last executing test programs: 6.401235515s ago: executing program 0 (id=3633): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000008000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sync_file_range(r5, 0x1, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r5}, 0x10) futimesat(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000008c0), 0xfc, 0x590, &(0x7f0000000900)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000005000000000000f4e8a4f05c7508ffe25b7b7b5229af331d5d3e8b35d704ff1e"], 0x0, 0x26}, 0x20) sendmsg$AUDIT_MAKE_EQUIV(r6, &(0x7f00000004c0)={&(0x7f0000000280), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, 0x3f7, 0x0, 0x70bd29, 0x25dfdbfd, {0xd, 0x7, './file1/file0', './file1'}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x44) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000055bebb5de3743d810525c3fb0b930af9659fe7e960f967970456ae03abbc03dd3b38de1de099c97d711abcbd181594579474252f0ca95e3038b7251529fe353b6698b42fb48ce78ad011bcd1abc232f219b3b7a33a439a9a8c7ec71ecb8a010255c2e10671ae704b23c623891b45adb0120b29d012d4d52b45b9d0b0d18de5caef5ffe2d39604c"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, 0x0, 0x0, 0x200001f0}, 0x90) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r8, &(0x7f0000000140)='2', 0xfdef, 0x8000c61) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000480)=@newlink={0x44, 0x10, 0xc3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5}, @IFLA_GRE_FWMARK={0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000001380)={'syztnl0\x00', &(0x7f0000001300)={'syztnl2\x00', 0x0, 0x4, 0x3, 0x4, 0x2, 0x15, @remote, @mcast2, 0x7800, 0x7800, 0x0, 0x4}}) 5.516620018s ago: executing program 0 (id=3639): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/716], 0x5, 0x558b, &(0x7f00000079c0)="$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") r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r1 = open(0x0, 0x0, 0x0) dup3(r1, r0, 0x0) io_setup(0x6, &(0x7f0000000240)=0x0) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000080)='./bus\x00', 0x84000176) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, 0x0}]) 4.626161891s ago: executing program 3 (id=3642): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20040, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000c973c03697a2c90000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000280)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x88}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@usrquota}, {@data_err_abort}, {@data_err_abort}]}, 0x1, 0x5f0, &(0x7f0000000640)="$eJzs3c9vVNUeAPDvnWlLf/BeC3l57+FCmhgDidDSAoYYF7A1pMEfcePGSgsiBRpao0UTSoIbE+PGGBNXLsT/QolsWenKhRtXhoSoYWnimDu9t3TaO6WddjrI/XySoffeM7fne5l+e86cnnMngNIaTv+pROyLiNkkYjBZXC7riqxweOl5D/748Gz6SKJWe/W3JJLsWP78JPs6kJ3cGxE/fJ/E3uraeucWrl2cnJmZvprtj85fmh2dW7h2+MKlyfPT56cvjz8/fuL4seMnxo60dF3XC46dvvnOe4MfT7zx9Zd/JmPf/DyRxMl4KXviyuvYLsMxXP8/SdYWDZzY7so6pJr9nKx8iZOuDgbEpuSvX3dE/C8GoxoPX7zB+OjljgYHtFUtiagBJZXIfyipvB+Qv7df/T64UtBnONS/I10ToM3un1oaAFib/11LY4PRWx8b6H+QxMphnSQiWhuZa7Q7Iu7embh57s7EzWgchysYNQS20+KNiPh/Uf4n9fwfit4Yqud/pSH/037BmexrevyVFutfPVTcjnF4oNhS/veum//RJP/fXJH/b7VY//DDzbf7GvK/r9VLAgAAAAAAgNK6fSoiDhX9/b+yPP8nCub/DETEyW2of3jV/tq//1fubUM1QIH7pyJeLJz/W8ln/w5Vs61/1ecDdCfnLsxMH4mIf0fEwejele6PrVPH4U/2ftGsbDib/5c/0vrvZnMBszjude1qPGdqcn5yq9cNRNy/EfFU4fzfZLn9Twra//T3wewG69j77K0zzcoenf9Au9S+ijhQ2P4/vGtFsv79OUbr/YHRvFew1tMffPpts/pbzX+3mICtS9v//vXzfyhZeb+euc3XcXShq9asrNX+f0/yWn19UE927P3J+fmrYxE9yelqerTh+PjmY4YnUZ4Peb6k+X/wmfXH/4r6/30Rsbjqeye/N64pzv33r4FfmsWj/w+dk+b/1Kba/81vjN8a+q5Z/Rtr/4/V2/qD2RHjf7Dk8zxNexqPF6RjV1HRTscLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE+CSkTsjqQysrxdqYyMRAxExH+ivzJzZW7+uXNX3r08lZbVP/+/kn/S7+DSfpJ//v/Qiv3xVftHI2JPRHxW7avvj5y9MjPV6YsHAAAAAAAAAAAAAAAAAACAx8RAk/X/qV+rnY4OaLuuTgcAdExB/v/YiTiAnaf9h/KS/1Be8h/KS/5Decl/KC/5D+W10fzvbXMcwM7T/gMAAAAAwBNlz/7bPyURsfhCX/2R6snKujsaGdBulU4HAHSMW/xAeZn6A+XlPT6QPKK8cOp/spEz1zN7dgsnAwAAAAAAAAAAAEDpHNhn/T+UlfX/UF7W/0N55ev/93c4DmDneY8PxCNW8jf/6L+trP8HAAAAAAAAAAAAADZjbuHaxcmZmemrNl5/PMLYyY1arXY9/Sl4XOL5h2/kU+G3+n2q0ZYI87V+Gzurc7+TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACARn8HAAD//9zcJCQ=") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200001400894fb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_procfs(r1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1, 0x1}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in6=@private2}}, 0xe8) sendmmsg$inet6(r6, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x1f4, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) 4.575846725s ago: executing program 0 (id=3645): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) syz_clone3(&(0x7f0000000540)={0x202000, 0x0, &(0x7f0000000300), &(0x7f0000000340), {0x4}, &(0x7f0000000380)=""/91, 0x5b, &(0x7f0000000440)=""/175, &(0x7f0000000500)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x6}, 0x58) 4.492967102s ago: executing program 1 (id=3646): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0003020000000003"], 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003"], 0x0, 0x0}, 0x0) 4.441681016s ago: executing program 2 (id=3647): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x1, 0x4b6, &(0x7f0000000540)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000ffff0018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018400110800395032303030"], 0x15) r8 = dup(r7) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) 4.310499357s ago: executing program 0 (id=3648): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000001780)={0x2c, 0x0, &(0x7f00000014c0)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0003120000"], 0x0, 0x0}, 0x0) 4.052074768s ago: executing program 3 (id=3650): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x3, 0x4, 0xfb, 0x0, 0x1}, 0x48) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000100)={&(0x7f0000000140)={0x2, 0x3, @local}, 0x10, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0xe0000000}, 0x400c840) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x2}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x800}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYRES16, @ANYRES16=r4, @ANYRES32=r2, @ANYBLOB="a4000fdaa908f2fee58b3fc2f9491c8dba9b800ffa0b82150185472bab9f36d5f4f628597988310665db62dedf3d21baf58e08aba7112ac27dbed169abffdd72d03c2f5e1b91014f24f94e02e0e6ac585d95dd1c5f3cfad606ea0d2169c8a2d11385df2b818ca4c6d892a133810982c4d432cd33684902fc20bcd48b42d0ab1a6883c0d300217f728e451d60411a09dce4062eb8b00ab7641d1861ba367b3995a6d6f2b4d8"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='jbd2_handle_extend\x00', r6}, 0x10) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r0, &(0x7f00000001c0)={0x1f, 0x1}, 0x6) ioctl$sock_bt_hci(r0, 0x800448d2, 0x0) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000406c25010004006adf64f916ecbc0a22a02fc22f89005b0000000103000000092100000001220500090581030000000000d67d0b4ceaccbc543ef95f0b402e04426a20d696dbd8046883be41ffc81bdb43369e0000000000000000000000006c1c42f2476f2838e0144dac149a2f65c68a13a6115c73da3b5a88026e6669497ed72d1ebcfb88be865dfcb7253398a389eb97fa4906f9e6"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io(r8, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$packet(0x11, 0x0, 0x300) ppoll(&(0x7f0000000200)=[{r9, 0x2188}], 0x1, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, &(0x7f0000000440)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r10, &(0x7f0000000280)=ANY=[@ANYRES16=r6], 0x15) r11 = dup(r4) write$FUSE_BMAP(r11, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r11, &(0x7f0000000600)=ANY=[@ANYBLOB="b0"], 0xb0) 3.553854929s ago: executing program 2 (id=3651): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$hid(0x0, 0x51, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x419, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000740)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000140)) fcntl$lock(r3, 0x6, &(0x7f0000000380)={0x2, 0x0, 0x101, 0x80000001}) r4 = socket$pptp(0x18, 0x1, 0x2) dup3(r4, r3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x19}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) fcntl$setpipe(0xffffffffffffffff, 0x408, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vxcan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x15, 0xfd, 0x0, 0x6, 0x2870, 0xffffffffffffffff, 0x2, '\x00', r5, r3, 0x4, 0x2, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) unlink(&(0x7f0000000140)='./cgroup\x00') syz_usb_control_io(r0, 0x0, 0x0) 3.104752556s ago: executing program 4 (id=3653): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010101, @local}, @time_exceeded={0x80, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback}}}}}}, 0x0) 2.984399856s ago: executing program 4 (id=3654): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x1, 0x4b6, &(0x7f0000000540)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000ffff0018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018400110800395032303030"], 0x15) r8 = dup(r7) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) 2.157028014s ago: executing program 4 (id=3655): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc020660b, &(0x7f0000000180)={@desc={0x1, 0x0, @desc1}}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES16=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x90) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f00000002c0)="670f4f31f30fbd4bf90f018d660f388230f365650f784cbb0f0965f30fc7b7c3002ef22664650fba6291070f20c0949435000000800f22abbb02", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) 2.096765709s ago: executing program 4 (id=3656): pipe2$9p(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000700)=ANY=[@ANYBLOB="3801"], 0x138) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000740)={0x120, 0x0, 0x0, [{{}, {0x0, 0x0, 0x74, 0x0, '\xcdSu\xbe`h\xbehM\x16>\x87\xba\x01#\xcb\xc2\x00I\xb3\xdf\xdfSt;rO\xa6\xac\xddo\xfd\xd5\xb58kz\xdb\xaf\x95\xfca\xde\xa9N\x0f\x921\xa50}I\xc0\xec\xdf\xac%\"\xeb,\xe5\xd1w0\xa8\xa0z\xfb\xf0\xad\xa66\x84d\xd3\xe6\xe7\xee\x14\x9dK\xa6\xd6T\xac\xe7\xc7\v\xeb\x84\xc9:\\\x89A\x9a\xe8\xb5pe\x16\xaf\x0fS\xe4\v\x8ea\xe0\xb1\xde\xed\x8a\a\x9f\xb9'}}]}, 0x120) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) write$FUSE_DIRENTPLUS(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000000000f9"], 0x10) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@private0, @in=@initdev}}, {{@in=@multicast2}, 0x0, @in=@empty}}, &(0x7f0000000180)=0xe8) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffffed7a000008003950323030302e4c"], 0x15) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="5001"], 0x150) getresuid(&(0x7f00000000c0), &(0x7f00000001c0), &(0x7f0000000180)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',privport,access=', @ANYRESDEC=r6]) 2.07804108s ago: executing program 4 (id=3657): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x6, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) getdents(0xffffffffffffffff, &(0x7f0000000300)=""/104, 0x68) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe065) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x10000}, 0x48) 1.940527741s ago: executing program 4 (id=3658): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="1201000000000010c41090ea40000000000109"], 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x9a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000000bbff020000000000000000000000000001"], 0x0) 1.900664645s ago: executing program 1 (id=3659): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x1, 0x4b6, &(0x7f0000000540)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0184001108003950"], 0x15) r8 = dup(r7) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) 1.827347961s ago: executing program 2 (id=3660): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000800)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f0000000340)={[{@nogrpid}, {@nouser_xattr}, {@barrier}, {@barrier}, {@test_dummy_encryption}, {@nomblk_io_submit}]}, 0xfb, 0x49f, &(0x7f0000001440)="$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") keyctl$search(0xa, 0x0, 0x0, &(0x7f0000000100)={'syz', 0x0}, 0x0) add_key$fscrypt_v1(0x0, &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) keyctl$set_timeout(0xf, 0x0, 0xce5) read$FUSE(0xffffffffffffffff, &(0x7f00000035c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000001c0)=0x7) getpid() r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000280)=0x1c, 0x80400) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0}, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x9, '\x00', r2, 0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000004c0)={{{@in=@multicast1, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e22, 0x9, 0x4e20, 0x1, 0x2, 0x0, 0x10, 0xc, r2, r0}, {0x10, 0x46ab, 0x7ff, 0x9, 0xb5ff, 0x9, 0x21, 0x3}, {0x8, 0x6ed, 0x0, 0x5ac}, 0x8, 0x6e6bbb, 0x0, 0x1, 0x1}, {{@in6=@empty, 0x4d5, 0x3c}, 0x2, @in6=@mcast1, 0x3505, 0x2, 0x2, 0x9, 0x0, 0xaf3}}, 0xe8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000300), 0x0, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6}, 0x0, &(0x7f00000002c0)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 1.658669855s ago: executing program 0 (id=3661): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0xc7) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000340)='veno\x00', 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='7', 0x1, 0x0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="bf73a9e561c5"}, 0x14) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000080)=0x9, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001400add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 1.437464333s ago: executing program 2 (id=3662): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRESHEX, @ANYRES8, @ANYRES8, @ANYRESOCT], 0x1, 0x5518, &(0x7f0000002480)="$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") (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ff9000/0x4000)=nil) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="4000000010003904000000000400000000000000", @ANYRES32=r7, @ANYBLOB="030000007f0000002000128008000100736974001400028008000100", @ANYRES32=r6], 0x40}}, 0x0) (async) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[@ANYBLOB="d589f09b133337763b4dfd64c197df482e4407a90282d85d28e2eb66c3bac4e1c6b15f44b90bc872a96bbf2fc4b3da9515885f079f83162c31224df591c47552e6260de915d13ece2d7a8a18e6f70cad8b362a9656b9b9f14fba0dbc43c02a103374e7cb77589a89d4a698cb8e405eab570be8746f41a89c9b1d116cd9c81feeb9bdd40ba2c57d11bd8d5c085ec4721e11667241a56def800ab24510a5384fcd79444a5e62cb8b35db87a8d265ba2531671f57e4766bb5f6c0cfaaddf91d9b10d7c011961f26b4107d8fb515e312cc29ec2075", @ANYRES16=r8, @ANYBLOB="000428bd7000fbdbdf250e000000080004000700000004000380"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x48005) (async) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0x5c, r8, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x9}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6a}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000001}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c8c1) (async) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 1.360386739s ago: executing program 2 (id=3663): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x1, 0x4b6, &(0x7f0000000540)="$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") mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0xffffc000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000ffff0018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018400110800395032303030"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 1.077799552s ago: executing program 3 (id=3664): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @local}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@ipv6_getrule={0x1c}, 0x1c}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) unshare(0x22020600) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r8, 0x0) 1.015656497s ago: executing program 1 (id=3665): pipe2$9p(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000700)=ANY=[@ANYBLOB="3801"], 0x138) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000740)={0x120, 0x0, 0x0, [{{}, {0x0, 0x0, 0x74, 0x0, '\xcdSu\xbe`h\xbehM\x16>\x87\xba\x01#\xcb\xc2\x00I\xb3\xdf\xdfSt;rO\xa6\xac\xddo\xfd\xd5\xb58kz\xdb\xaf\x95\xfca\xde\xa9N\x0f\x921\xa50}I\xc0\xec\xdf\xac%\"\xeb,\xe5\xd1w0\xa8\xa0z\xfb\xf0\xad\xa66\x84d\xd3\xe6\xe7\xee\x14\x9dK\xa6\xd6T\xac\xe7\xc7\v\xeb\x84\xc9:\\\x89A\x9a\xe8\xb5pe\x16\xaf\x0fS\xe4\v\x8ea\xe0\xb1\xde\xed\x8a\a\x9f\xb9'}}]}, 0x120) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) write$FUSE_DIRENTPLUS(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000000000f9"], 0x10) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@private0, @in=@initdev}}, {{@in=@multicast2}, 0x0, @in=@empty}}, &(0x7f0000000180)=0xe8) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffffed7a000008003950323030302e4c"], 0x15) r6 = dup(r5) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000740)=ANY=[@ANYBLOB="5001"], 0x150) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',privport,access=', @ANYRESDEC]) 1.001223499s ago: executing program 3 (id=3666): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc020660b, &(0x7f0000000180)={@desc={0x1, 0x0, @desc1}}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES16=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x90) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f00000002c0)="670f4f31f30fbd4bf90f018d660f388230f365650f784cbb0f0965f30fc7b7c3002ef22664650fba6291070f20c0949435000000800f22abbb02", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) 960.122902ms ago: executing program 1 (id=3667): pipe2$9p(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000700)=ANY=[@ANYBLOB="3801"], 0x138) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000740)={0x120, 0x0, 0x0, [{{}, {0x0, 0x0, 0x74, 0x0, '\xcdSu\xbe`h\xbehM\x16>\x87\xba\x01#\xcb\xc2\x00I\xb3\xdf\xdfSt;rO\xa6\xac\xddo\xfd\xd5\xb58kz\xdb\xaf\x95\xfca\xde\xa9N\x0f\x921\xa50}I\xc0\xec\xdf\xac%\"\xeb,\xe5\xd1w0\xa8\xa0z\xfb\xf0\xad\xa66\x84d\xd3\xe6\xe7\xee\x14\x9dK\xa6\xd6T\xac\xe7\xc7\v\xeb\x84\xc9:\\\x89A\x9a\xe8\xb5pe\x16\xaf\x0fS\xe4\v\x8ea\xe0\xb1\xde\xed\x8a\a\x9f\xb9'}}]}, 0x120) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) write$FUSE_DIRENTPLUS(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000000000f9"], 0x10) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@private0, @in=@initdev}}, {{@in=@multicast2}, 0x0, @in=@empty}}, &(0x7f0000000180)=0xe8) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffffed7a000008003950323030302e4c"], 0x15) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="5001"], 0x150) getresuid(&(0x7f00000000c0), &(0x7f00000001c0), &(0x7f0000000180)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',privport,access=', @ANYRESDEC=r6]) 917.939285ms ago: executing program 1 (id=3668): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x1, 0x4b6, &(0x7f0000000540)="$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") mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0xffffc000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) read$FUSE(r5, &(0x7f0000004200)={0x2020}, 0x2020) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000ffff0018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018400110800395032303030"], 0x15) r9 = dup(r8) write$FUSE_BMAP(r9, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r9, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) 860.48477ms ago: executing program 3 (id=3669): memfd_create(&(0x7f00000001c0)='\xf7e\t\xa9\xff\x86\xe6?t\x00\x00!\x00\x00\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x3}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2000000011009f0a000000000000000007000000049d"], 0x20}}, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fspick(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet(0x2, 0x0, 0x0) keyctl$chown(0x4, 0x0, 0xee00, 0xffffffffffffffff) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="f800000016000100008000000000000000000000000000000000ffff0000000000000000000000000000e5ad61", @ANYRES32=0x0, @ANYRES32=0xee01], 0xf8}}, 0x2000c000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000012c0)={0x2020}, 0x2020) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000e00851000000600000018020000", @ANYRES32, @ANYBLOB="0000000000000000660002007fffffff180000000000480000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 462.342353ms ago: executing program 0 (id=3670): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$hid(0x0, 0x51, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x419, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000740)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000140)) fcntl$lock(r3, 0x6, &(0x7f0000000380)={0x2, 0x0, 0x101, 0x80000001}) r4 = socket$pptp(0x18, 0x1, 0x2) dup3(r4, r3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x19}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) fcntl$setpipe(0xffffffffffffffff, 0x408, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vxcan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x15, 0xfd, 0x0, 0x6, 0x2870, 0xffffffffffffffff, 0x2, '\x00', r5, r3, 0x4, 0x2, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) unlink(&(0x7f0000000140)='./cgroup\x00') syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0}, 0x0) 461.564643ms ago: executing program 2 (id=3671): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x1, 0x4b6, &(0x7f0000000540)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000ffff0018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018400110800395032303030"], 0x15) r8 = dup(r7) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) 389.401169ms ago: executing program 3 (id=3672): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r5], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x40000000004) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000180)=0x33) 0s ago: executing program 1 (id=3673): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000002c7b0af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xfb, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = inotify_init1(0x0) setsockopt$MRT6_PIM(r3, 0x29, 0xcf, &(0x7f0000000180), 0x4) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000140)={0x0, 0x0}) r6 = syz_open_procfs(r5, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r6, 0x6628, 0x0) write$cgroup_devices(r6, &(0x7f0000000040)=ANY=[@ANYBLOB='c *O* m\x00'], 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r8, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xe24}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0) kernel console output (not intermixed with test programs): -1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 333.177402][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.186236][ T5] usb 5-1: config 0 descriptor?? [ 333.194101][T10142] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 333.575392][T10156] 9pnet: Insufficient options for proto=fd [ 333.587137][T10147] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.603806][T10147] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.616432][T10147] device bridge_slave_0 entered promiscuous mode [ 333.640498][T10147] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.651206][T10147] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.698536][T10147] device bridge_slave_1 entered promiscuous mode [ 333.728907][ T5] samsung 0003:0419:0001.0057: unknown main item tag 0x0 [ 333.735788][ T5] samsung 0003:0419:0001.0057: unknown main item tag 0x0 [ 333.758415][ T5] samsung 0003:0419:0001.0057: unknown main item tag 0x0 [ 333.765299][ T5] samsung 0003:0419:0001.0057: unknown main item tag 0x0 [ 333.777220][T10147] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.784117][T10147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.791281][T10147] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.798211][T10147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.805375][ T5] samsung 0003:0419:0001.0057: unknown main item tag 0x0 [ 333.812510][ T5] samsung 0003:0419:0001.0057: unknown main item tag 0x0 [ 333.819417][ T5] samsung 0003:0419:0001.0057: unknown main item tag 0x0 [ 333.827253][ T5] samsung 0003:0419:0001.0057: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.4-1/input0 [ 333.868546][ T689] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 333.877076][ T689] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.889953][ T689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 333.897238][ T689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 333.929337][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 333.937578][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.937947][ T9175] usb 5-1: USB disconnect, device number 29 [ 333.944460][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.958535][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 333.966745][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 333.984753][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 334.008544][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 334.019297][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 334.029527][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 334.038289][T10147] device veth0_vlan entered promiscuous mode [ 334.050902][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 334.062950][T10147] device veth1_macvtap entered promiscuous mode [ 334.075031][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 334.089370][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 334.814603][ T5] Bluetooth: hci0: command 0x1003 tx timeout [ 334.832197][ T1642] Bluetooth: hci0: sending frame failed (-49) [ 335.029952][T10178] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 335.039094][T10178] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038 (0x7fffffff) [ 335.091988][T10184] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 335.104232][T10184] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038 (0x7fffffff) [ 335.149249][ T7] device bridge_slave_1 left promiscuous mode [ 335.155206][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.162880][ T7] device bridge_slave_0 left promiscuous mode [ 335.169217][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.177117][ T7] device veth1_macvtap left promiscuous mode [ 335.183287][ T7] device veth0_vlan left promiscuous mode [ 335.198284][ T470] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 335.228425][ T411] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 335.432579][T10061] EXT4-fs error (device loop4): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 335.638240][ T411] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.649020][ T470] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.659616][ T470] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.670855][ T411] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.681732][ T470] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 335.691632][ T411] usb 4-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 335.702052][ T470] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.710852][ T411] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.756339][ T411] usb 4-1: config 0 descriptor?? [ 335.756353][ T470] usb 2-1: config 0 descriptor?? [ 335.858192][T10147] EXT4-fs error (device loop2): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 335.937128][T10197] 9pnet: Insufficient options for proto=fd [ 335.968814][T10199] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 336.261665][ T411] samsung 0003:0419:0001.0058: unknown main item tag 0x0 [ 336.269850][ T470] hid (null): bogus close delimiter [ 336.279341][ T411] samsung 0003:0419:0001.0058: unknown main item tag 0x0 [ 336.286742][ T411] samsung 0003:0419:0001.0058: unknown main item tag 0x0 [ 336.294379][ T411] samsung 0003:0419:0001.0058: unknown main item tag 0x0 [ 336.301882][ T411] samsung 0003:0419:0001.0058: unknown main item tag 0x0 [ 336.309003][ T411] samsung 0003:0419:0001.0058: unknown main item tag 0x0 [ 336.315924][ T411] samsung 0003:0419:0001.0058: unknown main item tag 0x0 [ 336.323605][ T411] samsung 0003:0419:0001.0058: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.3-1/input0 [ 336.447025][T10205] 9pnet: Insufficient options for proto=fd [ 336.462479][ T411] usb 4-1: USB disconnect, device number 36 [ 336.478512][ T470] usb 2-1: string descriptor 0 read error: -22 [ 336.550199][T10207] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 336.559144][T10207] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038 (0x7fffffff) [ 336.878278][ T337] Bluetooth: hci0: command 0x1001 tx timeout [ 336.884356][ T1642] Bluetooth: hci0: sending frame failed (-49) [ 336.918294][ T470] uclogic 0003:256C:006D.0059: failed retrieving string descriptor #100: -71 [ 336.927105][ T470] uclogic 0003:256C:006D.0059: failed retrieving pen parameters: -71 [ 336.936097][ T470] uclogic 0003:256C:006D.0059: failed probing pen v1 parameters: -71 [ 336.944000][ T470] uclogic 0003:256C:006D.0059: failed probing parameters: -71 [ 336.951402][ T470] uclogic: probe of 0003:256C:006D.0059 failed with error -71 [ 336.963248][ T470] usb 2-1: USB disconnect, device number 31 [ 337.281911][T10225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3392'. [ 337.290400][T10218] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 337.291618][T10225] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=34 sclass=netlink_tcpdiag_socket pid=10225 comm=syz.3.3392 [ 337.324019][T10225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3392'. [ 337.333660][T10217] EXT4-fs error (device loop2): ext4_find_dest_de:2076: inode #2: block 16: comm syz.2.3390: bad entry in directory: rec_len % 4 != 0 - offset=60, inode=15, rec_len=14, size=1024 fake=0 [ 337.353467][T10217] EXT4-fs error (device loop2): ext4_find_dest_de:2076: inode #2: block 16: comm syz.2.3390: bad entry in directory: rec_len % 4 != 0 - offset=60, inode=15, rec_len=14, size=1024 fake=0 [ 337.372785][T10225] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.381892][T10225] device bridge_slave_1 left promiscuous mode [ 337.387804][T10225] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.449710][T10228] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 337.458556][T10228] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038 (0x7fffffff) [ 337.471525][T10231] exFAT-fs (loop3): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1119afd0) [ 337.483006][T10231] exFAT-fs (loop3): invalid boot region [ 337.488462][T10231] exFAT-fs (loop3): failed to recognize exfat type [ 337.634716][T10237] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 337.644928][T10237] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038 (0x7fffffff) [ 338.167033][T10246] F2FS-fs (loop2): invalid crc value [ 338.178232][T10246] F2FS-fs (loop2): Found nat_bits in checkpoint [ 338.219407][T10246] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 338.404958][T10258] 9pnet: Insufficient options for proto=fd [ 338.660921][T10108] EXT4-fs error (device loop1): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 339.008948][ T690] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 339.016916][ T336] Bluetooth: hci0: command 0x1009 tx timeout [ 339.035928][T10147] attempt to access beyond end of device [ 339.035928][T10147] loop2: rw=524288, want=45072, limit=40427 [ 339.047563][T10147] attempt to access beyond end of device [ 339.047563][T10147] loop2: rw=0, want=45072, limit=40427 [ 339.071336][ T7] attempt to access beyond end of device [ 339.071336][ T7] loop2: rw=2049, want=45120, limit=40427 [ 339.079351][T10266] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 339.095774][T10265] EXT4-fs error (device loop4): ext4_find_dest_de:2076: inode #2: block 16: comm syz.4.3400: bad entry in directory: rec_len % 4 != 0 - offset=60, inode=15, rec_len=14, size=1024 fake=0 [ 339.115070][T10265] EXT4-fs error (device loop4): ext4_find_dest_de:2076: inode #2: block 16: comm syz.4.3400: bad entry in directory: rec_len % 4 != 0 - offset=60, inode=15, rec_len=14, size=1024 fake=0 [ 339.287789][T10273] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.294866][T10273] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.302497][T10273] device bridge_slave_0 entered promiscuous mode [ 339.310834][T10273] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.317756][T10273] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.324950][T10273] device bridge_slave_1 entered promiscuous mode [ 339.359250][T10273] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.366110][T10273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.373489][T10273] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.380435][T10273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.387651][ T690] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.398434][ T690] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.403318][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 339.408013][ T690] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 339.424276][ T470] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.424380][ T690] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.439225][ T470] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.439858][ T690] usb 4-1: config 0 descriptor?? [ 339.466020][T10273] device veth0_vlan entered promiscuous mode [ 339.472982][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 339.481333][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 339.489425][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 339.496675][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 339.504112][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 339.512753][ T470] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.519739][ T470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.545165][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 339.553212][ T470] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.560068][ T470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.567210][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 339.575343][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 339.614837][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 339.626203][T10273] device veth1_macvtap entered promiscuous mode [ 339.637644][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 339.652744][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 339.664474][T10278] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11 sclass=netlink_route_socket pid=10278 comm=syz.4.3405 [ 339.934116][ T407] device bridge_slave_1 left promiscuous mode [ 339.963249][ T407] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.974052][ T407] device bridge_slave_0 left promiscuous mode [ 339.980635][ T407] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.991493][T10289] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 340.014469][T10289] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 340.034296][ T407] device veth1_macvtap left promiscuous mode [ 340.040916][ T407] device veth0_vlan left promiscuous mode [ 340.047801][T10289] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 340.056471][T10289] System zones: 0-2, 18-18, 34-34 [ 340.062388][T10289] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1047: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 340.077155][T10289] EXT4-fs (loop4): 1 truncate cleaned up [ 340.082770][T10289] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 340.311537][ T690] usb 4-1: language id specifier not provided by device, defaulting to English [ 340.533647][T10297] 9pnet: Insufficient options for proto=fd [ 340.582238][T10298] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 340.591223][T10298] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038 (0x7fffffff) [ 340.614891][ T690] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.005A/input/input76 [ 340.639697][T10301] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 340.640873][ T690] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.005A/input/input77 [ 340.658189][T10301] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038 (0x7fffffff) [ 340.661997][ T690] uclogic 0003:256C:006D.005A: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 340.919938][ T690] usb 4-1: USB disconnect, device number 37 [ 341.434906][T10108] EXT4-fs error (device loop1): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 341.462833][T10319] exFAT-fs (loop3): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1119afd0) [ 341.474182][T10319] exFAT-fs (loop3): invalid boot region [ 341.480001][T10319] exFAT-fs (loop3): failed to recognize exfat type [ 341.978482][T10329] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 341.996660][T10329] EXT4-fs error (device loop1): ext4_find_dest_de:2076: inode #2: block 16: comm syz.1.3415: bad entry in directory: rec_len % 4 != 0 - offset=60, inode=15, rec_len=14, size=1024 fake=0 [ 342.023562][T10329] EXT4-fs error (device loop1): ext4_find_dest_de:2076: inode #2: block 16: comm syz.1.3415: bad entry in directory: rec_len % 4 != 0 - offset=60, inode=15, rec_len=14, size=1024 fake=0 [ 342.727927][T10348] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.734947][T10348] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.742517][T10348] device bridge_slave_0 entered promiscuous mode [ 342.749278][T10348] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.756132][T10348] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.763544][T10348] device bridge_slave_1 entered promiscuous mode [ 342.795659][T10348] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.802524][T10348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.809633][T10348] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.816389][T10348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.833622][ T9175] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.840759][ T9175] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.847984][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 342.855401][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 342.864427][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 342.872685][ T337] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.879552][ T337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.888656][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 342.896899][ T9175] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.903754][ T9175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.918516][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 342.926527][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 342.940739][T10348] device veth0_vlan entered promiscuous mode [ 342.948523][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 342.956695][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 342.964543][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 342.971781][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 342.978285][ T690] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 342.979060][ T470] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 342.997746][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 343.006928][T10348] device veth1_macvtap entered promiscuous mode [ 343.016124][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 343.026332][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 343.072799][T10359] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=34 sclass=netlink_tcpdiag_socket pid=10359 comm=syz.0.3424 [ 343.085704][T10359] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3424'. [ 343.513868][T10369] 9pnet: Insufficient options for proto=fd [ 343.549140][T10366] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 343.573762][T10365] EXT4-fs error (device loop0): ext4_find_dest_de:2076: inode #2: block 16: comm syz.0.3425: bad entry in directory: rec_len % 4 != 0 - offset=60, inode=15, rec_len=14, size=1024 fake=0 [ 343.575184][T10375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3427'. [ 343.592227][ T470] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.608171][ T690] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.612310][ T470] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.632421][ T470] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 343.636764][T10374] EXT4-fs (loop3): Unrecognized mount option "smackfsdef=max_batch_time" or missing value [ 343.641642][ T470] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.658125][ T690] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.668760][ T690] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 343.668819][T10365] EXT4-fs error (device loop0): ext4_find_dest_de:2076: inode #2: block 16: comm syz.0.3425: bad entry in directory: rec_len % 4 != 0 - offset=60, inode=15, rec_len=14, size=1024 fake=0 [ 343.677595][ T690] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.681844][ T690] usb 2-1: config 0 descriptor?? [ 343.709495][ T470] usb 3-1: config 0 descriptor?? [ 343.929103][ T7] device bridge_slave_1 left promiscuous mode [ 343.935257][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.985786][ T7] device bridge_slave_0 left promiscuous mode [ 343.991918][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.000547][ T7] device veth1_macvtap left promiscuous mode [ 344.006458][ T7] device veth0_vlan left promiscuous mode [ 344.234436][T10385] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 344.244734][T10385] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038 (0x7fffffff) [ 344.418128][ T470] usb 3-1: language id specifier not provided by device, defaulting to English [ 344.428303][ T690] usb 2-1: language id specifier not provided by device, defaulting to English [ 344.838209][ T470] uclogic 0003:256C:006D.005B: failed retrieving string descriptor #200: -71 [ 344.846867][ T470] uclogic 0003:256C:006D.005B: failed retrieving pen parameters: -71 [ 344.855043][ T470] uclogic 0003:256C:006D.005B: failed probing pen v2 parameters: -71 [ 344.863223][ T470] uclogic 0003:256C:006D.005B: failed probing parameters: -71 [ 344.870685][ T470] uclogic: probe of 0003:256C:006D.005B failed with error -71 [ 344.878742][ T690] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.005C/input/input78 [ 344.891252][ T690] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.005C/input/input79 [ 344.893246][ T470] usb 3-1: USB disconnect, device number 37 [ 344.942125][ T690] uclogic 0003:256C:006D.005C: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 345.471815][T10398] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 345.485076][T10395] EXT4-fs error (device loop3): ext4_find_dest_de:2076: inode #2: block 16: comm syz.3.3432: bad entry in directory: rec_len % 4 != 0 - offset=60, inode=15, rec_len=14, size=1024 fake=0 [ 345.504229][T10395] EXT4-fs error (device loop3): ext4_find_dest_de:2076: inode #2: block 16: comm syz.3.3432: bad entry in directory: rec_len % 4 != 0 - offset=60, inode=15, rec_len=14, size=1024 fake=0 [ 345.504329][ T690] usb 2-1: USB disconnect, device number 32 [ 345.585346][T10410] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=34 sclass=netlink_tcpdiag_socket pid=10410 comm=syz.2.3435 [ 345.597807][T10405] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 345.598238][T10410] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3435'. [ 345.609540][T10405] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038 (0x7fffffff) [ 345.626320][T10410] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.635534][T10410] device bridge_slave_0 left promiscuous mode [ 345.647919][T10410] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.859438][T10413] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 345.872652][T10413] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038 (0x7fffffff) [ 346.031927][T10419] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 346.040907][T10419] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038 (0x7fffffff) [ 346.869175][T10428] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 346.897808][T10428] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038 (0x7fffffff) [ 347.140336][T10450] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3440'. [ 347.158367][T10446] EXT4-fs (loop4): Unrecognized mount option "smackfsdef=max_batch_time" or missing value [ 347.314315][T10108] EXT4-fs error (device loop1): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 347.438323][ T689] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 347.599654][T10454] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 347.608468][T10454] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038 (0x7fffffff) [ 347.833538][ T689] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.848734][ T689] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.858846][ T689] usb 4-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 347.867916][ T689] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.876984][ T689] usb 4-1: config 0 descriptor?? [ 347.939584][T10466] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=34 sclass=netlink_tcpdiag_socket pid=10466 comm=syz.0.3446 [ 347.953286][T10466] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3446'. [ 348.108119][ T9175] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 348.443698][T10471] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 348.444249][ T689] samsung 0003:0419:0001.005D: unknown main item tag 0x0 [ 348.488113][ T689] samsung 0003:0419:0001.005D: unknown main item tag 