last executing test programs: 12.944480237s ago: executing program 0 (id=1430): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="64697361626c655f726f6c6c5f666f72776172642c6c617a7974696d652c636f6d70726573735f63616368652c6e6f696e6c696e655f78617474722c64697361626c655f6578745f6964656e746966792c6e6f657874656e745f63616368652c6e6f657874656e745f63616368652c7768696e745f6d6f64653d66732d62617365642c636865636b706f696e743d64697361626c652c6a71666d743d76667376302c6a71666d743d7666736f6c642c6261636b67726f756e645f67633d6f66662c6e6f61636c2c646174615f666c7573682c009155f76df4d07ad6534d3588c19362f06435c912cf73b02e9946cfefd7b578c7029ce8c93b87feddd9bb7bb8924e6211c8b54dffa2d339edb64a6434663023894c1ae07c9ce2b93d95fbac8d5dbd8afb838537dbe757fdc7bf5cf39436f951f8f451e754a4bcb17e69c41e94995a3ae74e9dac87ec351b0f1e4f23af9301"], 0xfd, 0x5519, &(0x7f00000079c0)="$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") r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r1, 0xfffffffffffffffd, 0x58) 10.423486656s ago: executing program 0 (id=1437): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000240)='./bus\x00', 0x3010050, &(0x7f0000000600)=ANY=[], 0x1, 0x1500, &(0x7f0000003080)="$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") r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) 7.902810525s ago: executing program 3 (id=1440): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) prctl$PR_SET_NAME(0xf, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x78, r2, 0x801, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000040)={0x2}) mremap(&(0x7f0000638000/0x1000)=nil, 0x6aa000, 0x2000, 0x3, &(0x7f00005c0000/0x2000)=nil) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r6}, 0x10) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x804, &(0x7f0000000300)={[{@barrier_val={'barrier', 0x3d, 0xeb}}, {@data_err_abort}]}, 0x1, 0x513, &(0x7f0000000fc0)="$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") 7.203948529s ago: executing program 0 (id=1441): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) r2 = syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000680)={[{@bh}, {@init_itable}, {@noload}]}, 0x3, 0x470, &(0x7f0000001240)="$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") prlimit64(0x0, 0x8, &(0x7f0000000140)={0xa, 0x2000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000300)) r3 = getpid() sched_setaffinity(0x0, 0xffffffffffffffbd, &(0x7f00000000c0)=0x85) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100"], 0x48) userfaultfd(0x800) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r6, 0xffffffffffffffff}, &(0x7f0000005680), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000008000000018110000", @ANYRES32=r7, @ANYRESOCT=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004}, 0x94) chdir(&(0x7f0000000000)='./file0\x00') r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x41) getdents64(r8, &(0x7f0000000f80)=""/4096, 0x1000) 6.289202437s ago: executing program 4 (id=1445): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000940)='kmem_cache_free\x00', r4}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) open$dir(&(0x7f0000000140)='./file0\x00', 0x500, 0x40) 5.963343833s ago: executing program 4 (id=1446): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x1c}}, 0x0) 5.938205704s ago: executing program 1 (id=1447): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0xfd, 0x5519, &(0x7f00000079c0)="$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") r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r1, 0xfffffffffffffffd, 0x58) 5.891050895s ago: executing program 3 (id=1448): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001400)={{r1}, 0x0, &(0x7f00000013c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendmmsg$inet(r0, &(0x7f0000005500)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="e0f58b98825ad05ecffa939c1c3f3abe962e289527340a9df3ca6a2d07954526dbc1734e9a6e1e26e4fa634d92009ed008cc3a7e5f36b40685bae810134441fdc3d3a30034038c5ae30a2ecc9ab1e87ca62dffe4e3863c445fa43350f4cb136cbfc130c556a37442fad8258458834fc01cbed5a504f157aff06b58b8d3c3050a9c487b0000000000", 0x88}, {&(0x7f0000000740)="97d17744aa9566d244b4a6a7bac3043aad7ead0625c7a015174858a1171e2d8b21659736b5af7ad8288fdd48f9bc2cdf7ab29c70255fbab7766e6e0d0d3fa89bad35b4aed5a0965fe952f739534fd4b4af3050df9aa7d23396b9d8f3b227083db9ab8c639c9ee9572923dcfe729b3ff9b59edf8f98e8ae75dc57b6dc866405f000"/151, 0x97}, {&(0x7f0000000800)="d4dc81873ef03a797da4039a00006c7ee0", 0x11}, {&(0x7f00000025c0)="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", 0xed9}], 0x4}}], 0x1, 0x140080d4) 5.871414055s ago: executing program 4 (id=1449): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="190000000400000004000000"], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setscheduler(r0, 0x6, &(0x7f00000006c0)=0x9b3f) r4 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000440)=ANY=[@ANYBLOB="180000001400010300000000000000001e000000c1"], 0x18}}, 0x20000000) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) setgroups(0x0, 0x0) keyctl$chown(0x4, r5, 0xee01, r6) keyctl$setperm(0x5, r5, 0x30925) keyctl$KEYCTL_MOVE(0x3, r5, 0x0, 0x0, 0x0) mount(&(0x7f0000000280)=@sg0, &(0x7f0000000600)='.\x00', &(0x7f0000000640)='qnx4\x00', 0x4a5, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="0510000004000000"], &(0x7f0000000680)='GPL\x00', 0x4, 0xd5, &(0x7f0000000700)=""/213, 0x41100, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xb, 0x6, 0x7544}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000440)=[{0x5, 0x5, 0x1, 0x9}, {0x1, 0x2, 0x0, 0x8}, {0x1, 0x3, 0x3, 0x8}], 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='spmi_write_begin\x00', r8, 0x0, 0x8}, 0x18) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="00a4b5c371b7ffba00"]) 5.850408795s ago: executing program 3 (id=1450): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0xfffffffffffffdee, &(0x7f0000000000)=0x8000000000005) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r4}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00'}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2a08086, &(0x7f00000007c0)={[{@quota}]}, 0xfc, 0x49f, &(0x7f0000000ec0)="$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") 5.472421133s ago: executing program 2 (id=1451): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0xfffffffffffffdee, &(0x7f0000000000)=0x8000000000005) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{}, 0x0, &(0x7f00000002c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2a08086, &(0x7f00000007c0)={[{@quota}]}, 0xfc, 0x49f, &(0x7f0000000ec0)="$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") 4.916172864s ago: executing program 3 (id=1452): socket$packet(0x11, 0x3, 0x300) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x7, &(0x7f0000000180)=[{@fixed}, {}, {}, {@none}, {@none}, {@none}, {}]}) r0 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)=ANY=[@ANYBLOB="88020000", @ANYRES16, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="6102330050300100080211000001080211000000505050505050", @ANYRES32, @ANYRES16, @ANYRESDEC, @ANYRES8], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000f00)={&(0x7f0000000e00), 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x68, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x1ff, 0xa, 0xb, 0x3, 0x8, 0x6, 0x4, 0xd, 0x0, 0x4, 0x73ac, 0xfc, 0x23c, 0x101, 0x8, 0x9]}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x20000000, {0x6, 0x9, 0x8, 0x74}}}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0xd, {0x39, 0x7, 0xf000, 0x1ff}}}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x2c040000}, 0x4) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) open(0x0, 0x1a1342, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}]}}, 0x0, 0x32}, 0x28) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000080)=0x4) 4.915850884s ago: executing program 4 (id=1453): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000080)=0xa, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'ip6gre0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)='7', 0x4f, 0x2004c064, &(0x7f0000000040)={0x11, 0x1b, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000006c0)={'ip6_vti0\x00', &(0x7f0000000640)={'syztnl1\x00', r6, 0x29, 0x6, 0x1a, 0x395, 0x70, @mcast1, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x10, 0x7800, 0xfff, 0x3}}) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') writev(r7, 0x0, 0x0) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xda, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x3, [{{0x9, 0x4, 0x0, 0xa, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x10, 0xe, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) r9 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)=0x0) timer_settime(r10, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r11 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) readv(r11, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/40, 0x54}], 0x1) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) syz_usb_connect$cdc_ncm(0x0, 0xa8, &(0x7f0000000580)=ANY=[@ANYBLOB="12014101020000002505a1a44000010203010902960002010210030904000001020d00000824060001f2743e052400ffff0d240f0106000000ff7f060081060eeae53713498a171be4241a0700110c241b07000200020507000407240a018108f8052401010e8c241b112100000802a100080c241b7f0007014005fffe0607240a88205c0c09058103100018087f0904010000020d00000904010102020d000009058202000000"], &(0x7f0000000500)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x7, 0x8, 0xb, 0xff, 0xbf}, 0x122, &(0x7f00000001c0)={0x5, 0xf, 0x122, 0x6, [@generic={0xe9, 0x10, 0x3, "01f05df030062053897e25461ba7b7f6fe60fe964d7f1003a535df257e701f60e34b640fc9e87ecf2409d1c05973caa8ab3ec723b5135e0b7954ae78cb044d399c7568c57fd55b66767b6119f65f505622d07635487b56924fb6452e5ebb02e13bdd5ea3f4d85285945fe35c93bc660a0442a031dbe82ccfdbf2964b497ce786e80cfe01a8204e9742074c8d8420d6c4e0c238f254ecaca62daf4f5f8017d7ee30771f56f9691b3e30399cd33c08120b92c8699d20bdf6a1af394ebd39f0bad810e7051c80b73e4a47c501b61cb69ea033bfd77ba26f5309309f9c4dbc5f22f17633d31c39e3"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x9, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x3, 0x7, 0x9d}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x4, 0x5, 0x854, 0x3}, @ptm_cap={0x3}, @ssp_cap={0x18, 0x10, 0xa, 0x8, 0x3, 0x1, 0xf00, 0x7, [0xffa00f, 0x0, 0x0]}]}, 0x5, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x41a}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x41d}}, {0xf4, &(0x7f0000000380)=ANY=[@ANYBLOB="f4031f7a53a19e217b9a2ff1e5eacf143aa81224bf488eba2baf9a2b1b19fc86b4b8bb44eda7d56aa58f08dbc4a496e87ae7209d88e9e05257465cf0afce244fd44588831c2b1d33094a5674a79a69e29dd1de41ff7ad72b94864e0a25183b909d47835f40d2ee1e2d523becb4d38cf72067bc7ebcc92f5db1f17a0c32f8d572658793b177501ee319317a1881fb4522ca19fc2e2549ab9e4158ca3f9077b4648bc7035874b6c79d74576c7cb246f339bfc5cc2428bac03ef5b960eecf63361a61f22febdaa070555bec1ed1903142f14cb6d16785a367a5d14c4d9f62dbb6174b29bf6efa34312ab84439a83f35e3f476d923db"]}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x443}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x2810}}]}) socket$nl_audit(0x10, 0x3, 0x9) syz_usb_control_io(r8, &(0x7f00000000c0)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x8, {0x8, 0x21, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 4.472536923s ago: executing program 1 (id=1454): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049d8) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000008085000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x10) memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004804) openat$vcsu(0xffffffffffffff9c, 0x0, 0x121041, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r7, 0x0, 0x0) sendmmsg$inet(r7, &(0x7f0000001b00), 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, 0x0, &(0x7f0000000080)) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x6, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000190000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCL_UNBLANKSCREEN(r9, 0x541c, &(0x7f0000001840)) 4.448764503s ago: executing program 0 (id=1455): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) prctl$PR_SET_NAME(0xf, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x78, r2, 0x801, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}]}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x24000005}, 0x8000) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000040)={0x2}) mremap(&(0x7f0000638000/0x1000)=nil, 0x6aa000, 0x2000, 0x3, &(0x7f00005c0000/0x2000)=nil) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x5, 0x7fc00002}]}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x804, &(0x7f0000000300)={[{@barrier_val={'barrier', 0x3d, 0xeb}}, {@data_err_abort}]}, 0x1, 0x513, &(0x7f0000000fc0)="$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") 4.417976014s ago: executing program 2 (id=1456): bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, 0x0}, 0x20094) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)={0x34, 0x0, 0x1, 0x200000, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x3ff}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080001}, 0x4048806) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 2.494714451s ago: executing program 1 (id=1457): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000f00)={&(0x7f0000000e00), 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x68, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x1ff, 0xa, 0xb, 0x3, 0x8, 0x6, 0x4, 0xd, 0x0, 0x4, 0x73ac, 0xfc, 0x23c, 0x101, 0x8, 0x9]}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x20000000, {0x6, 0x9, 0x8, 0x74}}}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0xd, {0x39, 0x7, 0xf000, 0x1ff}}}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x2c040000}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x437, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x5120b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) 2.445312252s ago: executing program 3 (id=1458): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="190000000400000004000000"], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setscheduler(r0, 0x6, &(0x7f00000006c0)=0x9b3f) r4 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000440)=ANY=[@ANYBLOB="180000001400010300000000000000001e000000c1"], 0x18}}, 0x20000000) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) setgroups(0x0, 0x0) keyctl$chown(0x4, r5, 0xee01, r6) keyctl$setperm(0x5, r5, 0x30925) keyctl$KEYCTL_MOVE(0x3, r5, 0x0, 0x0, 0x0) mount(&(0x7f0000000280)=@sg0, &(0x7f0000000600)='.\x00', &(0x7f0000000640)='qnx4\x00', 0x4a5, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000200)='spmi_write_begin\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="00a4b5c371b7ffba00"]) link(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='./file0\x00') 2.354916594s ago: executing program 2 (id=1459): bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, 0x0}, 0x20094) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)={0x34, r2, 0x1, 0x200000, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x3ff}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080001}, 0x4048806) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 2.332819114s ago: executing program 1 (id=1460): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001400)={{r1}, 0x0, &(0x7f00000013c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendmmsg$inet(r0, &(0x7f0000005500)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="e0f58b98825ad05ecffa939c1c3f3abe962e289527340a9df3ca6a2d07954526dbc1734e9a6e1e26e4fa634d92009ed008cc3a7e5f36b40685bae810134441fdc3d3a30034038c5ae30a2ecc9ab1e87ca62dffe4e3863c445fa43350f4cb136cbfc130c556a37442fad8258458834fc01cbed5a504f157aff06b58b8d3c3050a9c487b0000000000", 0x88}, {&(0x7f0000000740)="97d17744aa9566d244b4a6a7bac3043aad7ead0625c7a015174858a1171e2d8b21659736b5af7ad8288fdd48f9bc2cdf7ab29c70255fbab7766e6e0d0d3fa89bad35b4aed5a0965fe952f739534fd4b4af3050df9aa7d23396b9d8f3b227083db9ab8c639c9ee9572923dcfe729b3ff9b59edf8f98e8ae75dc57b6dc866405f000"/151, 0x97}, {&(0x7f0000000800)="d4dc81873ef03a797da4039a00006c7ee0", 0x11}, {&(0x7f00000025c0)="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", 0xed9}], 0x4}}], 0x1, 0x140080d4) 1.902112213s ago: executing program 0 (id=1461): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000080000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r1}, 0x18) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x2) readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000600000000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) recvmmsg(r5, &(0x7f0000003cc0)=[{{&(0x7f00000002c0)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000680)=""/238, 0xee}, {&(0x7f0000000380)}, {&(0x7f0000000780)=""/148, 0x94}, {&(0x7f00000003c0)=""/44, 0x2c}, {&(0x7f0000000840)=""/85, 0x55}, {&(0x7f00000008c0)=""/191, 0xbf}, {&(0x7f0000000b80)=""/233, 0xe9}, {&(0x7f0000000d40)=""/180, 0xb4}], 0x8, &(0x7f0000000e00)=""/82, 0x52}}, {{&(0x7f0000000e80)=@sco, 0x80, &(0x7f0000001240)=[{&(0x7f0000000f80)=""/96, 0x60}, {&(0x7f0000001000)=""/104, 0x68}, {&(0x7f0000001080)=""/248, 0xf8}, {&(0x7f0000001180)=""/141, 0x8d}, {&(0x7f0000001400)=""/216, 0xd8}, {&(0x7f0000000400)=""/24, 0x18}], 0x6, &(0x7f0000001500)=""/183, 0xb7}, 0x800}, {{&(0x7f00000015c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f00000012c0)=[{&(0x7f0000001640)=""/230, 0xe6}, {&(0x7f0000001740)=""/103, 0x67}, {&(0x7f0000002100)=""/147, 0x93}, {&(0x7f00000021c0)=""/254, 0xfe}], 0x4, &(0x7f00000017c0)=""/121, 0x79}, 0xffffffff}, {{&(0x7f00000022c0)=@tipc=@name, 0x80, &(0x7f0000002a80)=[{&(0x7f0000002440)=""/239, 0xef}, {&(0x7f0000002540)=""/206, 0xce}, {&(0x7f0000002340)=""/151, 0x97}, {&(0x7f0000002640)=""/52, 0x34}, {&(0x7f0000002680)=""/108, 0x6c}, {&(0x7f0000002700)=""/208, 0xd0}, {&(0x7f0000002800)=""/203, 0xcb}, {&(0x7f0000002900)=""/158, 0x9e}, {&(0x7f00000029c0)=""/154, 0x9a}], 0x9}, 0x1}, {{&(0x7f0000002b40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000003000)=[{&(0x7f0000002bc0)=""/50, 0x32}, {&(0x7f0000002c00)=""/74, 0x4a}, {&(0x7f0000002c80)=""/162, 0xa2}, {&(0x7f0000002d40)=""/31, 0x1f}, {&(0x7f0000002d80)=""/133, 0x85}, {&(0x7f0000002e40)=""/248, 0xf8}, {&(0x7f0000002f40)=""/176, 0xb0}], 0x7, &(0x7f0000001840)=""/90, 0x5a}, 0xfff}, {{&(0x7f0000003100)=@alg, 0x80, &(0x7f0000003280)=[{&(0x7f0000003180)=""/20, 0x14}, {&(0x7f0000003240)=""/28, 0x1c}], 0x2, &(0x7f00000032c0)=""/226, 0xe2}, 0x7}, {{&(0x7f00000033c0)=@ax25={{0x3, @default}, [@bcast, @bcast, @default, @rose, @null, @null, @default, @netrom]}, 0x80, &(0x7f00000035c0)=[{&(0x7f0000003440)=""/22, 0x16}, {&(0x7f0000003480)=""/87, 0x57}, {&(0x7f0000003500)=""/155, 0x9b}], 0x3, &(0x7f0000003600)=""/165, 0xa5}, 0x5}, {{&(0x7f00000036c0)=@alg, 0x80, &(0x7f0000003b40)=[{&(0x7f0000003800)=""/147, 0x93}, {&(0x7f00000038c0)=""/100, 0x64}, {&(0x7f0000003940)=""/118, 0x76}, {&(0x7f00000039c0)=""/113, 0x71}, {&(0x7f0000000380)=""/26, 0x1a}, {&(0x7f0000003a40)=""/20, 0x14}, {&(0x7f0000003a80)=""/151, 0x97}], 0x7, &(0x7f0000003bc0)=""/247, 0xf7}, 0x1678}], 0x8, 0x40012060, &(0x7f0000003ec0)={0x0, 0x989680}) io_submit(r6, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r5, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES64], 0x1, 0x54f4, &(0x7f0000005600)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r7, &(0x7f0000000180)="f7", 0x1, 0x200980) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r8, 0x0) 1.809138135s ago: executing program 1 (id=1462): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500000000"], 0x48) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000000)='bpf_lsm_msg_queue_alloc_security\x00') 1.54627987s ago: executing program 3 (id=1463): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000080)=0xa, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'ip6gre0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)='7', 