last executing test programs: 6.768203378s ago: executing program 4 (id=582): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0003f0000093f04ad87ec605247a64980000034c049d6d01f456c93b3ec1c27ca30ba8f7341b3ba1fb3e4fb80d28c8676727fe5f96127953e99f9dc2c174fd4098c1e033f5e69638fe2ec5fab14ae0f4f6893993b6ba1f992f6ba30486cbbfdcfd2ffa355546a0de50e2f480ecc9219fdcad3a2d219548dbcdc34f88"], 0x0, 0x0}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000980)={0x0, 0x7}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000940)='vnet_tx_trigger\x00', r7}, 0x10) sendto$packet(r4, &(0x7f0000000180)="0b03feff4f00020002004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) syz_usb_control_io$hid(r0, 0x0, 0x0) r8 = syz_mount_image$ext4(0x0, &(0x7f00000003c0)='./file0\x00', 0x3b00050, 0x0, 0x0, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r11}, 0x10) r12 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000880)='bpf_lsm_mmap_addr\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x18, 0x1d, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000009000000000000000800000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014cd9c5cd992f6564e000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b708000000ff00007b8ab3dc00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000800000085000000a50000008520000002000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x2, 0xdf, &(0x7f0000000780)=""/223, 0x40f00, 0x40, '\x00', 0x0, 0x13, r8, 0x8, &(0x7f0000000400)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000600)={0x4, 0xa, 0xc44, 0x34d2}, 0x10, r12, r10, 0x2, &(0x7f00000008c0)=[r1, r9], &(0x7f0000000900)=[{0x4, 0x1, 0xd, 0x3}, {0x1, 0x3, 0x1, 0x4}], 0x10, 0x1}, 0x90) mount(&(0x7f0000000000)=@md0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='ext4\x00', 0x4003, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="000312"], 0x0, 0x0}, 0x0) 5.504024968s ago: executing program 0 (id=587): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0x5, 0x1000, 0xffffffffffffffff, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe6b, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x10}}, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e26, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0xffffffffffffffff, 0x8, 0x10}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x4, 0x10001, 0x9, 0x3801, r3, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x5, 0x4}, 0x48) r4 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f00000004c0)={[{@barrier_val={'barrier', 0x3d, 0x1}}, {@nodiscard}, {@noquota}, {@nojournal_checksum}, {@quota}, {@resgid}, {@sysvgroups}, {}, {@nouid32}]}, 0x14, 0x4f0, &(0x7f0000000f80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) futimesat(r4, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0}, 0x10) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r8, &(0x7f0000002c40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c, &(0x7f0000000f40)=[{&(0x7f0000000100)="8000102e", 0x4}, {&(0x7f0000000280)="d7ced286", 0xfe74}], 0x2}}], 0x1, 0x0) creat(0x0, 0x0) open(0x0, 0x14927e, 0x0) 4.628085895s ago: executing program 0 (id=591): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x6}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000140)) fcntl$lock(r0, 0x6, &(0x7f0000000380)={0x2, 0x0, 0x101}) 4.606469617s ago: executing program 0 (id=592): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000040)=0x1) 4.553992311s ago: executing program 3 (id=594): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="05010000000000107d1e222e00000000000109022400010000000009040000020300020009210000000122020009058103"], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="000000181100"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) listxattr(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000440)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@init_itable}, {@nolazytime}, {@grpid}, {@prjquota}, {@norecovery}, {@lazytime}, {@errors_continue}, {@auto_da_alloc}, {@test_dummy_encryption}]}, 0xff, 0x468, &(0x7f0000000780)="$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") syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x8010661b, &(0x7f0000000280)=@v1={0x0, @aes128, 0x0, @auto="ec590953d5fd8e2d"}) 4.553058861s ago: executing program 0 (id=595): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffbff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getpid() pipe(&(0x7f0000000080)) r0 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x8, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') close(r0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0x2, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000340)=ANY=[@ANYBLOB='-'], 0x28) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'wg2\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = creat(&(0x7f0000000600)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r4, &(0x7f0000000040)={'#! ', '', [{0x20, '\xd2\xb2\x10\f\x0e\xcef\xd4\x0f\xe2\xbe>S\x0f\x17o\xa4\x1c\t{I\xfb5Ar\x84\x89\xc9\xdd\xff\xdf\xd3\xf1\xd9\xe4\xb8\fub\xff\x961\xf2\xcd\\\xc1\xbb\xc2\xc0\xd3\xf7\x10\xda\xfe\xb6/\x15\x17\xbb\xe2\x02\xdaZ\xac\x13\xde\xab\x8f\xac\xa6U`A\xa5\b\x00\x00\x00\x1c\x01a\x83\xc5X\xed?\x82\x8f\\Vr\xda\xf6\x82\xe6,m \"-\xf2\xbf\x12\x95|\xaf\xe0\xd5\x0e0\xde:\xcf'}]}, 0x76) close(r4) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x80003, 0x6b) syz_genetlink_get_family_id$smc(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r6, &(0x7f0000000240)={0x11, 0x0, r7}, 0x14) 4.048702585s ago: executing program 0 (id=596): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x94, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1}, [@printk={@x, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)={0x60, 0x30, 0x8, {0x8, 0xe, "4ef4adc46be5"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000080)={[{@noload}, {@orlov}, {@bsdgroups}]}, 0x1, 0x640, &(0x7f0000000140)="$eJzs3c1rG2caAPBnZPl7d+2EZXezh8SwLAnsxo69yRJKock9hPTj1l7c2AlpnDjELq3TQB1IL6Wllx4KPfXQ9K9oG+i1/0APpdBTCYRScmhKaFRGmnFkW5LlD3n88fuB4ndmpHmfUfz4Hb1635kA9q2R9J9SxKGIuJFEDNVtK0dtYzJSe96jX25fTB9JVCov/5zE7XeTxfp9JdnPA9mLfx+KJN33wYkvV9U7t3Dr6uTMzPTNbHls/tqNsbmFW8evXJu8PH15+vrE/ydOnzp56vT4ic0fX+bc3TfeGnr//Kuff/okGf/i+/NJnImnXbVt6XHVSrOD+fN7N1VzWvdIVGoe169P39fTm9z3TvHrUP57kuuPpLz269I3pXNR0a5L2e9jd0T8PYaiq+5/cyjee7HQ4ICOqiSRt1HAvpNsKP/7tj4QYJvl5wH5Z/tnn4NbKXX4rATYDg/P1joAarnfHRF5/pezvrO+at/AwKNkWT9PEhGb65mrSev49pvzd9NHLOuHAzpt8U5v1m+/sv1Pqrk5HH3VpYFHpWX5X6p7pOtf2mD9IyuWW+b/4R82WAvQyOKdiPhH1v73xLryf6Qu/1/fYP3ryn8AAAAAAACgpftnI+K/jcb/lZbG//Q0GP8zGBFntqD+tb//Kz3ICskWVAfUeXg24vmG43+XxvgOd2VLf66OB+hOLl2ZmT4REX+JiGPR3Zsuj6/Yb/0I4eMfHvykWf314//SR1p/PhYw29OD8oqJuFOT85ObPW4g4uGdiH9Wx/8eydYsH/+Ttv9Jg/Y/ze8bbdZx8N/3LjTbtnb+A51S+SziaMP2/9npdtL6+hxj1fOBsfysIPfsDODwOx991ax++Q/FSdv/gdb535vUX69nbn3774mI/y2Um17rZaPn/z3JK135/lNvT87P3xyP6EnOrV4/sb6YYa/K8yHPlzT/j/2rdf/f0vl/XR72R8Tiyp036aH729PBH5vFo/2H4qT5P9W6/R9e3v6vvzBxb/jrZvVfaKv9P1lt049la/T/Qb3V1+NoN0ELCRcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdrlSRPwpktLoUrlUGh2NGIyIv8ZAaWZ2bv4/l2bfvD6Vbqve/7+U3+l3qLac5Pf/H65bnli+3J/WdSAiPu7qr24fvTg7M1X0wQMAAAAAAAAAAAAAAAAAAMAOMVid81/pXTn/P/VTV9HRAR1Xzn7Kd9h/svz/4LV1v7LSu/XRANupXHQAQGHaz//ujsYBbL/m+f/4SaVqW8MBtpHzf9i/Npj/vi6APUD7D/tVm316fZ2OAyiC9h8AAAAAAPaUA0fuf5dExOJz/dVHqif7RtBgf9jbSkUHABTGGF7Yv8qzRUcAFKXNz/j9nY4DKE6yVPqt4WT/5qP/k84EBAAAAAAAAAAAAACscvRQg/n/2Tbz/2Fvaz3/39h+2MtazP+vJn+57acDu03zW3+s2fa7IRDsci0+48tv2CfWau3N/wcAAAAAAAAAAACAHaDv1tXJmZnpm3MLu6/wws4IY32FxckdEcZmC/0RsbTmaWfq6o6I4o90qwp99e/YGoX8EhwFxlzw3yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDJHwEAAP//EwkqZg==") (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) (async) getpgrp(0xffffffffffffffff) (async) ptrace$setsig(0x4203, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, 0x0, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 3.708242635s ago: executing program 1 (id=600): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="441d00001800010000000000000000003c81d87008e2cb2d0a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="060015000800000018001680140001800d000200277d2a5d212f3a5e00000000"], 0x44}}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000880)={0x18, 0x42, 0x601, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x18}], 0x1}, 0x0) r4 = socket(0x10, 0x803, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000400000000000000000085000000610000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000009000000000000000300000604000800000000000000000000000000000000000000000000000000000000000000000a00000000040000000000006100"], 0x0, 0x51}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x334, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0x2ec, 0x2, [@TCA_ROUTE4_TO={0x8}, @TCA_ROUTE4_ACT={0x174, 0x6, [@m_connmark={0x170, 0x0, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}]}, {0x95, 0x6, "91a991d04aa8cb411880b88050856c4a5b99aafe5cf70a535f4e162db7c30535ebf5e9ab54237bf6d2780785c80bcf9eae2d6d6d65f242d28d9992d8a093d12a497447bc2a6c4f73538dbca11ebb12d1c8ea001eac3246ebaf518402b88e3f2b51ce947977543e069be9c85124bbe592bd2ed79c20d83d312cd1c151c51eed4c8c8bce1d810f14cea570fce0fb771c34fd"}, {0xc}, {0xc}}}]}, @TCA_ROUTE4_ACT={0x16c, 0x6, [@m_nat={0x11c, 0x0, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @local, @remote}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @loopback}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @loopback, @broadcast}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @remote, @loopback}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x4c, 0x0, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x334}}, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x3}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r7}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe1}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r8}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getrlimit(0x8, &(0x7f00000001c0)) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000080)) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) ioctl$TUNSETLINK(r9, 0x400454cd, 0x336) close(r9) 3.681581958s ago: executing program 4 (id=601): r0 = syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f0000000280)={[{@bh}, {@discard}, {@nobh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0xfffffffffffffffd}}]}, 0x1, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000140)=@v1={0x0, @aes128, 0x0, @desc3}) socket(0xf, 0x1, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0xff) chdir(&(0x7f0000000000)='./file0\x00') add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f00000002c0)={0x0, "615a091a55a8c9a640115d99d981b3886420589c6695d4982a83b71b906769e737201ac6b7a7804454156569cb03a5be811debc957b5831b89b59d703e748c7c", 0x25}, 0x48, 0xfffffffffffffffd) bpf$BPF_BTF_LOAD(0x12, 0x0, 0xfffffffffffffe91) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) openat(r0, &(0x7f0000000180)='./file0/file1\x00', 0x20340, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000340)={[{@commit={'commit', 0x3d, 0xe}}, {@journal_ioprio}]}, 0xff, 0x485, &(0x7f0000001040)="$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") prlimit64(0xffffffffffffffff, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 3.331000578s ago: executing program 4 (id=602): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000024c0)={0x0, 0xb, &(0x7f0000002300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000002380)='syzkaller\x00', 0x3a348bc8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000022c0)={&(0x7f0000002280)='ext4_unlink_exit\x00', r2}, 0x10) symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000002240)=ANY=[@ANYRES32=r1], &(0x7f0000002200)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x99}, 0x90) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f0000001800)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0xffffffffffffffff, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x12, r3, 0x3000) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0003290b6600fddbdf253e000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40040) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020200000000000000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='wbt_step\x00'}, 0x10) mount$tmpfs(0x0, &(0x7f0000000080)='./file0/../file0/../file0\x00', 0x0, 0x0, 0x0) syz_open_procfs(r4, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000019c0)='./file1\x00', &(0x7f0000001980), 0x20c90, &(0x7f00000023c0)={[{@xino_on}, {@uuid_off}, {@verity_require}, {@redirect_dir_nofollow}], [{@appraise_type}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@dont_appraise}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@obj_user={'obj_user', 0x3d, 'redirect_dir=nofollow'}}, {@fsuuid={'fsuuid', 0x3d, {[0x37, 0x35, 0x34, 0x66, 0x33, 0x65, 0x39, 0x33], 0x2d, [0x65, 0x34, 0x65, 0x35], 0x2d, [0x18, 0x32, 0x61, 0x6f], 0x2d, [0x30, 0x63, 0x34, 0x32], 0x2d, [0x64, 0x31, 0x61, 0x67, 0x31, 0x39, 0x36, 0x39]}}}]}) 3.330121868s ago: executing program 1 (id=603): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001100)={{r0, 0xffffffffffffffff}, &(0x7f0000001080), &(0x7f00000010c0)='%pK \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x13, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2e, &(0x7f0000000b00)=ANY=[@ANYBLOB="18490000fcffffff0000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000040000007010000f8ffffffb702000008000000b703000006000000850000000600000018120000b026fd3e06e9050bac0dadbba86995d1853f2b563b8cbe3342a84ca64fa0d8d389057702bffcff0a61f539c20a8745cf953f84c97f95d7875ff9c8ec6c62fc2252df51bda07e1c80dfe62aea251b797cbb57a336ebfa5d3b0a1ee3269951829eab3a2949352d64970514ff0e02f693a8f1c68045e48d1268401180dd95308c304543177f8e5b00794f392eab3db03473c04f039cf939f611d6caf5158f111e56", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018140000", @ANYRES32=r0, @ANYBLOB="000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000180000000900000000000000050000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000b00000085000000060000001956fcffffffffff180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500000006000000180000000500000000000000732a0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000000980)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@usrquota}], [{@euid_lt}]}, 0x10, 0x4d2, &(0x7f00000002c0)="$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") syz_emit_ethernet(0x6c, &(0x7f0000000880)=ANY=[@ANYBLOB="0180c2000000ba01f256000018004503005e00000000002f907800000000e00000012480655886dd080088be00000000100000000104000000000000"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f0000000ac0)=ANY=[@ANYRES32=0x0], 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000001540)=ANY=[@ANYBLOB="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", @ANYBLOB="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"], 0xf, 0x2a6, &(0x7f0000000480)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file1\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 3.303810171s ago: executing program 4 (id=604): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000080)=0x6f3e, 0x4) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x207, &(0x7f0000000000), 0x1, 0x473, &(0x7f0000000a40)="$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") 2.96478046s ago: executing program 0 (id=605): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r1, &(0x7f0000000380), 0x20000000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f0000000140)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x14, &(0x7f0000000800)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @printk={@i}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) syncfs(r7) 2.731747511s ago: executing program 4 (id=606): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000003c0)='./file2\x00', 0x120000, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRESHEX, @ANYRES8=0xffffffffffffffff, @ANYRES8, @ANYRESOCT], 0x1, 0x5518, &(0x7f0000002480)="$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") sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000240)=0x6e, 0x80000) preadv(r1, &(0x7f0000000380)=[{&(0x7f0000000440)=""/170, 0xaa}], 0x1, 0x8000, 0x3) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) sched_setscheduler(0x0, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) ioctl$TIOCL_SETVESABLANK(r4, 0x560e, &(0x7f0000000400)) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00000005c0)) timer_settime(0x0, 0x0, &(0x7f00000008c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x13, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r5, 0x0, &(0x7f0000000180)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, 0x0) mmap(&(0x7f0000a16000/0x2000)=nil, 0x2000, 0xb635773f05ebbeea, 0x10, r4, 0xb120a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) fchdir(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000070000000400000095", @ANYRES32=r0], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='oom_score_adj_update\x00', r2}, 0x10) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') writev(r9, &(0x7f00000002c0)=[{&(0x7f0000000280)='0', 0x1}], 0x1) 2.453227775s ago: executing program 1 (id=607): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, 0x0, &(0x7f0000001540)=""/155}, 0x20) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000540)={[{@test_dummy_encryption}]}, 0x1, 0x236, &(0x7f0000000300)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x0, 0x0, 0x5}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001ce600800000000000000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0), 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000800)={'syztnl2\x00', 0x0, 0x78a0, 0x7800, 0xe90d, 0x8, {{0x25, 0x4, 0x3, 0x3, 0x94, 0x68, 0x0, 0xdf, 0x4, 0x0, @empty, @multicast2, {[@timestamp_prespec={0x44, 0x14, 0x4b, 0x3, 0x9, [{@dev={0xac, 0x14, 0x14, 0x2b}, 0x5}, {@broadcast, 0x80000000}]}, @end, @ra={0x94, 0x4}, @rr={0x7, 0x13, 0xec, [@dev={0xac, 0x14, 0x14, 0x2d}, @remote, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0xc, 0xc0, 0x0, 0x1, [0x5, 0x2]}, @end, @timestamp_addr={0x44, 0xc, 0x18, 0x1, 