0x0 [ 348.494993][ T689] samsung 0003:0419:0001.005D: unknown main item tag 0x0 [ 348.502509][T10470] EXT4-fs error (device loop0): ext4_find_dest_de:2076: inode #2: block 16: comm syz.0.3447: bad entry in directory: rec_len % 4 != 0 - offset=60, inode=15, rec_len=14, size=1024 fake=0 [ 348.522487][T10470] EXT4-fs error (device loop0): ext4_find_dest_de:2076: inode #2: block 16: comm syz.0.3447: bad entry in directory: rec_len % 4 != 0 - offset=60, inode=15, rec_len=14, size=1024 fake=0 [ 348.540833][ T9175] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.540846][ T9175] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.540869][ T9175] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 348.540881][ T9175] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.595899][ T9175] usb 3-1: config 0 descriptor?? [ 348.783780][T10479] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 348.790679][ T689] samsung 0003:0419:0001.005D: unknown main item tag 0x0 [ 348.800327][ T689] samsung 0003:0419:0001.005D: unknown main item tag 0x0 [ 348.800493][T10478] EXT4-fs error (device loop4): ext4_find_dest_de:2076: inode #2: block 16: comm syz.4.3448: bad entry in directory: rec_len % 4 != 0 - offset=60, inode=15, rec_len=14, size=1024 fake=0 [ 348.807338][ T689] samsung 0003:0419:0001.005D: unknown main item tag 0x0 [ 348.829569][T10478] EXT4-fs error (device loop4): ext4_find_dest_de:2076: inode #2: block 16: comm syz.4.3448: bad entry in directory: rec_len % 4 != 0 - offset=60, inode=15, rec_len=14, size=1024 fake=0 [ 348.832344][ T689] samsung 0003:0419:0001.005D: unknown main item tag 0x0 [ 348.859280][ T689] samsung 0003:0419:0001.005D: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.3-1/input0 [ 348.873291][ T689] usb 4-1: USB disconnect, device number 38 [ 349.138376][ T9175] hid (null): bogus close delimiter [ 349.178131][ T690] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 349.210086][T10490] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 349.219227][T10490] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038 (0x7fffffff) [ 349.358174][ T9175] usb 3-1: string descriptor 0 read error: -22 [ 349.638226][ T690] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.649206][ T690] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.658822][ T690] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 349.667646][ T690] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.676045][ T690] usb 2-1: config 0 descriptor?? [ 349.788134][ T9175] uclogic 0003:256C:006D.005E: failed retrieving string descriptor #100: -71 [ 349.796940][ T9175] uclogic 0003:256C:006D.005E: failed retrieving pen parameters: -71 [ 349.805451][ T9175] uclogic 0003:256C:006D.005E: failed probing pen v1 parameters: -71 [ 349.813669][ T9175] uclogic 0003:256C:006D.005E: failed probing parameters: -71 [ 349.839775][ T9175] uclogic: probe of 0003:256C:006D.005E failed with error -71 [ 349.852517][ T9175] usb 3-1: USB disconnect, device number 38 [ 349.920409][T10502] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 349.929280][T10502] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038 (0x7fffffff) [ 350.348489][ T690] hid (null): bogus close delimiter [ 350.372584][T10514] 9pnet: Insufficient options for proto=fd [ 350.381974][T10510] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 350.388232][ T690] usb 2-1: string descriptor 0 read error: -22 [ 350.413402][T10509] EXT4-fs error (device loop3): ext4_find_dest_de:2076: inode #2: block 16: comm syz.3.3454: bad entry in directory: rec_len % 4 != 0 - offset=60, inode=15, rec_len=14, size=1024 fake=0 [ 350.433948][T10509] EXT4-fs error (device loop3): ext4_find_dest_de:2076: inode #2: block 16: comm syz.3.3454: bad entry in directory: rec_len % 4 != 0 - offset=60, inode=15, rec_len=14, size=1024 fake=0 [ 350.812088][T10522] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 350.815924][T10529] EXT4-fs (loop0): Unrecognized mount option "smackfsdef=max_batch_time" or missing value [ 350.830946][ T690] uclogic 0003:256C:006D.005F: failed retrieving string descriptor #100: -71 [ 350.840321][T10520] EXT4-fs error (device loop4): ext4_find_dest_de:2076: inode #2: block 16: comm syz.4.3456: bad entry in directory: rec_len % 4 != 0 - offset=60, inode=15, rec_len=14, size=1024 fake=0 [ 350.860684][ T690] uclogic 0003:256C:006D.005F: failed retrieving pen parameters: -71 [ 350.869020][ T690] uclogic 0003:256C:006D.005F: failed probing pen v1 parameters: -71 [ 350.877250][T10520] EXT4-fs error (device loop4): ext4_find_dest_de:2076: inode #2: block 16: comm syz.4.3456: bad entry in directory: rec_len % 4 != 0 - offset=60, inode=15, rec_len=14, size=1024 fake=0 [ 350.897081][ T690] uclogic 0003:256C:006D.005F: failed probing parameters: -71 [ 350.905104][ T690] uclogic: probe of 0003:256C:006D.005F failed with error -71 [ 350.913518][ T690] usb 2-1: USB disconnect, device number 33 [ 351.315261][T10539] fuse: blksize only supported for fuseblk [ 351.428150][ T411] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 351.661741][T10550] 9pnet: Insufficient options for proto=fd [ 351.729697][T10552] exFAT-fs (loop0): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1119afd0) [ 351.740035][T10552] exFAT-fs (loop0): invalid boot region [ 351.745457][T10552] exFAT-fs (loop0): failed to recognize exfat type [ 351.818130][ T690] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 351.858201][ T411] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.869044][ T411] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.878625][ T411] usb 4-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 351.887456][ T411] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.896071][ T411] usb 4-1: config 0 descriptor?? [ 352.389051][ T411] samsung 0003:0419:0001.0060: unknown main item tag 0x0 [ 352.398103][ T411] samsung 0003:0419:0001.0060: unknown main item tag 0x0 [ 352.411212][ T411] samsung 0003:0419:0001.0060: unknown main item tag 0x0 [ 352.425421][ T411] samsung 0003:0419:0001.0060: unknown main item tag 0x0 [ 352.439631][ T411] samsung 0003:0419:0001.0060: unknown main item tag 0x0 [ 352.446656][ T411] samsung 0003:0419:0001.0060: unknown main item tag 0x0 [ 352.454011][ T411] samsung 0003:0419:0001.0060: unknown main item tag 0x0 [ 352.463082][ T411] samsung 0003:0419:0001.0060: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.3-1/input0 [ 352.533344][T10560] F2FS-fs (loop1): invalid crc value [ 352.613112][ T411] usb 4-1: USB disconnect, device number 39 [ 352.624997][T10560] F2FS-fs (loop1): Found nat_bits in checkpoint [ 352.667073][ T690] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.671517][T10560] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 352.678106][ T690] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.695089][ T690] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 352.703990][ T690] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.719695][ T690] usb 5-1: config 0 descriptor?? [ 352.939456][ T9175] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 353.162660][T10108] attempt to access beyond end of device [ 353.162660][T10108] loop1: rw=524288, want=45072, limit=40427 [ 353.174753][T10108] attempt to access beyond end of device [ 353.174753][T10108] loop1: rw=0, want=45072, limit=40427 [ 353.226034][ T407] attempt to access beyond end of device [ 353.226034][ T407] loop1: rw=2049, want=45120, limit=40427 [ 353.338842][ T9175] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.352330][T10576] exFAT-fs (loop3): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1119afd0) [ 353.363319][ T9175] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.375139][T10576] exFAT-fs (loop3): invalid boot region [ 353.381328][T10576] exFAT-fs (loop3): failed to recognize exfat type [ 353.416513][ T9175] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 353.426166][ T9175] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.442844][ T9175] usb 1-1: config 0 descriptor?? [ 353.671938][ T690] usb 5-1: language id specifier not provided by device, defaulting to English [ 353.902199][T10584] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.909249][T10584] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.916301][T10584] device bridge_slave_0 entered promiscuous mode [ 353.923901][T10584] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.931611][T10584] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.939329][T10584] device bridge_slave_1 entered promiscuous mode [ 353.958158][ T690] uclogic 0003:256C:006D.0061: failed retrieving string descriptor #200: -71 [ 353.966907][ T690] uclogic 0003:256C:006D.0061: failed retrieving pen parameters: -71 [ 353.975622][ T690] uclogic 0003:256C:006D.0061: failed probing pen v2 parameters: -71 [ 353.984942][ T690] uclogic 0003:256C:006D.0061: failed probing parameters: -71 [ 354.000817][ T690] uclogic: probe of 0003:256C:006D.0061 failed with error -71 [ 354.007076][T10584] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.015060][T10584] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.022179][T10584] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.029231][T10584] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.032616][ T690] usb 5-1: USB disconnect, device number 30 [ 354.063281][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 354.085693][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.143375][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.160242][ T3405] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 354.168328][ T3405] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.175234][ T3405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.182678][ T3405] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 354.190940][ T3405] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.197772][ T3405] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.480064][ T689] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 354.495273][ T3405] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 354.528784][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 354.542717][T10584] device veth0_vlan entered promiscuous mode [ 354.556098][ T3405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 354.565315][ T3405] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 354.576752][ T3405] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 354.595879][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 354.604300][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 354.613939][T10584] device veth1_macvtap entered promiscuous mode [ 354.624887][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 354.633067][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 354.641692][ T320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 354.652923][T10565] EXT4-fs (loop0): 1 truncate cleaned up [ 354.658886][T10565] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 354.670945][ T690] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 354.679152][ T690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 354.681651][T10565] udc-core: couldn't find an available UDC or it's busy [ 354.695252][T10565] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 354.718950][T10565] udc-core: couldn't find an available UDC or it's busy [ 354.725885][T10565] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 354.754689][ T9175] uclogic 0003:256C:006D.0062: interface is invalid, ignoring [ 354.763590][ T7] device bridge_slave_1 left promiscuous mode [ 354.770162][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.777443][ T7] device bridge_slave_0 left promiscuous mode [ 354.783769][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.791654][ T7] device veth1_macvtap left promiscuous mode [ 354.797753][ T7] device veth0_vlan left promiscuous mode [ 354.873170][T10606] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3476'. [ 355.053144][ T689] usb 1-1: USB disconnect, device number 26 [ 355.162234][T10608] exFAT-fs (loop3): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1119afd0) [ 355.172413][T10608] exFAT-fs (loop3): invalid boot region [ 355.177739][T10608] exFAT-fs (loop3): failed to recognize exfat type [ 355.190593][T10611] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 355.199751][T10611] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038 (0x7fffffff) [ 355.649690][T10621] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 355.658802][T10621] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038 (0x7fffffff) [ 355.741041][T10632] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11 sclass=netlink_route_socket pid=10632 comm=syz.0.3485 [ 355.938156][ T690] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 356.080735][T10635] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 356.090869][T10635] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038 (0x7fffffff) [ 356.844277][T10644] 9pnet: Insufficient options for proto=fd [ 357.131106][T10650] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3488'. [ 357.163576][T10650] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=34 sclass=netlink_tcpdiag_socket pid=10650 comm=syz.1.3488 [ 357.208741][T10650] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3488'. [ 357.213757][ T690] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.231415][ T690] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.241361][ T690] usb 5-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 357.241543][T10652] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 357.250504][ T690] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.267685][ T690] usb 5-1: config 0 descriptor?? [ 357.298109][T10652] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 357.337475][T10652] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 357.352563][T10652] System zones: 0-2, 18-18, 34-34 [ 357.365731][T10652] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1047: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 357.416618][T10652] EXT4-fs (loop0): 1 truncate cleaned up [ 357.422980][T10652] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 357.524250][T10667] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3492'. [ 357.893855][ T690] samsung 0003:0419:0001.0063: unknown main item tag 0x0 [ 357.900949][ T690] samsung 0003:0419:0001.0063: unknown main item tag 0x0 [ 357.907952][ T690] samsung 0003:0419:0001.0063: unknown main item tag 0x0 [ 357.915568][ T690] samsung 0003:0419:0001.0063: unknown main item tag 0x0 [ 357.922550][ T690] samsung 0003:0419:0001.0063: unknown main item tag 0x0 [ 357.929517][ T690] samsung 0003:0419:0001.0063: unknown main item tag 0x0 [ 357.936521][ T690] samsung 0003:0419:0001.0063: unknown main item tag 0x0 [ 357.950962][ T690] samsung 0003:0419:0001.0063: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.4-1/input0 [ 358.096931][T10674] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 358.190032][ T411] usb 5-1: USB disconnect, device number 31 [ 358.389629][T10678] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 358.398769][T10678] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038 (0x7fffffff) [ 358.618381][ T9175] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 358.913168][T10687] fuse: blksize only supported for fuseblk [ 359.642510][T10584] EXT4-fs error (device loop1): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 359.746178][T10696] exFAT-fs (loop3): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1119afd0) [ 359.756365][T10696] exFAT-fs (loop3): invalid boot region [ 359.761889][T10696] exFAT-fs (loop3): failed to recognize exfat type [ 359.789843][T10699] exFAT-fs (loop1): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1119afd0) [ 359.799989][T10699] exFAT-fs (loop1): invalid boot region [ 359.805322][T10699] exFAT-fs (loop1): failed to recognize exfat type [ 359.808169][ T9175] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.822433][ T9175] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.831932][ T9175] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 359.841283][ T9175] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.849773][ T9175] usb 1-1: config 0 descriptor?? [ 360.188612][ T336] Bluetooth: hci0: command 0x1003 tx timeout [ 360.195599][ T1642] Bluetooth: hci0: sending frame failed (-49) [ 360.215987][T10703] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 360.225087][T10703] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038 (0x7fffffff) [ 360.572209][ T24] kauditd_printk_skb: 31 callbacks suppressed [ 360.572220][ T24] audit: type=1400 audit(1723565783.719:815): avc: denied { listen } for pid=10713 comm="syz.3.3503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 360.798119][T10721] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3505'. [ 361.123091][T10726] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3506'. [ 361.255177][T10676] EXT4-fs (loop0): 1 truncate cleaned up [ 361.260892][T10676] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 361.271073][T10676] udc-core: couldn't find an available UDC or it's busy [ 361.277878][T10676] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 361.285704][T10676] udc-core: couldn't find an available UDC or it's busy [ 361.292768][T10676] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 361.308167][ T9175] uclogic 0003:256C:006D.0064: failed retrieving string descriptor #100: -71 [ 361.316788][ T9175] uclogic 0003:256C:006D.0064: failed retrieving pen parameters: -71 [ 361.324712][ T9175] uclogic 0003:256C:006D.0064: failed probing pen v1 parameters: -71 [ 361.332614][ T9175] uclogic 0003:256C:006D.0064: failed probing parameters: -71 [ 361.339974][ T9175] uclogic: probe of 0003:256C:006D.0064 failed with error -71 [ 361.353054][ T9175] usb 1-1: USB disconnect, device number 27 [ 361.881542][T10740] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 362.066461][T10744] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 362.075500][T10744] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038 (0x7fffffff) [ 362.418221][ T336] Bluetooth: hci0: command 0x1001 tx timeout [ 362.424127][ T1642] Bluetooth: hci0: sending frame failed (-49) [ 362.855077][T10348] EXT4-fs error (device loop0): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 362.983389][T10764] exFAT-fs (loop4): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1119afd0) [ 362.993889][T10764] exFAT-fs (loop4): invalid boot region [ 362.999599][T10764] exFAT-fs (loop4): failed to recognize exfat type [ 363.028166][ T470] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 363.396906][T10775] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=34 sclass=netlink_tcpdiag_socket pid=10775 comm=syz.3.3518 [ 363.409776][T10775] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3518'. [ 363.448211][ T470] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 363.459081][ T470] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.469783][ T470] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 363.479593][ T470] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 363.496516][ T470] usb 2-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 363.505536][ T470] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.540164][T10779] FAULT_INJECTION: forcing a failure. [ 363.540164][T10779] name failslab, interval 1, probability 0, space 0, times 0 [ 363.552823][T10779] CPU: 0 PID: 10779 Comm: syz.3.3519 Not tainted 5.10.223-syzkaller-01561-g0890c03b8b7d #0 [ 363.562757][T10779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 363.572643][T10779] Call Trace: [ 363.575779][T10779] dump_stack_lvl+0x1e2/0x24b [ 363.580285][T10779] ? panic+0x812/0x812 [ 363.584204][T10779] ? bfq_pos_tree_add_move+0x43b/0x43b [ 363.589490][T10779] dump_stack+0x15/0x17 [ 363.593480][T10779] should_fail+0x3c6/0x510 [ 363.597745][T10779] ? sk_stream_alloc_skb+0x1f8/0xae0 [ 363.602874][T10779] __should_failslab+0xa4/0xe0 [ 363.607481][T10779] should_failslab+0x9/0x20 [ 363.611799][T10779] __kmalloc_track_caller+0x5f/0x320 [ 363.617004][T10779] ? kmem_cache_alloc+0x168/0x2e0 [ 363.621958][T10779] ? __alloc_skb+0x80/0x510 [ 363.626297][T10779] ? sk_stream_alloc_skb+0x1f8/0xae0 [ 363.631502][T10779] __alloc_skb+0xbc/0x510 [ 363.635821][T10779] sk_stream_alloc_skb+0x1f8/0xae0 [ 363.640749][T10779] tcp_connect+0x159b/0x4c80 [ 363.645178][T10779] ? tcp_options_write+0xc60/0xc60 [ 363.650209][T10779] ? __kasan_check_read+0x11/0x20 [ 363.655072][T10779] ? preempt_schedule_irq+0xe7/0x140 [ 363.660183][T10779] ? preempt_schedule_notrace+0x140/0x140 [ 363.665742][T10779] ? memset+0x35/0x40 [ 363.669562][T10779] ? tcp_fastopen_active_should_disable+0x210/0x210 [ 363.675987][T10779] ? prandom_u32+0x24c/0x290 [ 363.680410][T10779] tcp_v4_connect+0x11bf/0x1c30 [ 363.685095][T10779] ? switch_mm_irqs_off+0x2f9/0x9a0 [ 363.690131][T10779] ? tcp_twsk_unique+0xa90/0xa90 [ 363.694908][T10779] __inet_stream_connect+0x276/0xd80 [ 363.700217][T10779] ? irqentry_exit+0x4f/0x60 [ 363.704627][T10779] ? sysvec_reschedule_ipi+0x83/0x160 [ 363.709836][T10779] ? inet_dgram_connect+0x400/0x400 [ 363.715076][T10779] ? asm_sysvec_reschedule_ipi+0x12/0x20 [ 363.721150][T10779] tcp_sendmsg_fastopen+0x373/0x590 [ 363.726172][T10779] tcp_sendmsg_locked+0x349d/0x3ae0 [ 363.731207][T10779] ? __switch_to_asm+0x34/0x60 [ 363.735834][T10779] ? __schedule+0xbee/0x1330 [ 363.740243][T10779] ? release_firmware_map_entry+0x18d/0x18d [ 363.745972][T10779] ? __kasan_check_write+0x14/0x20 [ 363.750908][T10779] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 363.755943][T10779] ? __local_bh_enable_ip+0x53/0x80 [ 363.760973][T10779] ? local_bh_enable+0x1f/0x30 [ 363.765573][T10779] ? lock_sock_nested+0x26a/0x300 [ 363.770441][T10779] ? tcp_free_fastopen_req+0x80/0x80 [ 363.775558][T10779] ? sysvec_reschedule_ipi+0x83/0x160 [ 363.780769][T10779] ? inet_sendmsg+0x55/0xc0 [ 363.785104][T10779] tcp_sendmsg+0x2f/0x50 [ 363.789270][T10779] inet_sendmsg+0xa1/0xc0 [ 363.793445][T10779] ? inet_send_prepare+0x4a0/0x4a0 [ 363.798383][T10779] __sys_sendto+0x545/0x700 [ 363.802899][T10779] ? __ia32_sys_getpeername+0x90/0x90 [ 363.808113][T10779] ? __ia32_sys_read+0x90/0x90 [ 363.812805][T10779] __x64_sys_sendto+0xe5/0x100 [ 363.817566][T10779] do_syscall_64+0x34/0x70 [ 363.821825][T10779] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 363.827544][T10779] RIP: 0033:0x7f15c9caf9f9 [ 363.831809][T10779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 363.851244][T10779] RSP: 002b:00007f15c88eb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 363.859570][T10779] RAX: ffffffffffffffda RBX: 00007f15c9e4c130 RCX: 00007f15c9caf9f9 [ 363.867382][T10779] RDX: ffffffffffffff7c RSI: 0000000000000000 RDI: 000000000000000e [ 363.875193][T10779] RBP: 00007f15c88eb090 R08: 0000000020e68000 R09: 0000000000000010 [ 363.883006][T10779] R10: 00000000200007fd R11: 0000000000000246 R12: 0000000000000001 [ 363.890816][T10779] R13: 0000000000000000 R14: 00007f15c9e4c130 R15: 00007ffdcd2ceda8 [ 364.229411][ T470] usb 2-1: config 0 descriptor?? [ 364.248272][ T24] audit: type=1326 audit(1723565787.389:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10785 comm="syz.0.3522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044da949f9 code=0x7ffc0000 [ 364.277324][ T24] audit: type=1326 audit(1723565787.399:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10785 comm="syz.0.3522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f044da949f9 code=0x7ffc0000 [ 364.305290][ T24] audit: type=1326 audit(1723565787.399:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10785 comm="syz.0.3522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f044da949f9 code=0x7ffc0000 [ 364.331183][ T24] audit: type=1326 audit(1723565787.399:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10785 comm="syz.0.3522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f044da94a33 code=0x7ffc0000 [ 364.380095][T10789] exFAT-fs (loop3): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1119afd0) [ 364.390307][T10789] exFAT-fs (loop3): invalid boot region [ 364.391325][ T24] audit: type=1326 audit(1723565787.539:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10785 comm="syz.0.3522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f044da934df code=0x7ffc0000 [ 364.395989][T10789] exFAT-fs (loop3): failed to recognize exfat type [ 364.478106][ T690] Bluetooth: hci0: command 0x1009 tx timeout [ 364.629402][ T24] audit: type=1326 audit(1723565787.779:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10785 comm="syz.0.3522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f044da94a87 code=0x7ffc0000 [ 364.652907][ T24] audit: type=1326 audit(1723565787.779:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10785 comm="syz.0.3522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f044da93390 code=0x7ffc0000 [ 364.684314][ T24] audit: type=1326 audit(1723565787.779:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10785 comm="syz.0.3522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f044da945fb code=0x7ffc0000 [ 364.730064][ T470] thrustmaster 0003:044F:B653.0065: unbalanced delimiter at end of report description [ 364.740781][ T470] thrustmaster 0003:044F:B653.0065: parse failed [ 364.747351][ T470] thrustmaster: probe of 0003:044F:B653.0065 failed with error -22 [ 364.761819][ T24] audit: type=1326 audit(1723565787.779:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10785 comm="syz.0.3522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f044da9368a code=0x7ffc0000 [ 364.786980][T10786] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 364.799160][T10786] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 364.808628][T10786] F2FS-fs (loop0): invalid crc value [ 364.815108][T10786] F2FS-fs (loop0): Found nat_bits in checkpoint [ 364.837951][T10786] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 364.844880][T10786] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 365.091739][T10805] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 365.378331][T10807] overlayfs: failed to resolve './file1': -2 [ 365.638450][T10812] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 366.345853][T10823] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=34 sclass=netlink_tcpdiag_socket pid=10823 comm=syz.1.3529 [ 366.359135][T10823] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3529'. [ 366.434538][ T470] usb 2-1: USB disconnect, device number 34 [ 366.589997][T10829] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 366.653343][T10834] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3530'. [ 366.679329][T10829] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038 (0x7fffffff) [ 366.869600][T10838] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 366.878459][T10838] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038 (0x7fffffff) [ 367.438189][ T9175] Bluetooth: hci1: command 0x1003 tx timeout [ 367.558488][ T732] Bluetooth: hci1: sending frame failed (-49) [ 367.610488][T10081] EXT4-fs error (device loop3): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 367.707440][T10348] EXT4-fs error (device loop0): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 367.818845][T10854] EXT4-fs (loop0): Unrecognized mount option "smackfsdef=max_batch_time" or missing value [ 367.896166][T10857] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3535'. [ 368.303144][T10860] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.310419][T10860] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.320993][T10860] device bridge_slave_0 entered promiscuous mode [ 368.350539][T10860] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.371560][T10860] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.383968][T10860] device bridge_slave_1 entered promiscuous mode [ 368.392059][T10868] fuse: blksize only supported for fuseblk [ 368.561114][T10860] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.568189][T10860] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.575283][T10860] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.582150][T10860] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.633478][ T24] kauditd_printk_skb: 28 callbacks suppressed [ 368.633489][ T24] audit: type=1326 audit(1723565791.779:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10870 comm="syz.3.3539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15c9caf9f9 code=0x7ffc0000 [ 368.663934][ T24] audit: type=1326 audit(1723565791.779:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10870 comm="syz.3.3539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f15c9caf9f9 code=0x7ffc0000 [ 368.674462][ T336] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.692148][ T24] audit: type=1326 audit(1723565791.779:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10870 comm="syz.3.3539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15c9caf9f9 code=0x7ffc0000 [ 368.717415][ T24] audit: type=1326 audit(1723565791.779:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10870 comm="syz.3.3539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15c9caf9f9 code=0x7ffc0000 [ 368.740704][ T24] audit: type=1326 audit(1723565791.779:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10870 comm="syz.3.3539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f15c9caf9f9 code=0x7ffc0000 [ 368.763868][ T24] audit: type=1326 audit(1723565791.779:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10870 comm="syz.3.3539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15c9caf9f9 code=0x7ffc0000 [ 368.787448][ T24] audit: type=1326 audit(1723565791.779:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10870 comm="syz.3.3539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15c9caf9f9 code=0x7ffc0000 [ 368.811565][ T24] audit: type=1326 audit(1723565791.779:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10870 comm="syz.3.3539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f15c9caf9f9 code=0x7ffc0000 [ 368.835212][ T24] audit: type=1326 audit(1723565791.779:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10870 comm="syz.3.3539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15c9caf9f9 code=0x7ffc0000 [ 368.861298][ T336] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.869369][ T24] audit: type=1326 audit(1723565791.779:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10870 