0x4f, 0x2004c064, &(0x7f0000000040)={0x11, 0x1b, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000006c0)={'ip6_vti0\x00', &(0x7f0000000640)={'syztnl1\x00', r6, 0x29, 0x6, 0x1a, 0x395, 0x70, @mcast1, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x10, 0x7800, 0xfff, 0x3}}) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') writev(r7, 0x0, 0x0) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xda, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x3, [{{0x9, 0x4, 0x0, 0xa, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x10, 0xe, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) r9 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)=0x0) timer_settime(r10, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r11 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) readv(r11, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/40, 0x54}], 0x1) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) syz_usb_connect$cdc_ncm(0x0, 0xa8, &(0x7f0000000580)=ANY=[@ANYBLOB="12014101020000002505a1a44000010203010902960002010210030904000001020d00000824060001f2743e052400ffff0d240f0106000000ff7f060081060eeae53713498a171be4241a0700110c241b07000200020507000407240a018108f8052401010e8c241b112100000802a100080c241b7f0007014005fffe0607240a88205c0c09058103100018087f0904010000020d00000904010102"], &(0x7f0000000500)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x7, 0x8, 0xb, 0xff, 0xbf}, 0x122, &(0x7f00000001c0)={0x5, 0xf, 0x122, 0x6, [@generic={0xe9, 0x10, 0x3, "01f05df030062053897e25461ba7b7f6fe60fe964d7f1003a535df257e701f60e34b640fc9e87ecf2409d1c05973caa8ab3ec723b5135e0b7954ae78cb044d399c7568c57fd55b66767b6119f65f505622d07635487b56924fb6452e5ebb02e13bdd5ea3f4d85285945fe35c93bc660a0442a031dbe82ccfdbf2964b497ce786e80cfe01a8204e9742074c8d8420d6c4e0c238f254ecaca62daf4f5f8017d7ee30771f56f9691b3e30399cd33c08120b92c8699d20bdf6a1af394ebd39f0bad810e7051c80b73e4a47c501b61cb69ea033bfd77ba26f5309309f9c4dbc5f22f17633d31c39e3"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x9, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x3, 0x7, 0x9d}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x4, 0x5, 0x854, 0x3}, @ptm_cap={0x3}, @ssp_cap={0x18, 0x10, 0xa, 0x8, 0x3, 0x1, 0xf00, 0x7, [0xffa00f, 0x0, 0x0]}]}, 0x5, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x41a}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x41d}}, {0xf4, &(0x7f0000000380)=ANY=[@ANYBLOB="f4031f7a53a19e217b9a2ff1e5eacf143aa81224bf488eba2baf9a2b1b19fc86b4b8bb44eda7d56aa58f08dbc4a496e87ae7209d88e9e05257465cf0afce244fd44588831c2b1d33094a5674a79a69e29dd1de41ff7ad72b94864e0a25183b909d47835f40d2ee1e2d523becb4d38cf72067bc7ebcc92f5db1f17a0c32f8d572658793b177501ee319317a1881fb4522ca19fc2e2549ab9e4158ca3f9077b4648bc7035874b6c79d74576c7cb246f339bfc5cc2428bac03ef5b960eecf63361a61f22febdaa070555bec1ed1903142f14cb6d16785a367a5d14c4d9f62dbb6174b29bf6efa34312ab84439a83f35e3f476d923db"]}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x443}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x2810}}]}) socket$nl_audit(0x10, 0x3, 0x9) syz_usb_control_io(r8, &(0x7f00000000c0)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x8, {0x8, 0x21, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.471588621s ago: executing program 2 (id=1464): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049d8) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x10) memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$eJzs3W9rJHcdAPDvTLJp7i41WxU5C7bFVu6K3m7S2DaKtBVEHxXU+jzGZBNCNtmQ3dRLKJriCxBEVPAF+ETwBQjSlyDCgT4XFUX0Th/qjczuRPNnN1mSTfbcfD4w2d9v/n2/vyE7O39+zARwbb0QEW9FxFhEvBwR08X4tBgW8sp+Z75HD99byocksuydvyWRFOMO1pXXxyPiVmeRmIyIr38l4lvJybjN3b31xXq9tl3Uq62NrWpzd+/e2sbiam21tjk3N/va/Ovzr87PZIULtbMcEW986U8/+v7PvvzGrz7z7d8v/OXud/K0vvCxTt4RsXShAD101l1qb4sD+TbavoxgQ5K3pzQ27CwAAOhHfoz/4Yj4ZPv4fzrG2kdzAAAAwCjJ3pyKfyURGQAAADCy0oiYiiStFH0BpiJNK5VOH96Pxs203mi2Pr3S2NlczqdFlKOUrqzVazNFX+FylJK8Plv0sT2ov3KsPhcRz0TED6dvtOuVpUZ9edgXPwAAAOCauPX80fP/f06n7TIAAAAwYso9KwAAAMCocMoPAAAAo8/5PwAAAIy0r779dj5kB+/xXn53d2e98e695VpzvbKxs1RZamxvVVYbjdX2M/s2zlpfvdHY+mxs7tyvtmrNVrW5u7ew0djZbC2sHXkFNgAAAHCFnnn+g98lEbH/+RvtIYrnAAIc8cdhJwAM0tiwEwCGZnzYCQBDUzpzDnsIGHXJGdNPdt7pXCuMX19OPgAAwODd+fjJ+/8TxbSzrw0A/8/09QGA68fdPbi+SuftAXh70JkAw/KhzsdTvab3fHhHH/f/O9cYsuxciQEAAAMz1R6StFIcp09FmlYqEU+3XwtQSlbW6rWZ4vzgt9Olp/L6bHvJ5Mw+wwAAAAAAAAAAAAAAAAAAAAAAAABAR5YlkQEAAAAjLSL9c9J+mn/EnemXpo5eHTj21q+fvvPj+4ut1vZsxETy9+l81EREtH5SjH8l80oAAAAAeAJ0ztOLz9lhZwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqHn08L2lg+Eq4/71ixFR7hZ/PCbbn5NRioib/0hi/NBySUSMDSD+/vsRcbtb/CQeZ1lWLrLoFv/GJccvtzdN9/hpRNwaQHy4zj7I9z9vdfv+pfFC+7P792+8GC6q9/4v/e/+b6zH/ufpY/Venn3wi2rP+O9HPDveff9zED/pxD8SIq+82Gcbv/mNvb2uEw6tslv8w7GqrY2tanN3797axuJqbbW2OTc3+9r86/Ovzs9UV9bqteJv1zA/+MQvH5/W/ps94pePtv/E9n+pr9Zn8e8H9x9+pFMpdYt/98Xuv7+3e8RPi9++TxXlfPqdg/J+p3zYcz//zXOntX+5R/snz2j/3b7aH597+Wvf+0PXKSe2BgBwFZq7e+uL9Xpt+5TCZB/zXHHhzScjjQEW4slIY1iF7Lud/8eLreeCi58oZBdZfDwGkMbEie/pWJx3hUnEfr6uPv8hAQCAEfO/g/7T7iABAAAAAAAAAAAAAAAAAAAAl+mcjyWbjIi+Zz4ec384TQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAONV/AgAA//8FStFZ") sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004804) openat$vcsu(0xffffffffffffff9c, 0x0, 0x121041, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r7, 0x0, 0x0) sendmmsg$inet(r7, &(0x7f0000001b00), 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, 0x0, &(0x7f0000000080)) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x6, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000190000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x3) 901.779572ms ago: executing program 4 (id=1465): socket$packet(0x11, 0x3, 0x300) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x7, &(0x7f0000000180)=[{@fixed}, {}, {}, {@none}, {@none}, {@none}, {}]}) r0 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)=ANY=[@ANYBLOB="88020000", @ANYRES16, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="6102330050300100080211000001080211000000505050505050", @ANYRES32, @ANYRES16, @ANYRESDEC, @ANYRES8], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000f00)={&(0x7f0000000e00), 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x68, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x1ff, 0xa, 0xb, 0x3, 0x8, 0x6, 0x4, 0xd, 0x0, 0x4, 0x73ac, 0xfc, 0x23c, 0x101, 0x8, 0x9]}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x20000000, {0x6, 0x9, 0x8, 0x74}}}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0xd, {0x39, 0x7, 0xf000, 0x1ff}}}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x2c040000}, 0x4) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) open(0x0, 0x1a1342, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}]}}, 0x0, 0x32}, 0x28) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r5, 0x40047451, &(0x7f0000000080)=0x4) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r5, &(0x7f0000000180)=[{&(0x7f0000000340)="00214717a70700000000030600710a5eeb9d04710400bbd6e76880000000005c786d17fd8beb29b773c0c6b84caec25c498e8b8a686fd42e2e4dd0728a9cde87af6cbd434628bbc0968e30fe1d034f17", 0x50}], 0x1, 0xee, 0x4000004) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x437, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x5120b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendmsg$NFT_BATCH(r0, &(0x7f0000000dc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xb}}, [@NFT_MSG_NEWRULE={0xf4, 0x6, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0xd4, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xb8093ed9fb0806e5}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x11}]}}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x8a}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x12}]}}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0xe8, 0x2, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_USERDATA={0xba, 0x6, "ceee44968f60ba7a54b6231bbe0ff5636fd1cb0413a30a7c9d34ab4c557ff65472aaf3919947572401bd53e27477780ef34ad2da3489eb24f656aa0bd793666dc21a6e2b4805f30cd74d4c8f8fca96255199dc6b5ece1d9b19e700391645eb6c54c62ee40a5ebb0313550d0f84a1db0bbee43c61cfaa5478c1fe4173d4f4def8b8b316c44ec4fac8f002126b25915148271228e77c3ce6afb01fa330ff28750d68cae47c7589ed413953bc2b18395dced851c30f84f9"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}}, @NFT_MSG_DELSET={0x54, 0xb, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x11}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x134, 0xb, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_USERDATA={0xd5, 0xd, 0x1, 0x0, "407c35104506774796fff9d3f49116bd4cc39209332c5a900767efdb4fb7921a6fe3b50ac2f6a645254fbea30dee3279b7a87da80f19ccc220b382a1e1d25b2910a80caabb418cf02d0749a36c90739b573eaf78d93fad29670eec943d9a4c95078bec9bd001a2523bb0d86e5756cd37da37d8ce38f984bab1b5c205e9ee42cf0f3b2cbf20f91f169e1fd7ee72a4f6b5d1cc2f29d6c1a691733b6600210ab337489e6113b2213ca9621893671e46becb295c64a50324b3f1190662a692cd1cd6bcc90df434dfefe1321f84fb6e5043a18a"}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELFLOWTABLE={0x28, 0x18, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELSETELEM={0x25c, 0xe, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x224, 0x3, 0x0, 0x1, [{0x220, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x62, 0x6, 0x1, 0x0, "09c34ff0a85f5b5009d0f1dab0a4e052d1f91bfeb61b92b43b8d4b7a9b6c742c449f2246301eefa0c55ed105dab427d03aa67efb992ca886d68a012729654dbe9db3e0ca4bbd7c995466b57e17db28f112c21482e5713706b01ffc0809b3"}, @NFTA_SET_ELEM_DATA={0x1b4, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x31, 0x1, "f116c58376ca2c2fcce88631b56d0f8f821f86ef896a8ad39d565e5022f769e6a122510773163706ef647f4792"}, @NFTA_DATA_VALUE={0x3e, 0x1, "4386bc42024e53d1eef4ff4afcfc9e5e69726163fc54465c3042f45cda7515609168bf169b315e394b6619f69f48200c3cfc6e663c233096125a"}, @NFTA_DATA_VALUE={0xc1, 0x1, "92444e4ccbc4abfd28a21d7e1f026db50588dc920ecbb54978bf7a90c14a2eaa4f7422fa500519d3e301e5f49fd7a780b28176eef334874e332a5823c488f048002b9270e0c0be1b18f5760521d23b08097cec24a1880e0ff8c9a486ac54ffe6cbd6189cdaaefac5ccbc3c485cbfb1ba02e5922e9155290d5446fb3a2f73875b4b0cfba3679accff00f48d398eeee015c9ebbe28bc36400c818f7a95a43a9cd2070f67f833796f5516a550c44d3efaf8c69cb3d199c03294f89cb8fff4"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_KEY_END={0x4}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0xc4, 0x16, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x68, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0xcc, 0x5, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_USERDATA={0x71, 0xc, "fa3adab604882a3bd0f40c2374878d442df1ff9cee3f3523b5b8cc6c59756d6e36864748918e758cc2cdd1a86081a13b678303b752644644b0abc0e34fd2e1a449a12ed0e93b2a9f8839b5a6005832c99075d7e68b6113f6596564f8f0f6658d183c7ab4dbdf0d6e53ea22dc94"}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x7e0}, 0x1, 0x0, 0x0, 0x4c767bf272c14b37}, 0x20000800) setgroups(0x1e2, &(0x7f0000000100)) 815.300084ms ago: executing program 0 (id=1466): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0xfffffffffffffdee, &(0x7f0000000000)=0x8000000000005) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2a08086, &(0x7f00000007c0)={[{@quota}]}, 0xfc, 0x49f, &(0x7f0000000ec0)="$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") 124.230047ms ago: executing program 1 (id=1467): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049d8) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000008085000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x10) memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004804) openat$vcsu(0xffffffffffffff9c, 0x0, 0x121041, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r7, 0x0, 0x0) sendmmsg$inet(r7, &(0x7f0000001b00), 0x0, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, 0x0, &(0x7f0000000080)) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x6, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000190000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCL_UNBLANKSCREEN(r9, 0x541c, &(0x7f0000001840)) 114.113508ms ago: executing program 2 (id=1468): socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r4}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 17.82643ms ago: executing program 4 (id=1469): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000680)={[{@bh}, {@init_itable}, {@noload}]}, 0x3, 0x470, &(0x7f0000001240)="$eJzs3MtvG1UXAPAzkzj98qUloZRXyyNQEBWPpGkLdMECEEgsioQEC1haSVqVpi1qjESrSKQsygohJPaIJf8CK9ggxAqJLexRpQp1Q8vKaOyZxHZsp2nsuMW/n+T23Hn43uOZa9+ZayeAoTWd/ZNE7I6I3yNisl5s3mC6/t+N6yvzN6+vzCdRrb77V1Lb7u/rK/PFpsV+E42FSOJAm3qXL146U15aWryQl2crZz+aXb546YXTZ8unFk8tnjty/Pixo3Mvv3TkxZ7kORFpHr31wVdvn/iiKf+WPHpkutvKp6vVHlc3WHsa4tEBtoOtGcmPV6nW/ydjpOHoTcabn60VPh1QA4G+qVar1YnOq1erwH9YEs1lXR6GRfFBX1z/trsOfrVvo4/Bu/Za/QIoy/tG/qivGV27Y1Bqub7tpemIeH/1n2+yR/TnPgQAQJMfsvHP89loZ2U+G3usjz/SeKBhu3vyuaGpiLg3IvZGxH1xLvZFxP0RtW0fjIiHtlh/6yTJxvFPevW2ErtF2fjvlXxuq3n8V4z+YmokL+2p5V9KTp5eWjycvyaHorQrK891qePHN377stO6xvFf9sjqL8aCeTuuju5q3mehXClvJ+dG1y5H7B9tl3+yNhOQRMTDEbG/3ROkm9dx+tnvHum0bvP8u+jBRFP124hn6sd/NVryLyTd5ydn/xdLi4dni7Nio19+vfJOp/q3lX8PZMf//23P/7X8p5LG+drlrddx5Y/PO17TTJfyYAvn/2q5Uh5L3qvFY/myT8qVyoW5iLHkRL3RjcuPrO9blIvts/wPHWzf//fG+itxICKyk/jRiHgsIh7Pj90TEfFkRBzskv/Prz/1Yeuy8SL/O+D4L2zp+K8HY9G6pH0wcuan75sqnVoP8/xvdn//O1aLDuVLbuX971badXtnMwAAANx90ojYHUk6sxan6cxM/Tv8+yLSpfPLledOnv/43EL9NwJTUUqLO12TDfdD5/LL+nr5ckTUv1pQrD8aae2+8dcj47XyzPz5pYVBJw9DbqJD/8/8OTLo1gF95wdbMLz0fxheXft/aefaAey8Df2/a5/f1de2ADurzef/+CDaAey8duN/f+8HhkNL/zftB0PE/X8YXvo/DC/9H4bS8nhs/iP5rkHxTLe5+2bBZMR2WziYIEp3RDP6FkTa9yrG+ntq9S1I7sI2bwgG954EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQS/8GAAD//3hZ0MA=") prlimit64(0x0, 0x8, &(0x7f0000000140)={0xa, 0x2000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000300)) r2 = getpid() sched_setaffinity(0x0, 0xffffffffffffffbd, &(0x7f00000000c0)=0x85) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100"], 0x48) userfaultfd(0x800) chdir(&(0x7f0000000000)='./file0\x00') r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x41) getdents64(r5, &(0x7f0000000f80)=""/4096, 0x1000) 0s ago: executing program 2 (id=1470): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0xfffffffffffffdee, &(0x7f0000000000)=0x8000000000005) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r5}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2a08086, &(0x7f00000007c0)={[{@quota}]}, 0xfc, 0x49f, &(0x7f0000000ec0)="$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") kernel console output (not intermixed with test programs): 4_orphan_cleanup:3108: error 27 [ 378.591745][ T5689] EXT4-fs (loop4): 1 truncate cleaned up [ 378.597510][ T5689] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 378.631846][ T5689] EXT4-fs error (device loop4): ext4_acquire_dquot:6226: comm syz.4.1152: Failed to acquire dquot type 0 [ 378.651683][ T5689] EXT4-fs error (device loop4): ext4_acquire_dquot:6226: comm syz.4.1152: Failed to acquire dquot type 0 [ 378.701758][ T5689] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5689 comm=syz.4.1152 [ 378.735785][ T5689] EXT4-fs (loop4): re-mounted. Opts: (null) [ 378.790246][ T404] usbhid 2-1:0.0: can't add hid device: -71 [ 378.803768][ T404] usbhid: probe of 2-1:0.0 failed with error -71 [ 378.813870][ T404] usb 2-1: USB disconnect, device number 30 [ 378.972164][ T5698] EXT4-fs error (device loop3): ext4_get_branch:178: inode #13: block 2: comm syz.3.1157: invalid block [ 378.983858][ T5698] EXT4-fs error (device loop3): ext4_free_branches:1026: inode #13: comm syz.3.1157: invalid indirect mapped block 10 (level 1) [ 378.997589][ T5698] EXT4-fs error (device loop3): ext4_free_branches:1026: inode #13: comm syz.3.1157: invalid indirect mapped block 8 (level 1) [ 379.011490][ T5698] EXT4-fs (loop3): 1 truncate cleaned up [ 379.017202][ T5698] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,,errors=continue [ 379.361927][ T5701] F2FS-fs (loop2): fault_injection options not supported [ 379.389022][ T5710] FAT-fs (loop4): Directory bread(block 64) failed [ 379.395706][ T5710] FAT-fs (loop4): Directory bread(block 65) failed [ 379.402500][ T5710] FAT-fs (loop4): Directory bread(block 66) failed [ 379.409049][ T5710] FAT-fs (loop4): Directory bread(block 67) failed [ 379.415752][ T5710] FAT-fs (loop4): Directory bread(block 68) failed [ 379.422318][ T5710] FAT-fs (loop4): Directory bread(block 69) failed [ 379.429000][ T5710] FAT-fs (loop4): Directory bread(block 70) failed [ 379.435560][ T5710] FAT-fs (loop4): Directory bread(block 71) failed [ 379.442265][ T5710] FAT-fs (loop4): Directory bread(block 72) failed [ 379.448814][ T5710] FAT-fs (loop4): Directory bread(block 73) failed [ 379.590021][ T5701] F2FS-fs (loop2): invalid crc value [ 379.834615][ T5701] F2FS-fs (loop2): Found nat_bits in checkpoint [ 379.861415][ T9] attempt to access beyond end of device [ 379.861415][ T9] loop1: rw=2049, want=40984, limit=40427 [ 379.902707][ T5703] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 379.953395][ T5703] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 379.980190][ T5701] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 380.013224][ T5703] pit: kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 380.030420][ T5703] pit: kvm: requested 124876 ns i8254 timer period limited to 200000 ns [ 380.062214][ T24] kauditd_printk_skb: 22 callbacks suppressed [ 380.062226][ T24] audit: type=1400 audit(1758290085.090:1253): avc: denied { execute } for pid=5702 comm="syz.0.1159" dev="tmpfs" ino=1814 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 380.118101][ T5701] syz.2.1158[5701] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 380.118157][ T5701] syz.2.1158[5701] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 380.170247][ T24] audit: type=1400 audit(1758290085.160:1254): avc: denied { execute_no_trans } for pid=5702 comm="syz.0.1159" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1814 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 380.351631][ T5713] attempt to access beyond end of device [ 380.351631][ T5713] loop2: rw=2049, want=45112, limit=40427 [ 380.550148][ T5] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 380.643712][ T5734] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1166'. [ 380.730148][ T304] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 380.804360][ T5740] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 380.813339][ T5740] ext4 filesystem being mounted at /221/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 380.886484][ T5738] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 380.888888][ T5719] F2FS-fs (loop4): Invalid segment/section count (31, 24 x 150994945) [ 380.897153][ T5738] EXT4-fs (loop2): Ignoring removed bh option [ 380.908527][ T5719] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 380.917485][ T5738] EXT4-fs (loop2): Test dummy encryption mode enabled [ 380.925229][ T5719] F2FS-fs (loop4): invalid crc value [ 380.930283][ T5738] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 380.930697][ T5] usb 1-1: config 0 interface 0 altsetting 10 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.951500][ T5] usb 1-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.961547][ T5] usb 1-1: config 0 interface 0 has no altsetting 0 [ 380.970202][ T304] usb 2-1: Using ep0 maxpacket: 16 [ 380.976061][ T5] usb 1-1: New USB device found, idVendor=056a, idProduct=00da, bcdDevice= 0.00 [ 380.976298][ T5738] EXT4-fs (loop2): 1 truncate cleaned up [ 380.987667][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.999323][ T5738] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000002,mblk_io_submit,bh,auto_da_alloc,barrier,test_dummy_encryption,nogrpid,,errors=continue [ 380.999836][ T5719] F2FS-fs (loop4): Found nat_bits in checkpoint [ 381.020354][ T5] usb 1-1: config 0 descriptor?? [ 381.043250][ T5738] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 381.066348][ T5719] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 381.073586][ T5719] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 381.110230][ T304] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 381.127914][ T5719] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=8000000, run fsck to fix. [ 381.137477][ T304] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 381.148115][ T304] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 36128, setting to 1024 [ 381.159993][ T5719] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=8000000, run fsck to fix. [ 381.171377][ T304] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 381.260224][ T304] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 381.266642][ T5719] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=8000000, run fsck to fix. [ 381.269442][ T304] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 381.279233][ T5719] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=8000000, run fsck to fix. [ 381.287172][ T304] usb 2-1: SerialNumber: syz [ 381.320221][ T5730] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 381.340763][ T304] cdc_acm 2-1:1.0: skipping garbage [ 381.346484][ T304] cdc_acm: probe of 2-1:1.0 failed with error -12 [ 381.530561][ T5755] udc-core: couldn't find an available UDC or it's busy [ 381.539663][ T5755] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 381.572226][ T5] wacom 0003:056A:00DA.0013: unknown main item tag 0x2 [ 381.579654][ T5] wacom 0003:056A:00DA.0013: Unknown device_type for 'HID 056a:00da'. Assuming pen. [ 381.611011][ T5] wacom 0003:056A:00DA.0013: hidraw0: USB HID v0.10 Device [HID 056a:00da] on usb-dummy_hcd.0-1/input0 [ 381.626170][ T5] input: Wacom Bamboo 2FG 4x5 SE Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:00DA.0013/input/input61 [ 381.661192][ T5] usb 1-1: USB disconnect, device number 24 [ 381.680008][ T5759] fido_id[5759]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 382.023664][ T5760] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 382.034509][ T5760] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 382.052428][ T5760] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x44ede5da, utbl_chksum : 0xe619d30d) [ 383.390817][ T5775] F2FS-fs (loop0): fault_injection options not supported [ 383.400229][ T5775] F2FS-fs (loop0): invalid crc value [ 383.411405][ T459] usb 2-1: USB disconnect, device number 31 [ 383.421143][ T5781] Quota error (device loop3): find_tree_dqentry: Getting block too big (64 >= 6) [ 383.461075][ T5781] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 383.471653][ T5775] F2FS-fs (loop0): Found nat_bits in checkpoint [ 383.472212][ T5781] EXT4-fs error (device loop3): ext4_acquire_dquot:6226: comm syz.3.1175: Failed to acquire dquot type 0 [ 383.508819][ T5781] EXT4-fs error (device loop3): mb_free_blocks:1524: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 383.540577][ T5781] EXT4-fs error (device loop3) in ext4_do_update_inode:5336: error 27 [ 383.549475][ T5781] EXT4-fs error (device loop3): ext4_dirty_inode:6143: inode #13: comm syz.3.1175: mark_inode_dirty error [ 383.562416][ T5781] EXT4-fs error (device loop3) in ext4_do_update_inode:5336: error 27 [ 383.647941][ T5781] EXT4-fs error (device loop3): __ext4_ext_dirty:182: inode #13: comm syz.3.1175: mark_inode_dirty error [ 383.668690][ T5775] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 383.686483][ T5781] EXT4-fs error (device loop3) in ext4_do_update_inode:5336: error 27 [ 383.820835][ T5781] EXT4-fs error (device loop3) in ext4_orphan_del:3292: error 27 [ 383.941954][ T5781] EXT4-fs error (device loop3) in ext4_do_update_inode:5336: error 27 [ 383.955391][ T5790] EXT4-fs error (device loop1): ext4_free_branches:1026: inode #13: comm syz.1.1176: invalid indirect mapped block 10 (level 1) [ 383.969512][ T5790] EXT4-fs error (device loop1): ext4_free_branches:1026: inode #13: comm syz.1.1176: invalid indirect mapped block 8 (level 1) [ 383.983907][ T5790] EXT4-fs (loop1): 1 truncate cleaned up [ 383.989592][ T5790] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,,errors=continue [ 384.180285][ T5781] EXT4-fs error (device loop3): ext4_truncate:4390: inode #13: comm syz.3.1175: mark_inode_dirty error [ 384.440523][ T5781] EXT4-fs error (device loop3) in ext4_orphan_cleanup:3108: error 27 [ 384.509461][ T5781] EXT4-fs (loop3): 1 truncate cleaned up [ 384.523989][ T5781] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 384.525639][ T5801] serio: Serial port ptm0 [ 384.553388][ T5781] Quota error (device loop3): find_tree_dqentry: Getting block too big (64 >= 6) [ 384.949528][ T5781] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 384.959664][ T5781] EXT4-fs error (device loop3): ext4_acquire_dquot:6226: comm syz.3.1175: Failed to acquire dquot type 0 [ 384.985965][ T5806] Quota error (device loop3): find_tree_dqentry: Getting block too big (64 >= 6) [ 385.025527][ T5808] tipc: Started in network mode [ 385.030598][ T5808] tipc: Own node identity , cluster identity 4711 [ 385.078326][ T5806] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 385.163315][ T5806] EXT4-fs error (device loop3): ext4_acquire_dquot:6226: comm syz.3.1175: Failed to acquire dquot type 0 [ 385.195105][ T5808] tipc: Failed to obtain node identity [ 385.200683][ T5808] tipc: Enabling of bearer rejected, failed to enable media [ 385.277639][ T5811] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5811 comm=syz.3.1175 [ 385.311434][ T275] attempt to access beyond end of device [ 385.311434][ T275] loop0: rw=2049, want=45104, limit=40427 [ 385.562691][ T5807] F2FS-fs (loop4): invalid crc value [ 385.599726][ T5807] F2FS-fs (loop4): Found nat_bits in checkpoint [ 385.608199][ T5821] Quota error (device loop1): find_tree_dqentry: Getting block too big (64 >= 6) [ 385.647271][ T5807] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 385.662237][ T5821] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 385.667753][ T5807] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 385.676213][ T5821] EXT4-fs error (device loop1): ext4_acquire_dquot:6226: comm syz.1.1185: Failed to acquire dquot type 0 [ 385.720784][ T5821] EXT4-fs error (device loop1): mb_free_blocks:1524: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 385.735554][ T5821] EXT4-fs error (device loop1) in ext4_do_update_inode:5336: error 27 [ 385.743964][ T5821] EXT4-fs error (device loop1): ext4_dirty_inode:6143: inode #13: comm syz.1.1185: mark_inode_dirty error [ 385.755699][ T5821] EXT4-fs error (device loop1) in ext4_do_update_inode:5336: error 27 [ 385.764120][ T5821] EXT4-fs error (device loop1): __ext4_ext_dirty:182: inode #13: comm syz.1.1185: mark_inode_dirty error [ 385.790318][ T5821] EXT4-fs error (device loop1) in ext4_do_update_inode:5336: error 27 [ 385.799142][ T5821] EXT4-fs error (device loop1) in ext4_orphan_del:3292: error 27 [ 385.807486][ T5821] EXT4-fs error (device loop1) in ext4_do_update_inode:5336: error 27 [ 385.819086][ T5821] EXT4-fs error (device loop1): ext4_truncate:4390: inode #13: comm syz.1.1185: mark_inode_dirty error [ 385.831466][ T5834] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 385.870369][ T278] attempt to access beyond end of device [ 385.870369][ T278] loop4: rw=2049, want=45104, limit=40427 [ 385.900517][ T5821] EXT4-fs error (device loop1) in ext4_orphan_cleanup:3108: error 27 [ 385.909221][ T5821] EXT4-fs (loop1): 1 truncate cleaned up [ 385.916577][ T5821] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 385.930218][ T5831] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 2: comm syz.0.1183: invalid block [ 385.950393][ T5831] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #13: comm syz.0.1183: invalid indirect mapped block 10 (level 1) [ 385.964354][ T5831] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #13: comm syz.0.1183: invalid indirect mapped block 8 (level 1) [ 385.965485][ T5821] Quota error (device loop1): find_tree_dqentry: Getting block too big (64 >= 6) [ 385.979034][ T5821] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 385.997490][ T5821] EXT4-fs error (device loop1): ext4_acquire_dquot:6226: comm syz.1.1185: Failed to acquire dquot type 0 [ 386.021687][ T5831] EXT4-fs (loop0): 1 truncate cleaned up [ 386.024435][ T5821] Quota error (device loop1): find_tree_dqentry: Getting block too big (64 >= 6) [ 386.027536][ T5831] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,,errors=continue [ 386.036773][ T5821] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 386.055545][ T5821] EXT4-fs error (device loop1): ext4_acquire_dquot:6226: comm syz.1.1185: Failed to acquire dquot type 0 [ 386.097735][ T5821] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5821 comm=syz.1.1185 [ 386.124752][ T5821] EXT4-fs (loop1): re-mounted. Opts: (null) [ 386.333728][ T5847] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 2: comm syz.4.1186: invalid block [ 386.371664][ T5847] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #13: comm syz.4.1186: invalid indirect mapped block 10 (level 1) [ 386.590780][ T5847] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #13: comm syz.4.1186: invalid indirect mapped block 8 (level 1) [ 386.637152][ T5847] EXT4-fs (loop4): 1 truncate cleaned up [ 386.643841][ T5847] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,,errors=continue [ 386.674736][ T5853] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #13: comm syz.0.1187: invalid indirect mapped block 10 (level 1) [ 386.693589][ T5853] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #13: comm syz.0.1187: invalid indirect mapped block 8 (level 1) [ 386.707291][ T5853] EXT4-fs (loop0): 1 truncate cleaned up [ 386.740162][ T5853] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,,errors=continue [ 386.996854][ T5863] EXT4-fs error (device loop3): ext4_get_branch:178: inode #13: block 2: comm syz.3.1192: invalid block [ 387.008783][ T5863] EXT4-fs error (device loop3): ext4_free_branches:1026: inode #13: comm syz.3.1192: invalid indirect mapped block 10 (level 1) [ 387.023147][ T5863] EXT4-fs error (device loop3): ext4_free_branches:1026: inode #13: comm syz.3.1192: invalid indirect mapped block 8 (level 1) [ 387.037505][ T5863] EXT4-fs (loop3): 1 truncate cleaned up [ 387.043187][ T5863] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,,errors=continue [ 388.250210][ T331] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 388.646657][ T5878] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #13: comm syz.2.1196: invalid indirect mapped block 10 (level 1) [ 388.660924][ T5878] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #13: comm syz.2.1196: invalid indirect mapped block 8 (level 1) [ 388.675331][ T5878] EXT4-fs (loop2): 1 truncate cleaned up [ 388.680997][ T5878] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,,errors=continue [ 388.810347][ T331] usb 4-1: unable to get BOS descriptor set [ 388.850390][ T331] usb 4-1: not running at top speed; connect to a high speed hub [ 388.970313][ T331] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 388.998967][ T331] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 11698, setting to 1023 [ 389.093444][ T331] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 36016, setting to 1023 [ 389.610261][ T331] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 389.629464][ T331] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.639537][ T331] usb 4-1: Product: ⊠[ 389.647639][ T331] usb 4-1: SerialNumber: ࡃ [ 389.720177][ T459] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 389.730255][ T303] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 390.050224][ T331] usb 4-1: 2:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 390.058763][ T331] usb 4-1: found format II with max.bitrate = 6, frame size=2 [ 390.066355][ T331] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 390.070141][ T304] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 390.080234][ T459] usb 3-1: config 0 interface 0 altsetting 10 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.091382][ T331] usb 4-1: unit 2 not found! [ 390.100179][ T303] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.119153][ T331] usb 4-1: USB disconnect, device number 34 [ 390.125206][ T303] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.134985][ T459] usb 3-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.147367][ T303] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 390.156548][ T459] usb 3-1: config 0 interface 0 has no altsetting 0 [ 390.163454][ T459] usb 3-1: New USB device found, idVendor=056a, idProduct=00da, bcdDevice= 0.00 [ 390.172612][ T303] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.180692][ T459] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.189566][ T303] usb 2-1: config 0 descriptor?? [ 390.195448][ T459] usb 3-1: config 0 descriptor?? [ 390.490193][ T304] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.501133][ T304] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.511045][ T304] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 390.520062][ T304] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.529017][ T304] usb 5-1: config 0 descriptor?? [ 390.531108][ T303] usbhid 2-1:0.0: can't add hid device: -71 [ 390.539986][ T303] usbhid: probe of 2-1:0.0 failed with error -71 [ 390.546394][ T459] usbhid 3-1:0.0: can't add hid device: -71 [ 390.552463][ T459] usbhid: probe of 3-1:0.0 failed with error -71 [ 390.560403][ T303] usb 2-1: USB disconnect, device number 32 [ 390.569410][ T459] usb 3-1: USB disconnect, device number 31 [ 390.627992][ T5892] F2FS-fs (loop3): fault_injection options not supported [ 390.642872][ T5892] F2FS-fs (loop3): invalid crc value [ 390.649182][ T5892] F2FS-fs (loop3): Found nat_bits in checkpoint [ 390.656222][ T5897] netlink: 'syz.0.1202': attribute type 15 has an invalid length. [ 390.664243][ T5897] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1202'. [ 390.684815][ T5892] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 390.713461][ T5892] syz.3.1201[5892] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 390.713514][ T5892] syz.3.1201[5892] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 390.880339][ T304] usbhid 5-1:0.0: can't add hid device: -71 [ 390.905388][ T304] usbhid: probe of 5-1:0.0 failed with error -71 [ 390.926661][ T304] usb 5-1: USB disconnect, device number 31 [ 391.016979][ T276] attempt to access beyond end of device [ 391.016979][ T276] loop3: rw=2049, want=45104, limit=40427 [ 391.344214][ T24] audit: type=1326 audit(1758290096.370:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5911 comm="syz.3.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b64638c29 code=0x7ffc0000 [ 391.428106][ T5914] FAT-fs (loop1): Directory bread(block 64) failed [ 391.434745][ T5914] FAT-fs (loop1): Directory bread(block 65) failed [ 391.441487][ T5914] FAT-fs (loop1): Directory bread(block 66) failed [ 391.448048][ T5914] FAT-fs (loop1): Directory bread(block 67) failed [ 391.454756][ T5914] FAT-fs (loop1): Directory bread(block 68) failed [ 391.461370][ T5914] FAT-fs (loop1): Directory bread(block 69) failed [ 391.468054][ T5914] FAT-fs (loop1): Directory bread(block 70) failed [ 391.474698][ T5914] FAT-fs (loop1): Directory bread(block 71) failed [ 391.481344][ T5914] FAT-fs (loop1): Directory bread(block 72) failed [ 391.487916][ T5914] FAT-fs (loop1): Directory bread(block 73) failed [ 391.874583][ T24] audit: type=1326 audit(1758290096.370:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5911 comm="syz.3.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b64638c29 code=0x7ffc0000 [ 392.032815][ T24] audit: type=1326 audit(1758290096.370:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5911 comm="syz.3.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f4b64638c29 code=0x7ffc0000 [ 392.056710][ T24] audit: type=1326 audit(1758290096.370:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5911 comm="syz.3.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b64638c29 code=0x7ffc0000 [ 392.080125][ T24] audit: type=1326 audit(1758290096.370:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5911 comm="syz.3.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b64638c29 code=0x7ffc0000 [ 392.103520][ T24] audit: type=1326 audit(1758290096.370:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5911 comm="syz.3.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4b64638c29 code=0x7ffc0000 [ 392.129509][ T24] audit: type=1326 audit(1758290097.000:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5911 comm="syz.3.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b64638c29 code=0x7ffc0000 [ 392.165164][ T24] audit: type=1326 audit(1758290097.000:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5911 comm="syz.3.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b64638c29 code=0x7ffc0000 [ 392.793147][ T5926] FAT-fs (loop0): Directory bread(block 64) failed [ 392.799797][ T5926] FAT-fs (loop0): Directory bread(block 65) failed [ 392.806585][ T5926] FAT-fs (loop0): Directory bread(block 66) failed [ 392.813365][ T5926] FAT-fs (loop0): Directory bread(block 67) failed [ 392.820041][ T5926] FAT-fs (loop0): Directory bread(block 68) failed [ 392.826657][ T5926] FAT-fs (loop0): Directory bread(block 69) failed [ 392.833456][ T5926] FAT-fs (loop0): Directory bread(block 70) failed [ 392.840049][ T5926] FAT-fs (loop0): Directory bread(block 71) failed [ 392.846775][ T5926] FAT-fs (loop0): Directory bread(block 72) failed [ 392.853354][ T5926] FAT-fs (loop0): Directory bread(block 73) failed [ 393.590703][ T5907] F2FS-fs (loop2): Invalid segment/section count (31, 24 x 150994945) [ 393.680638][ T5907] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 393.710662][ T5907] F2FS-fs (loop2): invalid crc value [ 393.764193][ T5907] F2FS-fs (loop2): Found nat_bits in checkpoint [ 393.798632][ T5907] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 393.808079][ T5907] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 393.855238][ T5935] EXT4-fs (loop3): 1 orphan inode deleted [ 393.870722][ T5907] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=8000000, run fsck to fix. [ 393.885348][ T5935] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 393.906794][ T5907] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=8000000, run fsck to fix. [ 393.932952][ T5935] ext4 filesystem being mounted at /231/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 394.002343][ T5939] F2FS-fs (loop0): invalid crc value [ 394.038951][ T5939] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 394.086408][ T5939] F2FS-fs (loop0): Start checkpoint disabled! [ 394.100276][ T5939] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 394.124217][ T5939] attempt to access beyond end of device [ 394.124217][ T5939] loop0: rw=0, want=45072, limit=40427 [ 394.186963][ T5907] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=8000000, run fsck to fix. [ 394.197151][ T5907] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=8000000, run fsck to fix. [ 394.252331][ T5960] serio: Serial port ptm0 [ 394.310180][ T589] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 394.560240][ T303] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 394.591572][ T5967] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5967 comm=syz.3.1218 [ 394.669670][ T5964] F2FS-fs (loop1): invalid crc value [ 394.691412][ T5964] F2FS-fs (loop1): Found nat_bits in checkpoint [ 394.710306][ T589] usb 5-1: config 0 interface 0 altsetting 10 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 394.721672][ T589] usb 5-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 394.723987][ T5964] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 394.740327][ T5964] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 394.877572][ T5973] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=5973 