer: syz [ 249.473543][ T426] usb 2-1: SerialNumber: syz [ 249.542990][ T4241] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 249.562678][ T426] usblp0: Disabling reads from problematic bidirectional printer [ 249.598800][ T4275] loop4: detected capacity change from 0 to 256 [ 249.622322][ T6] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 249.631667][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.640116][ T6] usb 3-1: Product: syz [ 249.648366][ T6] usb 3-1: Manufacturer: syz [ 249.653125][ T6] usb 3-1: SerialNumber: syz [ 249.658584][ T6] usb 3-1: config 0 descriptor?? [ 249.667393][ T4275] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 250.355677][ T554] usb 4-1: Found UVC 0.00 device syz (046d:0823) [ 250.364750][ T554] usb 4-1: No valid video chain found. [ 250.365997][ T426] usblp 2-1:4.0: usblp0: USB Unidirectional printer dev 19 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 250.532292][ T6] usb 3-1: Found UVC 0.00 device syz (046d:0823) [ 250.540065][ T6] usb 3-1: No valid video chain found. [ 250.549963][ T30] audit: type=1400 audit(1763954354.128:327): avc: denied { read write } for pid=4238 comm="syz.1.1286" name="lp0" dev="devtmpfs" ino=1121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 250.575807][ T30] audit: type=1400 audit(1763954354.158:328): avc: denied { open } for pid=4238 comm="syz.1.1286" path="/dev/usb/lp0" dev="devtmpfs" ino=1121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 250.600121][ C0] usblp0: nonzero write bulk status received: -71 [ 250.613863][ T2152] usb 4-1: USB disconnect, device number 20 [ 250.620066][ T426] usb 2-1: USB disconnect, device number 19 [ 250.635032][ T426] usblp0: removed [ 250.732926][ T566] usb 3-1: USB disconnect, device number 22 [ 251.041264][ T30] audit: type=1326 audit(1763954354.618:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4286 comm="syz.4.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4911090749 code=0x7ffc0000 [ 251.065036][ T30] audit: type=1326 audit(1763954354.618:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4286 comm="syz.4.1303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4911090749 code=0x7ffc0000 [ 251.523684][ T4302] xt_bpf: check failed: parse error [ 251.569171][ T566] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 251.822158][ T566] usb 1-1: Using ep0 maxpacket: 16 [ 251.934452][ T4308] xt_bpf: check failed: parse error [ 253.114958][ T4317] loop4: detected capacity change from 0 to 256 [ 253.142310][ T566] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.162164][ T566] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.190183][ T30] audit: type=1326 audit(1763954356.768:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4318 comm="syz.2.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdee6b88749 code=0x7ffc0000 [ 253.216768][ T4317] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 253.229837][ T566] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 253.252976][ T566] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 253.272292][ T30] audit: type=1326 audit(1763954356.798:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4318 comm="syz.2.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdee6b88749 code=0x7ffc0000 [ 253.276703][ T566] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.342712][ T4321] loop1: detected capacity change from 0 to 8192 [ 253.353408][ T566] usb 1-1: config 0 descriptor?? [ 254.115258][ T4315] loop3: detected capacity change from 0 to 40427 [ 254.142617][ T4315] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 254.150400][ T4315] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 254.180233][ T4315] F2FS-fs (loop3): invalid crc value [ 254.272699][ T4315] F2FS-fs (loop3): Found nat_bits in checkpoint [ 254.389647][ T4315] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 254.400509][ T4334] device veth0_vlan left promiscuous mode [ 254.409457][ T566] microsoft 0003:045E:07DA.0025: No inputs registered, leaving [ 254.417307][ T4315] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 254.425521][ T566] microsoft 0003:045E:07DA.0025: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 254.452183][ T566] microsoft 0003:045E:07DA.0025: no inputs found [ 254.454631][ T4334] device veth0_vlan entered promiscuous mode [ 254.458589][ T566] microsoft 0003:045E:07DA.0025: could not initialize ff, continuing anyway [ 254.484495][ T4315] attempt to access beyond end of device [ 254.484495][ T4315] loop3: rw=2049, want=77960, limit=40427 [ 254.513399][ T4334] device veth1_macvtap left promiscuous mode [ 254.520291][ T4334] device veth1_macvtap entered promiscuous mode [ 254.537014][ T55] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 254.546105][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 254.556277][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 254.567033][ T55] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 254.585183][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 254.600136][ T2443] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.607340][ T2443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.642619][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 254.654388][ T566] usb 1-1: USB disconnect, device number 19 [ 254.661579][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 254.676711][ T2443] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.683843][ T2443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.691893][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 254.700508][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 254.708940][ T554] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 254.717007][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 254.726007][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 254.734469][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 254.743097][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 254.751384][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 254.760002][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 254.768694][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 254.777383][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 254.792684][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 254.801316][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 254.816925][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 254.835491][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 254.852813][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 254.867579][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 254.878204][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 254.886840][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 254.897371][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 254.906157][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 254.916464][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 254.929984][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 254.939160][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 254.947110][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 254.957608][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 254.966423][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 254.983001][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 255.132301][ T554] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.143414][ T554] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.222248][ T566] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 255.286862][ T30] audit: type=1326 audit(1763954358.868:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4357 comm="syz.2.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdee6b88749 code=0x7ffc0000 [ 255.332240][ T554] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 255.341434][ T554] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 255.342578][ T30] audit: type=1326 audit(1763954358.868:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4357 comm="syz.2.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdee6b88749 code=0x7ffc0000 [ 255.349630][ T554] usb 5-1: Manufacturer: syz [ 255.402889][ T554] usb 5-1: config 0 descriptor?? [ 255.497034][ T4360] loop2: detected capacity change from 0 to 40427 [ 255.512296][ T4360] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 255.527587][ T4360] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 255.537451][ T4360] F2FS-fs (loop2): invalid crc value [ 255.548329][ T4360] F2FS-fs (loop2): Found nat_bits in checkpoint [ 255.582234][ T566] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.593488][ T566] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.605098][ T4360] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 255.612386][ T4360] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 255.677558][ T2443] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 255.686630][ T566] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 255.688065][ T2443] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 255.696455][ T566] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 255.713261][ T566] usb 4-1: Manufacturer: syz [ 255.718656][ T566] usb 4-1: config 0 descriptor?? [ 255.863506][ T4368] loop2: detected capacity change from 0 to 8192 [ 256.742322][ T554] uclogic 0003:256C:006D.0026: interface is invalid, ignoring [ 257.004436][ T554] usb 5-1: USB disconnect, device number 23 [ 257.113368][ T4391] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 257.120621][ T4391] IPv6: NLM_F_CREATE should be