comm="syz.3.3539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15c9caf9f9 code=0x7ffc0000 [ 368.893167][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 368.900405][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 368.914165][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 368.922299][ T470] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.929199][ T470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.936264][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 368.944462][ T470] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.951318][ T470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.961435][ T690] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 368.971413][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 368.984052][ T690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 368.995058][ T3405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 369.003045][ T3405] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 369.010858][ T3405] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 369.022022][T10860] device veth0_vlan entered promiscuous mode [ 369.031775][ T690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 369.042316][T10860] device veth1_macvtap entered promiscuous mode [ 369.052856][ T690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 369.065782][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 369.152744][T10881] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e00cc02c, mo2=0002] [ 369.163088][T10881] System zones: 0-1, 3-36 [ 369.167893][T10881] EXT4-fs (loop1): mounted filesystem without journal. Opts: resgid=0x000000000000ee01,data_err=ignore,discard,max_batch_time=0x0000000000000003,resuid=0x0000000000000000,max_batch_time=0x0000000000000006,usrquota,nodelalloc,errors=remount-ro,bsddf,debug, [ 369.198114][ T3405] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 369.302214][T10875] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 369.309988][T10875] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 369.320592][T10875] F2FS-fs (loop2): invalid crc value [ 369.335317][T10875] F2FS-fs (loop2): Found nat_bits in checkpoint [ 369.370378][T10875] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 369.377336][T10875] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 369.475984][T10895] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3544'. [ 369.540734][ T407] device bridge_slave_1 left promiscuous mode [ 369.547580][ T407] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.561512][ T407] device veth1_macvtap left promiscuous mode [ 369.567910][ T407] device veth0_vlan left promiscuous mode [ 369.608236][ T9175] Bluetooth: hci1: command 0x1001 tx timeout [ 369.620666][ T40] Bluetooth: hci1: sending frame failed (-49) [ 369.688182][ T3405] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.694729][T10898] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 369.699090][ T3405] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 369.707837][T10898] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038 (0x7fffffff) [ 369.717588][ T3405] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 369.739446][ T3405] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.753621][ T3405] usb 4-1: config 0 descriptor?? [ 370.089567][T10905] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 370.098420][T10905] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038 (0x7fffffff) [ 370.189058][T10910] EXT4-fs (loop0): Test dummy encryption mode enabled [ 370.195886][T10910] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 370.203570][T10910] EXT4-fs (loop0): Test dummy encryption mode enabled [ 370.211210][T10910] EXT4-fs error (device loop0): __ext4_iget:4958: inode #11: block 1: comm syz.0.3547: invalid block [ 370.222295][T10910] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.3547: couldn't read orphan inode 11 (err -117) [ 370.234581][T10910] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,acl,test_dummy_encryption,resgid=0x0000000000000000,jqfmt=vfsv0,mblk_io_submit,inode_readahead_blks=0x0000000000010000,noauto_da_alloc,test_dummy_encryption,,errors=continue [ 370.281318][T10910] fscrypt: AES-256-CTS-CBC using implementation "cts(cbc-aes-aesni)" [ 370.668132][ T470] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 371.001893][T10584] EXT4-fs error (device loop1): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 371.158304][ T470] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.169390][ T470] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.182050][ T470] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 371.194899][ T470] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 371.204132][ T470] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.212827][ T470] usb 1-1: config 0 descriptor?? [ 371.219183][T10873] FAULT_INJECTION: forcing a failure. [ 371.219183][T10873] name failslab, interval 1, probability 0, space 0, times 0 [ 371.222672][T10935] EXT4-fs (loop1): Unrecognized mount option "smackfsdef=max_batch_time" or missing value [ 371.232460][T10873] CPU: 1 PID: 10873 Comm: syz.3.3540 Not tainted 5.10.223-syzkaller-01561-g0890c03b8b7d #0 [ 371.251275][T10873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 371.261179][T10873] Call Trace: [ 371.264305][T10873] dump_stack_lvl+0x1e2/0x24b [ 371.269025][T10873] ? panic+0x812/0x812 [ 371.272889][T10873] ? bfq_pos_tree_add_move+0x43b/0x43b [ 371.278194][T10873] dump_stack+0x15/0x17 [ 371.282175][T10873] should_fail+0x3c6/0x510 [ 371.286544][T10873] ? __ip6_append_data+0x290f/0x3e40 [ 371.291666][T10873] __should_failslab+0xa4/0xe0 [ 371.296269][T10873] should_failslab+0x9/0x20 [ 371.300603][T10873] __kmalloc_track_caller+0x5f/0x320 [ 371.305713][T10873] ? kmem_cache_alloc+0x168/0x2e0 [ 371.310575][T10873] ? __alloc_skb+0x80/0x510 [ 371.314911][T10873] ? __ip6_append_data+0x290f/0x3e40 [ 371.320043][T10873] __alloc_skb+0xbc/0x510 [ 371.324203][T10873] __ip6_append_data+0x290f/0x3e40 [ 371.329151][T10873] ? __kasan_check_write+0x14/0x20 [ 371.334094][T10873] ? _raw_spin_lock_bh+0xa4/0x1b0 [ 371.338953][T10873] ? ip6_setup_cork+0x1220/0x1220 [ 371.343813][T10873] ? __kasan_check_read+0x11/0x20 [ 371.348673][T10873] ? ip6_setup_cork+0xce4/0x1220 [ 371.353447][T10873] ? lock_sock_nested+0x26a/0x300 [ 371.358314][T10873] ip6_append_data+0x1ad/0x2d0 [ 371.362907][T10873] ? rawv6_send_hdrinc+0x1220/0x1220 [ 371.368045][T10873] ? rawv6_send_hdrinc+0x1220/0x1220 [ 371.373247][T10873] rawv6_sendmsg+0x177c/0x2110 [ 371.377849][T10873] ? compat_rawv6_ioctl+0x10/0x10 [ 371.382826][T10873] ? selinux_socket_sendmsg+0x243/0x340 [ 371.388210][T10873] ? kmem_cache_free+0xa9/0x1e0 [ 371.392916][T10873] ? inet_send_prepare+0x5e/0x4a0 [ 371.397846][T10873] inet_sendmsg+0xa1/0xc0 [ 371.402004][T10873] ? inet_send_prepare+0x4a0/0x4a0 [ 371.406953][T10873] ____sys_sendmsg+0x59e/0x8f0 [ 371.411554][T10873] ? __sys_sendmsg_sock+0x40/0x40 [ 371.416410][T10873] ? import_iovec+0xe5/0x120 [ 371.421029][T10873] ___sys_sendmsg+0x252/0x2e0 [ 371.425755][T10873] ? __sys_sendmsg+0x280/0x280 [ 371.430309][T10873] ? rw_verify_area+0x1c3/0x360 [ 371.435009][T10873] ? __fdget+0x1bc/0x240 [ 371.439072][T10873] __se_sys_sendmsg+0x1b1/0x280 [ 371.443753][T10873] ? __x64_sys_sendmsg+0x90/0x90 [ 371.448530][T10873] ? ksys_write+0x260/0x2c0 [ 371.452874][T10873] ? debug_smp_processor_id+0x17/0x20 [ 371.458197][T10873] __x64_sys_sendmsg+0x7b/0x90 [ 371.462903][T10873] do_syscall_64+0x34/0x70 [ 371.467268][T10873] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 371.472985][T10873] RIP: 0033:0x7f15c9caf9f9 [ 371.477234][T10873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 371.496766][T10873] RSP: 002b:00007f15c892d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 371.505012][T10873] RAX: ffffffffffffffda RBX: 00007f15c9e4bf80 RCX: 00007f15c9caf9f9 [ 371.512815][T10873] RDX: 0000000000000004 RSI: 00000000200000c0 RDI: 0000000000000006 [ 371.520631][T10873] RBP: 00007f15c892d090 R08: 0000000000000000 R09: 0000000000000000 [ 371.528614][T10873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 371.536512][T10873] R13: 0000000000000000 R14: 00007f15c9e4bf80 R15: 00007ffdcd2ceda8 [ 371.666042][T10873] EXT4-fs (loop3): 1 truncate cleaned up [ 371.671589][T10873] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 371.680458][ T690] Bluetooth: hci1: command 0x1009 tx timeout [ 371.703459][T10873] udc-core: couldn't find an available UDC or it's busy [ 371.710357][T10873] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 371.718178][T10873] udc-core: couldn't find an available UDC or it's busy [ 371.725029][T10873] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 371.739186][ T3405] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0066/input/input80 [ 371.751544][ T3405] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0066/input/input81 [ 371.763851][ T3405] uclogic 0003:256C:006D.0066: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 371.809896][T10944] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 371.940284][ T337] usb 4-1: USB disconnect, device number 40 [ 372.643019][T10959] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3557'. [ 372.819142][T10961] 9pnet: Insufficient options for proto=fd [ 372.850800][T10965] FAULT_INJECTION: forcing a failure. [ 372.850800][T10965] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 372.864827][T10965] CPU: 1 PID: 10965 Comm: syz.1.3561 Not tainted 5.10.223-syzkaller-01561-g0890c03b8b7d #0 [ 372.874779][T10965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 372.884670][T10965] Call Trace: [ 372.887804][T10965] dump_stack_lvl+0x1e2/0x24b [ 372.892314][T10965] ? bfq_pos_tree_add_move+0x43b/0x43b [ 372.897607][T10965] ? do_sys_openat2+0x1fc/0x710 [ 372.902298][T10965] dump_stack+0x15/0x17 [ 372.906289][T10965] should_fail+0x3c6/0x510 [ 372.910545][T10965] should_fail_usercopy+0x1a/0x20 [ 372.915492][T10965] _copy_from_user+0x20/0xd0 [ 372.919999][T10965] set_termios+0x140/0x960 [ 372.924252][T10965] ? tty_mode_ioctl+0x910/0x910 [ 372.928956][T10965] ? do_vfs_ioctl+0x798/0x1a30 [ 372.933540][T10965] ? ioctl_has_perm+0x3f0/0x560 [ 372.938225][T10965] tty_mode_ioctl+0x680/0x910 [ 372.942739][T10965] ? security_capable+0x87/0xb0 [ 372.947444][T10965] ? tty_set_termios+0x1640/0x1640 [ 372.952374][T10965] ? __kasan_check_write+0x14/0x20 [ 372.957328][T10965] ? ldsem_down_read+0x1fa/0x920 [ 372.962715][T10965] ? vt_waitactive+0x760/0x760 [ 372.967302][T10965] ? lock_page+0xb0/0xb0 [ 372.971385][T10965] ? selinux_file_alloc_security+0x120/0x120 [ 372.977195][T10965] n_tty_ioctl_helper+0x96/0x350 [ 372.981987][T10965] hci_uart_tty_ioctl+0x297/0xa10 [ 372.986922][T10965] ? tty_jobctrl_ioctl+0x268/0xb10 [ 372.991962][T10965] ? hci_uart_tty_write+0x10/0x10 [ 372.996987][T10965] tty_ioctl+0x93b/0xc90 [ 373.001065][T10965] ? tty_do_resize+0x180/0x180 [ 373.005664][T10965] __se_sys_ioctl+0x114/0x190 [ 373.010184][T10965] __x64_sys_ioctl+0x7b/0x90 [ 373.014605][T10965] do_syscall_64+0x34/0x70 [ 373.019022][T10965] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 373.024763][T10965] RIP: 0033:0x7f124b1379f9 [ 373.029115][T10965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 373.049426][T10965] RSP: 002b:00007f1249db5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 373.058068][T10965] RAX: ffffffffffffffda RBX: 00007f124b2d3f80 RCX: 00007f124b1379f9 [ 373.065834][T10965] RDX: 0000000020000000 RSI: 00000000402c542b RDI: 0000000000000003 [ 373.073636][T10965] RBP: 00007f1249db5090 R08: 0000000000000000 R09: 0000000000000000 [ 373.081448][T10965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.089285][T10965] R13: 0000000000000000 R14: 00007f124b2d3f80 R15: 00007ffe1d5e40e8 [ 373.368182][ T336] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 373.389478][ T53] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 373.468188][ T470] usbhid 1-1:0.0: can't add hid device: -71 [ 373.474038][ T470] usbhid: probe of 1-1:0.0 failed with error -71 [ 373.482688][ T470] usb 1-1: USB disconnect, device number 28 [ 373.686220][T10984] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11 sclass=netlink_route_socket pid=10984 comm=syz.0.3567 [ 373.728189][ T336] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.739018][ T336] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.748829][ T336] usb 3-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 373.757911][ T336] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.770001][ T336] usb 3-1: config 0 descriptor?? [ 373.828170][ T53] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.838980][ T53] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.849811][ T53] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 373.860329][ T53] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.890719][ T53] usb 2-1: config 0 descriptor?? [ 374.041054][T10987] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 374.050098][T10987] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 374.059139][T10987] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 374.067000][T10987] System zones: 0-2, 18-18, 34-34 [ 374.072538][T10987] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1047: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 374.087217][T10987] EXT4-fs (loop0): 1 truncate cleaned up [ 374.092755][T10987] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 374.249306][T10991] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 374.249371][ T336] samsung 0003:0419:0001.0067: unknown main item tag 0x0 [ 374.264891][ T336] samsung 0003:0419:0001.0067: unknown main item tag 0x0 [ 374.271815][ T336] samsung 0003:0419:0001.0067: unknown main item tag 0x0 [ 374.278668][ T336] samsung 0003:0419:0001.0067: unknown main item tag 0x0 [ 374.285450][ T336] samsung 0003:0419:0001.0067: unknown main item tag 0x0 [ 374.292362][ T336] samsung 0003:0419:0001.0067: unknown main item tag 0x0 [ 374.299197][ T336] samsung 0003:0419:0001.0067: unknown main item tag 0x0 [ 374.306506][ T336] samsung 0003:0419:0001.0067: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.2-1/input0 [ 374.451472][ T336] usb 3-1: USB disconnect, device number 39 [ 374.588132][ T53] usb 2-1: language id specifier not provided by device, defaulting to English [ 374.679634][T10997] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 374.778939][T11006] EXT4-fs (loop0): Unrecognized mount option "smackfsdef=max_batch_time" or missing value [ 375.050186][ T53] uclogic 0003:256C:006D.0068: failed retrieving string descriptor #200: -71 [ 375.073113][ T53] uclogic 0003:256C:006D.0068: failed retrieving pen parameters: -71 [ 375.087306][T11014] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.088122][ T53] uclogic 0003:256C:006D.0068: failed probing pen v2 parameters: -71 [ 375.109509][T11014] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.116607][ T53] uclogic 0003:256C:006D.0068: failed probing parameters: -71 [ 375.130500][ T53] uclogic: probe of 0003:256C:006D.0068 failed with error -71 [ 375.159068][ T53] usb 2-1: USB disconnect, device number 35 [ 375.174562][T11021] netlink: 100 bytes leftover after parsing attributes in process `syz.2.3573'. [ 375.346734][T11014] device bridge_slave_0 entered promiscuous mode [ 375.354179][T11014] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.361327][T11014] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.372691][T11025] FAULT_INJECTION: forcing a failure. [ 375.372691][T11025] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 375.373782][T11014] device bridge_slave_1 entered promiscuous mode [ 375.406063][T11025] CPU: 0 PID: 11025 Comm: syz.3.3575 Not tainted 5.10.223-syzkaller-01561-g0890c03b8b7d #0 [ 375.415857][T11025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 375.425749][T11025] Call Trace: [ 375.428885][T11025] dump_stack_lvl+0x1e2/0x24b [ 375.432277][T11014] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.433480][T11025] ? bfq_pos_tree_add_move+0x43b/0x43b [ 375.433490][T11025] ? search_extable+0xaf/0xf0 [ 375.433507][T11025] ? trim_init_extable+0x3d0/0x3d0 [ 375.440347][T11014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.445635][T11025] dump_stack+0x15/0x17 [ 375.450238][T11014] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.455177][T11025] should_fail+0x3c6/0x510 [ 375.462662][T11014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.466635][T11025] should_fail_alloc_page+0x52/0x60 [ 375.490165][T11025] __alloc_pages_nodemask+0x1b3/0xaf0 [ 375.495375][T11025] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 375.500762][T11025] ? stack_trace_save+0x113/0x1c0 [ 375.505613][T11025] ? terminate_walk+0x407/0x4f0 [ 375.510411][T11025] skb_page_frag_refill+0x21b/0x410 [ 375.515425][T11025] tun_get_user+0x6cb/0x38f0 [ 375.520128][T11025] ? bad_area_nosemaphore+0x2d/0x40 [ 375.525168][T11025] ? _kstrtoull+0x3a0/0x4a0 [ 375.529498][T11025] ? tun_do_read+0x1f60/0x1f60 [ 375.534095][T11025] ? kstrtouint_from_user+0x20a/0x2a0 [ 375.539307][T11025] ? kstrtol_from_user+0x310/0x310 [ 375.544410][T11025] ? copy_from_kernel_nofault+0x2af/0x2e0 [ 375.549966][T11025] ? avc_policy_seqno+0x1b/0x70 [ 375.554658][T11025] ? selinux_file_permission+0x2bb/0x560 [ 375.554670][T11025] ? fsnotify_perm+0x67/0x4e0 [ 375.554697][T11025] tun_chr_write_iter+0x1a8/0x250 [ 375.569581][T11025] vfs_write+0xb4c/0xe70 [ 375.573646][T11025] ? kernel_write+0x3d0/0x3d0 [ 375.578169][T11025] ? __fdget_pos+0x209/0x3a0 [ 375.582663][T11025] ? ksys_write+0x77/0x2c0 [ 375.586919][T11025] ksys_write+0x199/0x2c0 [ 375.591089][T11025] ? __ia32_sys_read+0x90/0x90 [ 375.595694][T11025] ? debug_smp_processor_id+0x17/0x20 [ 375.600915][T11025] __x64_sys_write+0x7b/0x90 [ 375.605489][T11025] do_syscall_64+0x34/0x70 [ 375.609707][T11025] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 375.615439][T11025] RIP: 0033:0x7f15c9cae4df [ 375.619715][T11025] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8d 02 00 48 [ 375.639131][T11025] RSP: 002b:00007f15c892d000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 375.647364][T11025] RAX: ffffffffffffffda RBX: 00007f15c9e4bf80 RCX: 00007f15c9cae4df [ 375.655449][T11025] RDX: 000000000000009a RSI: 00000000200004c0 RDI: 00000000000000c8 [ 375.663269][T11025] RBP: 00007f15c892d090 R08: 0000000000000000 R09: 0000000000000000 [ 375.671510][T11025] R10: 000000000000009a R11: 0000000000000293 R12: 0000000000000001 [ 375.679310][T11025] R13: 0000000000000000 R14: 00007f15c9e4bf80 R15: 00007ffdcd2ceda8 [ 375.690846][ T24] kauditd_printk_skb: 51 callbacks suppressed [ 375.690858][ T24] audit: type=1400 audit(1723565798.719:914): avc: denied { accept } for pid=11026 comm="syz.0.3576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 375.701457][ T470] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.736389][ T470] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.744046][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 375.761096][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 375.787688][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 375.798397][ T9175] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.805281][ T9175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.827054][ T9175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 375.857236][ T9175] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.864231][ T9175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.959145][T11038] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 375.968174][T11038] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038 (0x7fffffff) [ 375.973339][T11033] F2FS-fs (loop0): invalid crc value [ 375.989509][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 375.995446][T11033] F2FS-fs (loop0): Found nat_bits in checkpoint [ 375.997347][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 376.047864][T11033] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 376.188564][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 376.197187][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 376.210467][T11014] device veth0_vlan entered promiscuous mode [ 376.216910][ T690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 376.225769][ T690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 376.240348][T11014] device veth1_macvtap entered promiscuous mode [ 376.247204][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 376.254948][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 376.262499][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 376.270921][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 376.279483][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 376.297088][ T690] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 376.305583][ T690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 376.314026][ T690] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 376.322425][ T690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 376.328304][ T470] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 376.552348][T11055] F2FS-fs (loop4): invalid crc value [ 376.568389][T11055] F2FS-fs (loop4): Found nat_bits in checkpoint [ 376.617675][T11055] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 376.697539][T10348] attempt to access beyond end of device [ 376.697539][T10348] loop0: rw=524288, want=45072, limit=40427 [ 376.709088][T10348] attempt to access beyond end of device [ 376.709088][T10348] loop0: rw=0, want=45072, limit=40427 [ 376.728173][ T470] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.748097][ T470] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.757661][ T470] usb 3-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 376.786711][ T470] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.936745][ T470] usb 3-1: config 0 descriptor?? [ 376.985169][ T407] device bridge_slave_1 left promiscuous mode [ 377.006213][ T407] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.013653][ T407] device bridge_slave_0 left promiscuous mode [ 377.020621][ T24] audit: type=1400 audit(1723565800.169:915): avc: denied { read } for pid=78 comm="acpid" name="mouse9" dev="devtmpfs" ino=1507 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 377.027262][ T7] attempt to access beyond end of device [ 377.027262][ T7] loop0: rw=2049, want=45120, limit=40427 [ 377.042958][ T24] audit: type=1400 audit(1723565800.169:916): avc: denied { open } for pid=78 comm="acpid" path="/dev/input/mouse9" dev="devtmpfs" ino=1507 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 377.054633][ T407] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.075923][ T24] audit: type=1400 audit(1723565800.169:917): avc: denied { ioctl } for pid=78 comm="acpid" path="/dev/input/mouse9" dev="devtmpfs" ino=1507 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 377.110190][ T407] device veth1_macvtap left promiscuous mode [ 377.116012][ T407] device veth0_vlan left promiscuous mode [ 377.148595][T11069] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11 sclass=netlink_route_socket pid=11069 comm=syz.3.3586 [ 377.171506][T11071] 9pnet: Insufficient options for proto=fd [ 377.235224][T11014] attempt to access beyond end of device [ 377.235224][T11014] loop4: rw=524288, want=45072, limit=40427 [ 377.248591][T11014] attempt to access beyond end of device [ 377.248591][T11014] loop4: rw=0, want=45072, limit=40427 [ 377.297555][ T7] attempt to access beyond end of device [ 377.297555][ T7] loop4: rw=2049, want=45120, limit=40427 [ 377.491791][ T470] samsung 0003:0419:0001.0069: unknown main item tag 0x0 [ 377.506802][ T470] samsung 0003:0419:0001.0069: unknown main item tag 0x0 [ 377.518202][ T470] samsung 0003:0419:0001.0069: unknown main item tag 0x0 [ 377.525340][ T470] samsung 0003:0419:0001.0069: unknown main item tag 0x0 [ 377.532358][ T470] samsung 0003:0419:0001.0069: unknown main item tag 0x0 [ 377.539709][ T470] samsung 0003:0419:0001.0069: unknown main item tag 0x0 [ 377.546830][ T470] samsung 0003:0419:0001.0069: unknown main item tag 0x0 [ 377.554696][ T470] samsung 0003:0419:0001.0069: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.2-1/input0 [ 377.601103][T11077] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 377.608133][ T9175] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 377.628309][T11077] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 377.660349][T11077] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 377.678343][T11077] System zones: 0-2, 18-18, 34-34 [ 377.691683][ T337] usb 3-1: USB disconnect, device number 40 [ 377.730999][T11077] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1047: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 377.786321][T11077] EXT4-fs (loop3): 1 truncate cleaned up [ 377.806160][T11077] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 377.855444][T11081] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.863066][T11081] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.871441][T11081] device bridge_slave_0 entered promiscuous mode [ 377.878384][T11081] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.885253][T11081] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.892607][T11081] device bridge_slave_1 entered promiscuous mode [ 377.953631][T11086] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.960670][T11086] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.967904][T11086] device bridge_slave_0 entered promiscuous mode [ 377.974796][T11086] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.981852][ T9175] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.992789][T11086] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.000343][T11086] device bridge_slave_1 entered promiscuous mode [ 378.011685][T11081] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.018666][T11081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.025819][T11081] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.032636][T11081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.037060][ T9175] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 378.049340][ T9175] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 378.058236][ T9175] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.066673][ T9175] usb 2-1: config 0 descriptor?? [ 378.118873][T11086] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.126106][T11086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.133569][T11086] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.139841][T11091] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 378.140814][T11086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.150182][T11091] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038 (0x7fffffff) [ 378.168109][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 378.176355][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 378.187584][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 378.196914][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 378.217469][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 378.236280][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.251311][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.291227][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 378.299311][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 378.307369][ T470] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.314447][ T470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.323890][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 378.332972][ T470] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.339841][ T470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.416542][T11081] device veth0_vlan entered promiscuous mode [ 378.479648][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 378.487907][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 378.496683][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 378.504808][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 378.512172][T11102] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 378.520030][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 378.525866][T11102] EXT4-fs error (device loop2): __ext4_iget:4958: inode #11: block 1: comm syz.2.3598: invalid block [ 378.528195][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 378.539087][T11102] EXT4-fs (loop2): Remounting filesystem read-only [ 378.546343][ T9175] hid (null): bogus close delimiter [ 378.552778][T11102] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.3598: couldn't read orphan inode 11 (err -117) [ 378.557885][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 378.569818][T11102] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,errors=continue,max_dir_size_kb=0x0000000000000009,data_err=abort,errors=remount-ro,noinit_itable,mblk_io_submit,i_version,acl, [ 378.578941][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 378.610125][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 378.617857][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 378.656988][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 378.676126][ T470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 378.686569][ T407] device bridge_slave_1 left promiscuous mode [ 378.692935][ T407] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.700139][ T407] device bridge_slave_0 left promiscuous mode [ 378.706078][ T407] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.714146][ T407] device bridge_slave_1 left promiscuous mode [ 378.720406][ T407] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.750140][ T407] device bridge_slave_0 left promiscuous mode [ 378.756676][ T407] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.764176][ T9175] usb 2-1: string descriptor 0 read error: -22 [ 378.798986][ T407] device veth1_macvtap left promiscuous mode [ 378.846983][ T407] device veth0_vlan left promiscuous mode [ 378.853254][ T407] device veth1_macvtap left promiscuous mode [ 378.860135][ T407] device veth0_vlan left promiscuous mode [ 378.891428][ T24] audit: type=1400 audit(1723565802.029:918): avc: denied { link } for pid=11101 comm="syz.2.3598" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 379.111592][T11081] device veth1_macvtap entered promiscuous mode [ 379.125168][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 379.132927][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 379.141223][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 