0x6, [{@rand_addr=0x64010100, 0x9f5d}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x34, 0x9, 0x3, 0x0, [{@empty, 0x272e}, {@remote, 0x45}, {@loopback, 0x1ff}, {@loopback, 0x100}, {@remote, 0xfffffff2}, {@rand_addr=0x64010101, 0x1}]}]}}}}}) r7 = open(&(0x7f0000000000)='./file1\x00', 0x145142, 0x0) sendfile(r7, r7, 0x0, 0x100000001) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000a5e000/0x1000)=nil, 0x1000, &(0x7f00000008c0)='tunl0\x00') bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x20, &(0x7f00000005c0)={&(0x7f0000000a40)=""/233, 0xe9, 0x0, &(0x7f0000002600)=""/4096, 0x1000}}, 0x10) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000780)={0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0xa, 0x18, &(0x7f0000000c00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, @initr0={0x18, 0x0, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x1}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x1000, 0x1000, &(0x7f0000001600)=""/4096, 0xc0f00, 0x0, '\x00', r6, 0x18, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x4, 0x4, 0x6, 0x9}, 0x10, r8, r9, 0x17, &(0x7f0000000900)=[r1], 0x0, 0x10, 0x3}, 0x90) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000600)) 2.013597074s ago: executing program 3 (id=608): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x6b, 0x11, 0x1a}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0xac, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x70) write$binfmt_misc(r0, &(0x7f0000001200)={'syz1', "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"}, 0x102) (async) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fchdir(r1) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) 1.902620083s ago: executing program 3 (id=609): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x2010000, &(0x7f00000001c0)={[{@uni_xlateno}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '949'}}, {@fat=@usefree}, {@fat=@allow_utime={'allow_utime', 0x3d, 0xffff}}, {@shortname_mixed}, {@utf8}, {@fat=@check_strict}, {@numtail}, {@utf8no}]}, 0x0, 0x34c, &(0x7f0000001740)="$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") chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000c40)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = dup(r5) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f00000002c0)={0x0, 0x0, 0x0, r9}) r10 = dup(r8) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000003000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000080)="660f621b363abb00800f001a0f790e0f00b8ef018ed0640fde9cbf00c6f800a00400670f001f0f20e06635080000000f22e0", 0x32}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000008c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000100)={"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"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r12 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r12, &(0x7f0000001fc0)=""/184, 0xb8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) rename(0x0, 0x0) 1.834803369s ago: executing program 4 (id=610): syz_open_procfs(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x0, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x7, 0x8, 0x8, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000180)={0x4, &(0x7f0000000000)=[{0x1d, 0x0, 0x2}, {}, {}, {0x6}]}) eventfd2(0x4, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x113001, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406a05014000000000000109022d"], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, 0xc) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r6, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0xffffffffffffff40}, "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", "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f00000001c0)="240066b8010000000f01c1660f3880310f01cfbaf80c66b8b81acb8f66efbafc0cecbaf80c66b8bcb4ea8866efbafc0cedba430066ed66b8579e00000f23d00f21f866352000000f0f23f8643e660f6db79a5f6766c7442400993f19006766c7442402000001006766c744240600000000670f011c24", 0x76}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) 1.70505879s ago: executing program 3 (id=611): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x2, 0x201}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffc5) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000700)=ANY=[@ANYBLOB="3801"], 0x138) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000740)={0xa0}, 0xa0) write$FUSE_INIT(r4, &(0x7f00000003c0)={0x50}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) openat$dir(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x0, 0x0) 1.672936763s ago: executing program 3 (id=612): write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000840)=ANY=[@ANYRES32, @ANYRES64, @ANYRES32, @ANYRES16, @ANYRESHEX, @ANYBLOB="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", @ANYRES8=0x0, @ANYRESDEC], 0x2, 0x1fd, &(0x7f0000001880)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x10000, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00'}, 0x10) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x1, 0x2, 0x0, 0x0, 0x8c}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100)) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r7, 0x0) recvmmsg(r7, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x767974b3f79ca291}}], 0x4000359, 0x0, 0x0) r8 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000180)={0x3, 0x0, [{0x80000019, 0xf, 0x1, 0x6, 0x1, 0x9, 0xbe2}, {0x1, 0x9, 0x0, 0x10000, 0x200, 0x152, 0x101}, {0x80000019, 0x5a4a, 0x2, 0xa, 0x4, 0x80000000, 0x200}]}) recvfrom(r7, 0x0, 0x0, 0x0, 0x0, 0x0) 1.487956069s ago: executing program 1 (id=613): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000001c80)) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x17, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000390400"/20, @ANYRES32=r3, @ANYBLOB="000000000000081f14001680100001800c000300"], 0x3c}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000004c0)={@empty, @loopback, @private2, 0x100, 0x2, 0x4ed, 0x580, 0xd88, 0x40028, r3}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fspick(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x0) r7 = fsmount(r6, 0x1, 0xeb1cb1fb85edffcc) symlinkat(&(0x7f0000000000)='.\x00', r7, &(0x7f0000000140)='./file0\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r7}, &(0x7f0000000080), &(0x7f0000000200)=r4}, 0x20) readlinkat(r7, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)=""/204, 0xcc) 1.121919552s ago: executing program 1 (id=614): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x84880) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000480)={[{@max_batch_time={'max_batch_time', 0x3d, 0x81}}, {@data_err_ignore}, {@errors_continue}, {@dax}, {@nouid32}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpgid(0xffffffffffffffff) sched_setaffinity(r3, 0x8, &(0x7f00000002c0)=0x1) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000300)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd8fd9000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r8}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000bc0)=ANY=[@ANYRES16=r5, @ANYRES32=r0, @ANYBLOB="01000000000000000000030000005800018044000f00000001000a0000000000000000000002000000000000000000000021000000002000020000fe8000000000000000000000000000bb000000000d0001007564703a73", @ANYRESOCT=r8], 0x6c}, 0x1, 0x0, 0x0, 0x40004}, 0x4008004) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() 645.008783ms ago: executing program 2 (id=615): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x2, 0x5, 0x2, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x15, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ldst={0x1, 0x3, 0x1, 0x3, 0xa, 0x1, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0xb2a2, 0x0, 0x0, 0x0, 0x8000}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x1}, @map_fd={0x18, 0x5}, @generic={0xf1, 0x8, 0xf, 0x1f, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYRES8=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x4, 0x8, 0x40}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) sendto$packet(r2, &(0x7f0000000140)="8c", 0x1, 0x24000850, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000740)={{{@in=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}}}, &(0x7f0000000280)=0xe8) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x6, 0x5, 0x9f, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r6, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r6, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r6, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000140)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) setfsuid(r5) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="c758321c196fd0c168756700"]) chdir(&(0x7f0000000140)='./file0\x00') 571.12205ms ago: executing program 2 (id=616): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x30, 0x4, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x7e, 0x0, 0x9, [0x401, 0x1000, 0x5, 0x0, 0x5, 0x8]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x0, [{@multicast1}, {@remote, 0x8}, {@local, 0x659}, {@broadcast, 0x8000}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x34, 0x2c, 0x3, 0x8, [{@dev}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101, 0x800}, {@broadcast, 0x52b1}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @generic={0x83, 0xd, "56e6d8476f61c656505253"}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r6, 0x40045402, &(0x7f0000000040)=0x1) 570.45182ms ago: executing program 3 (id=617): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x3, 0x0, 0xffffffffffffffff, 0xd9e000}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0, r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc)) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 376.737117ms ago: executing program 2 (id=618): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x11c2, 0x2208, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), r3) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="240003"], 0x10e0}}, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x2, 0x800, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0x5, {0x5, 0x0, "6874a7"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 376.050667ms ago: executing program 2 (id=619): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) (async) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000000)) (async) ioctl$KVM_GET_PIT2(r5, 0x8070ae9f, &(0x7f0000000640)) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x0, 0x0, 0x0, 0xfa23, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x26) (async) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x82400, 0x0, 0xfc, 0x0, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) (async) r6 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000300)='asymmetric\x00', 0x0, &(0x7f0000000380)="1f20", 0x2, r6) add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) (async) keyctl$negate(0xd, 0x0, 0x0, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x22000406, &(0x7f0000000780)={[{@dioread_lock}, {@noblock_validity}, {@abort}, {@data_journal}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@grpjquota}, {@lazytime}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x485, &(0x7f0000000dc0)="$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") (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0xd, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="7e840000000000008aa0560e97d0b369306c26dc8800000000000086718204000000fd4368753ca3c9bda2fb2400800000cf3bcbe20634af55f67805af95f0b1cf22e28a8d87b51eb1889e0d04e1e2bf005b8aa50a9d81ca9ed9f7f7d9dee9782d180acb03c471ba88e5e6c71e18bdcdd10586ba7d185b045ee601d9c3446add92abd846eb10171518584533754fb8708711ef07ffcc33381b734a6c372b34204f1d6fbf3b8092721574d317fdbbe44042caf0d788925466888301c3bc0a1e67850ef2e93d9ce31bc7b91fb4d4ac85de1e71d7e529ca5524aa0c98d1cd64f0839f675afbf7e58a0d5bb64561f3bcb7"], &(0x7f0000000080)='syzkaller\x00', 0x404, 0x9c, &(0x7f00000006c0)=""/156, 0x41100, 0x0, '\x00', 0x0, 0xd}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{0x1}, &(0x7f0000000580), &(0x7f00000005c0)=r7}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) 81.397272ms ago: executing program 1 (id=620): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) r4 = syz_open_procfs(r3, &(0x7f0000000600)='fd/4\x00') write$tcp_congestion(r4, &(0x7f00000001c0)='lp\x00', 0x3) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kmem_cache_free\x00', r4}, 0x10) syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[], 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r4, 0x6628, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f00000002c0)="36660f518801000f06f260147ebaf80c66b8ee50818966efbafc0cedf30f01aaff9766b9800000c00f326635001000000f30ba2100edf00fc0702e0f01b78780", 0x40}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x94}, 0x90) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x4508, &(0x7f0000000c40), 0xa, 0x4e4, &(0x7f0000001400)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) 69.353413ms ago: executing program 2 (id=621): bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x4000000000000197}}}}}}, 0x0) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x14) 0s ago: executing program 2 (id=622): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x2010000, &(0x7f00000001c0)={[{@uni_xlateno}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '949'}}, {@fat=@usefree}, {@fat=@allow_utime={'allow_utime', 0x3d, 0xffff}}, {@shortname_mixed}, {@utf8}, {@fat=@check_strict}, {@numtail}, {@utf8no}]}, 0x0, 0x34c, &(0x7f0000001740)="$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") chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f0000000c40)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = dup(r5) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f00000002c0)={0x0, 0x0, 0x0, r9}) r10 = dup(r8) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000003000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f0000000080)="660f621b363abb00800f001a0f790e0f00b8ef018ed0640fde9cbf00c6f800a00400670f001f0f20e06635080000000f22e0", 0x32}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000008c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000100)={"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"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) kernel console output (not intermixed with test programs): ct, device number 12 [ 162.506193][ T1458] usb 4-1: device descriptor read/64, error -71 [ 162.763270][ T2011] xt_hashlimit: size too large, truncated to 1048576 [ 162.936020][ T54] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 163.072850][ T2018] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 163.085786][ T2018] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038 (0x7fffffff) [ 163.181067][ T24] kauditd_printk_skb: 12 callbacks suppressed [ 163.181080][ T24] audit: type=1326 audit(1859975725.499:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2017 comm="syz.4.343" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f46c339fef9 code=0x0 [ 163.256143][ T1458] usb 4-1: device descriptor read/64, error -71 [ 163.336274][ T54] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.349177][ T54] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 163.367276][ T54] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 163.380426][ T54] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.394600][ T54] usb 2-1: config 0 descriptor?? [ 163.536149][ T1458] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 163.608925][ T2032] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 163.637067][ T24] audit: type=1400 audit(1859975725.959:914): avc: denied { ioctl } for pid=2029 comm="syz.2.346" path="/43/file2/file0/file0" dev="loop2" ino=1048612 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 163.836177][ T1458] usb 4-1: device descriptor read/64, error -71 [ 163.893362][ T2039] input: syz0 as /devices/virtual/input/input14 [ 163.939256][ T24] audit: type=1326 audit(1859975726.259:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2042 comm="syz.4.349" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f46c339fef9 code=0x0 [ 163.956282][ T54] usbhid 2-1:0.0: can't add hid device: -71 [ 163.968120][ T54] usbhid: probe of 2-1:0.0 failed with error -71 [ 163.976687][ T54] usb 2-1: USB disconnect, device number 29 [ 164.017646][ T2048] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 164.026566][ T2048] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038 (0x7fffffff) [ 164.207374][ T24] audit: type=1400 audit(1859975726.529:916): avc: denied { getopt } for pid=2047 comm="syz.4.