set when creating new route [ 257.482241][ T566] uclogic 0003:256C:006D.0027: v1 buttonpad probing failed: -71 [ 257.490003][ T566] uclogic 0003:256C:006D.0027: failed probing parameters: -71 [ 257.512165][ T566] uclogic: probe of 0003:256C:006D.0027 failed with error -71 [ 257.530679][ T566] usb 4-1: USB disconnect, device number 21 [ 257.824183][ T4405] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1340'. [ 259.021938][ T4409] loop3: detected capacity change from 0 to 1024 [ 259.133710][ T4409] EXT4-fs (loop3): Ignoring removed bh option [ 259.172261][ T4409] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 259.352728][ T4409] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,data_err=abort,noinit_itable,dioread_lock,errors=remount-ro,minixdf,data_err=ignore,grpquota,journal_dev=0x0000000000000009,delalloc,bh,dioread_nolock,. Quota mode: writeback. [ 259.515395][ T4422] loop2: detected capacity change from 0 to 1024 [ 259.524108][ T4409] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3871: comm syz.3.1342: Allocating blocks 481-513 which overlap fs metadata [ 259.578748][ T4409] EXT4-fs (loop3): Remounting filesystem read-only [ 259.595870][ T4408] EXT4-fs (loop3): pa ffff8881115b3690: logic 16, phys. 113, len 25 [ 259.603955][ T4408] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 2 [ 259.652807][ T4408] EXT4-fs (loop3): Remounting filesystem read-only [ 259.660204][ T4422] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,,errors=continue. Quota mode: writeback. [ 259.716116][ T4422] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3871: comm syz.2.1347: Allocating blocks 385-513 which overlap fs metadata [ 259.752698][ T4422] EXT4-fs (loop2): pa ffff8881115b3150: logic 16, phys. 129, len 24 [ 259.760772][ T4422] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 8 [ 260.089815][ T4444] xt_bpf: check failed: parse error [ 260.215636][ T4445] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1352'. [ 260.333227][ T4438] loop2: detected capacity change from 0 to 40427 [ 260.343701][ T4438] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 260.352164][ T4438] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 260.362423][ T4438] F2FS-fs (loop2): invalid crc value [ 260.378509][ T4438] F2FS-fs (loop2): Found nat_bits in checkpoint [ 260.419386][ T4438] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 260.426597][ T4438] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 260.479920][ T45] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 260.490410][ T45] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 262.580743][ T4456] device veth0_vlan left promiscuous mode [ 262.586817][ T4456] device veth0_vlan entered promiscuous mode [ 262.594120][ T4456] device veth1_macvtap left promiscuous mode [ 262.600889][ T4456] device veth1_macvtap entered promiscuous mode [ 262.615255][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 262.647411][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 262.684909][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 262.693385][ T2443] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.697780][ T4462] loop1: detected capacity change from 0 to 1024 [ 262.700480][ T2443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.715542][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 262.725283][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 262.734730][ T2443] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.741808][ T2443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.746628][ T4470] loop3: detected capacity change from 0 to 1024 [ 262.756109][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 262.770293][ T4462] EXT4-fs (loop1): Ignoring removed bh option [ 262.783142][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 262.792051][ T4462] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 262.804999][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 262.813749][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 262.822213][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 262.830524][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 262.838971][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 262.847330][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 262.855704][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 262.864562][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 262.872980][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 262.881917][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 262.890571][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 262.896304][ T4470] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrquota,,errors=continue. Quota mode: writeback. [ 262.899412][ T4462] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,data_err=abort,noinit_itable,dioread_lock,errors=remount-ro,minixdf,data_err=ignore,grpquota,journal_dev=0x0000000000000009,delalloc,bh,dioread_nolock,. Quota mode: writeback. [ 262.933230][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 263.069538][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 263.078353][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 263.086763][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 263.096406][ T4470] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3871: comm syz.3.1363: Allocating blocks 385-513 which overlap fs metadata [ 263.118399][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 263.136722][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 263.145248][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 263.153524][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 263.161580][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 263.169319][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 263.177336][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 263.185662][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 263.193996][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 263.201770][ T2443] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 263.242024][ T6] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 263.251492][ T4480] EXT4-fs (loop3): pa ffff8881115b3e70: logic 16, phys. 129, len 24 [ 263.259620][ T4480] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 8 [ 263.588470][ T4484] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3871: comm syz.1.1362: Allocating blocks 481-513 which overlap fs metadata [ 263.604604][ T4484] EXT4-fs (loop1): Remounting filesystem read-only [ 264.177977][ T4461] EXT4-fs (loop1): pa ffff8881115b3f18: logic 16, phys. 113, len 25 [ 264.186058][ T4461] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 2 [ 264.200209][ T4461] EXT4-fs (loop1): Remounting filesystem read-only [ 264.573207][ T4500] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1367'. [ 264.692321][ T6] usb 1-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 32 [ 264.712260][ T6] usb 1-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 264.742154][ T61] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 264.750840][ T4502] loop1: detected capacity change from 0 to 8192 [ 264.902233][ T6] usb 1-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 264.911324][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.919385][ T6] usb 1-1: Product: syz [ 264.932602][ T6] usb 1-1: Manufacturer: syz [ 264.937514][ T6] usb 1-1: SerialNumber: syz [ 265.018175][ T4471] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 265.042707][ T6] usblp0: Disabling reads from problematic bidirectional printer [ 265.137242][ T4508] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1371'. [ 265.172815][ T61] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.205322][ T61] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.362931][ T61] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 265.399476][ T61] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 265.473928][ T61] usb 4-1: Manufacturer: syz [ 265.586332][ T61] usb 4-1: config 0 descriptor?? [ 266.176759][ T6] usblp 1-1:4.0: usblp0: USB Unidirectional printer dev 20 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 266.188682][ T6] usb 1-1: USB disconnect, device number 20 [ 266.202538][ T6] usblp0: removed [ 267.092483][ T61] uclogic 0003:256C:006D.0028: failed retrieving string descriptor #100: -71 [ 267.101888][ T61] uclogic 0003:256C:006D.0028: failed retrieving pen parameters: -71 [ 267.112360][ T61] uclogic 0003:256C:006D.0028: failed probing pen v1 parameters: -71 [ 267.120989][ T61] uclogic 0003:256C:006D.0028: failed probing parameters: -71 [ 267.130813][ T61] uclogic: probe of 0003:256C:006D.0028 failed with error -71 [ 267.155332][ T61] usb 4-1: USB disconnect, device number 22 [ 267.532158][ T30] audit: type=1326 audit(1763954371.108:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4531 comm="syz.4.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4911090749 code=0x7ffc0000 [ 267.560967][ T30] audit: type=1326 audit(1763954371.118:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4531 comm="syz.4.1380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4911090749 code=0x7ffc0000 [ 267.642876][ T4536] loop0: detected capacity change from 0 to 256 [ 267.681880][ T4536] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 267.973067][ T554] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 268.760302][ T4555] loop3: detected capacity change from 0 to 2048 [ 268.803077][ T335] loop3: p1 < > p4 [ 268.808195][ T335] loop3: p4 size 8388608 extends beyond EOD, truncated [ 268.831411][ T4555] loop3: p1 < > p4 [ 268.836503][ T4555] loop3: p4 size 8388608 extends beyond EOD, truncated [ 268.845719][ T30] audit: type=1326 audit(1763954372.428:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4558 comm="syz.0.