comm=syz.3.1218 [ 394.890244][ T5973] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=5973 comm=syz.3.1218 [ 394.902882][ T5973] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=5973 comm=syz.3.1218 [ 394.915525][ T5973] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=5973 comm=syz.3.1218 [ 394.915589][ T24] audit: type=1400 audit(1758290099.830:1263): avc: denied { write } for pid=5965 comm="syz.3.1218" name="ppp" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 394.928169][ T5973] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=5973 comm=syz.3.1218 [ 394.963530][ T5973] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=5973 comm=syz.3.1218 [ 394.976142][ T5973] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=5973 comm=syz.3.1218 [ 394.988787][ T5973] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=5973 comm=syz.3.1218 [ 395.001456][ T5973] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=5973 comm=syz.3.1218 [ 395.014396][ T589] usb 5-1: config 0 interface 0 has no altsetting 0 [ 395.021222][ T589] usb 5-1: New USB device found, idVendor=056a, idProduct=00da, bcdDevice= 0.00 [ 395.030325][ T589] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.038968][ T589] usb 5-1: config 0 descriptor?? [ 395.138457][ T279] attempt to access beyond end of device [ 395.138457][ T279] loop1: rw=2049, want=45104, limit=40427 [ 395.190225][ T303] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.210165][ T303] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.219917][ T303] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 395.229178][ T303] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.237840][ T303] usb 1-1: config 0 descriptor?? [ 395.400159][ T589] usbhid 5-1:0.0: can't add hid device: -71 [ 395.406120][ T589] usbhid: probe of 5-1:0.0 failed with error -71 [ 395.413541][ T589] usb 5-1: USB disconnect, device number 32 [ 395.420706][ T5975] F2FS-fs (loop2): fault_injection options not supported [ 395.775471][ T5975] F2FS-fs (loop2): invalid crc value [ 395.826745][ T5975] F2FS-fs (loop2): Found nat_bits in checkpoint [ 395.851139][ T5975] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 395.900193][ T303] usbhid 1-1:0.0: can't add hid device: -71 [ 395.906227][ T303] usbhid: probe of 1-1:0.0 failed with error -71 [ 395.914090][ T303] usb 1-1: USB disconnect, device number 25 [ 395.982082][ T5975] attempt to access beyond end of device [ 395.982082][ T5975] loop2: rw=2049, want=40432, limit=40427 [ 396.033687][ T5975] tipc: Started in network mode [ 396.038622][ T5975] tipc: Own node identity , cluster identity 4711 [ 396.045141][ T5975] tipc: Failed to obtain node identity [ 396.050755][ T5975] tipc: Enabling of bearer rejected, failed to enable media [ 396.127425][ T729] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 396.370131][ T729] usb 4-1: Using ep0 maxpacket: 8 [ 396.431338][ T6002] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.1227: Invalid block bitmap block 0 in block_group 0 [ 396.444981][ T6002] Quota error (device loop0): write_blk: dquota write failed [ 396.452414][ T6002] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 396.462839][ T6002] EXT4-fs error (device loop0): ext4_acquire_dquot:6226: comm syz.0.1227: Failed to acquire dquot type 0 [ 396.480418][ T6002] EXT4-fs error (device loop0): ext4_free_blocks:5685: comm syz.0.1227: Freeing blocks not in datazone - block = 0, count = 4096 [ 396.490205][ T729] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.493960][ T6002] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.1227: Invalid inode bitmap blk 0 in block_group 0 [ 396.517467][ T6002] EXT4-fs error (device loop0) in ext4_free_inode:360: Corrupt filesystem [ 396.526152][ T6002] EXT4-fs (loop0): 1 orphan inode deleted [ 396.530173][ T49] Quota error (device loop0): remove_tree: Getting block too big (0 >= 9) [ 396.531960][ T6002] EXT4-fs (loop0): mounted filesystem without journal. Opts: €; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 396.551245][ T49] EXT4-fs error (device loop0): ext4_release_dquot:6262: comm kworker/u4:2: Failed to release dquot type 0 [ 396.590590][ T729] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 396.625320][ T729] usb 4-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 396.648757][ T729] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.660373][ T5998] F2FS-fs (loop2): fault_injection options not supported [ 396.670395][ T5998] F2FS-fs (loop2): invalid crc value [ 396.699784][ T729] usb 4-1: config 0 descriptor?? [ 396.728940][ T5998] F2FS-fs (loop2): Found nat_bits in checkpoint [ 396.821237][ T5998] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 397.001656][ T6010] tipc: Started in network mode [ 397.006547][ T6010] tipc: Own node identity , cluster identity 4711 [ 397.013604][ T6010] tipc: Failed to obtain node identity [ 397.019924][ T6010] tipc: Enabling of bearer rejected, failed to enable media [ 397.036521][ T6006] attempt to access beyond end of device [ 397.036521][ T6006] loop2: rw=2049, want=45112, limit=40427 [ 397.064024][ T5996] F2FS-fs (loop1): Invalid segment/section count (31, 24 x 150994945) [ 397.082470][ T5996] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 397.118371][ T5996] F2FS-fs (loop1): invalid crc value [ 397.179917][ T5996] F2FS-fs (loop1): Found nat_bits in checkpoint [ 397.204177][ T6017] fuse: Bad value for 'fd' [ 397.271712][ T5996] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 397.278763][ T5996] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 397.337663][ T6012] F2FS-fs (loop3): invalid crc value [ 397.344310][ T5996] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=8000000, run fsck to fix. [ 397.354038][ T5996] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=8000000, run fsck to fix. [ 397.356842][ T6012] F2FS-fs (loop3): Found nat_bits in checkpoint [ 397.377019][ T6017] EXT4-fs (loop0): Test dummy encryption mode enabled [ 397.385998][ T6017] EXT4-fs (loop0): unsupported descriptor size 255 [ 397.455388][ T6012] F2FS-fs (loop3): Start checkpoint disabled! [ 397.472304][ T6012] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 397.555280][ T5996] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=8000000, run fsck to fix. [ 397.565267][ T5996] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=8000000, run fsck to fix. [ 398.197117][ T729] usbhid 4-1:0.0: can't add hid device: -71 [ 398.204091][ T6035] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #13: comm syz.0.1230: invalid indirect mapped block 10 (level 1) [ 398.223287][ T6035] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #13: comm syz.0.1230: invalid indirect mapped block 8 (level 1) [ 398.237510][ T6035] EXT4-fs (loop0): 1 truncate cleaned up [ 398.243199][ T6035] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,,errors=continue [ 398.475398][ T729] usbhid: probe of 4-1:0.0 failed with error -71 [ 398.483134][ T729] usb 4-1: USB disconnect, device number 35 [ 398.768124][ T49] attempt to access beyond end of device [ 398.768124][ T49] loop3: rw=2049, want=40976, limit=40427 [ 398.855391][ T6038] F2FS-fs (loop4): invalid crc value [ 398.907363][ T6038] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 398.964631][ T6052] FAULT_INJECTION: forcing a failure. [ 398.964631][ T6052] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 398.995528][ T6038] F2FS-fs (loop4): Start checkpoint disabled! [ 399.005679][ T6046] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 2: comm syz.2.1235: invalid block [ 399.030449][ T6052] CPU: 1 PID: 6052 Comm: syz.0.1237 Not tainted syzkaller #0 [ 399.037848][ T6052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 399.047896][ T6052] Call Trace: [ 399.051180][ T6052] __dump_stack+0x21/0x24 [ 399.055501][ T6052] dump_stack_lvl+0x169/0x1d8 [ 399.060165][ T6052] ? thaw_kernel_threads+0x220/0x220 [ 399.065434][ T6052] ? vsnprintf+0x1871/0x1960 [ 399.070012][ T6052] ? show_regs_print_info+0x18/0x18 [ 399.075196][ T6052] dump_stack+0x15/0x1c [ 399.079340][ T6052] should_fail+0x3c1/0x510 [ 399.083750][ T6052] should_fail_usercopy+0x1a/0x20 [ 399.088772][ T6052] _copy_to_user+0x20/0x90 [ 399.093185][ T6052] simple_read_from_buffer+0xe9/0x160 [ 399.098546][ T6052] proc_fail_nth_read+0x19a/0x210 [ 399.103565][ T6052] ? proc_fault_inject_write+0x2f0/0x2f0 [ 399.109183][ T6052] ? rw_verify_area+0x1c0/0x360 [ 399.110755][ T6046] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #13: comm syz.2.1235: invalid indirect mapped block 10 (level 1) [ 399.114017][ T6052] ? proc_fault_inject_write+0x2f0/0x2f0 [ 399.114027][ T6052] vfs_read+0x1fe/0xa10 [ 399.114044][ T6052] ? kernel_read+0x70/0x70 [ 399.127536][ T6038] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 399.132816][ T6052] ? __kasan_check_write+0x14/0x20 [ 399.132826][ T6052] ? mutex_lock+0x8c/0xe0 [ 399.132841][ T6052] ? mutex_trylock+0xa0/0xa0 [ 399.162781][ T6052] ? __fget_files+0x2c4/0x320 [ 399.167455][ T6052] ? __fdget_pos+0x2d2/0x380 [ 399.172038][ T6052] ? ksys_read+0x71/0x240 [ 399.176358][ T6052] ksys_read+0x140/0x240 [ 399.180591][ T6052] ? vfs_write+0xd60/0xd60 [ 399.185002][ T6052] ? debug_smp_processor_id+0x17/0x20 [ 399.190366][ T6052] __x64_sys_read+0x7b/0x90 [ 399.194853][ T6052] do_syscall_64+0x31/0x40 [ 399.199253][ T6052] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 399.205125][ T6052] RIP: 0033:0x7fc13048063c [ 399.209546][ T6052] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 399.229198][ T6052] RSP: 002b:00007fc12eeea030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 399.237598][ T6052] RAX: ffffffffffffffda RBX: 00007fc1306c8fa0 RCX: 00007fc13048063c [ 399.245554][ T6052] RDX: 000000000000000f RSI: 00007fc12eeea0a0 RDI: 0000000000000006 [ 399.253511][ T6052] RBP: 00007fc12eeea090 R08: 0000000000000000 R09: 0000000000000000 [ 399.261896][ T6052] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 399.269844][ T6052] R13: 00007fc1306c9038 R14: 00007fc1306c8fa0 R15: 00007ffc28e665f8 [ 399.301043][ T6046] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #13: comm syz.2.1235: invalid indirect mapped block 8 (level 1) [ 399.382770][ T6046] EXT4-fs (loop2): 1 truncate cleaned up [ 399.390280][ T6046] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,,errors=continue [ 399.400715][ T6038] attempt to access beyond end of device [ 399.400715][ T6038] loop4: rw=0, want=45072, limit=40427 [ 399.420243][ T369] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 399.518629][ T6060] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.1238: Invalid block bitmap block 0 in block_group 0 [ 399.532819][ T6060] Quota error (device loop0): write_blk: dquota write failed [ 399.540241][ T6060] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 399.550620][ T6060] EXT4-fs error (device loop0): ext4_acquire_dquot:6226: comm syz.0.1238: Failed to acquire dquot type 0 [ 399.561982][ T6060] EXT4-fs error (device loop0): ext4_free_blocks:5685: comm syz.0.1238: Freeing blocks not in datazone - block = 0, count = 4096 [ 399.575567][ T6060] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.1238: Invalid inode bitmap blk 0 in block_group 0 [ 399.588243][ T49] Quota error (device loop0): remove_tree: Getting block too big (0 >= 9) [ 399.588260][ T49] EXT4-fs error (device loop0): ext4_release_dquot:6262: comm kworker/u4:2: Failed to release dquot type 0 [ 399.608272][ T6060] EXT4-fs error (device loop0) in ext4_free_inode:360: Corrupt filesystem [ 399.616999][ T6060] EXT4-fs (loop0): 1 orphan inode deleted [ 399.622734][ T6060] EXT4-fs (loop0): mounted filesystem without journal. Opts: €; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 399.744911][ T6057] F2FS-fs (loop3): fault_injection options not supported [ 399.775055][ T6057] F2FS-fs (loop3): invalid crc value [ 399.783818][ T6065] serio: Serial port ptm0 [ 399.789438][ T6057] F2FS-fs (loop3): Found nat_bits in checkpoint [ 399.800236][ T369] usb 2-1: config 0 interface 0 altsetting 10 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.820246][ T369] usb 2-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.830551][ T369] usb 2-1: config 0 interface 0 has no altsetting 0 [ 399.832891][ T6057] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 399.868988][ T369] usb 2-1: New USB device found, idVendor=056a, idProduct=00da, bcdDevice= 0.00 [ 399.893333][ T6057] tipc: Started in network mode [ 399.898386][ T369] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.899279][ T6057] tipc: Own node identity , cluster identity 4711 [ 399.920294][ T369] usb 2-1: config 0 descriptor?? [ 399.933211][ T6057] tipc: Failed to obtain node identity [ 399.945032][ T6057] tipc: Enabling of bearer rejected, failed to enable media [ 399.986180][ T276] attempt to access beyond end of device [ 399.986180][ T276] loop3: rw=2049, want=45112, limit=40427 [ 400.160577][ T6070] F2FS-fs (loop4): invalid crc value [ 400.170929][ T6070] F2FS-fs (loop4): Found nat_bits in checkpoint [ 400.201403][ T6070] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 400.208273][ T6070] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 400.247575][ T6086] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1244'. [ 400.280642][ T369] usbhid 2-1:0.0: can't add hid device: -71 [ 400.288781][ T369] usbhid: probe of 2-1:0.0 failed with error -71 [ 400.300968][ T369] usb 2-1: USB disconnect, device number 33 [ 400.418846][ T278] attempt to access beyond end of device [ 400.418846][ T278] loop4: rw=2049, want=45104, limit=40427 [ 400.530201][ T304] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 400.590225][ T331] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 400.701380][ T6092] F2FS-fs (loop4): fault_injection options not supported [ 400.709316][ T6092] F2FS-fs (loop4): invalid crc value [ 400.728461][ T6092] F2FS-fs (loop4): Found nat_bits in checkpoint [ 400.763718][ T6092] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 400.780127][ T304] usb 1-1: Using ep0 maxpacket: 32 [ 400.813245][ T6092] syz.4.1246[6092] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 400.813303][ T6092] syz.4.1246[6092] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 400.853118][ T278] attempt to access beyond end of device [ 400.853118][ T278] loop4: rw=2049, want=45112, limit=40427 [ 400.884372][ T6095] F2FS-fs (loop1): fault_injection options not supported [ 400.904657][ T6095] F2FS-fs (loop1): invalid crc value [ 400.910248][ T304] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 400.911131][ T6095] F2FS-fs (loop1): Found nat_bits in checkpoint [ 400.918413][ T304] usb 1-1: config 0 has no interface number 0 [ 400.918448][ T304] usb 1-1: config 0 interface 184 has no altsetting 0 [ 400.952066][ T6095] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 400.966763][ T6095] syz.1.1247[6095] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 400.966821][ T6095] syz.1.1247[6095] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 400.980161][ T331] usb 4-1: config 0 interface 0 altsetting 10 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.004934][ T331] usb 4-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 401.014888][ T331] usb 4-1: config 0 interface 0 has no altsetting 0 [ 401.022409][ T331] usb 4-1: New USB device found, idVendor=056a, idProduct=00da, bcdDevice= 0.00 [ 401.031819][ T331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.040728][ T331] usb 4-1: config 0 descriptor?? [ 401.090441][ T304] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 401.102616][ T304] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.112421][ T304] usb 1-1: Product: syz [ 401.116879][ T304] usb 1-1: Manufacturer: syz [ 401.121959][ T304] usb 1-1: SerialNumber: syz [ 401.127540][ T304] usb 1-1: config 0 descriptor?? [ 401.132104][ T6100] attempt to access beyond end of device [ 401.132104][ T6100] loop1: rw=2049, want=45112, limit=40427 [ 401.165175][ T6106] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #13: comm syz.4.1248: invalid indirect mapped block 10 (level 1) [ 401.178587][ T6106] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #13: comm syz.4.1248: invalid indirect mapped block 8 (level 1) [ 401.180582][ T304] smsc75xx v1.0.0 [ 401.192052][ T6106] EXT4-fs (loop4): 1 truncate cleaned up [ 401.201088][ T6106] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,,errors=continue [ 401.334283][ T6110] F2FS-fs (loop2): fault_injection options not supported [ 401.343278][ T6110] F2FS-fs (loop2): invalid crc value [ 401.349877][ T6110] F2FS-fs (loop2): Found nat_bits in checkpoint [ 401.385088][ T6110] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 401.399665][ T6110] syz.2.1249[6110] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 401.399722][ T6110] syz.2.1249[6110] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 401.425942][ T277] attempt to access beyond end of device [ 401.425942][ T277] loop2: rw=2049, want=45112, limit=40427 [ 401.542256][ T6089] udc-core: couldn't find an available UDC or it's busy [ 401.549235][ T6089] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 401.600237][ T304] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 401.650158][ T331] usbhid 4-1:0.0: can't add hid device: -71 [ 401.656246][ T331] usbhid: probe of 4-1:0.0 failed with error -71 [ 401.662500][ T304] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 401.672394][ T304] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 401.682751][ T304] smsc75xx: probe of 1-1:0.184 failed with error -61 [ 401.700264][ T331] usb 4-1: USB disconnect, device number 36 [ 402.138292][ T6116] F2FS-fs (loop1): Invalid segment/section count (31, 24 x 150994945) [ 402.146763][ T6116] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 402.156210][ T6116] F2FS-fs (loop1): invalid crc value [ 402.163895][ T6125] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1252'. [ 402.173331][ T6116] F2FS-fs (loop1): Found nat_bits in checkpoint [ 402.206620][ T6116] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 402.213860][ T6116] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 402.240650][ T6116] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=8000000, run fsck to fix. [ 402.250350][ T6116] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=8000000, run fsck to fix. [ 402.320821][ T6132] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.1253: Invalid block bitmap block 0 in block_group 0 [ 402.334607][ T6132] Quota error (device loop4): write_blk: dquota write failed [ 402.342035][ T6132] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 402.351976][ T6132] EXT4-fs error (device loop4): ext4_acquire_dquot:6226: comm syz.4.1253: Failed to acquire dquot type 0 [ 402.363645][ T6132] EXT4-fs error (device loop4): ext4_free_blocks:5685: comm syz.4.1253: Freeing blocks not in datazone - block = 0, count = 4096 [ 402.377562][ T6132] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.1253: Invalid inode bitmap blk 0 in block_group 0 [ 402.384981][ T6116] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=8000000, run fsck to fix. [ 402.390763][ T6132] EXT4-fs error (device loop4) in ext4_free_inode:360: Corrupt filesystem [ 402.400887][ T49] Quota error (device loop4): remove_tree: Getting block too big (0 >= 9) [ 402.408390][ T6132] EXT4-fs (loop4): 1 orphan inode deleted [ 402.422286][ T6132] EXT4-fs (loop4): mounted filesystem without journal. Opts: €; max_batch_time=0x0000000000000006,i_version,,errors=continue [ 402.442868][ T6116] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=8000000, run fsck to fix. [ 402.482979][ T49] EXT4-fs error (device loop4): ext4_release_dquot:6262: comm kworker/u4:2: Failed to release dquot type 0 [ 403.677987][ T1820] usb 1-1: USB disconnect, device number 26 [ 403.772304][ T6148] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 403.782985][ T6148] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 403.803776][ T6148] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x44ede5da, utbl_chksum : 0xe619d30d) [ 403.846810][ T6158] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1258'. [ 403.872019][ T6155] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 403.908358][ T6155] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 403.925718][ T6155] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 404.350455][ T6147] EXT4-fs (loop2): 1 orphan inode deleted [ 404.356211][ T6147] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 404.365424][ T6147] ext4 filesystem being mounted at /264/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 404.860295][ T24] audit: type=1400 audit(1758290109.880:1264): avc: denied { write } for pid=6154 comm="syz.0.1259" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 404.937469][ T24] audit: type=1400 audit(1758290109.880:1265): avc: denied { add_name } for pid=6154 comm="syz.0.1259" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 405.109255][ T24] audit: type=1400 audit(1758290109.880:1266): avc: denied { associate } for pid=6154 comm="syz.0.1259" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 405.153145][ T24] audit: type=1400 audit(1758290109.920:1267): avc: denied { write open } for pid=6154 comm="syz.0.1259" path="/268/file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=1048650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 405.478567][ T6186] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1269'. [ 406.340446][ T6182] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 406.966745][ T1820] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 406.989011][ T6194] FAT-fs (loop2): Directory bread(block 64) failed [ 406.995740][ T6194] FAT-fs (loop2): Directory bread(block 65) failed [ 407.002455][ T6194] FAT-fs (loop2): Directory bread(block 66) failed [ 407.009026][ T6194] FAT-fs (loop2): Directory bread(block 67) failed [ 407.015742][ T6194] FAT-fs (loop2): Directory bread(block 68) failed [ 407.022359][ T6194] FAT-fs (loop2): Directory bread(block 69) failed [ 407.029036][ T6194] FAT-fs (loop2): Directory bread(block 70) failed [ 407.035617][ T6194] FAT-fs (loop2): Directory bread(block 71) failed [ 407.042295][ T6194] FAT-fs (loop2): Directory bread(block 72) failed [ 407.048818][ T6194] FAT-fs (loop2): Directory bread(block 73) failed [ 407.214259][ T6197] FAULT_INJECTION: forcing a failure. [ 407.214259][ T6197] name failslab, interval 1, probability 0, space 0, times 0 [ 407.346011][ T6197] CPU: 0 PID: 6197 Comm: syz.0.1273 Not tainted syzkaller #0 [ 407.353415][ T6197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 407.363482][ T6197] Call Trace: [ 407.366783][ T6197] __dump_stack+0x21/0x24 [ 407.371117][ T6197] dump_stack_lvl+0x169/0x1d8 [ 407.375799][ T6197] ? show_regs_print_info+0x18/0x18 [ 407.380996][ T6197] dump_stack+0x15/0x1c [ 407.385151][ T6197] should_fail+0x3c1/0x510 [ 407.389566][ T6197] ? io_submit_one+0x11c/0x1660 [ 407.394419][ T6197] __should_failslab+0xa4/0xe0 [ 407.399183][ T6197] should_failslab+0x9/0x20 [ 407.403685][ T6197] kmem_cache_alloc+0x3d/0x2e0 [ 407.408447][ T6197] ? __kasan_check_write+0x14/0x20 [ 407.413556][ T6197] io_submit_one+0x11c/0x1660 [ 407.418226][ T6197] ? __kasan_check_read+0x11/0x20 [ 407.423243][ T6197] ? preempt_schedule_irq+0xbb/0x110 [ 407.428513][ T6197] ? preempt_schedule_notrace+0x110/0x110 [ 407.434220][ T6197] ? __schedule+0xb4f/0x1310 [ 407.438796][ T6197] ? irqentry_exit+0x56/0x60 [ 407.443371][ T6197] ? exc_page_fault+0x67/0xc0 [ 407.448039][ T6197] ? lookup_ioctx+0x2b0/0x2b0 [ 407.452709][ T6197] ? asm_exc_page_fault+0x1e/0x30 [ 407.457739][ T6197] ? __get_user_4+0x1c/0x30 [ 407.461256][ T24] audit: type=1400 audit(1758290112.480:1268): avc: denied { ioctl } for pid=6196 comm="syz.0.1273" path="/dev/binderfs/binder1" dev="binder" ino=5 ioctlcmd=0x6208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 407.462236][ T6197] ? lookup_ioctx+0x1a9/0x2b0 [ 407.492115][ T6197] __se_sys_io_submit+0x16e/0x3c0 [ 407.497138][ T6197] ? __x64_sys_io_submit+0x90/0x90 [ 407.502225][ T6197] __x64_sys_io_submit+0x7b/0x90 [ 407.507135][ T6197] do_syscall_64+0x31/0x40 [ 407.511529][ T6197] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 407.517398][ T6197] RIP: 0033:0x7fc130481c29 [ 407.521789][ T6197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 407.541370][ T6197] RSP: 002b:00007fc12eeea038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 407.549760][ T6197] RAX: ffffffffffffffda RBX: 00007fc1306c8fa0 RCX: 00007fc130481c29 [ 407.557706][ T6197] RDX: 0000200000000700 RSI: 0000000000000001 RDI: 00007fc1306a2000 [ 407.565655][ T6197] RBP: 00007fc12eeea090 R08: 0000000000000000 R09: 0000000000000000 [ 407.573599][ T6197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 407.581545][ T6197] R13: 00007fc1306c9038 R14: 00007fc1306c8fa0 R15: 00007ffc28e665f8 [ 407.590877][ T1820] usb 4-1: Using ep0 maxpacket: 32 [ 407.984916][ T1820] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 408.099366][ T6204] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 2: comm syz.1.1263: invalid block [ 408.118770][ T1820] usb 4-1: config 0 has no interface number 0 [ 408.163671][ T6206] EXT4-fs (loop4): 1 orphan inode deleted [ 408.169485][ T6206] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 408.178718][ T6206] ext4 filesystem being mounted at /245/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 408.279413][ T1820] usb 4-1: config 0 interface 184 has no altsetting 0 [ 408.376343][ T6204] EXT4-fs error (device loop1): ext4_free_branches:1026: inode #13: comm syz.1.1263: invalid indirect mapped block 10 (level 1) [ 408.390032][ T6204] EXT4-fs error (device loop1): ext4_free_branches:1026: inode #13: comm syz.1.1263: invalid indirect mapped block 8 (level 1) [ 408.403953][ T6204] EXT4-fs (loop1): 1 truncate cleaned up [ 408.409609][ T6204] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,,errors=continue [ 408.908654][ T6214] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #13: comm syz.0.1276: invalid indirect mapped block 10 (level 1) [ 408.922506][ T6214] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #13: comm syz.0.1276: invalid indirect mapped block 8 (level 1) [ 408.937408][ T6214] EXT4-fs (loop0): 1 truncate cleaned up [ 408.943195][ T6214] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,,errors=continue [ 409.500232][ T1820] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 409.509653][ T1820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.528054][ T1820] usb 4-1: Product: syz [ 409.534421][ T1820] usb 4-1: Manufacturer: syz [ 409.540125][ T1820] usb 4-1: SerialNumber: syz [ 409.545403][ T1820] usb 4-1: config 0 descriptor?? [ 409.590257][ T1820] usb 4-1: can't set config #0, error -71 [ 409.612843][ T6226] netlink: 'syz.0.1279': attribute type 15 has an invalid length. [ 409.620772][ T6226] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1279'. [ 409.634662][ T1820] usb 4-1: USB disconnect, device number 37 [ 409.654879][ T24] audit: type=1326 audit(1758290114.680:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6224 comm="syz.1.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27006e3c29 code=0x7ffc0000 [ 409.728900][ T24] audit: type=1326 audit(1758290114.680:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6224 comm="syz.1.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27006e3c29 code=0x7ffc0000 [ 409.800302][ T24] audit: type=1326 audit(1758290114.710:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6224 comm="syz.1.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f27006e3c29 code=0x7ffc0000 [ 409.864413][ T24] audit: type=1326 audit(1758290114.710:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6224 comm="syz.1.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27006e3c29 code=0x7ffc0000 [ 409.932465][ T24] audit: type=1326 audit(1758290114.710:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6224 comm="syz.1.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27006e3c29 code=0x7ffc0000 [ 409.955972][ T24] audit: type=1326 audit(1758290114.710:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6224 comm="syz.1.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f27006e3c29 code=0x7ffc0000 [ 409.979686][ T24] audit: type=1326 audit(1758290114.710:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6224 comm="syz.1.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27006e3c29 code=0x7ffc0000 [ 410.003157][ T24] audit: type=1326 audit(1758290114.710:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6224 comm="syz.1.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27006e3c29 code=0x7ffc0000 [ 410.026715][ T24] audit: type=1326 audit(1758290114.710:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6224 comm="syz.1.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f27006e3c29 code=0x7ffc0000 [ 410.054112][ T6223] F2FS-fs (loop4): invalid crc value [ 410.066974][ T6236] FAT-fs (loop0): Directory bread(block 64) failed [ 410.080177][ T6236] FAT-fs (loop0): Directory bread(block 65) failed [ 410.087617][ T6236] FAT-fs (loop0): Directory bread(block 66) failed [ 410.096276][ T6236] FAT-fs (loop0): Directory bread(block 67) failed [ 410.096938][ T6223] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 410.103056][ T6236] FAT-fs (loop0): Directory bread(block 68) failed [ 410.120907][ T6236] FAT-fs (loop0): Directory bread(block 69) failed [ 410.127445][ T6236] FAT-fs (loop0): Directory bread(block 70) failed [ 410.134330][ T6236] FAT-fs (loop0): Directory bread(block 71) failed [ 410.155341][ T6236] FAT-fs (loop0): Directory bread(block 72) failed [ 410.170185][ T6236] FAT-fs (loop0): Directory bread(block 73) failed [ 410.185371][ T6223] F2FS-fs (loop4): Start checkpoint disabled! [ 410.200580][ T6223] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 410.258893][ T6223] attempt to access beyond end of device [ 410.258893][ T6223] loop4: rw=0, want=45072, limit=40427 [ 410.420187][ T331] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 410.489393][ T6219] F2FS-fs (loop2): Invalid segment/section count (31, 24 x 150994945) [ 410.497603][ T6219] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 410.506393][ T6219] F2FS-fs (loop2): invalid crc value [ 410.513392][ T6219] F2FS-fs (loop2): Found nat_bits in checkpoint [ 410.537082][ T6234] F2FS-fs (loop3): Invalid segment/section count (31, 24 x 150994945) [ 410.563340][ T6234] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 410.580315][ T6234] F2FS-fs (loop3): invalid crc value [ 410.586033][ T6219] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 410.586481][ T6245] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 410.600177][ T6219] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 410.616235][ T6245] ext4 filesystem being mounted at /277/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 410.641005][ T6234] F2FS-fs (loop3): Found nat_bits in checkpoint [ 410.685153][ T6234] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 410.692352][ T6234] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 410.701946][ T6219] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=8000000, run fsck to fix. [ 410.717986][ T6219] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=8000000, run fsck to fix. [ 410.760662][ T6234] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=8000000, run fsck to fix. [ 410.928012][ T6234] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=8000000, run fsck to fix. [ 411.286827][ T6262] EXT4-fs (loop4): 1 orphan inode deleted [ 411.292711][ T6262] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 411.302031][ T6262] ext4 filesystem being mounted at /247/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 411.683766][ T6234] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=8000000, run fsck to fix. [ 411.692565][ T331] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.704044][ T331] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 411.710214][ T6234] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=8000000, run fsck to fix. [ 411.713898][ T331] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 411.733580][ T331] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.740925][ T6219] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=8000000, run fsck to fix. [ 411.751421][ T331] usb 2-1: config 0 descriptor?? [ 411.764035][ T6219] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=8000000, run fsck to fix. [ 412.290329][ T331] usbhid 2-1:0.0: can't add hid device: -71 [ 412.303720][ T331] usbhid: probe of 2-1:0.0 failed with error -71 [ 412.334175][ T6276] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #13: comm syz.4.1289: invalid indirect mapped block 10 (level 1) [ 412.348161][ T6276] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #13: comm syz.4.1289: invalid indirect mapped block 8 (level 1) [ 412.362791][ T6276] EXT4-fs (loop4): 1 truncate cleaned up [ 412.368477][ T6276] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,,errors=continue [ 412.412027][ T331] usb 2-1: USB disconnect, device number 34 [ 413.133684][ T6272] F2FS-fs (loop0): fault_injection options not supported [ 413.232424][ T6272] F2FS-fs (loop0): invalid crc value [ 413.379700][ T6272] F2FS-fs (loop0): Found nat_bits in checkpoint [ 413.504529][ T6283] FAT-fs (loop4): Directory bread(block 64) failed [ 413.511177][ T6283] FAT-fs (loop4): Directory bread(block 65) failed [ 413.517884][ T6283] FAT-fs (loop4): Directory bread(block 66) failed [ 413.524507][ T6283] FAT-fs (loop4): Directory bread(block 67) failed [ 413.531227][ T6283] FAT-fs (loop4): Directory bread(block 68) failed [ 413.537815][ T6283] FAT-fs (loop4): Directory bread(block 69) failed [ 413.544565][ T6283] FAT-fs (loop4): Directory bread(block 70) failed [ 413.551160][ T6283] FAT-fs (loop4): Directory bread(block 71) failed [ 413.557839][ T6283] FAT-fs (loop4): Directory bread(block 72) failed [ 413.564421][ T6283] FAT-fs (loop4): Directory bread(block 73) failed [ 413.610810][ T6272] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 413.960252][ T24] kauditd_printk_skb: 42 callbacks suppressed [ 413.960264][ T24] audit: type=1326 audit(1758290118.970:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6288 comm="syz.1.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27006e3c29 code=0x7ffc0000 [ 414.010435][ T6272] syz.0.1288[6272] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 414.010495][ T6272] syz.0.1288[6272] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 414.022151][ T24] audit: type=1326 audit(1758290118.980:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6288 comm="syz.1.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f27006e3c29 code=0x7ffc0000 [ 414.146570][ T24] audit: type=1326 audit(1758290118.980:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6288 comm="syz.1.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27006e3c29 code=0x7ffc0000 [ 414.194984][ T24] audit: type=1326 audit(1758290118.980:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6288 comm="syz.1.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f27006e3c29 code=0x7ffc0000 [ 414.218806][ T24] audit: type=1326 audit(1758290118.980:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6288 comm="syz.1.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27006e3c29 code=0x7ffc0000 [ 414.273180][ T24] audit: type=1326 audit(1758290118.980:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6288 comm="syz.1.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f27006e3c29 code=0x7ffc0000 [ 414.273270][ T6285] attempt to access beyond end of device [ 414.273270][ T6285] loop0: rw=2049, want=45112, limit=40427 [ 414.296651][ T24] audit: type=1326 audit(1758290118.980:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6288 comm="syz.1.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27006e3c29 code=0x7ffc0000 [ 414.468625][ T6307] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1291'. [ 414.541133][ T24] audit: type=1326 audit(1758290118.980:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6288 comm="syz.1.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f27006e3c29 code=0x7ffc0000 [ 414.573995][ T6309] netlink: 'syz.3.1292': attribute type 15 has an invalid length. [ 414.581858][ T6309] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1292'. [ 414.612998][ T24] audit: type=1326 audit(1758290118.980:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6288 comm="syz.1.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27006e3c29 code=0x7ffc0000 [ 414.673542][ T24] audit: type=1326 audit(1758290118.980:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6288 comm="syz.1.1293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f27006e382b code=0x7ffc0000 [ 414.788951][ T6311] FAT-fs (loop3): Directory bread(block 64) failed [ 414.800719][ T6311] FAT-fs (loop3): Directory bread(block 65) failed [ 414.807734][ T6311] FAT-fs (loop3): Directory bread(block 66) failed [ 414.810144][ T301] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 414.815004][ T6311] FAT-fs (loop3): Directory bread(block 67) failed [ 414.828731][ T6311] FAT-fs (loop3): Directory bread(block 68) failed [ 414.836396][ T6311] FAT-fs (loop3): Directory bread(block 69) failed [ 414.843448][ T6311] FAT-fs (loop3): Directory bread(block 70) failed [ 414.864596][ T6311] FAT-fs (loop3): Directory bread(block 71) failed [ 414.879053][ T6311] FAT-fs (loop3): Directory bread(block 72) failed [ 414.893797][ T6311] FAT-fs (loop3): Directory bread(block 73) failed [ 415.040856][ T6315] F2FS-fs (loop0): fault_injection options not supported [ 415.057709][ T6315] F2FS-fs (loop0): invalid crc value [ 415.074451][ T6315] F2FS-fs (loop0): Found nat_bits in checkpoint [ 415.080855][ T301] usb 3-1: Using ep0 maxpacket: 32 [ 415.440334][ T301] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 415.582908][ T6315] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 415.654315][ T301] usb 3-1: config 0 has no interface number 0 [ 415.678309][ T301] usb 3-1: config 0 interface 184 has no altsetting 0 [ 415.842300][ T6330] FAT-fs (loop3): Directory bread(block 64) failed [ 415.849055][ T6330] FAT-fs (loop3): Directory bread(block 65) failed [ 415.856307][ T6330] FAT-fs (loop3): Directory bread(block 66) failed [ 415.863041][ T6330] FAT-fs (loop3): Directory bread(block 67) failed [ 415.870113][ T6330] FAT-fs (loop3): Directory bread(block 68) failed [ 415.876845][ T6330] FAT-fs (loop3): Directory bread(block 69) failed [ 415.884020][ T6330] FAT-fs (loop3): Directory bread(block 70) failed [ 415.890712][ T6330] FAT-fs (loop3): Directory bread(block 71) failed [ 415.897899][ T6330] FAT-fs (loop3): Directory bread(block 72) failed [ 415.904599][ T6330] FAT-fs (loop3): Directory bread(block 73) failed [ 416.593737][ T6329] EXT4-fs error (device loop4): ext4_get_branch:178: inode #13: block 2: comm syz.4.1301: invalid block [ 416.606058][ T6329] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #13: comm syz.4.1301: invalid indirect mapped block 10 (level 1) [ 416.620508][ T6329] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #13: comm syz.4.1301: invalid indirect mapped block 8 (level 1) [ 416.634929][ T6329] EXT4-fs (loop4): 1 truncate cleaned up [ 416.640607][ T6329] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,,errors=continue [ 416.700356][ T301] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 416.852545][ T301] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.860795][ T301] usb 3-1: Product: syz [ 416.864992][ T301] usb 3-1: Manufacturer: syz [ 416.869591][ T301] usb 3-1: SerialNumber: syz [ 416.875259][ T301] usb 3-1: config 0 descriptor?? [ 416.905765][ T6336] EXT4-fs error (device loop3): ext4_free_branches:1026: inode #13: comm syz.3.1302: invalid indirect mapped block 10 (level 1) [ 416.932801][ T301] smsc75xx v1.0.0 [ 416.957115][ T6336] EXT4-fs error (device loop3): ext4_free_branches:1026: inode #13: comm syz.3.1302: invalid indirect mapped block 8 (level 1) [ 416.980468][ T6336] EXT4-fs (loop3): 1 truncate cleaned up [ 416.990312][ T6336] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,,errors=continue [ 417.200115][ T275] attempt to access beyond end of device [ 417.200115][ T275] loop0: rw=2049, want=45104, limit=40427 [ 417.303661][ T6346] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 417.475881][ T301] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 417.486727][ T301] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 417.496402][ T301] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 417.506693][ T301] smsc75xx: probe of 3-1:0.184 failed with error -61 [ 417.855479][ T6357] netlink: 'syz.0.1307': attribute type 15 has an invalid length. [ 417.863429][ T6357] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1307'. [ 418.304248][ T6367] EXT4-fs warning (device loop1): ext4_enable_quotas:6491: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 418.312211][ T6363] F2FS-fs (loop4): fault_injection options not supported [ 418.319220][ T6367] EXT4-fs (loop1): mount failed [ 418.332701][ T6363] F2FS-fs (loop4): invalid crc value [ 418.339010][ T6363] F2FS-fs (loop4): Found nat_bits in checkpoint [ 418.360224][ T6363] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 418.524859][ T6376] FAT-fs (loop3): Directory bread(block 64) failed [ 418.531507][ T6376] FAT-fs (loop3): Directory bread(block 65) failed [ 418.538099][ T6376] FAT-fs (loop3): Directory bread(block 66) failed [ 418.544931][ T6376] FAT-fs (loop3): Directory bread(block 67) failed [ 418.551545][ T6376] FAT-fs (loop3): Directory bread(block 68) failed [ 418.558544][ T6376] FAT-fs (loop3): Directory bread(block 69) failed [ 418.565270][ T6376] FAT-fs (loop3): Directory bread(block 70) failed [ 418.566949][ T6372] attempt to access beyond end of device [ 418.566949][ T6372] loop4: rw=2049, want=45112, limit=40427 [ 418.571963][ T6376] FAT-fs (loop3): Directory bread(block 71) failed [ 418.589605][ T6376] FAT-fs (loop3): Directory bread(block 72) failed [ 418.596182][ T6376] FAT-fs (loop3): Directory bread(block 73) failed [ 418.859167][ T793] usb 3-1: USB disconnect, device number 32 [ 419.059205][ T6391] selinux_netlink_send: 1 callbacks suppressed [ 419.059219][ T6391] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6391 comm=syz.2.1316 [ 421.373461][ T6404] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 2: comm syz.1.1318: invalid block [ 421.385523][ T6404] EXT4-fs error (device loop1): ext4_free_branches:1026: inode #13: comm syz.1.1318: invalid indirect mapped block 10 (level 1) [ 421.400064][ T6404] EXT4-fs error (device loop1): ext4_free_branches:1026: inode #13: comm syz.1.1318: invalid indirect mapped block 8 (level 1) [ 421.417722][ T6404] EXT4-fs (loop1): 1 truncate cleaned up [ 421.423422][ T6404] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,,errors=continue [ 421.745248][ T6403] EXT4-fs error (device loop3): ext4_free_branches:1026: inode #13: comm syz.3.1315: invalid indirect mapped block 10 (level 1) [ 421.759259][ T6403] EXT4-fs error (device loop3): ext4_free_branches:1026: inode #13: comm syz.3.1315: invalid indirect mapped block 8 (level 1) [ 422.090422][ T6403] EXT4-fs (loop3): 1 truncate cleaned up [ 422.096111][ T6403] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,,errors=continue [ 422.232047][ T6414] syz.2.1322[6414] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 422.232106][ T6414] syz.2.1322[6414] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 422.656891][ T6414] EXT4-fs (loop2): mounted filesystem without journal. Opts: min_batch_time=0x000000000000b842,min_batch_time=0x0000000000000004,,errors=continue [ 422.861238][ T6425] EXT4-fs (loop1): 1 orphan inode deleted [ 422.880244][ T6425] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 422.890360][ T6425] ext4 filesystem being mounted at /256/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 423.065046][ T6431] FAT-fs (loop3): Directory bread(block 64) failed [ 423.071622][ T6431] FAT-fs (loop3): Directory bread(block 65) failed [ 423.078148][ T6431] FAT-fs (loop3): Directory bread(block 66) failed [ 423.084683][ T6431] FAT-fs (loop3): Directory bread(block 67) failed [ 423.091260][ T6431] FAT-fs (loop3): Directory bread(block 68) failed [ 423.097772][ T6431] FAT-fs (loop3): Directory bread(block 69) failed [ 423.104330][ T6431] FAT-fs (loop3): Directory bread(block 70) failed [ 423.110847][ T6431] FAT-fs (loop3): Directory bread(block 71) failed [ 423.117377][ T6431] FAT-fs (loop3): Directory bread(block 72) failed [ 423.123919][ T6431] FAT-fs (loop3): Directory bread(block 73) failed [ 423.179278][ T6410] F2FS-fs (loop4): Invalid segment/section count (31, 24 x 150994945) [ 423.198056][ T6410] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 423.225246][ T6410] F2FS-fs (loop4): invalid crc value [ 423.570862][ T6410] F2FS-fs (loop4): Found nat_bits in checkpoint [ 423.652020][ T6410] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 423.665224][ T6410] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 423.712055][ T6410] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=8000000, run fsck to fix. [ 423.730301][ T6410] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=8000000, run fsck to fix. [ 423.950587][ T6447] F2FS-fs (loop2): fault_injection options not supported [ 423.970299][ T6447] F2FS-fs (loop2): invalid crc value [ 424.022945][ T6447] F2FS-fs (loop2): Found nat_bits in checkpoint [ 424.079487][ T6447] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 424.159267][ T6447] syz.2.1327[6447] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 424.159372][ T6447] syz.2.1327[6447] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 424.349231][ T6450] attempt to access beyond end of device [ 424.349231][ T6450] loop2: rw=2049, want=45112, limit=40427 [ 424.440144][ T3031] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 424.505465][ T6463] F2FS-fs (loop0): invalid crc value [ 424.519197][ T6463] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 424.538771][ T6463] F2FS-fs (loop0): Start checkpoint disabled! [ 424.545370][ T6463] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 424.581600][ T6472] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1332'. [ 424.597548][ T6474] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6474 comm=syz.2.1335 [ 424.638506][ T6463] attempt to access beyond end of device [ 424.638506][ T6463] loop0: rw=0, want=45072, limit=40427 [ 424.730184][ T729] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 425.041054][ T3031] usb 2-1: config 0 interface 0 altsetting 10 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.072760][ T3031] usb 2-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 425.151661][ T6481] __quota_error: 2546 callbacks suppressed [ 425.151675][ T6481] Quota error (device loop0): find_tree_dqentry: Getting block too big (64 >= 6) [ 425.166920][ T3031] usb 2-1: config 0 interface 0 has no altsetting 0 [ 425.172031][ T6481] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 425.173837][ T729] usb 4-1: Using ep0 maxpacket: 8 [ 425.183321][ T6481] EXT4-fs error (device loop0): ext4_acquire_dquot:6226: comm syz.0.1337: Failed to acquire dquot type 0 [ 425.188301][ T3031] usb 2-1: New USB device found, idVendor=056a, idProduct=00da, bcdDevice= 0.00 [ 425.200029][ T6481] EXT4-fs error (device loop0): mb_free_blocks:1524: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 425.208479][ T3031] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.223242][ T6481] EXT4-fs error (device loop0) in ext4_do_update_inode:5336: error 27 [ 425.235570][ T3031] usb 2-1: config 0 descriptor?? [ 425.239387][ T6481] EXT4-fs error (device loop0): ext4_dirty_inode:6143: inode #13: comm syz.0.1337: mark_inode_dirty error [ 425.255532][ T6481] EXT4-fs error (device loop0) in ext4_do_update_inode:5336: error 27 [ 425.263980][ T6481] EXT4-fs error (device loop0): __ext4_ext_dirty:182: inode #13: comm syz.0.1337: mark_inode_dirty error [ 425.275492][ T6481] EXT4-fs error (device loop0) in ext4_do_update_inode:5336: error 27 [ 425.283863][ T6481] EXT4-fs error (device loop0) in ext4_orphan_del:3292: error 27 [ 425.291884][ T6481] EXT4-fs error (device loop0) in ext4_do_update_inode:5336: error 27 [ 425.300356][ T6481] EXT4-fs error (device loop0): ext4_truncate:4390: inode #13: comm syz.0.1337: mark_inode_dirty error [ 425.311589][ T6481] EXT4-fs error (device loop0) in ext4_orphan_cleanup:3108: error 27 [ 425.320166][ T6481] EXT4-fs (loop0): 1 truncate cleaned up [ 425.320304][ T729] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.325877][ T6481] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 425.336717][ T729] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 425.358906][ T729] usb 4-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 425.367949][ T6481] Quota error (device loop0): find_tree_dqentry: Getting block too big (64 >= 6) [ 425.367963][ T6481] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 425.367973][ T6481] EXT4-fs error (device loop0): ext4_acquire_dquot:6226: comm syz.0.1337: Failed to acquire dquot type 0 [ 425.368907][ T6481] Quota error (device loop0): find_tree_dqentry: Getting block too big (64 >= 6) [ 425.377414][ T729] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.386729][ T6481] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 425.398730][ T729] usb 4-1: config 0 descriptor?? [ 425.408181][ T6481] EXT4-fs error (device loop0): ext4_acquire_dquot:6226: comm syz.0.1337: Failed to acquire dquot type 0 [ 425.466590][ T6481] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6481 comm=syz.0.1337 [ 425.479677][ T6481] EXT4-fs (loop0): re-mounted. Opts: (null) [ 425.636371][ T6496] serio: Serial port ptm0 [ 425.682705][ T6501] Quota error (device loop4): find_tree_dqentry: Getting block too big (64 >= 6) [ 425.692646][ T6501] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 425.702606][ T6501] EXT4-fs error (device loop4): ext4_acquire_dquot:6226: comm syz.4.1345: Failed to acquire dquot type 0 [ 425.714425][ T6501] EXT4-fs error (device loop4): mb_free_blocks:1524: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 425.729085][ T6501] EXT4-fs error (device loop4) in ext4_do_update_inode:5336: error 27 [ 425.737993][ T6501] EXT4-fs error (device loop4): ext4_dirty_inode:6143: inode #13: comm syz.4.1345: mark_inode_dirty error [ 425.759632][ T6501] EXT4-fs error (device loop4) in ext4_do_update_inode:5336: error 27 [ 425.768673][ T6460] udc-core: couldn't find an available UDC or it's busy [ 425.778128][ T6460] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 425.788207][ T6501] EXT4-fs error (device loop4): __ext4_ext_dirty:182: inode #13: comm syz.4.1345: mark_inode_dirty error [ 425.819820][ T6501] EXT4-fs error (device loop4) in ext4_do_update_inode:5336: error 27 [ 425.829387][ T3031] wacom 0003:056A:00DA.0014: unknown main item tag 0x2 [ 425.837249][ T3031] wacom 0003:056A:00DA.0014: Unknown device_type for 'HID 056a:00da'. Assuming pen. [ 425.847540][ T6501] EXT4-fs error (device loop4) in ext4_orphan_del:3292: error 27 [ 425.856213][ T3031] wacom 0003:056A:00DA.0014: hidraw0: USB HID v0.10 Device [HID 056a:00da] on usb-dummy_hcd.1-1/input0 [ 425.867566][ T6501] EXT4-fs error (device loop4) in ext4_do_update_inode:5336: error 27 [ 425.877915][ T3031] input: Wacom Bamboo 2FG 4x5 SE Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00DA.0014/input/input64 [ 425.890959][ T6501] EXT4-fs error (device loop4): ext4_truncate:4390: inode #13: comm syz.4.1345: mark_inode_dirty error [ 425.931540][ T3031] usb 2-1: USB disconnect, device number 35 [ 425.937857][ T6501] EXT4-fs error (device loop4) in ext4_orphan_cleanup:3108: error 27 [ 425.960992][ T6508] fido_id[6508]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 425.986140][ T6501] EXT4-fs (loop4): 1 truncate cleaned up [ 425.996518][ T6501] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 426.031469][ T6505] F2FS-fs (loop0): invalid crc value [ 426.044607][ T6501] Quota error (device loop4): find_tree_dqentry: Getting block too big (64 >= 6) [ 426.053867][ T6501] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 426.063982][ T6501] EXT4-fs error (device loop4): ext4_acquire_dquot:6226: comm syz.4.1345: Failed to acquire dquot type 0 [ 426.076554][ T6505] F2FS-fs (loop0): Found nat_bits in checkpoint [ 426.081563][ T6506] F2FS-fs (loop3): invalid crc value [ 426.089885][ T6501] EXT4-fs error (device loop4): ext4_acquire_dquot:6226: comm syz.4.1345: Failed to acquire dquot type 0 [ 426.091022][ T6506] F2FS-fs (loop3): Found nat_bits in checkpoint [ 426.158219][ T6506] F2FS-fs (loop3): Start checkpoint disabled! [ 426.165670][ T6501] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6501 comm=syz.4.1345 [ 426.188790][ T6501] EXT4-fs (loop4): re-mounted. Opts: (null) [ 426.190695][ T6506] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 426.240918][ T6505] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 426.247906][ T6505] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 426.473706][ T6521] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 426.600270][ T729] usbhid 4-1:0.0: can't add hid device: -71 [ 426.607343][ T729] usbhid: probe of 4-1:0.0 failed with error -71 [ 426.637513][ T275] attempt to access beyond end of device [ 426.637513][ T275] loop0: rw=2049, want=45104, limit=40427 [ 426.655575][ T729] usb 4-1: USB disconnect, device number 38 [ 427.244136][ T6535] syz.4.1352[6535] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 427.244174][ T6535] syz.4.1352[6535] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 427.302862][ T6535] EXT4-fs (loop4): mounted filesystem without journal. Opts: min_batch_time=0x000000000000b842,min_batch_time=0x0000000000000004,,errors=continue [ 427.366935][ T7] attempt to access beyond end of device [ 427.366935][ T7] loop3: rw=2049, want=40984, limit=40427 [ 427.431112][ T6539] EXT4-fs (loop0): 1 orphan inode deleted [ 427.444128][ T6539] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 427.460481][ T6539] ext4 filesystem being mounted at /293/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 427.785484][ T6553] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 427.959264][ T6550] EXT4-fs error (device loop1): ext4_acquire_dquot:6226: comm syz.1.1356: Failed to acquire dquot type 0 [ 427.980682][ T6550] EXT4-fs error (device loop1): mb_free_blocks:1524: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 428.023016][ T6550] EXT4-fs error (device loop1) in ext4_do_update_inode:5336: error 27 [ 428.054024][ T6550] EXT4-fs error (device loop1): ext4_dirty_inode:6143: inode #13: comm syz.1.1356: mark_inode_dirty error [ 428.099553][ T6550] EXT4-fs error (device loop1) in ext4_do_update_inode:5336: error 27 [ 428.117188][ T6550] EXT4-fs error (device loop1): __ext4_ext_dirty:182: inode #13: comm syz.1.1356: mark_inode_dirty error [ 428.157400][ T6550] EXT4-fs error (device loop1) in ext4_do_update_inode:5336: error 27 [ 428.180283][ T6550] EXT4-fs error (device loop1) in ext4_orphan_del:3292: error 27 [ 428.201574][ T6550] EXT4-fs error (device loop1) in ext4_do_update_inode:5336: error 27 [ 428.880996][ T6550] EXT4-fs error (device loop1): ext4_truncate:4390: inode #13: comm syz.1.1356: mark_inode_dirty error [ 428.958128][ T6550] EXT4-fs error (device loop1) in ext4_orphan_cleanup:3108: error 27 [ 429.131907][ T6560] EXT4-fs (loop3): 1 orphan inode deleted [ 429.137688][ T6560] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 429.146858][ T6560] ext4 filesystem being mounted at /255/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 429.201329][ T6550] EXT4-fs (loop1): 1 truncate cleaned up [ 429.221359][ T6564] serio: Serial port ptm0 [ 429.225763][ T6550] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 429.255891][ T6550] EXT4-fs error (device loop1): ext4_acquire_dquot:6226: comm syz.1.1356: Failed to acquire dquot type 0 [ 429.391033][ T6550] EXT4-fs error (device loop1): ext4_acquire_dquot:6226: comm syz.1.1356: Failed to acquire dquot type 0 [ 429.448253][ T6550] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6550 comm=syz.1.1356 [ 429.480831][ T6550] EXT4-fs (loop1): re-mounted. Opts: (null) [ 429.843809][ T6572] EXT4-fs (loop3): 1 orphan inode deleted [ 429.849799][ T6572] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 429.859074][ T6572] ext4 filesystem being mounted at /256/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 430.072785][ T6567] F2FS-fs (loop2): invalid crc value [ 430.556948][ T6567] F2FS-fs (loop2): Found nat_bits in checkpoint [ 430.592507][ T6567] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 430.599683][ T6567] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 430.806580][ T6595] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 430.947206][ T277] attempt to access beyond end of device [ 430.947206][ T277] loop2: rw=2049, want=45104, limit=40427 [ 431.007896][ T3031] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 431.321321][ T6603] netlink: 'syz.2.1367': attribute type 15 has an invalid length. [ 431.329200][ T6603] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1367'. [ 431.370302][ T3031] usb 5-1: config 0 interface 0 altsetting 10 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.390115][ T3031] usb 5-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.410259][ T3031] usb 5-1: config 0 interface 0 has no altsetting 0 [ 431.416880][ T3031] usb 5-1: New USB device found, idVendor=056a, idProduct=00da, bcdDevice= 0.00 [ 431.436268][ T3031] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.490372][ T3031] usb 5-1: config 0 descriptor?? [ 431.509097][ T6601] F2FS-fs (loop1): fault_injection options not supported [ 431.518136][ T6601] F2FS-fs (loop1): invalid crc value [ 431.524605][ T6601] F2FS-fs (loop1): Found nat_bits in checkpoint [ 431.544677][ T6605] F2FS-fs (loop2): fault_injection options not supported [ 431.560351][ T6601] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 431.562158][ T6605] F2FS-fs (loop2): invalid crc value [ 431.776766][ T6605] F2FS-fs (loop2): Found nat_bits in checkpoint [ 431.913844][ T6614] EXT4-fs error (device loop3): ext4_free_branches:1026: inode #13: comm syz.3.1370: invalid indirect mapped block 10 (level 1) [ 431.927952][ T6614] EXT4-fs error (device loop3): ext4_free_branches:1026: inode #13: comm syz.3.1370: invalid indirect mapped block 8 (level 1) [ 431.946731][ T6614] EXT4-fs (loop3): 1 truncate cleaned up [ 431.952595][ T6614] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,,errors=continue [ 432.053536][ T6594] udc-core: couldn't find an available UDC or it's busy [ 432.166611][ T6605] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 432.191232][ T6594] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 432.760246][ T3031] usbhid 5-1:0.0: can't add hid device: -71 [ 432.767260][ T3031] usbhid: probe of 5-1:0.0 failed with error -71 [ 432.789124][ T3031] usb 5-1: USB disconnect, device number 33 [ 432.797873][ T6629] tipc: Started in network mode [ 432.801091][ T6625] attempt to access beyond end of device [ 432.801091][ T6625] loop1: rw=2049, want=40432, limit=40427 [ 432.814644][ T6629] tipc: Own node identity , cluster identity 4711 [ 432.821346][ T6629] tipc: Failed to obtain node identity [ 432.827079][ T6629] tipc: Enabling of bearer rejected, failed to enable media [ 432.838137][ T6630] tipc: Started in network mode [ 432.850554][ T6630] tipc: Own node identity , cluster identity 4711 [ 432.867637][ T6630] tipc: Failed to obtain