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 164.246147][ T1458] usb 4-1: device descriptor read/64, error -71 [ 164.326181][ T20] usbhid 1-1:0.0: can't add hid device: -71 [ 164.332048][ T20] usbhid: probe of 1-1:0.0 failed with error -71 [ 164.339367][ T20] usb 1-1: USB disconnect, device number 18 [ 164.346215][ T54] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 164.362872][ T2055] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,grpid,debug_want_extra_isize=0x0000000000000080,nouid32,nodelalloc,acl,noinit_itable,,errors=continue [ 164.394205][ T1458] usb usb4-port1: attempt power cycle [ 164.496168][ T1444] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 164.633595][ T54] usb 2-1: device descriptor read/64, error -71 [ 164.687173][ T24] audit: type=1400 audit(1859975727.009:917): avc: denied { ioctl } for pid=2066 comm="syz.3.354" path="socket:[20427]" dev="sockfs" ino=20427 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 164.716564][ T1442] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 164.796286][ T20] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 164.890850][ T2073] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 164.916427][ T1444] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.927931][ T1444] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 164.941456][ T1444] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 164.951147][ T1444] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.963968][ T1444] usb 5-1: config 0 descriptor?? [ 164.976456][ T1442] usb 3-1: Using ep0 maxpacket: 16 [ 165.056191][ T54] usb 2-1: device descriptor read/64, error -71 [ 165.066252][ T20] usb 1-1: Using ep0 maxpacket: 16 [ 165.146214][ T1442] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 165.216249][ T20] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 165.224316][ T20] usb 1-1: config 0 has no interface number 0 [ 165.230306][ T20] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 165.239781][ T20] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 165.346201][ T54] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 165.353782][ T1442] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 165.362703][ T1442] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.370436][ T1442] usb 3-1: Product: syz [ 165.374406][ T1442] usb 3-1: Manufacturer: syz [ 165.378905][ T1442] usb 3-1: SerialNumber: syz [ 165.383911][ T1442] usb 3-1: config 0 descriptor?? [ 165.406244][ T20] usb 1-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 165.415131][ T20] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 165.422940][ T20] usb 1-1: Product: syz [ 165.427531][ T1442] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 165.434822][ T20] usb 1-1: SerialNumber: syz [ 165.439525][ T1442] usb 3-1: Detected FT232RL [ 165.444647][ T20] usb 1-1: config 0 descriptor?? [ 165.628209][ T2055] udc-core: couldn't find an available UDC or it's busy [ 165.635010][ T2055] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 165.642343][ T1442] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 165.666164][ T54] usb 2-1: device descriptor read/64, error -71 [ 165.672289][ T1442] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 165.706181][ T1442] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 165.713497][ T1442] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 165.722156][ T1442] usb 3-1: USB disconnect, device number 13 [ 165.728847][ T1442] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 165.738309][ T1442] ftdi_sio 3-1:0.0: device disconnected [ 165.756930][ T20] snd-usb-audio: probe of 1-1:0.2 failed with error -12 [ 165.764313][ T20] usb 1-1: USB disconnect, device number 19 [ 166.096162][ T54] usb 2-1: device descriptor read/64, error -71 [ 166.216232][ T54] usb usb2-port1: attempt power cycle [ 166.237201][ T2076] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,grpid,debug_want_extra_isize=0x0000000000000080,nouid32,nodelalloc,acl,noinit_itable,,errors=continue [ 166.646167][ T54] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 166.706163][ T5] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 166.856187][ T54] usb 2-1: device descriptor read/8, error -71 [ 166.946196][ T5] usb 3-1: Using ep0 maxpacket: 16 [ 167.036155][ T1442] Bluetooth: hci0: command 0x1003 tx timeout [ 167.042106][ T680] Bluetooth: hci0: sending frame failed (-49) [ 167.076231][ T54] usb 2-1: device descriptor read/8, error -71 [ 167.082303][ T1444] usbhid 5-1:0.0: can't add hid device: -71 [ 167.088396][ T1444] usbhid: probe of 5-1:0.0 failed with error -71 [ 167.096336][ T5] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 167.100623][ T1444] usb 5-1: USB disconnect, device number 17 [ 167.140022][ T2093] syz.4.362[2093] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 167.140074][ T2093] syz.4.362[2093] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 167.150813][ T2090] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 167.171395][ T2090] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 167.179675][ T2090] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 167.251512][ T2090] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_dev=0x0000000000000004,delalloc,resuid=0x0000000000000000,errors=remount-ro,dioread_nolock,jqfmt=vfsold,nomblk_io_submit,noauto_da_alloc, [ 167.300920][ T2096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.362'. [ 167.309990][ T5] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 167.318932][ T5] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.326803][ T5] usb 3-1: Product: syz [ 167.330761][ T5] usb 3-1: Manufacturer: syz [ 167.335184][ T5] usb 3-1: SerialNumber: syz [ 167.376886][ T5] usb 3-1: config 0 descriptor?? [ 167.448287][ T2101] syz.1.361[2101] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 167.448342][ T2101] syz.1.361[2101] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 167.490495][ T5] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 167.494828][ T24] audit: type=1400 audit(1859975729.779:918): avc: denied { map } for pid=2089 comm="syz.1.361" path="/65/bus/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 167.696061][ T2103] erofs: (device loop4): mounted with root inode @ nid 36. [ 167.712884][ T2103] attempt to access beyond end of device [ 167.712884][ T2103] loop4: rw=0, want=1049384, limit=16 [ 167.762433][ T5] usb 3-1: Detected FT232RL [ 167.790050][ T2095] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 167.797761][ T2095] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 167.806328][ T5] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 167.808259][ T2095] F2FS-fs (loop0): Found nat_bits in checkpoint [ 167.826213][ T5] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 167.846209][ T5] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 167.852919][ T2095] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 167.853412][ T5] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 167.859862][ T2095] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 167.889425][ T5] usb 3-1: USB disconnect, device number 14 [ 167.895934][ T5] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 167.906897][ T5] ftdi_sio 3-1:0.0: device disconnected [ 168.026183][ T1444] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 168.267755][ T2118] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue [ 168.281656][ T2118] ext4 filesystem being mounted at /67/bus supports timestamps until 2038 (0x7fffffff) [ 168.298485][ T24] audit: type=1400 audit(1859975730.619:919): avc: denied { connect } for pid=2117 comm="syz.1.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 168.336185][ T1444] usb 5-1: device descriptor read/64, error -71 [ 168.463365][ T24] audit: type=1400 audit(1859975730.779:920): avc: denied { bind } for pid=2117 comm="syz.1.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 168.493235][ T24] audit: type=1400 audit(1859975730.779:921): avc: denied { connect } for pid=2117 comm="syz.1.366" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 168.646703][ T2134] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 168.654263][ T2134] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 168.663220][ T2134] F2FS-fs (loop0): invalid crc value [ 168.669694][ T2134] F2FS-fs (loop0): Found nat_bits in checkpoint [ 168.699787][ T2134] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 168.706713][ T2134] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 168.706722][ T54] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 168.736178][ T1444] usb 5-1: device descriptor read/64, error -71 [ 168.986147][ T54] usb 3-1: Using ep0 maxpacket: 16 [ 169.026241][ T1444] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 169.061296][ T2145] FAULT_INJECTION: forcing a failure. [ 169.061296][ T2145] name failslab, interval 1, probability 0, space 0, times 1 [ 169.073937][ T2145] CPU: 1 PID: 2145 Comm: syz.1.370 Tainted: G W 5.10.223-syzkaller-00011-g1c5354a314ea #0 [ 169.084928][ T2145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 169.094821][ T2145] Call Trace: [ 169.097960][ T2145] dump_stack_lvl+0x1e2/0x24b [ 169.102463][ T2145] ? panic+0x812/0x812 [ 169.106370][ T2145] ? bfq_pos_tree_add_move+0x43b/0x43b [ 169.111663][ T2145] dump_stack+0x15/0x17 [ 169.115655][ T2145] should_fail+0x3c6/0x510 [ 169.119913][ T2145] ? __alloc_file+0x29/0x330 [ 169.124338][ T2145] __should_failslab+0xa4/0xe0 [ 169.128938][ T2145] should_failslab+0x9/0x20 [ 169.133278][ T2145] kmem_cache_alloc+0x3d/0x2e0 [ 169.137877][ T2145] ? bpf_trace_run3+0x126/0x2c0 [ 169.142560][ T2145] __alloc_file+0x29/0x330 [ 169.146820][ T2145] ? alloc_empty_file+0x42/0x180 [ 169.151587][ T2145] alloc_empty_file+0x95/0x180 [ 169.156191][ T2145] path_openat+0x105/0x3000 [ 169.160529][ T2145] ? _raw_spin_unlock_irq+0x4e/0x70 [ 169.161826][ T1458] Bluetooth: hci0: command 0x1001 tx timeout [ 169.165570][ T2145] ? finish_task_switch+0x130/0x5a0 [ 169.171643][ T680] Bluetooth: hci0: sending frame failed (-49) [ 169.176420][ T2145] ? switch_mm_irqs_off+0x2f9/0x9a0 [ 169.176432][ T2145] ? __switch_to_asm+0x34/0x60 [ 169.176448][ T2145] ? release_firmware_map_entry+0x18d/0x18d [ 169.176469][ T2145] ? do_filp_open+0x460/0x460 [ 169.202183][ T2145] ? __kasan_check_read+0x11/0x20 [ 169.207039][ T2145] ? preempt_schedule_irq+0xe7/0x140 [ 169.212163][ T2145] ? preempt_schedule_notrace+0x140/0x140 [ 169.217720][ T2145] do_filp_open+0x21c/0x460 [ 169.222060][ T2145] ? vfs_tmpfile+0x2b0/0x2b0 [ 169.226497][ T2145] ? get_unused_fd_flags+0x94/0xa0 [ 169.231428][ T2145] do_sys_openat2+0x13f/0x710 [ 169.235944][ T2145] ? mutex_trylock+0xa0/0xa0 [ 169.240370][ T2145] ? do_sys_open+0x220/0x220 [ 169.244799][ T2145] ? __kasan_check_write+0x14/0x20 [ 169.249748][ T2145] __x64_sys_openat+0x243/0x290 [ 169.254431][ T2145] ? __ia32_sys_open+0x270/0x270 [ 169.259203][ T2145] ? __kasan_check_read+0x11/0x20 [ 169.264063][ T2145] do_syscall_64+0x34/0x70 [ 169.268319][ T2145] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 169.274044][ T2145] RIP: 0033:0x7f781a1a6ef9 [ 169.278299][ T2145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.297748][ T2145] RSP: 002b:00007f7818ddf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 169.305983][ T2145] RAX: ffffffffffffffda RBX: 00007f781a360130 RCX: 00007f781a1a6ef9 [ 169.313795][ T2145] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: ffffffffffffff9c [ 169.321607][ T2145] RBP: 00007f7818ddf090 R08: 0000000000000000 R09: 0000000000000000 [ 169.329415][ T2145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.337230][ T2145] R13: 0000000000000000 R14: 00007f781a360130 R15: 00007ffd404fe988 [ 169.351151][ T318] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 169.359909][ T318] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 169.386222][ T54] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 169.394402][ T54] usb 3-1: config 0 has no interface number 0 [ 169.400368][ T54] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 169.409820][ T54] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 169.505163][ T24] audit: type=1400 audit(1859975731.819:922): avc: denied { mount } for pid=2151 comm="syz.0.372" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 169.546283][ T54] usb 3-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 169.555672][ T54] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 169.563523][ T54] usb 3-1: Product: syz [ 169.567550][ T54] usb 3-1: SerialNumber: syz [ 169.579612][ T54] usb 3-1: config 0 descriptor?? [ 169.596220][ T1444] usb 5-1: device descriptor read/64, error -71 [ 170.257504][ T54] snd-usb-audio: probe of 3-1:0.2 failed with error -12 [ 170.265453][ T54] usb 3-1: USB disconnect, device number 15 [ 170.271487][ T24] audit: type=1326 audit(1859975732.599:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2166 comm="syz.1.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f781a1a6ef9 code=0x7ffc0000 [ 170.297353][ T24] audit: type=1326 audit(1859975732.599:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2166 comm="syz.1.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7f781a1a6ef9 code=0x7ffc0000 [ 170.320527][ T24] audit: type=1326 audit(1859975732.599:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2166 comm="syz.1.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7f781a1a6ef9 code=0x7ffc0000 [ 170.364342][ T24] audit: type=1326 audit(1859975732.599:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2166 comm="syz.1.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7f781a1a6ef9 code=0x7ffc0000 [ 170.387790][ T24] audit: type=1326 audit(1859975732.599:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2166 comm="syz.1.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7f781a1a6ef9 code=0x7ffc0000 [ 170.406152][ T1444] usb 5-1: device descriptor read/64, error -71 [ 170.411326][ T24] audit: type=1326 audit(1859975732.599:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2166 comm="syz.1.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7f781a1a6ef9 code=0x7ffc0000 [ 170.497174][ T2173] exfat: Unknown parameter '@' [ 170.546252][ T1444] usb usb5-port1: attempt power cycle [ 170.631410][ T2182] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.380: inode #1: comm syz.0.380: iget: illegal inode # [ 170.644220][ T2182] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.380: error while reading EA inode 1 err=-117 [ 170.657067][ T2182] EXT4-fs (loop0): 1 orphan inode deleted [ 170.662595][ T2182] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,nobarrier,minixdf,resgid=0x0000000000000000,grpquota,usrjquota=,,errors=continue [ 170.687732][ T2182] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #13: comm syz.0.380: invalid indirect mapped block 234881024 (level 0) [ 170.876159][ T54] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 170.976146][ T1444] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 171.026209][ T1458] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 171.066208][ T1444] usb 5-1: Using ep0 maxpacket: 16 [ 171.146179][ T54] usb 2-1: Using ep0 maxpacket: 16 [ 171.186294][ T1444] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.196155][ T5] Bluetooth: hci0: command 0x1009 tx timeout [ 171.196996][ T1444] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.212377][ T1444] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 171.224940][ T1444] usb 5-1: New USB device found, idVendor=056a, idProduct=2022, bcdDevice= 0.00 [ 171.233850][ T1444] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.242131][ T1444] usb 5-1: config 0 descriptor?? [ 171.246932][ T20] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 171.266277][ T54] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.277001][ T54] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.287217][ T54] usb 2-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 171.296035][ T54] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.305186][ T54] usb 2-1: config 0 descriptor?? [ 171.386221][ T1458] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.396921][ T1458] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.406459][ T1458] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 171.419023][ T1458] usb 1-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 171.427881][ T1458] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.436996][ T1458] usb 1-1: config 0 descriptor?? [ 171.528840][ T2179] EXT4-fs (loop4): bad s_min_extra_isize: 65528 [ 171.636303][ T20] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 171.645185][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.653667][ T20] usb 3-1: config 0 descriptor?? [ 171.856193][ T54] usbhid 2-1:0.0: can't add hid device: -71 [ 171.862003][ T54] usbhid: probe of 2-1:0.0 failed with error -71 [ 171.872391][ T54] usb 2-1: USB disconnect, device number 34 [ 172.039044][ T2191] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 172.046688][ T2191] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 172.054612][ T2191] F2FS-fs (loop0): Unrecognized mount option "syztnl0" or missing value [ 172.186923][ T1458] betop 0003:11C2:2208.000D: item fetching failed at offset 4/5 [ 172.194657][ T1458] betop 0003:11C2:2208.000D: parse failed [ 172.200469][ T1458] betop: probe of 0003:11C2:2208.000D failed with error -22 [ 172.319831][ T2205] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 172.326829][ T2205] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 172.339188][ T2205] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2204: inode #15: comm syz.1.387: corrupted in-inode xattr [ 172.351269][ T2205] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.387: couldn't read orphan inode 15 (err -117) [ 172.363320][ T2205] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,mblk_io_submit,user_xattr,auto_da_alloc,block_validity,quota,,errors=continue [ 172.387586][ T54] usb 1-1: USB disconnect, device number 20 [ 172.416220][ T1444] usbhid 5-1:0.0: can't add hid device: -71 [ 172.421966][ T1444] usbhid: probe of 5-1:0.0 failed with error -71 [ 172.446907][ T1444] usb 5-1: USB disconnect, device number 20 [ 172.552368][ T2200] futex_wake_op: syz.2.386 tries to shift op by 32; fix this program [ 172.796290][ T1444] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 172.967852][ T2216] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 172.976758][ T2216] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038 (0x7fffffff) [ 173.066164][ T1444] usb 5-1: device descriptor read/64, error -71 [ 173.300189][ T2223] syz.1.392[2223] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 173.300224][ T2223] syz.1.392[2223] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 173.339056][ T2223] device veth0_vlan left promiscuous mode [ 173.356818][ T1446] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 173.364513][ T2223] device veth0_vlan entered promiscuous mode [ 173.456197][ T1444] usb 5-1: device descriptor read/64, error -71 [ 173.606154][ T1446] usb 1-1: Using ep0 maxpacket: 32 [ 173.676170][ T5] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 173.726243][ T1444] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 173.766226][ T1446] usb 1-1: unable to get BOS descriptor or descriptor too short [ 173.846467][ T1446] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 4533, setting to 1024 [ 173.857355][ T1446] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 173.867148][ T1446] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 173.916146][ T5] usb 2-1: Using ep0 maxpacket: 32 [ 173.996390][ T1444] usb 5-1: device descriptor read/64, error -71 [ 174.016190][ T20] usb 3-1: Cannot set autoneg [ 174.020736][ T20] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -71 [ 174.036267][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.036901][ T20] usb 3-1: USB disconnect, device number 16 [ 174.049340][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.052723][ T1446] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 174.062622][ T5] usb 2-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 174.075188][ T1446] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.090285][ T1446] usb 1-1: Manufacturer: Ц [ 174.092563][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.097336][ T1446] usb 1-1: SerialNumber: ݳ婮ĕ㜕뚻㤵₲ᴝ闻쾶Ｃ鞝⟟⢎現䎴썳ー㹒우丄봰憉隑㶘囄炀䳱픁뾠㘮㔁⃜퉄嶢췙푉鈠悹ⲥꄘ㹝莺掎魕佭ﴎブ빣꒾䥀싻逎঍ທ鿈肬觳ໍ훲폵薏슐杸ꄒ᚛ꤋⲾⷤᠣ욹⧞⳥鱞횎똡眬녮쵪填痨 [ 174.103566][ T5] usb 2-1: config 0 descriptor?? [ 174.144023][ T2232] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 174.152446][ T2232] EXT4-fs (loop2): orphan cleanup on readonly fs [ 174.158844][ T2232] EXT4-fs error (device loop2): ext4_find_extent:928: inode #4: comm syz.2.395: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 174.175757][ T2232] EXT4-fs (loop2): Remounting filesystem read-only [ 174.182328][ T2232] __quota_error: 123 callbacks suppressed [ 174.182338][ T2232] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=-117 [ 174.197329][ T2232] EXT4-fs warning (device loop2): ext4_enable_quotas:6467: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 174.211643][ T2232] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 174.217988][ T2232] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,i_version,nomblk_io_submit,noquota,usrjquota=, [ 174.396275][ T1444] usb 5-1: device descriptor read/64, error -71 [ 174.516212][ T1444] usb usb5-port1: attempt power cycle [ 174.626398][ T2229] erofs: Unknown parameter '18446744073709551615i(툵Fp' [ 174.659894][ T24] audit: type=1400 audit(1859975736.979:1052): avc: denied { setopt } for pid=2220 comm="syz.0.