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9691369749 code=0x7ffc0000 [ 268.909707][ T3670] udevd[3670]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 268.909723][ T335] udevd[335]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 268.947024][ T335] udevd[335]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 268.958343][ T3670] udevd[3670]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 269.032481][ T554] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 269.062335][ T4569] xt_bpf: check failed: parse error [ 269.116487][ T554] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.169596][ T554] usb 5-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 269.264670][ T554] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.339899][ T554] usb 5-1: config 0 descriptor?? [ 269.592221][ T426] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 269.677954][ T4578] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1397'. [ 270.223864][ T554] hid (null): bogus close delimiter [ 270.305622][ T554] itetech 0003:06CB:73F4.0029: bogus close delimiter [ 270.452999][ T554] itetech 0003:06CB:73F4.0029: item 0 0 2 10 parsing failed [ 270.492047][ T554] itetech: probe of 0003:06CB:73F4.0029 failed with error -22 [ 270.511488][ T554] usb 5-1: USB disconnect, device number 24 [ 270.862255][ T61] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 270.921499][ T4585] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 270.928775][ T4585] IPv6: NLM_F_CREATE should be set when creating new route [ 270.973896][ T4585] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.981117][ T4585] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.252349][ T426] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.263621][ T426] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 271.272774][ T426] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.281781][ T426] usb 3-1: config 0 descriptor?? [ 271.282271][ T61] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 271.298167][ T61] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.308731][ T61] usb 4-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 271.319113][ T61] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.331058][ T61] usb 4-1: config 0 descriptor?? [ 271.358235][ T4592] xt_bpf: check failed: parse error [ 271.546836][ T2152] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 271.792239][ T2152] usb 1-1: Using ep0 maxpacket: 32 [ 271.812840][ T426] keytouch 0003:0926:3333.002A: fixing up Keytouch IEC report descriptor [ 271.822711][ T426] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.002A/input/input15 [ 271.842458][ T61] hid (null): bogus close delimiter [ 271.848716][ T61] itetech 0003:06CB:73F4.002B: bogus close delimiter [ 271.855631][ T61] itetech 0003:06CB:73F4.002B: item 0 0 2 10 parsing failed [ 271.863298][ T61] itetech: probe of 0003:06CB:73F4.002B failed with error -22 [ 271.905086][ T426] keytouch 0003:0926:3333.002A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 271.917409][ T2152] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.929964][ T2152] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.049423][ T426] usb 4-1: USB disconnect, device number 23 [ 272.055787][ T2152] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 272.065970][ T2152] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 272.075911][ T2152] usb 1-1: Product: syz [ 272.080116][ T2152] usb 1-1: Manufacturer: syz [ 272.129773][ T30] audit: type=1326 audit(1763954375.708:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4596 comm="syz.4.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4911090749 code=0x7ffc0000 [ 272.133548][ T2152] hub 1-1:4.0: USB hub found [ 272.159037][ T30] audit: type=1326 audit(1763954375.708:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4596 comm="syz.4.1403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4911090749 code=0x7ffc0000 [ 272.294362][ T4600] overlayfs: failed to resolve './bus': -2 [ 272.362267][ T2152] hub 1-1:4.0: 2 ports detected [ 272.582718][ T2152] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 272.589179][ T2152] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 272.591402][ T4606] loop1: detected capacity change from 0 to 1024 [ 272.614923][ T4606] EXT4-fs (loop1): Ignoring removed bh option [ 272.621144][ T4606] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 272.623342][ T2152] usb 1-1: USB disconnect, device number 21 [ 272.654210][ T4606] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,data_err=abort,noinit_itable,dioread_lock,errors=remount-ro,minixdf,data_err=ignore,grpquota,journal_dev=0x0000000000000009,delalloc,bh,dioread_nolock,. Quota mode: writeback. [ 272.657114][ T6] usb 3-1: USB disconnect, device number 23 [ 272.720463][ T4606] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3871: comm syz.1.1407: Allocating blocks 481-513 which overlap fs metadata [ 272.734882][ T4606] EXT4-fs (loop1): Remounting filesystem read-only [ 272.742251][ T4605] EXT4-fs (loop1): pa ffff88811169b498: logic 16, phys. 113, len 25 [ 272.750324][ T4605] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 2 [ 272.760639][ T4605] EXT4-fs (loop1): Remounting filesystem read-only [ 273.082270][ T426] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 273.462712][ T426] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 273.582442][ T426] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 273.592038][ T426] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 273.600268][ T426] usb 2-1: SerialNumber: syz [ 273.673670][ T4634] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1416'. [ 273.957987][ T426] cdc_acm 2-1:1.0: skipping garbage [ 274.981397][ T4644] loop1: detected capacity change from 0 to 256 [ 275.034900][ T426] cdc_acm: probe of 2-1:1.0 failed with error -12 [ 275.042927][ T426] usb 2-1: USB disconnect, device number 20 [ 275.095004][ T4644] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 275.122417][ T4644] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 275.132738][ T4644] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 275.178337][ T30] audit: type=1400 audit(1763954378.758:340): avc: denied { write } for pid=4643 comm="syz.1.1420" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 275.201078][ T30] audit: type=1400 audit(1763954378.758:341): avc: denied { add_name } for pid=4643 comm="syz.1.1420" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 275.222058][ T30] audit: type=1400 audit(1763954378.758:342): avc: denied { associate } for pid=4643 comm="syz.1.1420" name="bus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 275.296195][ T4655] xt_bpf: check failed: parse error [ 275.672232][ T6] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 275.892565][ T566] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 276.034283][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.046094][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.193924][ T4665] xt_bpf: check failed: parse error [ 276.357686][ T6] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 276.366820][ T6] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 276.374880][ T6] usb 1-1: Manufacturer: syz [ 276.380594][ T6] usb 1-1: config 0 descriptor?? [ 276.502301][ T566] usb 5-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 32 [ 276.512438][ T566] usb 5-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 276.571149][ T4669] loop3: detected capacity change from 0 to 1024 [ 276.616078][ T4669] EXT4-fs (loop3): Ignoring removed bh option [ 276.622485][ T4669] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 276.643835][ T4669] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,data_err=abort,noinit_itable,dioread_lock,errors=remount-ro,minixdf,data_err=ignore,grpquota,journal_dev=0x0000000000000009,delalloc,bh,dioread_nolock,. Quota mode: writeback. [ 276.682259][ T566] usb 5-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 276.683619][ T4669] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3871: comm syz.3.1429: Allocating blocks 481-513 which overlap fs metadata [ 276.693277][ T566] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.705996][ T4669] EXT4-fs (loop3): Remounting filesystem read-only [ 276.714816][ T566] usb 5-1: Product: syz [ 276.724804][ T566] usb 5-1: Manufacturer: syz [ 276.729731][ T4668] EXT4-fs (loop3): pa ffff8881115b3540: logic 16, phys. 113, len 25 [ 276.730765][ T566] usb 5-1: SerialNumber: syz [ 276.737819][ T4668] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 2 [ 276.738073][ T4668] EXT4-fs (loop3): Remounting filesystem read-only [ 276.762488][ T4658] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 276.782633][ T566] usblp0: Disabling reads from problematic bidirectional printer [ 277.823549][ T30] audit: type=1400 audit(1763954380.798:343): avc: denied { read write } for pid=4674 comm="syz.3.1431" name="vhost-vsock" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 277.849944][ T30] audit: type=1400 audit(1763954380.798:344): avc: denied { open } for pid=4674 comm="syz.3.1431" path="/dev/vhost-vsock" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 277.875336][ T566] usblp 5-1:4.0: usblp0: USB Unidirectional printer dev 25 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 277.982677][ T4684] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1433'. [ 277.993960][ T61] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 278.102250][ T6] uclogic 0003:256C:006D.002C: interface is invalid, ignoring [ 278.112683][ T554] usb 5-1: USB disconnect, device number 25 [ 278.121065][ T554] usblp0: removed [ 278.123386][ T4692] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1435'. [ 278.292178][ T426] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 278.309239][ T6] usb 1-1: USB disconnect, device number 22 [ 278.382289][ T61] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.392218][ T61] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 278.405098][ T61] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 278.414190][ T61] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.422989][ T61] usb 2-1: config 0 descriptor?? [ 278.662413][ T426] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 278.673819][ T426] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.683823][ T426] usb 4-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 278.734432][ T426] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.767530][ T4696] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 278.783151][ T4696] IPv6: NLM_F_CREATE should be set when creating new route [ 278.964819][ T61] kovaplus 0003:1E7D:2D50.002D: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.1-1/input0 [ 279.014709][ T426] usb 4-1: config 0 descriptor?? [ 279.186271][ T4705] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1439'. [ 280.218767][ T426] hid (null): bogus close delimiter [ 280.229878][ T426] itetech 0003:06CB:73F4.002E: bogus close delimiter [ 280.236684][ T426] itetech 0003:06CB:73F4.002E: item 0 0 2 10 parsing failed [ 280.238846][ T4711] loop2: detected capacity change from 0 to 1024 [ 280.244692][ T426] itetech: probe of 0003:06CB:73F4.002E failed with error -22 [ 280.306763][ T4711] EXT4-fs (loop2): Ignoring removed bh option [ 280.313025][ T4711] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 280.334304][ T4711] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,data_err=abort,noinit_itable,dioread_lock,errors=remount-ro,minixdf,data_err=ignore,grpquota,journal_dev=0x0000000000000009,delalloc,bh,dioread_nolock,. Quota mode: writeback. [ 280.374815][ T4711] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3871: comm syz.2.1442: Allocating blocks 481-513 which overlap fs metadata [ 280.389027][ T4711] EXT4-fs (loop2): Remounting filesystem read-only [ 280.396560][ T4710] EXT4-fs (loop2): pa ffff88811169b540: logic 16, phys. 113, len 25 [ 280.404640][ T4710] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 2 [ 280.415053][ T4710] EXT4-fs (loop2): Remounting filesystem read-only [ 280.423420][ T426] usb 4-1: USB disconnect, device number 24 [ 280.484965][ T4719] loop2: detected capacity change from 0 to 256 [ 280.505523][ T4719] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 280.570399][ T61] kovaplus 0003:1E7D:2D50.002D: couldn't init struct kovaplus_device [ 280.601885][ T61] kovaplus 0003:1E7D:2D50.002D: couldn't install mouse [ 280.609920][ T61] kovaplus: probe of 0003:1E7D:2D50.002D failed with error -71 [ 280.618764][ T61] usb 2-1: USB disconnect, device number 21 [ 280.637637][ T4720] fido_id[4720]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 281.923935][ T4732] hub 9-0:1.0: USB hub found [ 281.929167][ T4732] hub 9-0:1.0: 1 port detected [ 282.186361][ T477] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 282.214677][ T4738] loop2: detected capacity change from 0 to 1024 [ 282.254435][ T4738] EXT4-fs (loop2): Ignoring removed bh option [ 282.260918][ T4738] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 282.294160][ T4738] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,data_err=abort,noinit_itable,dioread_lock,errors=remount-ro,minixdf,data_err=ignore,grpquota,journal_dev=0x0000000000000009,delalloc,bh,dioread_nolock,. Quota mode: writeback. [ 282.330055][ T4738] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3871: comm syz.2.1451: Allocating blocks 481-513 which overlap fs metadata [ 282.410235][ T4738] EXT4-fs (loop2): Remounting filesystem read-only [ 282.451830][ T4737] EXT4-fs (loop2): pa ffff88811169bd20: logic 16, phys. 113, len 25 [ 282.460040][ T4737] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 2 [ 282.470707][ T477] usb 5-1: Using ep0 maxpacket: 32 [ 282.497579][ T4737] EXT4-fs (loop2): Remounting filesystem read-only [ 282.672371][ T477] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.738754][ T477] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.846029][ T4757] loop2: detected capacity change from 0 to 8192 [ 282.872301][ T477] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 282.884010][ T477] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 282.894029][ T477] usb 5-1: Product: syz [ 282.898372][ T477] usb 5-1: Manufacturer: syz [ 282.952810][ T477] hub 5-1:4.0: USB hub found [ 283.052198][ T39] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 283.172240][ T477] hub 5-1:4.0: 2 ports detected [ 283.311203][ T4764] loop2: detected capacity change from 0 to 40427 [ 283.326208][ T4764] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 283.339424][ T4764] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 283.355313][ T4764] F2FS-fs (loop2): invalid crc value [ 283.366819][ T4764] F2FS-fs (loop2): Found nat_bits in checkpoint [ 283.382317][ T477] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 283.390879][ T477] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 283.417332][ T4764] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 283.424516][ T4764] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 283.432721][ T477] usb 5-1: USB disconnect, device number 26 [ 283.472338][ T39] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 283.523663][ T4773] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 283.531020][ T4773] IPv6: NLM_F_CREATE should be set when creating new route [ 283.622353][ T39] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 283.638726][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 283.647777][ T39] usb 4-1: SerialNumber: syz [ 283.765068][ T4764] attempt to access beyond end of device [ 283.765068][ T4764] loop2: rw=2049, want=77960, limit=40427 [ 283.785190][ T39] cdc_acm 4-1:1.0: skipping garbage [ 283.791119][ T39] cdc_acm: probe of 4-1:1.0 failed with error -12 [ 283.793997][ T2443] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 283.807090][ T2443] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 283.961334][ T6] usb 4-1: USB disconnect, device number 25 [ 284.135023][ T4782] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1461'. [ 285.524515][ T4793] hub 9-0:1.0: USB hub found [ 285.529680][ T4793] hub 9-0:1.0: 1 port detected [ 285.754454][ T4797] loop1: detected capacity change from 0 to 1024 [ 285.803933][ T4797] EXT4-fs (loop1): Ignoring removed bh option [ 285.816472][ T4797] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 285.833781][ T4797] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,data_err=abort,noinit_itable,dioread_lock,errors=remount-ro,minixdf,data_err=ignore,grpquota,journal_dev=0x0000000000000009,delalloc,bh,dioread_nolock,. Quota mode: writeback. [ 285.920886][ T39] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 285.947208][ T4809] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.962036][ T4809] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.482264][ T39] usb 3-1: Using ep0 maxpacket: 16 [ 286.615741][ T4814] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3871: comm syz.1.1468: Allocating blocks 481-513 which overlap fs metadata [ 287.651958][ T4814] EXT4-fs (loop1): Remounting filesystem read-only [ 287.658954][ T4814] EXT4-fs (loop1): pa ffff8881115b30a8: logic 16, phys. 113, len 25 [ 287.667061][ T4814] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 2 [ 287.677981][ T4814] EXT4-fs (loop1): Remounting filesystem read-only [ 287.698288][ T4816] xt_bpf: check failed: parse error [ 287.752275][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.779632][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.803025][ T39] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 287.826246][ T39] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 287.842196][ T6] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 287.861125][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.946185][ T39] usb 3-1: config 0 descriptor?? [ 287.960577][ T30] audit: type=1326 audit(1763954391.538:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4824 comm="syz.4.