node identity [ 432.914804][ T6630] tipc: Enabling of bearer rejected, failed to enable media [ 432.940155][ T369] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 432.953255][ T277] attempt to access beyond end of device [ 432.953255][ T277] loop2: rw=2049, want=45104, limit=40427 [ 432.971688][ T6632] EXT4-fs error (device loop3): ext4_free_branches:1026: inode #13: comm syz.3.1373: invalid indirect mapped block 10 (level 1) [ 432.995300][ T6632] EXT4-fs error (device loop3): ext4_free_branches:1026: inode #13: comm syz.3.1373: invalid indirect mapped block 8 (level 1) [ 433.014889][ T6632] EXT4-fs (loop3): 1 truncate cleaned up [ 433.020608][ T6632] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,,errors=continue [ 433.200254][ T6639] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6639 comm=syz.4.1376 [ 433.330197][ T369] usb 1-1: config 0 interface 0 altsetting 10 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.348523][ T369] usb 1-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.798682][ T369] usb 1-1: config 0 interface 0 has no altsetting 0 [ 433.838772][ T369] usb 1-1: New USB device found, idVendor=056a, idProduct=00da, bcdDevice= 0.00 [ 434.002243][ T6647] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 434.012926][ T6647] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 434.028503][ T6647] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x44ede5da, utbl_chksum : 0xe619d30d) [ 434.546447][ T369] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.557420][ T369] usb 1-1: config 0 descriptor?? [ 434.657216][ T6650] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6650 comm=syz.2.1378 [ 434.784527][ T6637] F2FS-fs (loop1): Invalid segment/section count (31, 24 x 150994945) [ 435.300813][ T6658] netlink: 'syz.4.1380': attribute type 15 has an invalid length. [ 435.308657][ T6658] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1380'. [ 435.315350][ T6637] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 435.329128][ T6637] F2FS-fs (loop1): invalid crc value [ 435.336258][ T6637] F2FS-fs (loop1): Found nat_bits in checkpoint [ 435.556375][ T6659] udc-core: couldn't find an available UDC or it's busy [ 435.560630][ T6637] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 435.570419][ T6659] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 435.575209][ T6637] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 435.591433][ T369] wacom 0003:056A:00DA.0015: unknown main item tag 0x2 [ 435.619760][ T6637] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=8000000, run fsck to fix. [ 435.626428][ T369] wacom 0003:056A:00DA.0015: Unknown device_type for 'HID 056a:00da'. Assuming pen. [ 435.664699][ T6637] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=8000000, run fsck to fix. [ 435.673273][ T369] wacom 0003:056A:00DA.0015: hidraw0: USB HID v0.10 Device [HID 056a:00da] on usb-dummy_hcd.0-1/input0 [ 435.685898][ T369] input: Wacom Bamboo 2FG 4x5 SE Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:00DA.0015/input/input67 [ 435.694604][ T6668] EXT4-fs (loop4): Ignoring removed bh option [ 435.710223][ T6668] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 435.783453][ T6668] EXT4-fs error (device loop4): ext4_orphan_get:1421: comm syz.4.1381: bad orphan inode 131083 [ 435.794411][ T6668] EXT4-fs (loop4): mounted filesystem without journal. Opts: bh,init_itable,noload,,errors=continue [ 436.070850][ T304] usb 1-1: USB disconnect, device number 27 [ 436.110002][ T6637] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=8000000, run fsck to fix. [ 436.126816][ T6637] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=8000000, run fsck to fix. [ 436.417508][ T6683] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 437.467969][ T6692] EXT4-fs (loop0): 1 orphan inode deleted [ 437.473848][ T6692] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 437.483153][ T6692] ext4 filesystem being mounted at /296/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 438.264874][ T6699] EXT4-fs (loop2): 1 orphan inode deleted [ 438.270702][ T6699] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 438.279969][ T6699] ext4 filesystem being mounted at /288/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 438.700111][ T3031] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 438.709490][ T6713] netlink: 'syz.0.1391': attribute type 15 has an invalid length. [ 438.717537][ T6713] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1391'. [ 438.762363][ T6706] __quota_error: 8 callbacks suppressed [ 438.762377][ T6706] Quota error (device loop2): find_tree_dqentry: Getting block too big (64 >= 6) [ 438.768174][ T6711] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 438.786191][ T6711] ext4 filesystem being mounted at /271/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 438.792351][ T6706] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 438.811540][ T6706] EXT4-fs error (device loop2): ext4_acquire_dquot:6226: comm syz.2.1390: Failed to acquire dquot type 0 [ 438.873289][ T6706] EXT4-fs error (device loop2): mb_free_blocks:1524: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 438.888515][ T6706] EXT4-fs error (device loop2) in ext4_do_update_inode:5336: error 27 [ 438.896918][ T6706] EXT4-fs error (device loop2): ext4_dirty_inode:6143: inode #13: comm syz.2.1390: mark_inode_dirty error [ 438.912562][ T6706] EXT4-fs error (device loop2) in ext4_do_update_inode:5336: error 27 [ 438.921101][ T6706] EXT4-fs error (device loop2): __ext4_ext_dirty:182: inode #13: comm syz.2.1390: mark_inode_dirty error [ 438.933421][ T6706] EXT4-fs error (device loop2) in ext4_do_update_inode:5336: error 27 [ 438.942611][ T6706] EXT4-fs error (device loop2) in ext4_orphan_del:3292: error 27 [ 438.951152][ T6706] EXT4-fs error (device loop2) in ext4_do_update_inode:5336: error 27 [ 438.959775][ T6706] EXT4-fs error (device loop2): ext4_truncate:4390: inode #13: comm syz.2.1390: mark_inode_dirty error [ 438.971750][ T6706] EXT4-fs error (device loop2) in ext4_orphan_cleanup:3108: error 27 [ 439.263336][ T6706] EXT4-fs (loop2): 1 truncate cleaned up [ 439.269089][ T6706] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 439.310807][ T6706] Quota error (device loop2): find_tree_dqentry: Getting block too big (64 >= 6) [ 439.320175][ T6706] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 439.329609][ T6706] EXT4-fs error (device loop2): ext4_acquire_dquot:6226: comm syz.2.1390: Failed to acquire dquot type 0 [ 439.342721][ T6706] Quota error (device loop2): find_tree_dqentry: Getting block too big (64 >= 6) [ 439.351956][ T6706] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 439.361422][ T6706] EXT4-fs error (device loop2): ext4_acquire_dquot:6226: comm syz.2.1390: Failed to acquire dquot type 0 [ 439.374640][ T6706] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6706 comm=syz.2.1390 [ 439.387811][ T6706] EXT4-fs (loop2): re-mounted. Opts: (null) [ 439.420177][ T3031] usb 4-1: config 0 interface 0 altsetting 10 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.431344][ T3031] usb 4-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.441321][ T3031] usb 4-1: config 0 interface 0 has no altsetting 0 [ 439.447964][ T3031] usb 4-1: New USB device found, idVendor=056a, idProduct=00da, bcdDevice= 0.00 [ 439.457227][ T3031] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.465938][ T3031] usb 4-1: config 0 descriptor?? [ 439.718254][ T6730] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #13: comm syz.0.1396: invalid indirect mapped block 10 (level 1) [ 439.732447][ T6730] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #13: comm syz.0.1396: invalid indirect mapped block 8 (level 1) [ 439.746816][ T6730] EXT4-fs (loop0): 1 truncate cleaned up [ 439.752519][ T6730] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,,errors=continue [ 440.682139][ T3031] usbhid 4-1:0.0: can't add hid device: -71 [ 440.739963][ T304] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 440.748061][ T3031] usbhid: probe of 4-1:0.0 failed with error -71 [ 441.770221][ T6746] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 2: comm syz.0.1399: invalid block [ 441.798538][ T6746] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #13: comm syz.0.1399: invalid indirect mapped block 10 (level 1) [ 441.829342][ T6746] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #13: comm syz.0.1399: invalid indirect mapped block 8 (level 1) [ 441.962481][ T6746] EXT4-fs (loop0): 1 truncate cleaned up [ 441.968226][ T6746] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,,errors=continue [ 443.539725][ T6748] EXT4-fs (loop4): 1 orphan inode deleted [ 443.545538][ T6748] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 443.554494][ T6748] ext4 filesystem being mounted at /272/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 443.675717][ T3031] usb 4-1: USB disconnect, device number 39 [ 443.721302][ T6758] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 2: comm syz.2.1402: invalid block [ 443.741393][ T6758] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #13: comm syz.2.1402: invalid indirect mapped block 10 (level 1) [ 443.764594][ T6758] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #13: comm syz.2.1402: invalid indirect mapped block 8 (level 1) [ 443.788406][ T6758] EXT4-fs (loop2): 1 truncate cleaned up [ 443.840158][ T6758] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,,errors=continue [ 443.961508][ T6762] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 2: comm syz.1.1404: invalid block [ 444.090173][ T404] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 444.150118][ T304] usb 3-1: device not accepting address 33, error -71 [ 444.167080][ T6762] EXT4-fs error (device loop1): ext4_free_branches:1026: inode #13: comm syz.1.1404: invalid indirect mapped block 10 (level 1) [ 444.233276][ T6770] FAT-fs (loop0): Directory bread(block 64) failed [ 444.239921][ T6770] FAT-fs (loop0): Directory bread(block 65) failed [ 444.246688][ T6770] FAT-fs (loop0): Directory bread(block 66) failed [ 444.253287][ T6770] FAT-fs (loop0): Directory bread(block 67) failed [ 444.260345][ T6770] FAT-fs (loop0): Directory bread(block 68) failed [ 444.266926][ T6770] FAT-fs (loop0): Directory bread(block 69) failed [ 444.273684][ T6770] FAT-fs (loop0): Directory bread(block 70) failed [ 444.280293][ T6770] FAT-fs (loop0): Directory bread(block 71) failed [ 444.286979][ T6770] FAT-fs (loop0): Directory bread(block 72) failed [ 444.293574][ T6770] FAT-fs (loop0): Directory bread(block 73) failed [ 444.886821][ T6762] EXT4-fs error (device loop1): ext4_free_branches:1026: inode #13: comm syz.1.1404: invalid indirect mapped block 8 (level 1) [ 444.900170][ T404] usb 5-1: config 0 interface 0 altsetting 10 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.900443][ T6762] EXT4-fs (loop1): 1 truncate cleaned up [ 444.911223][ T404] usb 5-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 444.930235][ T6762] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,,errors=continue [ 444.939968][ T404] usb 5-1: config 0 interface 0 has no altsetting 0 [ 444.946913][ T404] usb 5-1: New USB device found, idVendor=056a, idProduct=00da, bcdDevice= 0.00 [ 444.956146][ T404] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.976222][ T404] usb 5-1: config 0 descriptor?? [ 445.057289][ T6773] Quota error (device loop2): find_tree_dqentry: Getting block too big (64 >= 6) [ 445.076636][ T6773] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 445.086709][ T6773] EXT4-fs error (device loop2): ext4_acquire_dquot:6226: comm syz.2.1406: Failed to acquire dquot type 0 [ 445.177587][ T6773] EXT4-fs error (device loop2): mb_free_blocks:1524: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 445.215254][ T6773] EXT4-fs error (device loop2) in ext4_do_update_inode:5336: error 27 [ 445.252452][ T6773] EXT4-fs error (device loop2): ext4_dirty_inode:6143: inode #13: comm syz.2.1406: mark_inode_dirty error [ 445.341779][ T6773] EXT4-fs error (device loop2) in ext4_do_update_inode:5336: error 27 [ 445.404028][ T6773] EXT4-fs error (device loop2): __ext4_ext_dirty:182: inode #13: comm syz.2.1406: mark_inode_dirty error [ 445.429342][ T6773] EXT4-fs error (device loop2) in ext4_do_update_inode:5336: error 27 [ 445.438067][ T6773] EXT4-fs error (device loop2) in ext4_orphan_del:3292: error 27 [ 445.448057][ T6773] EXT4-fs error (device loop2) in ext4_do_update_inode:5336: error 27 [ 445.456801][ T6773] EXT4-fs error (device loop2): ext4_truncate:4390: inode #13: comm syz.2.1406: mark_inode_dirty error [ 445.468247][ T6773] EXT4-fs error (device loop2) in ext4_orphan_cleanup:3108: error 27 [ 445.483989][ T6773] EXT4-fs (loop2): 1 truncate cleaned up [ 445.489637][ T6773] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 445.499459][ T24] audit: type=1326 audit(1758290150.530:3876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6780 comm="syz.3.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b64638c29 code=0x7ffc0000 [ 445.560435][ T24] audit: type=1326 audit(1758290150.560:3877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6780 comm="syz.3.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b64638c29 code=0x7ffc0000 [ 445.584685][ T6766] udc-core: couldn't find an available UDC or it's busy [ 445.600158][ T6766] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 445.615367][ T24] audit: type=1326 audit(1758290150.560:3878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6780 comm="syz.3.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f4b64638c29 code=0x7ffc0000 [ 445.643920][ T6773] Quota error (device loop2): find_tree_dqentry: Getting block too big (64 >= 6) [ 445.663297][ T6773] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 445.667838][ T24] audit: type=1326 audit(1758290150.560:3879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6780 comm="syz.3.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b64638c29 code=0x7ffc0000 [ 445.684971][ T6773] EXT4-fs error (device loop2): ext4_acquire_dquot:6226: comm syz.2.1406: Failed to acquire dquot type 0 [ 445.724109][ T24] audit: type=1326 audit(1758290150.560:3880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6780 comm="syz.3.1408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b64638c29 code=0x7ffc0000 [ 445.748115][ T6784] Quota error (device loop2): find_tree_dqentry: Getting block too big (64 >= 6) [ 445.760161][ T404] usbhid 5-1:0.0: can't add hid device: -71 [ 445.761464][ T6784] EXT4-fs error (device loop2): ext4_acquire_dquot:6226: comm syz.2.1406: Failed to acquire dquot type 0 [ 445.766216][ T404] usbhid: probe of 5-1:0.0 failed with error -71 [ 445.805540][ T404] usb 5-1: USB disconnect, device number 34 [ 445.813283][ T6773] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6773 comm=syz.2.1406 [ 445.843781][ T6773] EXT4-fs (loop2): re-mounted. Opts: (null) [ 446.385101][ T6790] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 446.397021][ T6790] ext4 filesystem being mounted at /302/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 446.580724][ T6795] EXT4-fs (loop2): 1 orphan inode deleted [ 446.586516][ T6795] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 446.595807][ T6795] ext4 filesystem being mounted at /293/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 447.261710][ T6807] EXT4-fs (loop3): 1 orphan inode deleted [ 447.267525][ T6807] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 447.276864][ T6807] ext4 filesystem being mounted at /269/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 447.288669][ T304] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 447.898304][ T304] usb 5-1: config 0 interface 0 altsetting 10 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.915611][ T304] usb 5-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 447.925856][ T304] usb 5-1: config 0 interface 0 has no altsetting 0 [ 447.940518][ T304] usb 5-1: New USB device found, idVendor=056a, idProduct=00da, bcdDevice= 0.00 [ 447.959697][ T304] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.982628][ T304] usb 5-1: config 0 descriptor?? [ 448.435774][ T6801] F2FS-fs (loop1): invalid crc value [ 448.622731][ T6829] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #13: comm syz.0.1418: invalid indirect mapped block 10 (level 1) [ 448.637349][ T6829] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #13: comm syz.0.1418: invalid indirect mapped block 8 (level 1) [ 448.652234][ T6829] EXT4-fs (loop0): 1 truncate cleaned up [ 448.657901][ T6829] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,,errors=continue [ 448.759534][ T6801] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 448.777378][ T6834] udc-core: couldn't find an available UDC or it's busy [ 448.803375][ T6834] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 449.201800][ T304] usbhid 5-1:0.0: can't add hid device: -71 [ 449.208142][ T6837] EXT4-fs error (device loop3): ext4_free_branches:1026: inode #13: comm syz.3.1419: invalid indirect mapped block 10 (level 1) [ 449.283177][ T6837] EXT4-fs error (device loop3): ext4_free_branches:1026: inode #13: comm syz.3.1419: invalid indirect mapped block 8 (level 1) [ 449.296637][ T6837] EXT4-fs (loop3): 1 truncate cleaned up [ 449.302292][ T6837] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,,errors=continue [ 449.314184][ T6801] F2FS-fs (loop1): Start checkpoint disabled! [ 449.322784][ T304] usbhid: probe of 5-1:0.0 failed with error -71 [ 449.331826][ T304] usb 5-1: USB disconnect, device number 35 [ 449.370638][ T6801] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 449.407196][ T6801] attempt to access beyond end of device [ 449.407196][ T6801] loop1: rw=0, want=45072, limit=40427 [ 449.793202][ T6841] F2FS-fs (loop0): fault_injection options not supported [ 449.815703][ T6841] F2FS-fs (loop0): invalid crc value [ 450.019468][ T6841] F2FS-fs (loop0): Found nat_bits in checkpoint [ 450.087613][ T24] kauditd_printk_skb: 91 callbacks suppressed [ 450.087625][ T24] audit: type=1326 audit(1758290155.100:3971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6842 comm="syz.1.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27006e3c29 code=0x7ffc0000 [ 450.129567][ T6855] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6855 comm=syz.3.1424 [ 450.154247][ T24] audit: type=1326 audit(1758290155.100:3972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6842 comm="syz.1.