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 174.681186][ T24] audit: type=1400 audit(1859975736.979:1053): avc: denied { ioctl } for pid=2220 comm="syz.0.391" path="socket:[21121]" dev="sockfs" ino=21121 ioctlcmd=0x542c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 174.736193][ T1446] cdc_ncm 1-1:1.0: bind() failure [ 174.741684][ T1446] cdc_ncm 1-1:1.1: bind() failure [ 174.749915][ T1446] usb 1-1: USB disconnect, device number 21 [ 174.764037][ T2229] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 174.799361][ T5] hid-rmi 0003:0461:4E72.000E: hidraw0: USB HID v0.00 Device [HID 0461:4e72] on usb-dummy_hcd.1-1/input0 [ 174.926170][ T1444] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 175.009934][ T5] usb 2-1: USB disconnect, device number 35 [ 175.096203][ T1444] usb 5-1: device descriptor read/8, error -71 [ 175.194653][ T2249] binder: 2245:2249 ioctl 4018620d 0 returned -22 [ 175.202042][ T2249] process 'syz.2.397' launched '/dev/fd/-1/./file0' with NULL argv: empty string added [ 175.262462][ T2248] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.269674][ T2248] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.277242][ T2248] device bridge_slave_0 entered promiscuous mode [ 175.286149][ T2248] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.293118][ T2248] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.300426][ T2248] device bridge_slave_1 entered promiscuous mode [ 175.331046][ T2249] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 175.355565][ T2248] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.362442][ T2248] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.369524][ T2248] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.376315][ T2248] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.396265][ T1444] usb 5-1: device descriptor read/8, error -71 [ 175.404804][ T2249] EXT4-fs (loop2): orphan cleanup on readonly fs [ 175.417726][ T2249] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3346: comm syz.2.397: Allocating blocks 41-42 which overlap fs metadata [ 175.418406][ T1458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 175.457500][ T1458] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.465434][ T1458] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.472577][ T2249] EXT4-fs (loop2): Remounting filesystem read-only [ 175.486849][ T2249] Quota error (device loop2): write_blk: dquota write failed [ 175.507136][ T1458] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 175.515291][ T1458] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.522164][ T1458] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.530376][ T24] audit: type=1326 audit(1859975737.849:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2263 comm="syz.4.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c339fef9 code=0x7ffc0000 [ 175.534647][ T1458] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 175.562149][ T1458] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.564893][ T2249] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 175.569013][ T1458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.585775][ T24] audit: type=1326 audit(1859975737.879:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2263 comm="syz.4.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f46c339fef9 code=0x7ffc0000 [ 175.585990][ T1458] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 175.628208][ T1457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 175.651826][ T1457] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 175.659628][ T2249] EXT4-fs error (device loop2): ext4_acquire_dquot:6219: comm syz.2.397: Failed to acquire dquot type 0 [ 175.659960][ T2249] EXT4-fs (loop2): 1 truncate cleaned up [ 175.660180][ T2249] EXT4-fs (loop2): pa ffff88811066adc8: logic 1, phys. 41, len 23 [ 175.660191][ T2249] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4363: group 0, free 22, pa_free 23 [ 175.660500][ T2249] EXT4-fs (loop2): mounted filesystem without journal. Opts: norecovery,noblock_validity,usrquota,resgid=0x0000000000000000,nogrpid,errors=remount-ro,noinit_itable,inode_readahead_blks=0x0000000000000001,resuid=0x00000000000000002 [ 175.680420][ T2248] device veth0_vlan entered promiscuous mode [ 175.696571][ T24] audit: type=1326 audit(1859975737.879:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2263 comm="syz.4.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c339fef9 code=0x7ffc0000 [ 175.778408][ T24] audit: type=1326 audit(1859975737.879:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2263 comm="syz.4.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f46c339fef9 code=0x7ffc0000 [ 175.806286][ T1446] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 175.815025][ T1458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 175.839690][ T24] audit: type=1326 audit(1859975737.879:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2263 comm="syz.4.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c339fef9 code=0x7ffc0000 [ 175.881879][ T2248] device veth1_macvtap entered promiscuous mode [ 175.889978][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 175.902511][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 175.911365][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 175.933182][ T1458] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 175.941707][ T1458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 175.950407][ T1458] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 175.959383][ T1458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 176.234752][ T1446] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.256140][ T1446] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.265677][ T1446] usb 1-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 176.266176][ T456] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 176.286184][ T1446] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.377155][ T1446] usb 1-1: config 0 descriptor?? [ 176.616853][ T318] device bridge_slave_1 left promiscuous mode [ 176.623433][ T318] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.631358][ T318] device bridge_slave_0 left promiscuous mode [ 176.638997][ T318] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.647414][ T318] device veth1_macvtap left promiscuous mode [ 176.653466][ T318] device veth0_vlan left promiscuous mode [ 176.657155][ T2296] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 176.667834][ T2296] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038 (0x7fffffff) [ 176.713525][ T2299] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 176.724918][ T2299] ext4 filesystem being mounted at /34/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 176.776234][ T456] usb 2-1: Using ep0 maxpacket: 16 [ 176.896244][ T456] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 176.907177][ T456] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 176.917116][ T456] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 176.926000][ T456] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.937077][ T456] usb 2-1: config 0 descriptor?? [ 176.990942][ T2310] loop2: p2 p3 p7 [ 177.001942][ T2310] netlink: 20 bytes leftover after parsing attributes in process `syz.2.411'. [ 177.011732][ T1446] logitech-hidpp-device 0003:046D:C086.000F: item fetching failed at offset 2/5 [ 177.020857][ T1446] logitech-hidpp-device 0003:046D:C086.000F: hidpp_probe:parse failed [ 177.058366][ T20] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 177.109568][ T1446] logitech-hidpp-device: probe of 0003:046D:C086.000F failed with error -22 [ 177.225703][ T2262] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=2262 comm=syz.0.400 [ 177.243857][ T1358] udevd[1358]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 177.255396][ T54] usb 1-1: USB disconnect, device number 22 [ 177.289807][ T1332] udevd[1332]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 177.302387][ T1432] udevd[1432]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 177.326367][ T20] usb 5-1: Using ep0 maxpacket: 16 [ 177.499949][ T2320] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 177.657846][ T2273] EXT4-fs (loop1): Test dummy encryption mode enabled [ 177.664592][ T2273] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 177.673864][ T2273] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 177.681346][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.682514][ T2273] EXT4-fs (loop1): Unrecognized mount option "obj_user=:}%#)')]" or missing value [ 177.692058][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.711109][ T20] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 177.719986][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.728529][ T20] usb 5-1: config 0 descriptor?? [ 177.760046][ T2273] udc-core: couldn't find an available UDC or it's busy [ 177.766877][ T2273] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 177.776541][ T456] hid (null): bogus close delimiter [ 177.785141][ T456] hid (null): unknown global tag 0xe [ 177.792529][ T456] hid-generic 0003:0158:0100.0010: unknown main item tag 0x0 [ 177.799854][ T456] hid-generic 0003:0158:0100.0010: unknown main item tag 0x0 [ 177.807085][ T456] hid-generic 0003:0158:0100.0010: bogus close delimiter [ 177.813901][ T456] hid-generic 0003:0158:0100.0010: item 0 0 2 10 parsing failed [ 177.821649][ T456] hid-generic: probe of 0003:0158:0100.0010 failed with error -22 [ 177.991349][ T1458] usb 2-1: USB disconnect, device number 36 [ 178.546936][ T20] savu 0003:1E7D:2D5A.0011: item fetching failed at offset 2/5 [ 178.554470][ T20] savu 0003:1E7D:2D5A.0011: parse failed [ 178.559979][ T20] savu: probe of 0003:1E7D:2D5A.0011 failed with error -22 [ 178.908983][ T2345] overlayfs: upper fs does not support tmpfile. [ 179.596240][ T456] Bluetooth: hci0: command 0x1003 tx timeout [ 179.602091][ T2332] Bluetooth: hci0: sending frame failed (-49) [ 179.608024][ T5] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 179.797918][ T2348] netlink: 24 bytes leftover after parsing attributes in process `syz.1.419'. [ 179.846270][ T5] usb 3-1: Using ep0 maxpacket: 8 [ 179.966211][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.976923][ T5] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.986693][ T5] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 179.995548][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.007152][ T5] usb 3-1: config 0 descriptor?? [ 180.266458][ T317] Bluetooth: hci2: Frame reassembly failed (-84) [ 180.316189][ T456] Bluetooth: hci1: command 0x1003 tx timeout [ 180.317482][ T2359] F2FS-fs (loop1): invalid crc value [ 180.328882][ T674] Bluetooth: hci1: sending frame failed (-49) [ 180.333419][ T2359] F2FS-fs (loop1): Found nat_bits in checkpoint [ 180.362812][ T2359] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 180.593696][ T456] usb 5-1: USB disconnect, device number 25 [ 181.016724][ T2380] netlink: 4 bytes leftover after parsing attributes in process `syz.4.426'. [ 181.054159][ T282] attempt to access beyond end of device [ 181.054159][ T282] loop1: rw=2049, want=45120, limit=40427 [ 181.146428][ T2382] x_tables: duplicate underflow at hook 2 [ 181.155814][ T2382] x_tables: duplicate underflow at hook 2 [ 181.322974][ T24] kauditd_printk_skb: 56 callbacks suppressed [ 181.323016][ T24] audit: type=1400 audit(1859975743.639:1115): avc: denied { setopt } for pid=2383 comm="syz.1.428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 181.349734][ T24] audit: type=1400 audit(1859975743.639:1116): avc: denied { ioctl } for pid=2383 comm="syz.1.428" path="/dev/rtc0" dev="devtmpfs" ino=166 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 181.676817][ T456] Bluetooth: hci0: command 0x1001 tx timeout [ 181.682763][ T674] Bluetooth: hci0: sending frame failed (-49) [ 182.316616][ T456] Bluetooth: hci2: command 0x1003 tx timeout [ 182.322551][ T674] Bluetooth: hci2: sending frame failed (-49) [ 182.396139][ T456] Bluetooth: hci1: command 0x1001 tx timeout [ 182.401972][ T674] Bluetooth: hci1: sending frame failed (-49) [ 182.973883][ T2396] tmpfs: Unknown parameter 'grpquota' [ 183.523778][ T2398] FAT-fs (loop4): bogus logical sector size 0 [ 183.529841][ T2398] FAT-fs (loop4): Can't find a valid FAT filesystem [ 183.756155][ T1447] Bluetooth: hci0: command 0x1009 tx timeout [ 184.396134][ T1447] Bluetooth: hci2: command 0x1001 tx timeout [ 184.402007][ T674] Bluetooth: hci2: sending frame failed (-49) [ 184.411658][ T2406] EXT4-fs (loop4): Test dummy encryption mode enabled [ 184.426780][ T2406] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:163: inode #12: comm syz.4.433: inline data xattr refers to an external xattr inode [ 184.441543][ T2406] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.433: couldn't read orphan inode 12 (err -117) [ 184.453733][ T2406] EXT4-fs (loop4): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000001,init_itable=0x0000000000000000,nolazytime,grpid,prjquota,norecovery,lazytime,errors=continue,auto_da_alloc,test_dummy_encryption,,errors=continue [ 184.476155][ T1447] Bluetooth: hci1: command 0x1009 tx timeout [ 184.793106][ T2415] serio: Serial port ptm1 [ 185.128964][ T2422] EXT4-fs (loop1): Unrecognized mount option "obj_type=errors=continue" or missing value [ 185.206180][ T5] usbhid 3-1:0.0: can't add hid device: -32 [ 185.211969][ T5] usbhid: probe of 3-1:0.0 failed with error -32 [ 185.298403][ T2422] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00000001) [ 185.314983][ T282] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 185.322457][ T282] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 185.499480][ T2428] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.506502][ T2428] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.513586][ T2428] device bridge_slave_0 entered promiscuous mode [ 185.521856][ T2428] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.528835][ T2428] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.535937][ T2428] device bridge_slave_1 entered promiscuous mode [ 185.571480][ T2428] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.578318][ T2428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.585386][ T2428] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.592217][ T2428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.611029][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 185.618361][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.625394][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.638449][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 185.646566][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.653398][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.660844][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 185.668945][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.675760][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.686380][ T1442] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 185.696295][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 185.711750][ T2428] device veth0_vlan entered promiscuous mode [ 185.718006][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 185.726134][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 185.733801][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 185.741545][ T456] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 185.753663][ T1442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 185.762245][ T2428] device veth1_macvtap entered promiscuous mode [ 185.773139][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 185.781651][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 185.826752][ T317] device bridge_slave_1 left promiscuous mode [ 185.832677][ T317] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.840061][ T317] device bridge_slave_0 left promiscuous mode [ 185.845965][ T317] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.853542][ T317] device veth1_macvtap left promiscuous mode [ 185.859375][ T317] device veth0_vlan left promiscuous mode [ 186.076174][ T5] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 186.466201][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.476154][ T20] Bluetooth: hci2: command 0x1009 tx timeout [ 186.477112][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.492272][ T5] usb 2-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 186.501090][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.509618][ T5] usb 2-1: config 0 descriptor?? [ 186.997125][ T24] audit: type=1326 audit(1859975749.309:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2439 comm="syz.4.