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4911090749 code=0x7ffc0000 [ 288.392137][ T4820] loop3: detected capacity change from 0 to 40427 [ 288.444658][ T39] microsoft 0003:045E:07DA.002F: No inputs registered, leaving [ 288.453139][ T39] microsoft 0003:045E:07DA.002F: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 288.464728][ T61] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 288.472678][ T4820] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 288.480694][ T39] microsoft 0003:045E:07DA.002F: no inputs found [ 288.487202][ T4820] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 288.495565][ T39] microsoft 0003:045E:07DA.002F: could not initialize ff, continuing anyway [ 288.496730][ T4820] F2FS-fs (loop3): invalid crc value [ 288.511929][ T4820] F2FS-fs (loop3): Found nat_bits in checkpoint [ 288.522257][ T6] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 288.542171][ T6] usb 1-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 288.552807][ T6] usb 1-1: config 0 has no interface number 0 [ 288.560988][ T4820] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 288.568086][ T4820] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 288.593571][ T8] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 288.602945][ T8] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 288.650417][ T39] usb 3-1: USB disconnect, device number 24 [ 288.742822][ T6] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 288.754611][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.762939][ T6] usb 1-1: Product: syz [ 288.767132][ T6] usb 1-1: Manufacturer: syz [ 288.771748][ T6] usb 1-1: SerialNumber: syz [ 288.781704][ T6] usb 1-1: config 0 descriptor?? [ 288.860967][ T4842] xt_bpf: check failed: parse error [ 288.982644][ T61] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 289.029328][ T61] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.077394][ T61] usb 5-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 289.147593][ T61] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.156781][ T61] usb 5-1: config 0 descriptor?? [ 289.926469][ T4854] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.933771][ T4854] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.402436][ T61] hid (null): bogus close delimiter [ 290.422315][ T6] usb 1-1: Found UVC 0.00 device syz (046d:0823) [ 290.428720][ T6] usb 1-1: No valid video chain found. [ 290.460729][ T61] itetech 0003:06CB:73F4.0030: bogus close delimiter [ 290.473590][ T6] usb 1-1: USB disconnect, device number 23 [ 290.480859][ T61] itetech 0003:06CB:73F4.0030: item 0 0 2 10 parsing failed [ 290.488949][ T61] itetech: probe of 0003:06CB:73F4.0030 failed with error -22 [ 290.557364][ T4873] loop2: detected capacity change from 0 to 8192 [ 290.557375][ T4868] 9pnet: Insufficient options for proto=fd [ 290.557658][ T4868] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1743798023 (111603073472 ns) > initial count (47791692416 ns). Using initial count to start timer. [ 290.595831][ T4868] kvm: pic: non byte write [ 290.609182][ T61] usb 5-1: USB disconnect, device number 27 [ 290.663317][ T30] audit: type=1326 audit(1763954394.238:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4875 comm="syz.0.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9691369749 code=0x7ffc0000 [ 290.717092][ T30] audit: type=1326 audit(1763954394.238:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4875 comm="syz.0.1492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9691369749 code=0x7ffc0000 [ 290.803485][ T4884] loop3: detected capacity change from 0 to 1024 [ 290.830299][ T4884] EXT4-fs (loop3): Ignoring removed nobh option [ 290.846266][ T4884] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #11: comm syz.3.1493: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 290.865085][ T4884] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.1493: couldn't read orphan inode 11 (err -117) [ 290.878452][ T4884] EXT4-fs (loop3): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 291.282240][ T6] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 291.691573][ T4904] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.698850][ T4904] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.788424][ T4913] loop3: detected capacity change from 0 to 512 [ 291.832183][ T6] usb 1-1: Using ep0 maxpacket: 32 [ 291.844783][ T4913] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (33357!=0) [ 291.855506][ T4913] EXT4-fs (loop3): group descriptors corrupted! [ 292.246013][ T6] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.267289][ T6] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.332207][ T426] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 292.402435][ T6] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 292.411592][ T6] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 292.420027][ T6] usb 1-1: Product: syz [ 292.424350][ T6] usb 1-1: Manufacturer: syz [ 292.462989][ T6] hub 1-1:4.0: USB hub found [ 292.552147][ T566] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 292.612307][ T477] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 292.712828][ T426] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 292.724301][ T426] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.734339][ T426] usb 5-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 292.985967][ T6] hub 1-1:4.0: config failed, can't read hub descriptor (err -22) [ 292.993946][ T426] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.012823][ T426] usb 5-1: config 0 descriptor?? [ 293.032382][ T477] usb 4-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 32 [ 293.032627][ T6] usb 1-1: USB disconnect, device number 24 [ 293.042427][ T477] usb 4-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 293.162255][ T566] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.173454][ T566] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.262255][ T566] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 293.271620][ T566] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 293.279885][ T566] usb 2-1: Manufacturer: syz [ 293.282307][ T477] usb 4-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 293.290209][ T566] usb 2-1: config 0 descriptor?? [ 293.297823][ T477] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.311830][ T477] usb 4-1: Product: syz [ 293.316132][ T477] usb 4-1: Manufacturer: syz [ 293.320800][ T477] usb 4-1: SerialNumber: syz [ 293.342190][ T4922] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 293.362531][ T477] usblp0: Disabling reads from problematic bidirectional printer [ 293.492438][ T426] hid (null): bogus close delimiter [ 293.498796][ T426] itetech 0003:06CB:73F4.0031: bogus close delimiter [ 293.505776][ T426] itetech 0003:06CB:73F4.0031: item 0 0 2 10 parsing failed [ 293.513474][ T426] itetech: probe of 0003:06CB:73F4.0031 failed with error -22 [ 293.631694][ T477] usblp 4-1:4.0: usblp0: USB Unidirectional printer dev 26 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 293.672605][ T4935] loop2: detected capacity change from 0 to 1024 [ 293.697442][ T477] usb 5-1: USB disconnect, device number 28 [ 293.705154][ T4935] EXT4-fs (loop2): Ignoring removed bh option [ 293.712429][ T4935] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 293.733695][ T4935] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,data_err=abort,noinit_itable,dioread_lock,errors=remount-ro,minixdf,data_err=ignore,grpquota,journal_dev=0x0000000000000009,delalloc,bh,dioread_nolock,. Quota mode: writeback. [ 293.812135][ C0] usblp0: nonzero write bulk status received: -71 [ 293.976414][ T4939] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3871: comm syz.2.1512: Allocating blocks 481-513 which overlap fs metadata [ 293.991718][ T4939] EXT4-fs (loop2): Remounting filesystem read-only [ 294.598968][ T4934] EXT4-fs (loop2): pa ffff8881115b33f0: logic 16, phys. 113, len 25 [ 294.607054][ T4934] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 2 [ 294.618398][ T4934] EXT4-fs (loop2): Remounting filesystem read-only [ 295.663815][ T426] usb 4-1: USB disconnect, device number 26 [ 295.672310][ T566] uclogic 0003:256C:006D.0032: failed retrieving string descriptor #200: -71 [ 295.710203][ T4948] loop0: detected capacity change from 0 to 1024 [ 295.719047][ T566] uclogic 0003:256C:006D.0032: failed retrieving pen parameters: -71 [ 295.727938][ T566] uclogic 0003:256C:006D.0032: failed probing pen v2 parameters: -71 [ 295.736067][ T566] uclogic 0003:256C:006D.0032: failed probing parameters: -71 [ 295.743794][ T566] uclogic: probe of 0003:256C:006D.0032 failed with error -71 [ 295.756018][ T426] usblp0: removed [ 295.764500][ T4948] EXT4-fs (loop0): Ignoring removed nobh option [ 295.793628][ T566] usb 2-1: USB disconnect, device number 22 [ 295.812288][ T4955] loop3: detected capacity change from 0 to 1024 [ 295.835785][ T4948] EXT4-fs error (device loop0): ext4_ext_check_inode:501: inode #11: comm syz.0.1514: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 295.873795][ T4955] EXT4-fs (loop3): Ignoring removed bh option [ 295.880733][ T4955] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 295.895596][ T4948] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.1514: couldn't read orphan inode 11 (err -117) [ 296.092947][ T4959] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.100223][ T4959] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.256884][ T4948] EXT4-fs (loop0): mounted filesystem without journal. Opts: sysvgroups,noload,nobh,noload,journal_dev=0x0000000000000004,norecovery,errors=continue,quota,,errors=continue. Quota mode: writeback. [ 296.266730][ T4955] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,data_err=abort,noinit_itable,dioread_lock,errors=remount-ro,minixdf,data_err=ignore,grpquota,journal_dev=0x0000000000000009,delalloc,bh,dioread_nolock,. Quota mode: writeback. [ 297.547856][ T4975] overlayfs: missing 'lowerdir' [ 298.092341][ T4981] loop4: detected capacity change from 0 to 1024 [ 298.102688][ T4981] EXT4-fs (loop4): Ignoring removed bh option [ 298.115241][ T4981] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 298.133806][ T4981] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,data_err=abort,noinit_itable,dioread_lock,errors=remount-ro,minixdf,data_err=ignore,grpquota,journal_dev=0x0000000000000009,delalloc,bh,dioread_nolock,. Quota mode: writeback. [ 298.395360][ T4989] loop0: detected capacity change from 