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27006e3c29 code=0x7ffc0000 [ 450.223777][ T6841] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 450.544161][ T6860] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=6860 comm=syz.3.1424 [ 450.556800][ T6860] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=6860 comm=syz.3.1424 [ 450.569407][ T6860] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=6860 comm=syz.3.1424 [ 450.582051][ T6860] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=6860 comm=syz.3.1424 [ 450.594662][ T6860] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=6860 comm=syz.3.1424 [ 450.607290][ T6860] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=6860 comm=syz.3.1424 [ 450.619889][ T6860] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=6860 comm=syz.3.1424 [ 450.632488][ T6860] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=6860 comm=syz.3.1424 [ 450.780096][ T6862] EXT4-fs (loop1): 1 orphan inode deleted [ 450.785892][ T6862] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 450.795038][ T6862] ext4 filesystem being mounted at /273/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 451.583569][ T6871] selinux_netlink_send: 2 callbacks suppressed [ 451.583584][ T6871] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6871 comm=syz.4.1427 [ 451.642202][ T6869] tipc: Started in network mode [ 451.647086][ T6869] tipc: Own node identity , cluster identity 4711 [ 451.655962][ T6869] tipc: Failed to obtain node identity [ 451.670971][ T6869] tipc: Enabling of bearer rejected, failed to enable media [ 451.691455][ T275] attempt to access beyond end of device [ 451.691455][ T275] loop0: rw=2049, want=45104, limit=40427 [ 451.983337][ T6881] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6881 comm=syz.2.1431 [ 452.548911][ T6889] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=6889 comm=syz.2.1431 [ 452.561848][ T6889] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=6889 comm=syz.2.1431 [ 452.574795][ T6889] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=6889 comm=syz.2.1431 [ 452.587672][ T6889] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=6889 comm=syz.2.1431 [ 452.600326][ T6889] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=6889 comm=syz.2.1431 [ 452.612990][ T6889] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=6889 comm=syz.2.1431 [ 452.625598][ T6889] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=6889 comm=syz.2.1431 [ 452.638217][ T6889] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=6889 comm=syz.2.1431 [ 453.509109][ T6890] EXT4-fs (loop1): 1 orphan inode deleted [ 453.514984][ T6890] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 453.524298][ T6890] ext4 filesystem being mounted at /274/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 454.077932][ T6885] F2FS-fs (loop0): invalid crc value [ 454.087484][ T6885] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 454.116305][ T6885] F2FS-fs (loop0): Start checkpoint disabled! [ 454.128971][ T6885] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 454.177435][ T6885] attempt to access beyond end of device [ 454.177435][ T6885] loop0: rw=0, want=45072, limit=40427 [ 454.191229][ T6904] EXT4-fs error (device loop3): ext4_free_branches:1026: inode #13: comm syz.3.1434: invalid indirect mapped block 10 (level 1) [ 454.205175][ T6904] EXT4-fs error (device loop3): ext4_free_branches:1026: inode #13: comm syz.3.1434: invalid indirect mapped block 8 (level 1) [ 454.219374][ T6904] EXT4-fs (loop3): 1 truncate cleaned up [ 454.225108][ T6904] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,,errors=continue [ 454.689493][ T304] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 456.800328][ T304] usb 5-1: config 0 interface 0 altsetting 10 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.811769][ T304] usb 5-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.822745][ T304] usb 5-1: config 0 interface 0 has no altsetting 0 [ 456.829424][ T304] usb 5-1: New USB device found, idVendor=056a, idProduct=00da, bcdDevice= 0.00 [ 456.840839][ T6919] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 456.851464][ T6919] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 456.869290][ T6919] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x44ede5da, utbl_chksum : 0xe619d30d) [ 457.016674][ T304] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.399361][ T304] usb 5-1: config 0 descriptor?? [ 457.420464][ T6921] EXT4-fs (loop2): 1 orphan inode deleted [ 457.426237][ T6921] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 457.435186][ T6921] ext4 filesystem being mounted at /299/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 457.456948][ T24] audit: type=1326 audit(1758290162.480:3973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6927 comm="syz.3.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b64638c29 code=0x7ffc0000 [ 457.481710][ T304] usb 5-1: can't set config #0, error -71 [ 457.488126][ T304] usb 5-1: USB disconnect, device number 36 [ 457.515247][ T24] audit: type=1326 audit(1758290162.480:3974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6927 comm="syz.3.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b64638c29 code=0x7ffc0000 [ 457.570123][ T24] audit: type=1326 audit(1758290162.480:3975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6927 comm="syz.3.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b64638c29 code=0x7ffc0000 [ 457.593635][ T24] audit: type=1326 audit(1758290162.480:3976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6927 comm="syz.3.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b64638c29 code=0x7ffc0000 [ 457.675106][ T6934] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 457.833837][ T6937] selinux_netlink_send: 2 callbacks suppressed [ 457.833852][ T6937] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6937 comm=syz.1.1442 [ 457.842446][ T24] audit: type=1326 audit(1758290162.480:3977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6927 comm="syz.3.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b64638c29 code=0x7ffc0000 [ 457.884781][ T24] audit: type=1326 audit(1758290162.480:3978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6927 comm="syz.3.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b64638c29 code=0x7ffc0000 [ 457.908300][ T24] audit: type=1326 audit(1758290162.480:3979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6927 comm="syz.3.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b64638c29 code=0x7ffc0000 [ 457.932976][ T24] audit: type=1326 audit(1758290162.480:3980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6927 comm="syz.3.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b64638c29 code=0x7ffc0000 [ 457.957061][ T24] audit: type=1326 audit(1758290162.480:3981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6927 comm="syz.3.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b64638c29 code=0x7ffc0000 [ 457.982523][ T24] audit: type=1326 audit(1758290162.510:3982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6927 comm="syz.3.1440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b64638c29 code=0x7ffc0000 [ 458.265895][ T6944] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6944 comm=syz.2.1444 [ 458.294034][ T6938] EXT4-fs (loop0): Ignoring removed bh option [ 458.304114][ T6938] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 458.318230][ T6938] EXT4-fs error (device loop0): ext4_orphan_get:1421: comm syz.0.1441: bad orphan inode 131083 [ 458.330295][ T6938] EXT4-fs (loop0): mounted filesystem without journal. Opts: bh,init_itable,noload,,errors=continue [ 458.657865][ T6929] EXT4-fs warning (device loop3): ext4_enable_quotas:6491: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 458.676086][ T6929] EXT4-fs (loop3): mount failed [ 459.221208][ T6965] EXT4-fs error (device loop3): ext4_free_branches:1026: inode #13: comm syz.3.1450: invalid indirect mapped block 10 (level 1) [ 459.234815][ T6965] EXT4-fs error (device loop3): ext4_free_branches:1026: inode #13: comm syz.3.1450: invalid indirect mapped block 8 (level 1) [ 459.248335][ T6965] EXT4-fs (loop3): 1 truncate cleaned up [ 459.254065][ T6965] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,,errors=continue [ 459.432420][ T6973] EXT4-fs error (device loop2): ext4_get_branch:178: inode #13: block 2: comm syz.2.1451: invalid block [ 459.444516][ T6973] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #13: comm syz.2.1451: invalid indirect mapped block 10 (level 1) [ 459.459165][ T6973] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #13: comm syz.2.1451: invalid indirect mapped block 8 (level 1) [ 459.473543][ T6973] EXT4-fs (loop2): 1 truncate cleaned up [ 459.479236][ T6973] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,,errors=continue [ 459.516429][ T6954] F2FS-fs (loop1): invalid crc value [ 459.752589][ T6954] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 460.099859][ T6954] F2FS-fs (loop1): Start checkpoint disabled! [ 460.106418][ T6954] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 460.140134][ T589] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 460.152531][ T6954] attempt to access beyond end of device [ 460.152531][ T6954] loop1: rw=0, want=45072, limit=40427 [ 460.407352][ T6985] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6985 comm=syz.3.1452 [ 460.520199][ T589] usb 5-1: config 0 interface 0 altsetting 10 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 460.531371][ T589] usb 5-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.077601][ T589] usb 5-1: config 0 interface 0 has no altsetting 0 [ 461.084309][ T589] usb 5-1: New USB device found, idVendor=056a, idProduct=00da, bcdDevice= 0.00 [ 461.093381][ T589] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.053825][ T6995] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 462.232428][ T589] usb 5-1: config 0 descriptor?? [ 462.245568][ T7002] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7002 comm=syz.1.1457 [ 462.259333][ T6990] EXT4-fs warning (device loop0): ext4_enable_quotas:6491: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 462.304823][ T6990] EXT4-fs (loop0): mount failed [ 462.592007][ T7009] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 462.859349][ T7013] serio: Serial port ptm0 [ 462.911537][ T7018] udc-core: couldn't find an available UDC or it's busy [ 462.918592][ T7018] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 463.000138][ T589] usbhid 5-1:0.0: can't add hid device: -71 [ 463.006207][ T589] usbhid: probe of 5-1:0.0 failed with error -71 [ 463.023980][ T589] usb 5-1: USB disconnect, device number 37 [ 463.195394][ T7017] F2FS-fs (loop0): invalid crc value [ 463.212837][ T7017] F2FS-fs (loop0): Found nat_bits in checkpoint [ 463.263123][ T7017] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 463.269941][ T7017] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 463.637964][ T7031] EXT4-fs (loop2): 1 orphan inode deleted [ 463.643765][ T7031] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 463.653033][ T7031] ext4 filesystem being mounted at /304/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 463.889302][ T7036] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7036 comm=syz.4.1465 [ 463.993797][ T275] attempt to access beyond end of device [ 463.993797][ T275] loop0: rw=2049, want=45104, limit=40427 [ 464.610128][ T303] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 464.640645][ T7041] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1468'. [ 464.750541][ T7] ================================================================== [ 464.758652][ T7] BUG: KASAN: use-after-free in down_read_trylock+0x83/0x150 [ 464.766011][ T7] Write of size 8 at addr ffff888111584070 by task kworker/u4:0/7 [ 464.773789][ T7] [ 464.776106][ T7] CPU: 1 PID: 7 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 464.783365][ T7] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 464.793411][ T7] Workqueue: writeback wb_workfn (flush-7:3) [ 464.799385][ T7] Call Trace: [ 464.802668][ T7] __dump_stack+0x21/0x24 [ 464.806995][ T7] dump_stack_lvl+0x169/0x1d8 [ 464.811660][ T7] ? show_regs_print_info+0x18/0x18 [ 464.816894][ T7] ? thaw_kernel_threads+0x220/0x220 [ 464.822169][ T7] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 464.827785][ T7] print_address_description+0x7f/0x2c0 [ 464.833315][ T7] ? down_read_trylock+0x83/0x150 [ 464.838321][ T7] kasan_report+0xe2/0x130 [ 464.842719][ T7] ? move_expired_inodes+0x356/0x750 [ 464.847988][ T7] ? down_read_trylock+0x83/0x150 [ 464.852997][ T7] kasan_check_range+0x280/0x290 [ 464.857919][ T7] __kasan_check_write+0x14/0x20 [ 464.862841][ T7] down_read_trylock+0x83/0x150 [ 464.867676][ T7] ? __init_rwsem+0x1c0/0x1c0 [ 464.872340][ T7] ? __kasan_check_write+0x14/0x20 [ 464.877433][ T7] ? _raw_spin_lock+0x8e/0xe0 [ 464.882094][ T7] ? __kasan_check_read+0x11/0x20 [ 464.887099][ T7] trylock_super+0x1f/0xf0 [ 464.891499][ T7] wb_writeback+0x485/0xb90 [ 464.895989][ T7] ? wb_io_lists_depopulated+0x180/0x180 [ 464.901606][ T7] ? irqentry_exit+0x56/0x60 [ 464.906188][ T7] ? sysvec_reschedule_ipi+0x69/0x70 [ 464.911465][ T7] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 464.917081][ T7] wb_workfn+0x9ae/0xe20 [ 464.921309][ T7] ? __switch_to_asm+0x34/0x60 [ 464.926061][ T7] ? inode_wait_for_writeback+0x200/0x200 [ 464.931765][ T7] ? __kasan_check_read+0x11/0x20 [ 464.936775][ T7] ? preempt_schedule_common+0xbe/0xf0 [ 464.942217][ T7] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 464.947832][ T7] ? preempt_schedule_thunk+0x16/0x18 [ 464.953187][ T7] process_one_work+0x6e1/0xba0 [ 464.958023][ T7] worker_thread+0xa6a/0x13b0 [ 464.962683][ T7] kthread+0x346/0x3d0 [ 464.966733][ T7] ? worker_clr_flags+0x190/0x190 [ 464.971739][ T7] ? kthread_blkcg+0xd0/0xd0 [ 464.976311][ T7] ret_from_fork+0x1f/0x30 [ 464.980706][ T7] [ 464.983018][ T7] Allocated by task 7020: [ 464.987329][ T7] __kasan_kmalloc+0xda/0x110 [ 464.991985][ T7] __kmalloc+0x1a7/0x330 [ 464.996205][ T7] kernfs_fop_read_iter+0x15d/0x470 [ 465.001384][ T7] vfs_read+0x874/0xa10 [ 465.005522][ T7] ksys_read+0x140/0x240 [ 465.009747][ T7] __x64_sys_read+0x7b/0x90 [ 465.014229][ T7] do_syscall_64+0x31/0x40 [ 465.018631][ T7] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 465.024500][ T7] [ 465.026813][ T7] Freed by task 7020: [ 465.030779][ T7] kasan_set_track+0x4a/0x70 [ 465.035350][ T7] kasan_set_free_info+0x23/0x40 [ 465.040262][ T7] ____kasan_slab_free+0x125/0x160 [ 465.045345][ T7] __kasan_slab_free+0x11/0x20 [ 465.050084][ T7] slab_free_freelist_hook+0xc5/0x190 [ 465.055431][ T7] kfree+0xc0/0x270 [ 465.059210][ T7] kernfs_fop_read_iter+0x3d8/0x470 [ 465.064379][ T7] vfs_read+0x874/0xa10 [ 465.068509][ T7] ksys_read+0x140/0x240 [ 465.072725][ T7] __x64_sys_read+0x7b/0x90 [ 465.077199][ T7] do_syscall_64+0x31/0x40 [ 465.081593][ T7] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 465.087463][ T7] [ 465.089774][ T7] The buggy address belongs to the object at ffff888111584000 [ 465.089774][ T7] which belongs to the cache kmalloc-4k of size 4096 [ 465.103802][ T7] The buggy address is located 112 bytes inside of [ 465.103802][ T7] 4096-byte region [ffff888111584000, ffff888111585000) [ 465.117129][ T7] The buggy address belongs to the page: [ 465.122742][ T7] page:ffffea0004456000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x111580 [ 465.132962][ T7] head:ffffea0004456000 order:3 compound_mapcount:0 compound_pincount:0 [ 465.141259][ T7] flags: 0x4000000000010200(slab|head) [ 465.146694][ T7] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100042c00 [ 465.155254][ T7] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 465.163805][ T7] page dumped because: kasan: bad access detected [ 465.170193][ T7] page_owner tracks the page as allocated [ 465.175893][ T7] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 7020, ts 463052998748, free_ts 460190375933 [ 465.196520][ T7] prep_new_page+0x179/0x180 [ 465.201090][ T7] get_page_from_freelist+0x2235/0x23d0 [ 465.206616][ T7] __alloc_pages_nodemask+0x268/0x5f0 [ 465.211959][ T7] new_slab+0x84/0x3f0 [ 465.216001][ T7] ___slab_alloc+0x2a6/0x450 [ 465.220563][ T7] __slab_alloc+0x63/0xa0 [ 465.224869][ T7] __kmalloc+0x201/0x330 [ 465.229112][ T7] kernfs_fop_read_iter+0x15d/0x470 [ 465.234287][ T7] vfs_read+0x874/0xa10 [ 465.238415][ T7] ksys_read+0x140/0x240 [ 465.242631][ T7] __x64_sys_read+0x7b/0x90 [ 465.247109][ T7] do_syscall_64+0x31/0x40 [ 465.251506][ T7] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 465.257368][ T7] page last free stack trace: [ 465.262021][ T7] __free_pages_ok+0x7fc/0x820 [ 465.266757][ T7] __free_pages+0xdd/0x380 [ 465.271148][ T7] __free_slab+0xcf/0x190 [ 465.275447][ T7] unfreeze_partials+0x15f/0x190 [ 465.280355][ T7] put_cpu_partial+0xc1/0x180 [ 465.285003][ T7] __slab_free+0x2c9/0x3a0 [ 465.289391][ T7] ___cache_free+0x111/0x130 [ 465.293954][ T7] qlink_free+0x50/0x90 [ 465.298083][ T7] qlist_free_all+0x5f/0xb0 [ 465.302559][ T7] kasan_quarantine_reduce+0x14a/0x160 [ 465.308076][ T7] __kasan_slab_alloc+0x2f/0xf0 [ 465.312901][ T7] slab_post_alloc_hook+0x5d/0x2f0 [ 465.317986][ T7] kmem_cache_alloc_trace+0x160/0x2e0 [ 465.323331][ T7] usb_control_msg+0x74/0x3f0 [ 465.327981][ T7] hub_port_reset+0x301/0x1740 [ 465.332719][ T7] hub_port_init+0xb11/0x2560 [ 465.337373][ T7] [ 465.339673][ T7] Memory state around the buggy address: [ 465.345279][ T7] ffff888111583f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 465.353316][ T7] ffff888111583f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 465.361348][ T7] >ffff888111584000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 465.369377][ T7] ^ [ 465.377063][ T7] ffff888111584080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 465.385096][ T7] ffff888111584100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 465.393126][ T7] ================================================================== [ 465.401167][ T7] Disabling lock debugging due to kernel taint [ 465.618789][ T7045] EXT4-fs (loop4): Ignoring removed bh option [ 465.646536][ T24] kauditd_printk_skb: 12 callbacks suppressed [ 465.646554][ T24] audit: type=1400 audit(1758290170.670:3995): avc: denied { read } for pid=77 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 465.686590][ T7045] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 465.820354][ T7053] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #13: comm syz.2.1470: invalid indirect mapped block 10 (level 1) [ 465.834539][ T7053] EXT4-fs error (device loop2): ext4_free_branches:1026: inode #13: comm syz.2.1470: invalid indirect mapped block 8 (level 1) [ 465.849307][ T7053] EXT4-fs (loop2): 1 truncate cleaned up [ 465.854995][ T7053] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,,errors=continue [ 465.877820][ T7045] EXT4-fs error (device loop4): ext4_orphan_get:1421: comm syz.4.1469: bad orphan inode 131083 [ 465.890502][ T303] usb 4-1: config 0 interface 0 altsetting 10 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 466.436473][ T303] usb 4-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 466.459959][ T7045] EXT4-fs (loop4): mounted filesystem without journal. Opts: bh,init_itable,noload,,errors=continue [ 466.471550][ T303] usb 4-1: config 0 interface 0 has no altsetting 0 [ 466.479292][ T303] usb 4-1: New USB device found, idVendor=056a, idProduct=00da, bcdDevice= 0.00 [ 466.492962][ T7062] udc-core: couldn't find an available UDC or it's busy [ 466.500170][ T303] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.508312][ T7062] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 466.587484][ T24] audit: type=1400 audit(1758290170.710:3996): avc: denied { search } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 466.656807][ T7060] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #13: comm syz.0.1466: invalid indirect mapped block 10 (level 1) [ 466.670786][ T7060] EXT4-fs error (device loop0): ext4_free_branches:1026: inode #13: comm syz.0.1466: invalid indirect mapped block 8 (level 1) [ 466.685291][ T7060] EXT4-fs (loop0): 1 truncate cleaned up [ 466.690971][ T7060] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,,errors=continue [ 466.741212][ T303] usb 4-1: config 0 descriptor?? [ 466.826505][ T24] audit: type=1400 audit(1758290170.710:3997): avc: denied { write } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 466.848364][ T24] audit: type=1400 audit(1758290170.710:3998): avc: denied { add_name } for pid=77 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 466.872423][ T24] audit: type=1400 audit(1758290170.710:3999): avc: denied { create } for pid=77 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 466.893295][ T24] audit: type=1400 audit(1758290170.710:4000): avc: denied { append open } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 466.922621][ T24] audit: type=1400 audit(1758290170.710:4001): avc: denied { getattr } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 467.120168][ T303] usbhid 4-1:0.0: can't add hid device: -71 [ 467.126161][ T303] usbhid: probe of 4-1:0.0 failed with error -71 [ 467.134605][ T303] usb 4-1: USB disconnect, device number 40