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c339fef9 code=0x7ffc0000 [ 187.022311][ T24] audit: type=1326 audit(1859975749.309:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2439 comm="syz.4.441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46c339fef9 code=0x7ffc0000 [ 187.111178][ T2434] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 187.120142][ T2434] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038 (0x7fffffff) [ 187.443220][ T5] logitech-hidpp-device 0003:046D:C086.0012: unknown main item tag 0x0 [ 187.451524][ T5] logitech-hidpp-device 0003:046D:C086.0012: unknown main item tag 0x0 [ 187.459635][ T5] logitech-hidpp-device 0003:046D:C086.0012: unknown main item tag 0x0 [ 187.467836][ T5] logitech-hidpp-device 0003:046D:C086.0012: unknown main item tag 0x0 [ 187.475895][ T5] logitech-hidpp-device 0003:046D:C086.0012: unknown main item tag 0x0 [ 187.484864][ T5] logitech-hidpp-device 0003:046D:C086.0012: hidraw0: USB HID v0.00 Device [HID 046d:c086] on usb-dummy_hcd.1-1/input0 [ 187.516726][ T2448] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.523578][ T2448] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.530875][ T2448] device bridge_slave_0 entered promiscuous mode [ 187.537632][ T2448] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.544489][ T2448] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.551939][ T2448] device bridge_slave_1 entered promiscuous mode [ 187.588088][ T2448] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.594949][ T2448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.602029][ T2448] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.608819][ T2448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.628958][ T1444] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.635991][ T1444] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.643237][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 187.650401][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 187.659542][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 187.668012][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.674861][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.691138][ T1460] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 187.704116][ T1460] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.710988][ T1460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.720813][ T1460] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 187.729521][ T1460] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 187.744927][ T1460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 187.758090][ T2448] device veth0_vlan entered promiscuous mode [ 187.765025][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 187.773544][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 187.780849][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 187.794122][ T2448] device veth1_macvtap entered promiscuous mode [ 187.801111][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 187.812795][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 187.828250][ T1460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 187.946916][ T2455] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 187.953136][ T2455] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 187.976240][ T2455] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 188.020138][ T2464] ip6_tunnel: non-ECT from fcc0:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 188.035347][ T2464] fuse: Unknown parameter 'groy{' [ 188.186436][ T2455] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 188.193316][ T2455] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 188.387482][ T2467] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.394545][ T2467] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.402390][ T2467] device bridge_slave_0 entered promiscuous mode [ 188.409436][ T2467] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.416799][ T2467] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.424187][ T2467] device bridge_slave_1 entered promiscuous mode [ 188.478872][ T2467] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.485755][ T2467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.492896][ T2467] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.499725][ T2467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.523911][ T1460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 188.532184][ T1460] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.540527][ T1460] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.557869][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 188.566080][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 188.574325][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.581193][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.589063][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 188.597218][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 188.605196][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.612073][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.626911][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 188.634945][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 188.643047][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 188.651047][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 188.666166][ T1460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 188.674346][ T1460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 188.690879][ T2467] device veth0_vlan entered promiscuous mode [ 188.697126][ T1458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 188.704918][ T1458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 188.730752][ T2467] device veth1_macvtap entered promiscuous mode [ 188.737965][ T1460] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 188.750341][ T1460] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 188.759103][ T1460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 188.768086][ T1460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 188.776441][ T1460] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 188.793010][ T1458] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 188.801386][ T1458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 188.814140][ T1775] attempt to access beyond end of device [ 188.814140][ T1775] loop4: rw=2049, want=45120, limit=40427 [ 188.848308][ T1458] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 188.858396][ T24] audit: type=1400 audit(1859975751.179:1119): avc: denied { name_bind } for pid=2474 comm="syz.3.446" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 188.860096][ T1458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 188.888909][ T1460] usb 2-1: USB disconnect, device number 37 [ 188.957463][ T318] device bridge_slave_1 left promiscuous mode [ 188.966469][ T318] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.986750][ T318] device bridge_slave_0 left promiscuous mode [ 188.996417][ T318] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.005208][ T318] device veth1_macvtap left promiscuous mode [ 189.011488][ T318] device veth0_vlan left promiscuous mode [ 189.087074][ T2488] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 189.101528][ T2488] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 189.375066][ T2488] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2204: inode #15: comm syz.4.447: corrupted in-inode xattr [ 189.389535][ T2488] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.447: couldn't read orphan inode 15 (err -117) [ 189.446022][ T2488] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,mblk_io_submit,user_xattr,auto_da_alloc,block_validity,quota,,errors=continue [ 190.044361][ T2500] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=2500 comm=syz.1.452 [ 190.046624][ T1458] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 190.083515][ T2486] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.090585][ T2486] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.098080][ T2486] device bridge_slave_0 entered promiscuous mode [ 190.105007][ T2486] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.112131][ T2486] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.120564][ T2486] device bridge_slave_1 entered promiscuous mode [ 190.173503][ T2486] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.180438][ T2486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.187540][ T2486] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.194304][ T2486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.427635][ T2496] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 190.440255][ T2503] fuse: Unknown parameter ' ' [ 190.445736][ T2496] EXT4-fs (loop1): orphan cleanup on readonly fs [ 190.452650][ T2496] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3346: comm syz.1.452: Allocating blocks 41-42 which overlap fs metadata [ 190.460444][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 190.466471][ T2496] EXT4-fs (loop1): Remounting filesystem read-only [ 190.479511][ T2496] Quota error (device loop1): write_blk: dquota write failed [ 190.479582][ T1444] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.486791][ T2496] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 190.503554][ T1444] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.503753][ T2496] EXT4-fs error (device loop1): ext4_acquire_dquot:6219: comm syz.1.452: Failed to acquire dquot type 0 [ 190.521575][ T2496] EXT4-fs (loop1): 1 truncate cleaned up [ 190.527220][ T2496] EXT4-fs (loop1): pa ffff8881107fa1f8: logic 1, phys. 41, len 23 [ 190.534830][ T2496] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4363: group 0, free 22, pa_free 23 [ 190.545074][ T2496] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000005,noblock_validity,usrquota,resgid=0x0000000000000000,nogrpid,errors=remount-ro,noinit_itable,inode_readahead_blks=0x0000000000000001,resuid=0x00000000000000002 [ 190.578489][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 190.597940][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.604800][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.613010][ T54] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 190.622278][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.626667][ T2509] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xff6f124c, utbl_chksum : 0xe619d30d) [ 190.629160][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.646503][ T5] usb 3-1: USB disconnect, device number 17 [ 190.659887][ T2496] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 190.680846][ T2486] device veth0_vlan entered promiscuous mode [ 190.687413][ T1458] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 190.697450][ T1458] usb 1-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 190.711699][ T2486] device veth1_macvtap entered promiscuous mode [ 190.718230][ T1458] usb 1-1: config 0 has no interface number 0 [ 190.727279][ T1458] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 190.740780][ T1458] usb 1-1: config 0 interface 8 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 190.750347][ T1458] usb 1-1: New USB device found, idVendor=0582, idProduct=b9d5, bcdDevice=73.f7 [ 190.759287][ T1458] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.771138][ T1458] usb 1-1: config 0 descriptor?? [ 190.780821][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 190.789105][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 190.797620][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 190.807057][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 190.816432][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 190.824347][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 190.833359][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 190.842297][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 190.852552][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 191.050373][ T2481] udc-core: couldn't find an available UDC or it's busy [ 191.057649][ T2481] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 191.065280][ T2481] udc-core: couldn't find an available UDC or it's busy [ 191.072318][ T2481] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 191.079761][ T2481] udc-core: couldn't find an available UDC or it's busy [ 191.086703][ T2481] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 191.093942][ T2481] udc-core: couldn't find an available UDC or it's busy [ 191.101442][ T318] device bridge_slave_1 left promiscuous mode [ 191.108426][ T318] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.120849][ T318] device bridge_slave_0 left promiscuous mode [ 191.130888][ T318] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.138057][ T2481] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 191.153507][ T2481] udc-core: couldn't find an available UDC or it's busy [ 191.161399][ T318] device veth1_macvtap left promiscuous mode [ 191.167558][ T2481] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 191.175130][ T318] device veth0_vlan left promiscuous mode [ 191.184161][ T1458] usb 1-1: USB disconnect, device number 23 [ 191.298686][ T2517] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 191.306322][ T2517] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 191.306453][ T1442] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 191.317290][ T2517] F2FS-fs (loop2): Found nat_bits in checkpoint [ 191.350738][ T2517] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 191.357999][ T2517] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 191.379418][ T2517] overlayfs: invalid origin (0000) [ 191.389958][ T2486] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 191.389969][ T2486] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 191.397607][ T2486] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 191.405023][ T2486] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 191.412420][ T2486] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 191.419878][ T2486] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 191.427367][ T2486] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 191.516526][ T1460] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 191.573910][ T2532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.456'. [ 191.706374][ T1442] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.717305][ T1442] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.728142][ T1442] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 191.737754][ T1442] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.778993][ T1442] usb 2-1: config 0 descriptor?? [ 191.947269][ T2540] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 191.954279][ T2540] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 191.965006][ T2540] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2204: inode #15: comm syz.0.459: corrupted in-inode xattr [ 191.977076][ T2540] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.459: couldn't read orphan inode 15 (err -117) [ 191.988973][ T2540] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,mblk_io_submit,user_xattr,auto_da_alloc,block_validity,quota,,errors=continue [ 192.046909][ T318] device bridge_slave_1 left promiscuous mode [ 192.052871][ T318] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.060415][ T318] device bridge_slave_0 left promiscuous mode [ 192.066506][ T318] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.074477][ T318] device veth1_macvtap left promiscuous mode [ 192.080807][ T1460] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.091933][ T1460] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.101753][ T24] audit: type=1326 audit(2000000001.230:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2545 comm="syz.0.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f478b598ef9 code=0x7ffc0000 [ 192.101880][ T1460] usb 5-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 192.126166][ T2546] syz.0.461[2546] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 192.133733][ T2546] syz.0.461[2546] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 192.134328][ T1460] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.145111][ T24] audit: type=1326 audit(2000000001.250:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2545 comm="syz.0.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f478b598ef9 code=0x7ffc0000 [ 192.164174][ T1460] usb 5-1: config 0 descriptor?? [ 192.187716][ T24] audit: type=1326 audit(2000000001.290:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2545 comm="syz.0.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f478b598ef9 code=0x7ffc0000 [ 192.214650][ T24] audit: type=1326 audit(2000000001.290:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2545 comm="syz.0.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f478b598ef9 code=0x7ffc0000 [ 192.238126][ T24] audit: type=1326 audit(2000000001.320:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2545 comm="syz.0.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f478b598ef9 code=0x7ffc0000 [ 192.262082][ T24] audit: type=1326 audit(2000000001.340:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2545 comm="syz.0.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f478b598ef9 code=0x7ffc0000 [ 192.285639][ T24] audit: type=1326 audit(2000000001.340:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2545 comm="syz.0.