0 to 256 [ 298.542837][ T6] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 298.568420][ T4989] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 298.792961][ T6] usb 3-1: Using ep0 maxpacket: 16 [ 298.843861][ T566] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 299.675644][ T4997] loop3: detected capacity change from 0 to 1024 [ 299.719911][ T5000] loop2: detected capacity change from 0 to 1024 [ 299.731118][ T4997] EXT4-fs (loop3): Ignoring removed bh option [ 299.747894][ T4997] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 299.833131][ T4997] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,data_err=abort,noinit_itable,dioread_lock,errors=remount-ro,minixdf,data_err=ignore,grpquota,journal_dev=0x0000000000000009,delalloc,bh,dioread_nolock,. Quota mode: writeback. [ 299.858493][ T5000] EXT4-fs (loop2): Ignoring removed bh option [ 299.871128][ T5000] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 299.922205][ T6] usb 3-1: unable to read config index 0 descriptor/all [ 299.932194][ T6] usb 3-1: can't read configurations, error -71 [ 299.966776][ T5000] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,data_err=abort,noinit_itable,dioread_lock,errors=remount-ro,minixdf,data_err=ignore,grpquota,journal_dev=0x0000000000000009,delalloc,bh,dioread_nolock,. Quota mode: writeback. [ 301.363359][ T5010] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3871: comm syz.2.1529: Allocating blocks 481-513 which overlap fs metadata [ 301.378898][ T5010] EXT4-fs (loop2): Remounting filesystem read-only [ 301.451249][ T477] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 301.941590][ T4999] EXT4-fs (loop2): pa ffff8881115b3e70: logic 16, phys. 113, len 25 [ 301.949705][ T4999] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 2 [ 301.968190][ T4999] EXT4-fs (loop2): Remounting filesystem read-only [ 302.106734][ T5014] loop3: detected capacity change from 0 to 1024 [ 302.162210][ T566] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 302.175177][ T5014] EXT4-fs (loop3): Ignoring removed bh option [ 302.187701][ T566] usb 2-1: can't read configurations, error -71 [ 302.195185][ T5014] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 302.223520][ T5014] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,data_err=abort,noinit_itable,dioread_lock,errors=remount-ro,minixdf,data_err=ignore,grpquota,journal_dev=0x0000000000000009,delalloc,bh,dioread_nolock,. Quota mode: writeback. [ 302.263480][ T5020] loop2: detected capacity change from 0 to 256 [ 302.348461][ T5020] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 306.742232][ T477] usb 1-1: device descriptor read/all, error -71 [ 307.053120][ T5031] loop1: detected capacity change from 0 to 2048 [ 307.093660][ T5031] loop1: p1 < > p4 [ 307.100727][ T5031] loop1: p4 size 8388608 extends beyond EOD, truncated [ 308.144173][ T5039] loop3: detected capacity change from 0 to 512 [ 308.298871][ T5047] overlayfs: missing 'lowerdir' [ 308.716580][ T5039] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (33357!=0) [ 308.836605][ T5039] EXT4-fs (loop3): group descriptors corrupted! [ 308.952177][ T477] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 309.141757][ T5058] xt_bpf: check failed: parse error [ 309.342191][ T426] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 309.352194][ T477] usb 1-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 32 [ 309.362060][ T477] usb 1-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 309.482171][ T566] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 309.522171][ T39] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 309.532332][ T477] usb 1-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 309.541468][ T477] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.549608][ T477] usb 1-1: Product: syz [ 309.553835][ T477] usb 1-1: Manufacturer: syz [ 309.558468][ T477] usb 1-1: SerialNumber: syz [ 309.582225][ T5044] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 309.602696][ T477] usblp0: Disabling reads from problematic bidirectional printer [ 309.722369][ T426] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.733406][ T426] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.813249][ T477] usblp 1-1:4.0: usblp0: USB Unidirectional printer dev 27 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 309.822340][ T426] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 309.833385][ T426] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 309.841552][ T426] usb 5-1: Manufacturer: syz [ 309.846886][ T426] usb 5-1: config 0 descriptor?? [ 309.852230][ T566] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.863281][ T566] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.902273][ T39] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 309.910496][ T39] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 309.924958][ T39] usb 3-1: config 0 has no interface number 0 [ 309.952555][ T566] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 309.961738][ T566] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 309.969874][ T566] usb 2-1: Manufacturer: syz [ 309.975185][ T566] usb 2-1: config 0 descriptor?? [ 309.986652][ T5064] xt_bpf: check failed: parse error [ 310.032648][ T6] usb 1-1: USB disconnect, device number 27 [ 310.039389][ T6] usblp0: removed [ 310.112237][ T39] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 310.121396][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.129635][ T39] usb 3-1: Product: syz [ 310.133878][ T39] usb 3-1: Manufacturer: syz [ 310.138483][ T39] usb 3-1: SerialNumber: syz [ 310.143788][ T39] usb 3-1: config 0 descriptor?? [ 310.652399][ T39] usb 3-1: Found UVC 0.00 device syz (046d:0823) [ 310.659064][ T39] usb 3-1: No valid video chain found. [ 310.665421][ T39] usb 3-1: USB disconnect, device number 27 [ 310.779927][ T5069] loop3: detected capacity change from 0 to 1024 [ 310.815760][ T5069] EXT4-fs (loop3): Ignoring removed bh option [ 310.822054][ T5069] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 310.843768][ T5069] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,data_err=abort,noinit_itable,dioread_lock,errors=remount-ro,minixdf,data_err=ignore,grpquota,journal_dev=0x0000000000000009,delalloc,bh,dioread_nolock,. Quota mode: writeback. [ 310.922207][ T566] uclogic 0003:256C:006D.0034: interface is invalid, ignoring [ 311.053923][ T5074] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3871: comm syz.3.1548: Allocating blocks 481-513 which overlap fs metadata [ 311.068956][ T5074] EXT4-fs (loop3): Remounting filesystem read-only [ 311.132366][ T426] uclogic 0003:256C:006D.0033: v1 buttonpad probing failed: -71 [ 311.148030][ T39] usb 2-1: USB disconnect, device number 25 [ 311.192761][ T426] uclogic 0003:256C:006D.0033: failed probing parameters: -71 [ 311.237574][ T426] uclogic: probe of 0003:256C:006D.0033 failed with error -71 [ 311.710696][ T5068] EXT4-fs (loop3): pa ffff8881115b37e0: logic 16, phys. 113, len 25 [ 311.718765][ T5068] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 2 [ 311.729929][ T5068] EXT4-fs (loop3): Remounting filesystem read-only [ 311.852899][ T30] audit: type=1400 audit(1763954415.438:348): avc: denied { ioctl } for pid=5082 comm="syz.2.1553" path="/dev/vhost-vsock" dev="devtmpfs" ino=264 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 311.942745][ T5084] 9pnet: Insufficient options for proto=fd [ 312.005060][ T426] usb 5-1: USB disconnect, device number 29 [ 312.329873][ T5126] overlayfs: missing 'lowerdir' [ 312.647678][ T5122] device veth0_vlan left promiscuous mode [ 312.667157][ T5122] device veth0_vlan entered promiscuous mode [ 312.672186][ T426] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 312.682601][ T5122] device veth1_macvtap left promiscuous mode [ 312.689416][ T5122] device veth1_macvtap entered promiscuous mode [ 312.699756][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 312.716791][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 312.735435][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 312.744005][ T5098] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.751167][ T5098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.768835][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 312.779016][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 312.792532][ T5098] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.799658][ T5098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.822262][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 312.830909][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 312.839683][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 312.848697][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 312.857593][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 312.866322][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 312.877895][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 312.886794][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 312.895059][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 312.903569][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 312.912385][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 312.921028][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 313.250189][ T61] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 313.279674][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 313.288482][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 313.296808][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 