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f478b597890 code=0x7ffc0000 [ 192.287518][ T1442] arvo 0003:1E7D:30D4.0013: unknown main item tag 0x0 [ 192.309059][ T24] audit: type=1326 audit(2000000001.340:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2545 comm="syz.0.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f478b598ef9 code=0x7ffc0000 [ 192.338614][ T1442] arvo 0003:1E7D:30D4.0013: unknown main item tag 0x0 [ 192.339434][ T1442] arvo 0003:1E7D:30D4.0013: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 192.345388][ T24] audit: type=1326 audit(2000000001.340:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2545 comm="syz.0.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f478b598ef9 code=0x7ffc0000 [ 192.378935][ T24] audit: type=1326 audit(2000000001.340:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2545 comm="syz.0.461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f478b598ef9 code=0x7ffc0000 [ 192.510545][ T2558] netlink: 16 bytes leftover after parsing attributes in process `syz.2.464'. [ 192.697239][ T1460] cypress 0003:04B4:07B1.0014: unknown main item tag 0x6 [ 192.703296][ T1444] usb 2-1: USB disconnect, device number 38 [ 192.704283][ T1460] cypress 0003:04B4:07B1.0014: item fetching failed at offset 4/5 [ 192.718138][ T1460] cypress 0003:04B4:07B1.0014: parse failed [ 192.723883][ T1460] cypress: probe of 0003:04B4:07B1.0014 failed with error -22 [ 192.786234][ T1458] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 193.026144][ T1458] usb 3-1: Using ep0 maxpacket: 16 [ 193.146193][ T1458] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10 [ 193.157089][ T1458] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24929, setting to 1024 [ 193.167985][ T1458] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 193.180572][ T1458] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 193.189423][ T1458] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.198346][ T1458] usb 3-1: config 0 descriptor?? [ 193.506251][ T1460] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 193.518170][ T2579] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 193.525235][ T2579] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 193.536599][ T2579] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2204: inode #15: comm syz.0.471: corrupted in-inode xattr [ 193.548667][ T2579] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.471: couldn't read orphan inode 15 (err -117) [ 193.560446][ T2579] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,mblk_io_submit,user_xattr,auto_da_alloc,block_validity,quota,,errors=continue [ 193.631263][ T2584] udc-core: couldn't find an available UDC or it's busy [ 193.638054][ T2584] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 193.645916][ T2584] udc-core: couldn't find an available UDC or it's busy [ 193.645944][ T2585] udc-core: couldn't find an available UDC or it's busy [ 193.653077][ T2584] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 193.659547][ T2585] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 193.736185][ T1458] usbhid 3-1:0.0: can't add hid device: -71 [ 193.741976][ T1458] usbhid: probe of 3-1:0.0 failed with error -71 [ 193.751234][ T1458] usb 3-1: USB disconnect, device number 18 [ 193.786201][ T1460] usb 2-1: too many configurations: 65, using maximum allowed: 8 [ 193.866173][ T1460] usb 2-1: config index 0 descriptor too short (expected 159, got 146) [ 193.874237][ T1460] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 193.884194][ T1460] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 193.906188][ T1457] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 193.966222][ T1460] usb 2-1: config index 1 descriptor too short (expected 159, got 146) [ 193.974324][ T1460] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 193.984226][ T1460] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 194.066180][ T1460] usb 2-1: config index 2 descriptor too short (expected 159, got 146) [ 194.074281][ T1460] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 194.084497][ T1460] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 194.158805][ T1444] usb 5-1: USB disconnect, device number 26 [ 194.169897][ T1460] usb 2-1: config index 3 descriptor too short (expected 159, got 146) [ 194.178141][ T1457] usb 1-1: device descriptor read/64, error -71 [ 194.185532][ T1460] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 194.195717][ T1460] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 194.276223][ T1460] usb 2-1: config index 4 descriptor too short (expected 159, got 146) [ 194.284365][ T1460] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 194.294518][ T1460] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 194.666268][ T1460] usb 2-1: config index 5 descriptor too short (expected 159, got 146) [ 194.674611][ T1460] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 194.686685][ T1460] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 194.698474][ T2595] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 194.706287][ T2595] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 194.716874][ T2595] F2FS-fs (loop2): Found nat_bits in checkpoint [ 194.749462][ T2595] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 194.756399][ T2595] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 194.766936][ T1460] usb 2-1: config index 6 descriptor too short (expected 159, got 146) [ 194.775218][ T1460] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 194.785295][ T1460] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 194.856193][ T1457] usb 1-1: device descriptor read/64, error -71 [ 194.866265][ T1460] usb 2-1: config index 7 descriptor too short (expected 159, got 146) [ 194.874335][ T1460] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 194.886471][ T1460] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 195.120862][ T1460] usb 2-1: New USB device found, idVendor=08b7, idProduct=0001, bcdDevice= 0.00 [ 195.130093][ T1460] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 195.137937][ T1460] usb 2-1: SerialNumber: syz [ 195.186204][ T1457] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 195.417050][ T1460] usb 2-1: 0:2 : does not exist [ 195.421840][ T1460] usb 2-1: unit 5 not found! [ 195.438757][ T1460] usb 2-1: USB disconnect, device number 39 [ 195.495113][ T1457] usb 1-1: device descriptor read/64, error -71 [ 195.616919][ T2632] binder: 2624:2632 ioctl 4018620d 0 returned -22 [ 195.637845][ T2634] FAT-fs (loop3): Unrecognized mount option "rodtf8=1" or missing value [ 195.653136][ T1333] udevd[1333]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 196.074616][ T1457] usb 1-1: device descriptor read/64, error -71 [ 196.074860][ T2639] syz.3.484[2639] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 196.080876][ T2639] syz.3.484[2639] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 196.196483][ T1457] usb usb1-port1: attempt power cycle [ 196.233418][ T2645] netlink: 24 bytes leftover after parsing attributes in process `syz.2.487'. [ 196.301782][ T2642] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 196.312929][ T2642] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue [ 196.830681][ T2648] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 196.840101][ T2648] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038 (0x7fffffff) [ 196.876147][ T1457] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 196.926812][ T2660] EXT4-fs (loop0): Test dummy encryption mode enabled [ 196.980975][ T2660] EXT4-fs error (device loop0): __ext4_iget:4958: inode #11: block 1: comm syz.0.490: invalid block [ 196.992542][ T2660] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.490: couldn't read orphan inode 11 (err -117) [ 197.007047][ T2660] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000010000,jqfmt=vfsv0,delalloc,inode_readahead_blks=0x0000000000400000,noauto_da_alloc,test_dummy_encryption,,errors=continue [ 197.008960][ T2661] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,grpid,debug_want_extra_isize=0x0000000000000080,nouid32,nodelalloc,acl,noinit_itable,,errors=continue [ 197.163261][ T2672] tmpfs: Unknown parameter '' [ 197.316144][ T1454] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 197.373039][ T24] kauditd_printk_skb: 18 callbacks suppressed [ 197.373085][ T24] audit: type=1400 audit(2000000006.500:1148): avc: denied { append } for pid=2673 comm="syz.2.491" name="loop5" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 197.396161][ T1460] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 197.421838][ T24] audit: type=1400 audit(2000000006.550:1149): avc: denied { mounton } for pid=2673 comm="syz.2.491" path="/11/bus/bus" dev="loop2" ino=1048631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 197.474928][ T24] audit: type=1400 audit(2000000006.550:1150): avc: denied { mounton } for pid=2673 comm="syz.2.491" path="/11/bus/bus" dev="loop2" ino=1048631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 197.486167][ T1457] usb 1-1: device not accepting address 26, error -71 [ 197.646141][ T1460] usb 4-1: Using ep0 maxpacket: 16 [ 197.676439][ T1454] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 197.688842][ T1454] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 197.766284][ T1460] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 197.776688][ T1454] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 197.785774][ T1454] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 197.789935][ T2688] erofs: (device loop0): mounted with root inode @ nid 36. [ 197.793743][ T1454] usb 5-1: SerialNumber: syz [ 197.926228][ T1460] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 197.935445][ T1460] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.943305][ T1460] usb 4-1: Product: syz [ 197.948112][ T1460] usb 4-1: Manufacturer: syz [ 197.952625][ T1460] usb 4-1: SerialNumber: syz [ 197.959637][ T1460] usb 4-1: config 0 descriptor?? [ 197.996853][ T1460] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 198.004468][ T1460] usb 4-1: Detected FT232RL [ 198.086748][ T1454] usb 5-1: 0:2 : does not exist [ 198.092834][ T1454] usb 5-1: USB disconnect, device number 27 [ 198.206168][ T1460] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 198.246741][ T1460] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 198.266169][ T1460] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 198.273111][ T1460] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 198.282488][ T1460] usb 4-1: USB disconnect, device number 18 [ 198.289347][ T1460] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 198.300440][ T1460] ftdi_sio 4-1:0.0: device disconnected [ 198.968304][ T24] audit: type=1326 audit(2000000008.100:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2698 comm="syz.2.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a501bef9 code=0x7ffc0000 [ 198.991742][ T24] audit: type=1326 audit(2000000008.100:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2698 comm="syz.2.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f16a501bef9 code=0x7ffc0000 [ 199.015738][ T24] audit: type=1326 audit(2000000008.100:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2698 comm="syz.2.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a501bef9 code=0x7ffc0000 [ 199.039059][ T24] audit: type=1326 audit(2000000008.100:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2698 comm="syz.2.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f16a501a890 code=0x7ffc0000 [ 199.062598][ T24] audit: type=1326 audit(2000000008.120:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2698 comm="syz.2.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a501bef9 code=0x7ffc0000 [ 199.086326][ T24] audit: type=1326 audit(2000000008.120:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2698 comm="syz.2.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16a501bef9 code=0x7ffc0000 [ 199.109662][ T24] audit: type=1326 audit(2000000008.120:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2698 comm="syz.2.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f16a501bef9 code=0x7ffc0000 [ 199.139652][ T2704] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e00cc02c, mo2=0002] [ 199.147639][ T2704] System zones: 0-1, 3-36 [ 199.152798][ T2704] EXT4-fs (loop4): mounted filesystem without journal. Opts: resgid=0x000000000000ee01,data_err=ignore,discard,max_batch_time=0x0000000000000003,resuid=0x0000000000000000,max_batch_time=0x0000000000000006,usrquota,nodelalloc,errors=remount-ro,bsddf,debug, [ 199.617693][ T2719] 9pnet: Insufficient options for proto=fd [ 200.097497][ T2748] EXT4-fs warning (device sda1): ext4_resize_fs:1959: can't read last block, resize aborted [ 200.296824][ T2744] erofs: (device loop1): mounted with root inode @ nid 36. [ 200.310487][ T2739] attempt to access beyond end of device [ 200.310487][ T2739] loop1: rw=0, want=1049384, limit=16 [ 200.328495][ T2743] EXT4-fs (loop0): unsupported inode size: 0 [ 200.368224][ T2743] EXT4-fs (loop0): blocksize: 1024 [ 200.374665][ T2751] fuse: Unknown parameter 'group_id3!' [ 200.567698][ T2754] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 200.600892][ T2754] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1047: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 200.616214][ T1460] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 200.626824][ T2758] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 200.636436][ T2758] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038 (0x7fffffff) [ 200.676327][ T2754] EXT4-fs (loop3): 1 truncate cleaned up [ 200.687279][ T2754] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 200.876042][ T2773] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 201.072521][ T1455] Bluetooth: hci0: command 0x1003 tx timeout [ 201.088971][ T40] Bluetooth: hci0: sending frame failed (-49) [ 201.138480][ T1460] usb 2-1: device descriptor read/64, error -71 [ 201.536153][ T1460] usb 2-1: device descriptor read/64, error -71 [ 201.759144][ T2785] EXT4-fs (loop0): Test dummy encryption mode enabled [ 201.873041][ T2785] EXT4-fs error (device loop0): __ext4_iget:4958: inode #11: block 1: comm syz.0.514: invalid block [ 201.884000][ T2785] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.514: couldn't read orphan inode 11 (err -117) [ 201.895660][ T2785] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000010000,jqfmt=vfsv0,delalloc,inode_readahead_blks=0x0000000000400000,noauto_da_alloc,test_dummy_encryption,,errors=continue [ 202.016202][ T1460] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 202.034332][ T2795] syz.0.515 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 202.045327][ T2795] 9pnet: Insufficient options for proto=fd [ 202.286139][ T1460] usb 2-1: device descriptor read/64, error -71 [ 202.326144][ T1442] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 202.383535][ T2806] udc-core: couldn't find an available UDC or it's busy [ 202.390576][ T2806] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 202.646164][ T54] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 202.676155][ T1460] usb 2-1: device descriptor read/64, error -71 [ 202.726188][ T1442] usb 1-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 202.735055][ T1442] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.776966][ T1442] ftdi_sio 1-1:4.0: FTDI USB Serial Device converter detected [ 202.784556][ T1442] usb 1-1: Detected FT-X [ 202.797470][ T1460] usb usb2-port1: attempt power cycle [ 202.816775][ T2809] erofs: (device loop1): mounted with root inode @ nid 36. [ 202.956146][ T1444] Bluetooth: hci1: command 0x1003 tx timeout [ 202.962282][ T40] Bluetooth: hci1: sending frame failed (-49) [ 203.116190][ T1444] Bluetooth: hci0: command 0x1001 tx timeout [ 203.122036][ T40] Bluetooth: hci0: sending frame failed (-49) [ 203.146220][ T54] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 203.156987][ T54] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 203.166649][ T54] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 203.175460][ T54] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.006204][ T54] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 204.013724][ T54] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input15 [ 204.022927][ T54] input: failed to attach handler kbd to device input15, error: -5 [ 204.442516][ T2827] cgroup: syz.1.521 (2827) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future. [ 204.458739][ T2827] cgroup: "memory" requires setting use_hierarchy to 1 on the root [ 204.998781][ T1442] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 205.016893][ T1442] ftdi_sio 1-1:4.0: GPIO initialisation failed: -71 [ 205.023859][ T1442] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 205.032485][ T1442] usb 1-1: USB disconnect, device number 28 [ 205.039101][ T1442] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 205.071406][ T1442] ftdi_sio 1-1:4.0: device disconnected [ 205.078935][ T1440] Bluetooth: hci1: command 0x1001 tx timeout [ 205.084803][ T40] Bluetooth: hci1: sending frame failed (-49) [ 205.196130][ T1440] Bluetooth: hci0: command 0x1009 tx timeout [ 205.278912][ T2840] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 205.285117][ T2840] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 205.295453][ T2840] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 205.318604][ T2840] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 205.325439][ T2840] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 205.343175][ T2840] attempt to access beyond end of device [ 205.343175][ T2840] loop1: rw=10241, want=53256, limit=40427 [ 205.361491][ T2428] attempt to access beyond end of device [ 205.361491][ T2428] loop1: rw=2049, want=45112, limit=40427 [ 205.387570][ T1460] usb 4-1: USB disconnect, device number 19 [ 205.586200][ T1442] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 205.936071][ T2853] erofs: (device loop3): mounted with root inode @ nid 36. [ 205.951031][ T2853] attempt to access beyond end of device [ 205.951031][ T2853] loop3: rw=0, want=1049384, limit=16 [ 206.056166][ T1442] usb 1-1: Using ep0 maxpacket: 16 [ 206.226172][ T1442] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 206.233998][ T1442] usb 1-1: config 0 has no interface number 0 [ 206.239943][ T1440] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 206.247291][ T1442] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 206.256786][ T1442] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 206.374284][ T24] kauditd_printk_skb: 40 callbacks suppressed [ 206.374296][ T24] audit: type=1326 audit(2000000015.500:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2858 comm="syz.1.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5009421ef9 code=0x7ffc0000 [ 206.403894][ T1442] usb 1-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 206.456432][ T1442] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 206.464375][ T1442] usb 1-1: Product: syz [ 206.468313][ T1442] usb 1-1: SerialNumber: syz [ 206.473348][ T1442] usb 1-1: config 0 descriptor?? [ 206.556240][ T1440] usb 4-1: device descriptor read/64, error -71 [ 206.776806][ T1442] snd-usb-audio: probe of 1-1:0.2 failed with error -12 [ 206.784696][ T1442] usb 1-1: USB disconnect, device number 29 [ 206.976147][ T1440] usb 4-1: device descriptor read/64, error -71 [ 207.116308][ T1444] Bluetooth: hci1: command 0x1009 tx timeout [ 207.280185][ T1440] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 207.576152][ T1440] usb 4-1: device descriptor read/64, error -71 [ 207.986148][ T1440] usb 4-1: device descriptor read/64, error -71 [ 208.106209][ T1440] usb usb4-port1: attempt power cycle [ 208.160153][ T2880] binder_alloc: 2879: binder_alloc_buf, no vma [ 208.216696][ T2883] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 208.224362][ T2883] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a024e01c, mo2=0002] [ 208.232162][ T2883] System zones: 1-12 [ 208.236481][ T2883] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.536: casefold flag without casefold feature [ 208.249224][ T2883] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #12: comm syz.0.536: missing EA_INODE flag [ 208.260623][ T2883] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.536: error while reading EA inode 12 err=-117 [ 208.272948][ T2883] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #12: comm syz.0.536: missing EA_INODE flag [ 208.284346][ T2883] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.536: error while reading EA inode 12 err=-117 [ 208.296537][ T2883] EXT4-fs (loop0): 1 orphan inode deleted [ 208.302087][ T2883] EXT4-fs (loop0): mounted filesystem without journal. Opts: nouid32,user_xattr,debug_want_extra_isize=0x000000000000005c,debug,mblk_io_submit,errors=continue,usrjquota=,prjquota,nodiscard,,errors=continue [ 208.585671][ T24] audit: type=1400 audit(2000000017.700:1199): avc: denied { mounton } for pid=2882 comm="syz.0.536" path="/23/file0/file0" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 208.646155][ T1440] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 208.699652][ T2897] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.707237][ T2897] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.714484][ T2897] device bridge_slave_0 entered promiscuous mode [ 208.721546][ T2897] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.728971][ T2897] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.736598][ T2897] device bridge_slave_1 entered promiscuous mode [ 208.774263][ T2897] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.781128][ T2897] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.788210][ T2897] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.794980][ T2897] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.840934][ T1444] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.852857][ T24] audit: type=1326 audit(2000000017.980:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2896 comm="syz.3.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9afbb94ef9 code=0x7ffc0000 [ 208.876312][ T1444] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.881633][ T24] audit: type=1326 audit(2000000017.980:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2896 comm="syz.3.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9afbb94ef9 code=0x7ffc0000 [ 208.912710][ T24] audit: type=1326 audit(2000000017.980:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2896 comm="syz.3.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9afbb94ef9 code=0x7ffc0000 [ 208.937063][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 208.940864][ T24] audit: type=1326 audit(2000000017.980:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2896 comm="syz.3.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9afbb94ef9 code=0x7ffc0000 [ 208.947395][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 208.972771][ T24] audit: type=1326 audit(2000000017.980:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2896 comm="syz.3.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9afbb94ef9 code=0x7ffc0000 [ 208.997946][ T24] audit: type=1326 audit(2000000017.980:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2896 comm="syz.3.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f9afbb94ef9 code=0x7ffc0000 [ 209.027978][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 209.048126][ T1444] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.054968][ T1444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.064114][ T24] audit: type=1326 audit(2000000017.980:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2896 comm="syz.3.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9afbb94ef9 code=0x7ffc0000 [ 209.083745][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 209.097189][ T24] audit: type=1326 audit(2000000017.980:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2896 comm="syz.3.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9afbb94ef9 code=0x7ffc0000 [ 209.111784][ T1444] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.127114][ T1444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.134511][ T1440] usb 4-1: device not accepting address 22, error -71 [ 209.141661][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 209.149972][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 209.168573][ T2897] device veth0_vlan entered promiscuous mode [ 209.178208][ T1442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 209.186410][ T1442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 209.194130][ T1442] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 209.202161][ T1442] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 209.217793][ T1446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 209.227190][ T2897] device veth1_macvtap entered promiscuous mode [ 209.257325][ T1446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 209.275654][ T1442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 209.535053][ T2921] fuse: Unknown parameter 'fdL' [ 209.542652][ T2923] netlink: 'syz.3.546': attribute type 1 has an invalid length. [ 209.550382][ T2923] netlink: 216 bytes leftover after parsing attributes in process `syz.3.546'. [ 209.626148][ T1460] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 209.696151][ T1446] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 209.876227][ T1440] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 209.896140][ T1460] usb 1-1: Using ep0 maxpacket: 16 [ 209.906760][ T318] device bridge_slave_1 left promiscuous mode [ 209.912801][ T318] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.920100][ T318] device bridge_slave_0 left promiscuous mode [ 209.926018][ T318] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.933740][ T318] device veth1_macvtap left promiscuous mode [ 209.939596][ T1446] usb 2-1: Using ep0 maxpacket: 16 [ 209.939653][ T318] device veth0_vlan left promiscuous mode [ 210.036282][ T1460] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 210.044171][ T1460] usb 1-1: config 0 has no interface number 0 [ 210.050510][ T1460] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 210.059981][ T1460] usb 1-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 210.086208][ T1440] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 210.097303][ T1440] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 41146, setting to 1024 [ 210.108389][ T1440] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 210.216205][ T1460] usb 1-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 210.216242][ T1446] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 210.225047][ T1460] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 210.225056][ T1460] usb 1-1: Product: syz [ 210.225065][ T1460] usb 1-1: SerialNumber: syz [ 210.226047][ T1460] usb 1-1: config 0 descriptor?? [ 210.234251][ T1446] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.263178][ T1446] usb 2-1: Product: syz [ 210.267142][ T1446] usb 2-1: Manufacturer: syz [ 210.271551][ T1446] usb 2-1: SerialNumber: syz [ 210.280118][ T1446] usb 2-1: config 0 descriptor?? [ 210.296194][ T1440] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 210.305034][ T1440] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.313081][ T1440] usb 4-1: Product: syz [ 210.318459][ T1440] usb 4-1: Manufacturer: syz [ 210.322860][ T1440] usb 4-1: SerialNumber: syz [ 210.428959][ T2927] F2FS-fs (loop2): Invalid segment/section count (31, 24 x 1) [ 210.436377][ T2927] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 210.445162][ T2927] F2FS-fs (loop2): invalid crc value [ 210.451438][ T2927] F2FS-fs (loop2): Found nat_bits in checkpoint [ 210.482405][ T2927] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 210.489309][ T2927] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 210.526809][ T1460] snd-usb-audio: probe of 1-1:0.2 failed with error -12 [ 210.540098][ T1460] usb 1-1: USB disconnect, device number 30 [ 210.566506][ T2923] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 210.740603][ T1455] usb 2-1: USB disconnect, device number 43 [ 210.860597][ T2934] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.867452][ T2934] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.874584][ T2934] device bridge_slave_0 entered promiscuous mode [ 210.881415][ T2934] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.888373][ T2934] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.895588][ T2934] device bridge_slave_1 entered promiscuous mode [ 210.930866][ T2934] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.937704][ T2934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.944770][ T2934] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.951613][ T2934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.969315][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 210.976733][ T1455] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.983703][ T1455] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.992868][ T1446] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 211.001003][ T1446] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.007878][ T1446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.017928][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 211.026437][ T1455] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.033312][ T1455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.049137][ T1460] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 211.057118][ T1460] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 211.082624][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 211.092337][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 211.100314][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 211.108018][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 211.115639][ T2934] device veth0_vlan entered promiscuous mode [ 211.140804][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 211.164549][ T2934] device veth1_macvtap entered promiscuous mode [ 211.181718][ T1446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 211.191803][ T1460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 211.202527][ T2949] EXT4-fs (loop0): Ignoring removed orlov option [ 211.209229][ T2949] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 211.219859][ T2949] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 211.228344][ T1440] cdc_ncm 4-1:1.0: SET_CRC_MODE failed [ 211.323574][ T2957] tmpfs: Unknown parameter 'hu' [ 211.328560][ T1440] cdc_ncm 4-1:1.0: bind() failure [ 211.341424][ T1440] cdc_ncm 4-1:1.1: bind() failure [ 211.353120][ T1440] usb 4-1: USB disconnect, device number 23 [ 211.623996][ T2971] IPv6: sit1: Disabled Multicast RS [ 211.846240][ T54] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 211.861046][ T24] kauditd_printk_skb: 43 callbacks suppressed [ 211.861058][ T24] audit: type=1400 audit(2000000020.990:1251): avc: denied { watch } for pid=2972 comm="syz.3.556" path="/26/control" dev="tmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 211.907024][ T318] device bridge_slave_1 left promiscuous mode [ 211.913051][ T318] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.920751][ T318] device bridge_slave_0 left promiscuous mode [ 211.926932][ T318] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.934669][ T318] device veth1_macvtap left promiscuous mode [ 211.940548][ T318] device veth0_vlan left promiscuous mode [ 212.156277][ T1458] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 212.161056][ T2982] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 212.226228][ T54] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.236471][ T54] usb 1-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.236876][ T2987] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 212.254974][ T1440] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 212.260240][ T2987] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,grpquota,init_itable,user_xattr,nomblk_io_submit,,errors=continue [ 212.265283][ T54] usb 1-1: config 0 interface 0 altsetting 129 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.289880][ T54] usb 1-1: config 0 interface 0 has no altsetting 0 [ 212.296520][ T54] usb 1-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 212.305445][ T54] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.315770][ T54] usb 1-1: config 0 descriptor?? [ 212.323684][ T2987] netlink: 28 bytes leftover after parsing attributes in process `syz.4.560'. [ 212.338880][ T24] audit: type=1400 audit(2000000021.470:1252): avc: denied { getopt } for pid=2990 comm="syz.1.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 212.446171][ T1458] usb 3-1: Using ep0 maxpacket: 16 [ 212.516205][ T1440] usb 4-1: Using ep0 maxpacket: 16 [ 212.666333][ T1440] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 212.681476][ T1440] usb 4-1: config 0 has no interface number 0 [ 212.752079][ T1440] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 212.787648][ T1440] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 212.816902][ T24] audit: type=1404 audit(2000000021.950:1253): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 212.833842][ T24] audit: type=1400 audit(2000000021.960:1254): avc: denied { ioctl } for pid=2975 comm="syz.2.557" path="/dev/raw-gadget" dev="devtmpfs" ino=161 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 212.859558][ T54] zeroplus 0003:0C12:0005.0015: item fetching failed at offset 1/5 [ 212.867439][ T54] zeroplus 0003:0C12:0005.0015: parse failed [ 212.873387][ T54] zeroplus: probe of 0003:0C12:0005.0015 failed with error -22 [ 212.889525][ T24] audit: type=1404 audit(2000000021.960:1255): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 212.904664][ T24] audit: type=1400 audit(2000000021.960:1256): avc: denied { prog_load } for pid=2966 comm="syz.0.555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 212.923646][ T24] audit: type=1400 audit(2000000021.960:1257): avc: denied { bpf } for pid=2966 comm="syz.0.555" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 212.944088][ T24] audit: type=1400 audit(2000000021.960:1258): avc: denied { perfmon } for pid=2966 comm="syz.0.555" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 212.944147][ T1440] usb 4-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 212.964830][ T24] audit: type=1400 audit(2000000021.960:1259): avc: denied { ioctl } for pid=2966 comm="syz.0.555" path="/dev/raw-gadget" dev="devtmpfs" ino=161 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 212.973684][ T1440] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 213.002667][ T3000] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 213.013461][ T1440] usb 4-1: Product: syz [ 213.017608][ T3000] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 213.023576][ T24] audit: type=1400 audit(2000000021.960:1260): avc: denied { read write } for pid=2975 comm="syz.2.557" name="fuse" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 213.026503][ T1440] usb 4-1: SerialNumber: syz [ 213.050652][ T3000] F2FS-fs (loop4): invalid crc value [ 213.057809][ T1440] usb 4-1: config 0 descriptor?? [ 213.059796][ T3000] F2FS-fs (loop4): Found nat_bits in checkpoint [ 213.070096][ T1444] usb 1-1: USB disconnect, device number 31 [ 213.095581][ T3000] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 213.103182][ T3000] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 213.158875][ T3011] udc-core: couldn't find an available UDC or it's busy [ 213.165767][ T3011] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 213.349596][ T1440] snd-usb-audio: probe of 4-1:0.2 failed with error -12 [ 213.363837][ T1440] usb 4-1: USB disconnect, device number 24 [ 213.410372][ T3014] xt_hashlimit: size too large, truncated to 1048576 [ 213.877496][ T1455] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 214.146202][ T1455] usb 2-1: Using ep0 maxpacket: 16 [ 214.196260][ T1460] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 214.368553][ T1455] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 214.379851][ T1455] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 214.388760][ T1455] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.397079][ T1455] usb 2-1: config 0 descriptor?? [ 214.626336][ T1460] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.637189][ T1460] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.646794][ T1460] usb 1-1: New USB device found, idVendor=056a, idProduct=032f, bcdDevice= 0.00 [ 214.656535][ T1460] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.672637][ T1460] usb 1-1: config 0 descriptor?? [ 214.756191][ T1455] usbhid 2-1:0.0: can't add hid device: -71 [ 214.761991][ T1455] usbhid: probe of 2-1:0.0 failed with error -71 [ 214.771818][ T1455] usb 2-1: USB disconnect, device number 44 [ 215.081022][ T3063] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 215.088520][ T3063] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 215.095537][ T3063] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 215.157134][ T3063] EXT4-fs (loop3): mounted filesystem without journal. Opts: nomblk_io_submit,noinit_itable,errors=remount-ro,norecovery,mblk_io_submit,mblk_io_submit,i_version,barrier=0x0000000000000000,grpjquota=,bsddf, [ 216.408827][ T3047] sched: RT throttling activated [ 216.657333][ T3048] EXT4-fs (loop1): Mount option "delalloc" incompatible with ext3 [ 217.416679][ T1458] usb 3-1: string descriptor 0 read error: -71 [ 217.422783][ T1458] usb 3-1: New USB device found, idVendor=0582, idProduct=00e6, bcdDevice=4e.06 [ 217.431675][ T1458] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.446396][ T1458] usb 3-1: config 0 descriptor?? [ 217.998387][ T1458] usb 3-1: can't set config #0, error -71 [ 218.004479][ T1458] usb 3-1: USB disconnect, device number 19 [ 218.021491][ T24] kauditd_printk_skb: 47 callbacks suppressed [ 218.021504][ T24] audit: type=1400 audit(2000000027.150:1308): avc: denied { mounton } for pid=3062 comm="syz.3.577" path="/30/file0/file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 218.035519][ T3076] udc-core: couldn't find an available UDC or it's busy [ 218.058473][ T3076] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 218.065829][ T24] audit: type=1400 audit(2000000027.150:1309): avc: denied { create } for pid=3062 comm="syz.3.