313.305224][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 313.313785][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 313.322076][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 313.330819][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 313.339658][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 313.348320][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 313.356250][ T426] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.367920][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 313.376057][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 313.376086][ T426] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.383743][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 313.401505][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 313.410145][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 313.418048][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 313.425685][ T39] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 313.472354][ T426] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 313.482027][ T426] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 313.490087][ T426] usb 5-1: Manufacturer: syz [ 313.495331][ T426] usb 5-1: config 0 descriptor?? [ 313.731245][ T61] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.751467][ T61] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.767069][ T5157] loop2: detected capacity change from 0 to 1024 [ 313.822239][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 313.824274][ T5157] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,,errors=continue. Quota mode: writeback. [ 313.833612][ T61] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 313.858863][ T5157] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3871: comm syz.2.1562: Allocating blocks 385-513 which overlap fs metadata [ 313.858943][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.883731][ T61] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 313.885679][ T5157] EXT4-fs (loop2): pa ffff88811169bdc8: logic 16, phys. 129, len 24 [ 313.891740][ T61] usb 2-1: Manufacturer: syz [ 313.904180][ T61] usb 2-1: config 0 descriptor?? [ 313.904522][ T5157] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 8 [ 313.909523][ T39] usb 4-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 313.928743][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.941079][ T39] usb 4-1: config 0 descriptor?? [ 314.246404][ T5165] loop2: detected capacity change from 0 to 2048 [ 314.283121][ T5165] loop2: p1 < > p4 [ 314.290012][ T5165] loop2: p4 size 8388608 extends beyond EOD, truncated [ 314.533669][ T39] hid (null): bogus close delimiter [ 314.585599][ T39] itetech 0003:06CB:73F4.0036: bogus close delimiter [ 314.616984][ T39] itetech 0003:06CB:73F4.0036: item 0 0 2 10 parsing failed [ 314.630752][ T5169] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1565'. [ 314.654483][ T39] itetech: probe of 0003:06CB:73F4.0036 failed with error -22 [ 315.189126][ T39] usb 4-1: USB disconnect, device number 27 [ 315.402228][ T426] uclogic 0003:256C:006D.0035: failed retrieving string descriptor #200: -71 [ 315.411159][ T426] uclogic 0003:256C:006D.0035: failed retrieving pen parameters: -71 [ 315.422359][ T61] uclogic 0003:256C:006D.0037: failed retrieving string descriptor #200: -71 [ 315.432131][ T426] uclogic 0003:256C:006D.0035: failed probing pen v2 parameters: -71 [ 315.440360][ T426] uclogic 0003:256C:006D.0035: failed probing parameters: -71 [ 315.448566][ T61] uclogic 0003:256C:006D.0037: failed retrieving pen parameters: -71 [ 315.462200][ T426] uclogic: probe of 0003:256C:006D.0035 failed with error -71 [ 315.462224][ T61] uclogic 0003:256C:006D.0037: failed probing pen v2 parameters: -71 [ 315.472779][ T426] usb 5-1: USB disconnect, device number 30 [ 315.486396][ T404] udevd[404]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 315.486938][ T403] udevd[403]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 315.533338][ T61] uclogic 0003:256C:006D.0037: failed probing parameters: -71 [ 315.554752][ T61] uclogic: probe of 0003:256C:006D.0037 failed with error -71 [ 315.580484][ T61] usb 2-1: USB disconnect, device number 26 [ 315.789224][ T5189] xt_bpf: check failed: parse error [ 316.155481][ T5191] device veth1_macvtap left promiscuous mode [ 316.207582][ T5191] device veth1_macvtap entered promiscuous mode [ 316.319135][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 316.341497][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 316.488707][ T5199] loop2: detected capacity change from 0 to 1024 [ 316.488787][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 316.503693][ T5098] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.510781][ T5098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.518548][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 316.543233][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 316.564027][ T5199] EXT4-fs (loop2): Ignoring removed bh option [ 316.576129][ T5098] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.583267][ T5098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.595842][ T5199] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 316.610487][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 316.619468][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 316.628349][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 316.636859][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 316.646113][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 316.654572][ T5199] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,data_err=abort,noinit_itable,dioread_lock,errors=remount-ro,minixdf,data_err=ignore,grpquota,journal_dev=0x0000000000000009,delalloc,bh,dioread_nolock,. Quota mode: writeback. [ 316.679225][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 316.687924][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 316.696544][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 316.714419][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 316.723127][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 316.731861][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 316.740493][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 316.749701][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 316.758557][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 316.767131][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 316.775653][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 316.875820][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 316.886595][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 316.897384][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 316.910851][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 317.772310][ T39] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 317.783861][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 317.792456][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 317.800334][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 317.973000][ T5219] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1580'. [ 318.094469][ T6] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 318.152241][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 318.175467][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.190626][ T5223] loop2: detected capacity change from 0 to 1024 [ 318.201840][ T39] usb 4-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 318.213551][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.224933][ T39] usb 4-1: config 0 descriptor?? [ 318.398548][ T5223] EXT4-fs (loop2): Ignoring removed bh option [ 318.450321][ T5223] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 318.530746][ T5223] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,data_err=abort,noinit_itable,dioread_lock,errors=remount-ro,minixdf,data_err=ignore,grpquota,journal_dev=0x0000000000000009,delalloc,bh,dioread_nolock,. Quota mode: writeback. [ 318.582221][ T6] usb 5-1: Using ep0 maxpacket: 16 [ 318.817345][ T39] hid (null): bogus close delimiter [ 318.835595][ T39] itetech 0003:06CB:73F4.0038: bogus close delimiter [ 318.867987][ T39] itetech 0003:06CB:73F4.0038: item 0 0 2 10 parsing failed [ 318.906694][ T5231] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3871: comm syz.2.1581: Allocating blocks 481-513 which overlap fs metadata [ 318.923756][ T5231] EXT4-fs (loop2): Remounting filesystem read-only [ 319.118272][ T5222] EXT4-fs (loop2): pa ffff8881115b3540: logic 16, phys. 113, len 25 [ 319.126512][ T5222] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4888: group 0, free 0, pa_free 2 [ 319.327786][ T5222] EXT4-fs (loop2): Remounting filesystem read-only [ 319.335395][ T39] itetech: probe of 0003:06CB:73F4.0038 failed with error -22 [ 319.346676][ T39] usb 4-1: USB disconnect, device number 28 [ 319.594990][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.606339][ T6] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.616590][ T6] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 319.629784][ T6] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 319.641020][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.660197][ T6] usb 5-1: config 0 descriptor?? [ 319.682283][ T6] usb 5-1: can't set config #0, error -71 [ 319.694459][ T6] usb 5-1: USB disconnect, device number 31 [ 319.774956][ T5243] xt_bpf: check failed: parse error [ 319.903610][ T5245] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1586'. [ 420.942064][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 420.949090][ C1] (detected by 1, t=10002 jiffies, g=32685, q=507) [ 420.955701][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 10003 (4294979298-4294969295), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 420.969080][ C1] rcu: rcu_preempt kthread starved for 10004 jiffies! g32685 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 420.980299][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 420.990279][ C1] rcu: RCU grace-period kthread stack dump: [ 420.996175][ C1] task:rcu_preempt state:R running task stack:28720 pid: 14 ppid: 2 flags:0x00004000 [ 421.006987][ C1] Call Trace: [ 421.010293][ C1] [ 421.013247][ C1] __schedule+0xb6e/0x14c0 [ 421.017704][ C1] ? release_firmware_map_entry+0x190/0x190 [ 421.023700][ C1] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 421.029531][ C1] ? __mod_timer+0x7ae/0xb30 [ 421.034149][ C1] schedule+0x11e/0x1e0 [ 421.038327][ C1] schedule_timeout+0x12c/0x2e0 [ 421.043196][ C1] ? console_conditional_schedule+0x30/0x30 [ 421.049118][ C1] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 421.054595][ C1] ? update_process_times+0x200/0x200 [ 421.059993][ C1] ? prepare_to_swait_event+0x308/0x320 [ 421.065560][ C1] rcu_gp_fqs_loop+0x293/0xf60 [ 421.070345][ C1] ? debug_smp_processor_id+0x17/0x20 [ 421.075740][ C1] ? __note_gp_changes+0x4e2/0x9e0 [ 421.080883][ C1] ? rcu_gp_init+0xc00/0xc00 [ 421.085491][ C1] ? _raw_spin_unlock_irq+0x4e/0x70 [ 421.090708][ C1] ? rcu_gp_init+0x9a7/0xc00 [ 421.095323][ C1] rcu_gp_kthread+0x98/0x330 [ 421.100005][ C1] ? wake_nocb_gp+0x1d0/0x1d0 [ 421.104703][ C1] ? __kasan_check_read+0x11/0x20 [ 421.109747][ C1] ? __kthread_parkme+0xac/0x200 [ 421.114710][ C1] ? preempt_count_add+0x90/0x1b0 [ 421.119763][ C1] kthread+0x411/0x500 [ 421.123857][ C1] ? wake_nocb_gp+0x1d0/0x1d0 [ 421.128559][ C1] ? kthread_blkcg+0xd0/0xd0 [ 421.133166][ C1] ret_from_fork+0x1f/0x30 [ 421.137603][ C1] [ 421.140651][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 421.146998][ C1] NMI backtrace for cpu 1 [ 421.151345][ C1] CPU: 1 PID: 5249 Comm: syz.3.1589 Not tainted syzkaller #0 [ 421.158731][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 421.168798][ C1] Call Trace: [ 421.172116][ C1] [ 421.175065][ C1] __dump_stack+0x21/0x30 [ 421.179433][ C1] dump_stack_lvl+0xee/0x150 [ 421.184058][ C1] ? show_regs_print_info+0x20/0x20 [ 421.189296][ C1] dump_stack+0x15/0x20 [ 421.193485][ C1] nmi_cpu_backtrace+0x2b4/0x2c0 [ 421.198450][ C1] ? nmi_trigger_cpumask_backtrace+0x240/0x240 [ 421.204631][ C1] ? load_image+0x3a0/0x3a0 [ 421.209157][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 421.215249][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 421.221338][ C1] nmi_trigger_cpumask_backtrace+0x138/0x240 [ 421.227337][ C1] arch_trigger_cpumask_backtrace+0x10/0x20 [ 421.233252][ C1] rcu_check_gp_kthread_starvation+0x1e0/0x260 [ 421.239431][ C1] print_other_cpu_stall+0xded/0xfd0 [ 421.244832][ C1] ? print_cpu_stall+0x600/0x600 [ 421.249799][ C1] ? _raw_spin_lock_irq+0x8f/0xe0 [ 421.254845][ C1] ? _raw_spin_lock_irqsave+0x110/0x110 [ 421.260411][ C1] ? cgroup_rstat_updated+0xf5/0x370 [ 421.265728][ C1] ? recalc_sigpending+0x1ac/0x230 [ 421.270871][ C1] rcu_sched_clock_irq+0x8a3/0x12b0 [ 421.276101][ C1] ? rcu_boost_kthread_setaffinity+0x310/0x310 [ 421.282276][ C1] ? hrtimer_run_queues+0x166/0x430 [ 421.287501][ C1] update_process_times+0x198/0x200 [ 421.292825][ C1] tick_sched_timer+0x17c/0x240 [ 421.297689][ C1] ? tick_setup_sched_timer+0x450/0x450 [ 421.303259][ C1] __hrtimer_run_queues+0x3b5/0x9e0 [ 421.308484][ C1] ? hrtimer_interrupt+0x8c0/0x8c0 [ 421.313617][ C1] ? ktime_get_update_offsets_now+0x2fa/0x310 [ 421.319704][ C1] hrtimer_interrupt+0x3c7/0x8c0 [ 421.324674][ C1] __sysvec_apic_timer_interrupt+0xfa/0x3e0 [ 421.330588][ C1] sysvec_apic_timer_interrupt+0x53/0xc0 [ 421.336249][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 421.342277][ C1] RIP: 0033:0x7fe1c24d2e80 [ 421.346850][ C1] Code: 83 c0 16 83 e0 f7 74 12 50 48 8d 3d 8a 54 08 00 e8 05 8f f8 ff 0f 1f 44 00 00 c3 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 <83> ff 21 74 0b c3 66 2e 0f 1f 84 00 00 00 00 00 55 53 48 89 f3 48 [ 421.366481][ C1] RSP: 002b:00007fe1c0f11b38 EFLAGS: 00000246 [ 421.372570][ C1] RAX: 0000000000000000 RBX: 00007fe1c2700fa8 RCX: 00007fe1c24aa749 [ 421.380560][ C1] RDX: 00007fe1c0f11b40 RSI: 00007fe1c0f11c70 RDI: 0000000000000021 [ 421.388548][ C1] RBP: 00007fe1c2700fa0 R08: 0000000000000000 R09: 0000000000000000 [ 421.396618][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 421.404603][ C1] R13: 00007fe1c2701038 R14: 00007ffd46d71d80 R15: 00007ffd46d71e68 [ 421.412598][ C1] [ 572.292003][ C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 251s! [ 572.300996][ C0] BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=0 stuck for 251s! [ 572.309918][ C0] BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=-20 stuck for 248s! [ 572.319032][ C0] Showing busy workqueues and worker pools: [ 572.325120][ C0] workqueue events: flags=0x0 [ 572.329821][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 572.329887][ C0] pending: psi_avgs_work [ 572.329922][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 572.329965][ C0] pending: vmstat_shepherd [ 572.329994][ C0] workqueue events_unbound: flags=0x2 [ 572.360049][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=5/512 refcnt=7 [ 572.360093][ C0] in-flight: 5142:fsnotify_connector_destroy_workfn fsnotify_connector_destroy_workfn, 5101:fsnotify_mark_destroy_workfn [ 572.360172][ C0] pending: toggle_allocation_gate, flush_memcg_stats_dwork [ 572.360219][ C0] workqueue events_power_efficient: flags=0x80 [ 572.394138][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=4/256 refcnt=5 [ 572.394194][ C0] pending: wg_ratelimiter_gc_entries, neigh_periodic_work, neigh_periodic_work, gc_worker [ 572.394282][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 572.394324][ C0] pending: check_lifetime [ 572.394348][ C0] workqueue rcu_gp: flags=0x8 [ 572.429332][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=4/256 refcnt=5 [ 572.429380][ C0] in-flight: 2152:srcu_invoke_callbacks [ 572.429411][ C0] pending: srcu_invoke_callbacks, process_srcu, process_srcu [ 572.429462][ C0] workqueue mm_percpu_wq: flags=0x8 [ 572.455936][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 572.455984][ C0] pending: vmstat_update [ 572.456013][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 572.456053][ C0] pending: vmstat_update [ 572.456081][ C0] workqueue writeback: flags=0x4a [ 572.485594][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 572.485640][ C0] pending: wb_workfn, wb_workfn [ 572.485686][ C0] workqueue kblockd: flags=0x18 [ 572.502958][ C0] pwq 3: cpus=1 node=0 flags=0x0 nice=-20 active=1/256 refcnt=2 [ 572.503004][ C0] pending: blk_mq_timeout_work [ 572.503036][ C0] workqueue usb_hub_wq: flags=0x4 [ 572.520986][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 572.521033][ C0] in-flight: 6:hub_event hub_event [ 572.521090][ C0] workqueue dm_bufio_cache: flags=0x8 [ 572.539712][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 572.539759][ C0] pending: work_fn [ 572.539786][ C0] workqueue ipv6_addrconf: flags=0x40008 [ 572.557256][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/1 refcnt=2 [ 572.557300][ C0] pending: addrconf_verify_work [ 572.557340][ C0] workqueue wg-kex-wg0: flags=0x6 [ 572.575090][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 572.575145][ C0] pending: wg_packet_handshake_send_worker [ 572.575177][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 572.593844][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 572.593891][ C0] pending: wg_packet_encrypt_worker [ 572.593922][ C0] workqueue wg-kex-wg1: flags=0x6 [ 572.612261][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 572.612314][ C0] pending: wg_packet_handshake_send_worker [ 572.612349][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 572.631158][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 572.631215][ C0] pending: wg_packet_encrypt_worker [ 572.631250][ C0] workqueue wg-kex-wg2: flags=0x6 [ 572.649499][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 572.649546][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 572.649605][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 572.671152][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 572.671201][ C0] pending: wg_packet_encrypt_worker [ 572.671242][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 572.671281][ C0] pending: wg_packet_encrypt_worker [ 572.671312][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 572.703195][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 572.703243][ C0] pending: wg_packet_encrypt_worker [ 572.703272][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 572.703313][ C0] pending: wg_packet_encrypt_worker [ 572.703343][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 572.735131][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 572.735179][ C0] pending: wg_packet_encrypt_worker [ 572.735209][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 572.735250][ C0] pending: wg_packet_encrypt_worker [ 572.735279][ C0] pool 0: cpus=0 node=0 flags=0x0 nice=0 hung=251s workers=4 idle: 566 426 [ 572.735337][ C0] pool 4: cpus=0-1 flags=0x4 nice=0 hung=251s workers=50 idle: 5098 5134 5102 5092 5097 5108 5143 5117 5106 5105 2387 5116 8 5093 5138 5139 5130 10 5099 647 5115 5135 5119 5133 5118 5123 55 5132 346 5131 2443 5129 5100 5120 5112 5141 5114 5140 5103 5121 5125 5128 5104 45 5107 5110 5137 5136