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 218.087682][ T1460] usbhid 1-1:0.0: can't add hid device: -71 [ 218.093463][ T1460] usbhid: probe of 1-1:0.0 failed with error -71 [ 218.114362][ T1460] usb 1-1: USB disconnect, device number 32 [ 218.136494][ T3079] erofs: Unknown parameter '00000000000000000003' [ 218.241784][ T24] audit: type=1400 audit(2000000027.370:1310): avc: denied { ioctl } for pid=3062 comm="syz.3.577" path="socket:[25871]" dev="sockfs" ino=25871 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 218.545816][ T24] audit: type=1400 audit(2000000027.670:1311): avc: denied { create } for pid=3088 comm="syz.3.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 218.578060][ T24] audit: type=1400 audit(2000000027.710:1312): avc: denied { read } for pid=3090 comm="syz.0.584" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 218.600573][ T1442] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 218.606146][ T1455] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 218.608089][ T1440] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 218.656357][ T24] audit: type=1400 audit(2000000027.750:1313): avc: denied { open } for pid=3090 comm="syz.0.584" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 218.816201][ T24] audit: type=1400 audit(2000000027.940:1314): avc: denied { ioctl } for pid=3090 comm="syz.0.584" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 218.895627][ T24] audit: type=1400 audit(2000000027.940:1315): avc: denied { set_context_mgr } for pid=3090 comm="syz.0.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 219.056200][ T1440] usb 3-1: config 0 has an invalid interface number: 127 but max is 1 [ 219.064445][ T1440] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 225 [ 219.076928][ T1440] usb 3-1: config 0 has no interface number 1 [ 219.082847][ T1440] usb 3-1: config 0 interface 127 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 219.095907][ T1440] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 29 [ 219.108822][ T1442] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.119622][ T1442] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.129394][ T1442] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 219.138400][ T1442] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.151544][ T1442] usb 5-1: config 0 descriptor?? [ 219.196206][ T1455] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 219.206456][ T1455] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 219.276198][ T1440] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 219.285290][ T1440] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.293071][ T1440] usb 3-1: Product: syz [ 219.296199][ T1455] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 219.297083][ T1440] usb 3-1: Manufacturer: syz [ 219.305970][ T1455] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 219.310367][ T1440] usb 3-1: SerialNumber: syz [ 219.318517][ T1455] usb 2-1: SerialNumber: syz [ 219.323453][ T1440] usb 3-1: config 0 descriptor?? [ 219.366837][ T1440] usb-storage 3-1:0.127: USB Mass Storage device detected [ 219.374558][ T1440] usb-storage 3-1:0.127: Quirks match for vid 1908 pid 1315: 20000 [ 219.460404][ T1440] usb-storage 3-1:0.0: USB Mass Storage device detected [ 219.468154][ T1440] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 219.490377][ T3106] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 219.511157][ T24] audit: type=1400 audit(2000000028.640:1316): avc: denied { create } for pid=3116 comm="syz.3.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 219.617236][ T1455] usb 2-1: 0:2 : does not exist [ 219.624386][ T1455] usb 2-1: USB disconnect, device number 45 [ 219.630651][ T1442] hid (null): bogus close delimiter [ 219.946252][ T24] audit: type=1400 audit(2000000029.070:1317): avc: denied { write } for pid=3116 comm="syz.3.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 220.276755][ T1431] udevd[1431]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 220.418097][ T3135] kernel profiling enabled (shift: 0) [ 220.796303][ T1442] usb 5-1: string descriptor 0 read error: -71 [ 220.816194][ T1444] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 220.823842][ T1442] uclogic 0003:256C:006D.0016: failed retrieving string descriptor #200: -71 [ 220.832845][ T1442] uclogic 0003:256C:006D.0016: failed retrieving pen parameters: -71 [ 220.841018][ T1442] uclogic 0003:256C:006D.0016: failed probing pen v2 parameters: -71 [ 220.851797][ T1442] uclogic 0003:256C:006D.0016: failed probing parameters: -71 [ 220.859656][ T1442] uclogic: probe of 0003:256C:006D.0016 failed with error -71 [ 220.921378][ T1442] usb 5-1: USB disconnect, device number 28 [ 221.066152][ T1444] usb 4-1: Using ep0 maxpacket: 16 [ 221.088845][ T1456] usb 3-1: USB disconnect, device number 20 [ 221.096429][ T3143] syz.2.597[3143] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 221.096488][ T3143] syz.2.597[3143] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 221.186232][ T1444] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.208109][ T1444] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.217674][ T1444] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 221.230249][ T1444] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 221.239103][ T1444] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.246136][ T1455] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 221.255284][ T1444] usb 4-1: config 0 descriptor?? [ 221.339865][ T3152] EXT4-fs (loop4): Ignoring removed bh option [ 221.345947][ T3152] EXT4-fs (loop4): Ignoring removed nobh option [ 221.352280][ T3152] EXT4-fs (loop4): Unrecognized mount option "mb_optimize_scan=0xfffffffffffffffd" or missing value [ 221.486719][ T3152] EXT4-fs (loop4): Mount option "commit=0x000000000000000e" incompatible with ext2 [ 221.536182][ T1456] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 221.636228][ T1455] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.646965][ T1455] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.656615][ T1455] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 221.659440][ T3158] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 221.688081][ T1455] usb 1-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 221.697175][ T1455] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.705571][ T1455] usb 1-1: config 0 descriptor?? [ 221.726955][ T3161] EXT4-fs (loop1): Unrecognized mount option "euid<00000000000000000000" or missing value [ 221.737411][ T1444] koneplus 0003:1E7D:2E22.0017: item fetching failed at offset 0/2 [ 221.745205][ T1444] koneplus 0003:1E7D:2E22.0017: parse failed [ 221.751033][ T1444] koneplus: probe of 0003:1E7D:2E22.0017 failed with error -22 [ 221.776155][ T1456] usb 3-1: Using ep0 maxpacket: 32 [ 221.896773][ T3164] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 221.909864][ T3164] EXT4-fs (loop4): orphan cleanup on readonly fs [ 221.916128][ T3164] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:510: comm syz.4.604: Block bitmap for bg 0 marked uninitialized [ 221.926203][ T1456] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.929332][ T3164] EXT4-fs error (device loop4) in ext4_mb_clear_bb:5648: Corrupt filesystem [ 221.944200][ T1456] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.948819][ T3164] EXT4-fs (loop4): 1 orphan inode deleted [ 221.964046][ T3164] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 222.159688][ T3128] EXT4-fs (loop3): Test dummy encryption mode enabled [ 222.189715][ T1456] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 222.204899][ T3128] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:163: inode #12: comm syz.3.594: inline data xattr refers to an external xattr inode [ 222.222171][ T1456] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.230357][ T3128] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.594: couldn't read orphan inode 12 (err -117) [ 222.234323][ T1456] usb 3-1: config 0 descriptor?? [ 222.242233][ T3128] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000000001,init_itable,nolazytime,grpid,prjquota,norecovery,lazytime,errors=continue,auto_da_alloc,test_dummy_encryption,,errors=continue [ 222.272222][ T1460] usb 4-1: USB disconnect, device number 25 [ 222.286190][ T1455] usbhid 1-1:0.0: can't add hid device: -71 [ 222.292608][ T1456] hub 3-1:0.0: USB hub found [ 222.297190][ T1455] usbhid: probe of 1-1:0.0 failed with error -71 [ 222.314475][ T1455] usb 1-1: USB disconnect, device number 33 [ 222.496175][ T1456] hub 3-1:0.0: 1 port detected [ 222.628376][ T3184] EXT4-fs (loop1): Test dummy encryption mode enabled [ 222.636371][ T3184] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue [ 222.648094][ T3184] ext4 filesystem being mounted at /37/mnt supports timestamps until 2038 (0x7fffffff) [ 222.666218][ T1455] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 223.091460][ T3194] FAT-fs (loop3): Directory bread(block 64) failed [ 223.097964][ T3194] FAT-fs (loop3): Directory bread(block 65) failed [ 223.104669][ T3194] FAT-fs (loop3): Directory bread(block 66) failed [ 223.111245][ T3194] FAT-fs (loop3): Directory bread(block 67) failed [ 223.117662][ T3194] FAT-fs (loop3): Directory bread(block 68) failed [ 223.123890][ T3194] FAT-fs (loop3): Directory bread(block 69) failed [ 223.130276][ T3194] FAT-fs (loop3): Directory bread(block 70) failed [ 223.136722][ T3194] FAT-fs (loop3): Directory bread(block 71) failed [ 223.143115][ T3194] FAT-fs (loop3): Directory bread(block 72) failed [ 223.149633][ T3194] FAT-fs (loop3): Directory bread(block 73) failed [ 223.196182][ T1456] hub 3-1:0.0: activate --> -90 [ 223.256232][ T1455] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.267457][ T1455] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.277581][ T1455] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 223.286796][ T1455] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.295250][ T1455] usb 1-1: config 0 descriptor?? [ 223.356591][ T3205] erofs: Unknown parameter '0xffffffffffffffff]#[8+KW䶓?҇98 7' [ 223.487689][ T1440] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 223.522040][ T24] kauditd_printk_skb: 48 callbacks suppressed [ 223.522054][ T24] audit: type=1326 audit(2000000032.650:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3208 comm="syz.1.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5009421ef9 code=0x7ffc0000 [ 223.524020][ T3209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.613'. [ 223.528043][ T24] audit: type=1326 audit(2000000032.650:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3208 comm="syz.1.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5009421ef9 code=0x7ffc0000 [ 223.585125][ T24] audit: type=1326 audit(2000000032.650:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3208 comm="syz.1.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f5009421ef9 code=0x7ffc0000 [ 223.616622][ T24] audit: type=1326 audit(2000000032.650:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3208 comm="syz.1.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5009421ef9 code=0x7ffc0000 [ 223.809270][ T24] audit: type=1326 audit(2000000032.650:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3208 comm="syz.1.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5009421ef9 code=0x7ffc0000 [ 223.841343][ T1458] usb 3-1: USB disconnect, device number 21 [ 223.854707][ T24] audit: type=1326 audit(2000000032.650:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3208 comm="syz.1.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f5009421ef9 code=0x7ffc0000 [ 223.926477][ T24] audit: type=1326 audit(2000000032.650:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3208 comm="syz.1.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5009421ef9 code=0x7ffc0000 [ 223.950042][ T24] audit: type=1326 audit(2000000032.650:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3208 comm="syz.1.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5009421ef9 code=0x7ffc0000 [ 223.975086][ T3214] EXT4-fs (loop1): dax option not supported [ 223.980910][ T24] audit: type=1326 audit(2000000032.650:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3208 comm="syz.1.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5009421ef9 code=0x7ffc0000 [ 224.004454][ T24] audit: type=1326 audit(2000000032.650:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3208 comm="syz.1.613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5009421ef9 code=0x7ffc0000 [ 224.087121][ T1455] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 224.099771][ T1455] cp2112 0003:10C4:EA90.0018: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 224.296470][ T1455] cp2112 0003:10C4:EA90.0018: Part Number: 0x82 Device Version: 0xFE [ 224.396637][ T3217] tmpfs: Unknown parameter 'X2ohug' [ 224.616224][ T1455] cp2112 0003:10C4:EA90.0018: error requesting SMBus config [ 224.624967][ T1455] cp2112: probe of 0003:10C4:EA90.0018 failed with error -71 [ 224.640160][ T1455] usb 1-1: USB disconnect, device number 34 [ 224.856185][ T1440] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 224.876350][ T1440] usb 5-1: config 0 has no interfaces? [ 224.881639][ T1440] usb 5-1: New USB device found, idVendor=056a, idProduct=4001, bcdDevice= 0.00 [ 224.939697][ T1440] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.973584][ T1440] usb 5-1: config 0 descriptor?? [ 225.004317][ T3248] FAT-fs (loop2): Directory bread(block 64) failed [ 225.011170][ T3248] FAT-fs (loop2): Directory bread(block 65) failed [ 225.019366][ T3248] FAT-fs (loop2): Directory bread(block 66) failed [ 225.025761][ T3248] FAT-fs (loop2): Directory bread(block 67) failed [ 225.032615][ T3248] FAT-fs (loop2): Directory bread(block 68) failed SYZFAIL: bad allocate request allocated=0 size=28252/28256 (errno 11: Resource temporarily unavailable) [ 225.102218][ T3248] FAT-fs (loop2): Directory bread(block 69) failed [ 225.108918][ T3248] FAT-fs (loop2): Directory bread(block 70) failed [ 225.125153][ T3248] FAT-fs (loop2): Directory bread(block 71) failed [ 225.132040][ T3248] FAT-fs (loop2): Directory bread(block 72) failed [ 225.138720][ T3248] FAT-fs (loop2): Directory bread(block 73) failed [ 225.256667][ T1440] usb 5-1: string descriptor 0 read error: -71 [ 225.263585][ T1440] usb 5-1: USB disconnect, device number 29 [ 226.357142][ T317] device bridge_slave_1 left promiscuous mode [ 226.363054][ T317] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.370374][ T317] device bridge_slave_0 left promiscuous mode [ 226.376350][ T317] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.383700][ T317] device bridge_slave_1 left promiscuous mode [ 226.389654][ T317] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.396769][ T317] device bridge_slave_0 left promiscuous mode [ 226.402745][ T317] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.410287][ T317] device bridge_slave_1 left promiscuous mode [ 226.416282][ T317] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.423495][ T317] device bridge_slave_0 left promiscuous mode [ 226.429494][ T317] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.437043][ T317] device bridge_slave_1 left promiscuous mode [ 226.442927][ T317] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.450112][ T317] device bridge_slave_0 left promiscuous mode [ 226.456010][ T317] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.464480][ T317] device veth1_macvtap left promiscuous mode [ 226.470326][ T317] device veth0_vlan left promiscuous mode [ 226.475940][ T317] device veth1_macvtap left promiscuous mode [ 226.482004][ T317] device veth1_macvtap left promiscuous mode [ 226.487862][ T317] device veth0_vlan left promiscuous mode [ 226.493448][ T317] device veth1_macvtap left promiscuous mode [ 226.499209][ T317] device veth0_vlan left promiscuous mode