379.149394][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 379.157374][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 379.165939][ T690] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 379.173194][ T690] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 379.182162][T11086] device veth0_vlan entered promiscuous mode [ 379.190738][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 379.198977][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 379.208385][ T9175] uclogic 0003:256C:006D.006A: failed retrieving string descriptor #100: -71 [ 379.213429][T11086] device veth1_macvtap entered promiscuous mode [ 379.223790][ T9175] uclogic 0003:256C:006D.006A: failed retrieving pen parameters: -71 [ 379.232806][ T9175] uclogic 0003:256C:006D.006A: failed probing pen v1 parameters: -71 [ 379.232879][ T690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 379.241099][ T9175] uclogic 0003:256C:006D.006A: failed probing parameters: -71 [ 379.241169][ T9175] uclogic: probe of 0003:256C:006D.006A failed with error -71 [ 379.259201][ T9175] usb 2-1: USB disconnect, device number 36 [ 379.265456][ T690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 379.277587][ T690] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 379.285564][ T690] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 379.293842][ T690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 379.345664][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 379.354033][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 379.362346][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 379.370721][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 379.382142][T11112] 9pnet: Insufficient options for proto=fd [ 379.488234][ T690] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 379.783167][T11120] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 379.825107][T11117] EXT4-fs error (device loop0): ext4_find_dest_de:2076: inode #2: block 16: comm syz.0.3594: bad entry in directory: rec_len % 4 != 0 - offset=60, inode=15, rec_len=14, size=1024 fake=0 [ 379.834168][T11116] F2FS-fs (loop2): invalid crc value [ 379.845177][ T24] audit: type=1400 audit(1723565802.999:919): avc: denied { shutdown } for pid=11122 comm="syz.4.3603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 379.856542][T11116] F2FS-fs (loop2): Found nat_bits in checkpoint [ 379.875343][T11117] EXT4-fs error (device loop0): ext4_find_dest_de:2076: inode #2: block 16: comm syz.0.3594: bad entry in directory: rec_len % 4 != 0 - offset=60, inode=15, rec_len=14, size=1024 fake=0 [ 379.905342][T11116] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 379.968238][ T690] usb 4-1: Using ep0 maxpacket: 32 [ 380.278492][ T3404] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 380.328723][ T690] usb 4-1: config 0 has an invalid interface number: 101 but max is 0 [ 380.337034][ T690] usb 4-1: config 0 has no interface number 0 [ 380.343355][ T690] usb 4-1: config 0 interface 101 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 380.351736][T10860] attempt to access beyond end of device [ 380.351736][T10860] loop2: rw=524288, want=45072, limit=40427 [ 380.353666][ T690] usb 4-1: config 0 interface 101 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 380.365007][T10860] attempt to access beyond end of device [ 380.365007][T10860] loop2: rw=0, want=45072, limit=40427 [ 380.376463][ T690] usb 4-1: config 0 interface 101 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 380.396024][ T690] usb 4-1: config 0 interface 101 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 380.406932][ T690] usb 4-1: config 0 interface 101 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 380.409357][ T407] attempt to access beyond end of device [ 380.409357][ T407] loop2: rw=2049, want=45120, limit=40427 [ 380.518109][ T3404] usb 5-1: Using ep0 maxpacket: 8 [ 380.578225][ T470] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 380.588338][ T690] usb 4-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 380.597890][ T690] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.606168][ T690] usb 4-1: Product: syz [ 380.610503][ T690] usb 4-1: Manufacturer: syz [ 380.615441][ T690] usb 4-1: SerialNumber: syz [ 380.623377][ T690] usb 4-1: config 0 descriptor?? [ 380.638558][ T3404] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 380.647801][ T3404] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.668809][ T3404] usb 5-1: config 0 descriptor?? [ 380.679915][ T690] ums-jumpshot 4-1:0.101: USB Mass Storage device detected [ 380.745720][ T690] ums-jumpshot 4-1:0.101: Quirks match for vid 05dc pid 0001: 2 [ 380.763402][T11145] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.770470][T11145] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.777952][T11145] device bridge_slave_0 entered promiscuous mode [ 380.787274][T11145] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.794625][T11145] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.802764][T11145] device bridge_slave_1 entered promiscuous mode [ 380.865865][T11145] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.873231][T11145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.880698][T11145] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.887810][T11145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.947893][ T5] usb 4-1: USB disconnect, device number 41 [ 380.963491][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 380.971348][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 380.979596][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 380.988790][ T3404] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 381.006179][T11152] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=34 sclass=netlink_tcpdiag_socket pid=11152 comm=syz.1.3611 [ 381.020225][ T690] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 381.028860][T11152] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3611'. [ 381.040261][ T3405] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 381.060072][T11145] device veth0_vlan entered promiscuous mode [ 381.066429][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 381.075435][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 381.083880][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 381.091480][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 381.106880][T11145] device veth1_macvtap entered promiscuous mode [ 381.118724][ T690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 381.135476][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 381.145112][ T337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 381.188246][ T470] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.199227][ T3404] asix 5-1:0.0 (unnamed net_device) (uninitialized): Error reading PHYID register: 01 [ 381.209136][ T470] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.220134][ T407] device bridge_slave_1 left promiscuous mode [ 381.221677][ T470] usb 1-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 381.235293][ T407] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.235711][ T470] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.253985][ T407] device bridge_slave_0 left promiscuous mode [ 381.255098][ T470] usb 1-1: config 0 descriptor?? [ 381.265499][ T407] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.273765][ T407] device veth1_macvtap left promiscuous mode [ 381.280155][ T407] device veth0_vlan left promiscuous mode [ 381.282064][T11156] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 381.294739][T11156] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038 (0x7fffffff) [ 381.399829][T11123] udc-core: couldn't find an available UDC or it's busy [ 381.406649][T11123] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 381.408315][ T3404] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 381.828475][ T470] usbhid 1-1:0.0: can't add hid device: -71 [ 381.835449][ T470] usbhid: probe of 1-1:0.0 failed with error -71 [ 381.848128][ T470] usb 1-1: USB disconnect, device number 29 [ 381.929450][T11123] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3603'. [ 381.944136][T11168] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 381.956719][T11167] EXT4-fs error (device loop3): ext4_find_dest_de:2076: inode #2: block 16: comm syz.3.3614: bad entry in directory: rec_len % 4 != 0 - offset=60, inode=15, rec_len=14, size=1024 fake=0 [ 381.975758][T11167] EXT4-fs error (device loop3): ext4_find_dest_de:2076: inode #2: block 16: comm syz.3.3614: bad entry in directory: rec_len % 4 != 0 - offset=60, inode=15, rec_len=14, size=1024 fake=0 [ 382.065015][T11176] FAULT_INJECTION: forcing a failure. [ 382.065015][T11176] name failslab, interval 1, probability 0, space 0, times 0 [ 382.077713][T11176] CPU: 0 PID: 11176 Comm: syz.2.3616 Not tainted 5.10.223-syzkaller-01561-g0890c03b8b7d #0 [ 382.087500][T11176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 382.097542][T11176] Call Trace: [ 382.100841][T11176] dump_stack_lvl+0x1e2/0x24b [ 382.105337][T11176] ? bfq_pos_tree_add_move+0x43b/0x43b [ 382.110634][T11176] dump_stack+0x15/0x17 [ 382.114623][T11176] should_fail+0x3c6/0x510 [ 382.119093][T11176] ? rtmsg_ifinfo_build_skb+0x7f/0x180 [ 382.124327][T11176] __should_failslab+0xa4/0xe0 [ 382.128929][T11176] should_failslab+0x9/0x20 [ 382.133264][T11176] __kmalloc_track_caller+0x5f/0x320 [ 382.138384][T11176] ? kmem_cache_alloc+0x168/0x2e0 [ 382.143341][T11176] ? __alloc_skb+0x80/0x510 [ 382.148291][T11176] ? rtmsg_ifinfo_build_skb+0x7f/0x180 [ 382.153580][T11176] __alloc_skb+0xbc/0x510 [ 382.157761][T11176] ? if_nlmsg_size+0x59c/0x5f0 [ 382.162436][T11176] rtmsg_ifinfo_build_skb+0x7f/0x180 [ 382.167550][T11176] rtnetlink_event+0xf3/0x1b0 [ 382.172063][T11176] raw_notifier_call_chain+0x8c/0xf0 [ 382.177182][T11176] dev_set_mac_address+0x325/0x470 [ 382.182126][T11176] ? dev_pre_changeaddr_notify+0x220/0x220 [ 382.187769][T11176] dev_set_mac_address_user+0x31/0x50 [ 382.192986][T11176] dev_ifsioc+0x657/0xae0 [ 382.197156][T11176] ? dev_ioctl+0xb40/0xb40 [ 382.201398][T11176] ? dev_get_by_name_rcu+0xc5/0xf0 [ 382.206354][T11176] dev_ioctl+0x526/0xb40 [ 382.210422][T11176] sock_do_ioctl+0x295/0x3a0 [ 382.214845][T11176] ? sock_show_fdinfo+0xa0/0xa0 [ 382.219536][T11176] ? kernel_write+0x3d0/0x3d0 [ 382.224049][T11176] ? selinux_file_ioctl+0x3cc/0x540 [ 382.229085][T11176] sock_ioctl+0x4a6/0x760 [ 382.233247][T11176] ? sock_poll+0x340/0x340 [ 382.237501][T11176] ? security_file_ioctl+0x84/0xb0 [ 382.242545][T11176] ? sock_poll+0x340/0x340 [ 382.246788][T11176] __se_sys_ioctl+0x114/0x190 [ 382.251393][T11176] __x64_sys_ioctl+0x7b/0x90 [ 382.255815][T11176] do_syscall_64+0x34/0x70 [ 382.260071][T11176] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 382.265794][T11176] RIP: 0033:0x7f826592d9f9 [ 382.270050][T11176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 382.289579][T11176] RSP: 002b:00007f82645ab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 382.297906][T11176] RAX: ffffffffffffffda RBX: 00007f8265ac9f80 RCX: 00007f826592d9f9 [ 382.305718][T11176] RDX: 0000000020000000 RSI: 0000000000008924 RDI: 0000000000000007 [ 382.313545][T11176] RBP: 00007f82645ab090 R08: 0000000000000000 R09: 0000000000000000 [ 382.321358][T11176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.329168][T11176] R13: 0000000000000000 R14: 00007f8265ac9f80 R15: 00007fff060e3348 [ 382.337781][ T3404] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 382.347611][ T3404] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 382.369174][ T3404] asix: probe of 5-1:0.0 failed with error -71 [ 382.369289][T11178] syz.0.3617[11178] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 382.378311][T11178] syz.0.3617[11178] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 382.385932][ T3404] usb 5-1: USB disconnect, device number 32 [ 382.393997][T11180] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=34 sclass=netlink_tcpdiag_socket pid=11180 comm=syz.2.3618 [ 382.431915][T11180] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3618'. [ 382.530032][ T5] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 382.689052][T11196] fuse: blksize only supported for fuseblk [ 382.704804][T11198] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3624'. [ 382.769687][T11199] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3623'. [ 382.779668][T11198] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=34 sclass=netlink_tcpdiag_socket pid=11198 comm=syz.3.3624 [ 382.801603][T11198] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3624'. [ 382.908191][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.919101][ T5] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.929319][ T5] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 382.938225][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.947001][ T5] usb 2-1: config 0 descriptor?? [ 382.962995][T11203] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 382.972319][T11203] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038 (0x7fffffff) [ 383.379146][T11212] EXT4-fs (loop4): orphan cleanup on readonly fs [ 383.385740][T11212] EXT4-fs error (device loop4): ext4_quota_enable:6423: comm syz.4.3625: inode #65535: comm syz.4.3625: iget: illegal inode # [ 383.399004][T11212] EXT4-fs error (device loop4): ext4_quota_enable:6426: comm syz.4.3625: Bad quota inode: 65535, type: 2 [ 383.410455][T11212] EXT4-fs warning (device loop4): ext4_enable_quotas:6467: Failed to enable quota tracking (type=2, err=-117, ino=65535). Please run e2fsck to fix. [ 383.425442][T11212] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 383.432111][T11212] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 383.466411][T11205] EXT4-fs error (device loop4): ext4_lookup:1831: inode #2: comm syz.4.3625: deleted inode referenced: 12 [ 383.598503][ T5] hid (null): bogus close delimiter [ 383.605897][T11219] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 383.613662][T11219] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 383.622553][T11219] F2FS-fs (loop0): invalid crc value [ 383.629762][T11219] F2FS-fs (loop0): Found nat_bits in checkpoint [ 383.653469][T11219] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 383.660423][T11219] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 383.678104][ T337] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 383.690165][ T407] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 383.706761][ T407] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 383.808203][ T5] usb 2-1: string descriptor 0 read error: -22 [ 383.920426][T11227] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 383.922247][T11229] EXT4-fs (loop0): 1 orphan inode deleted [ 383.930102][T11227] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038 (0x7fffffff) [ 383.935063][T11229] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota, [ 383.963525][T11229] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038 (0x7fffffff) [ 384.374326][ T337] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.409115][ T337] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 384.420702][ T5] uclogic 0003:256C:006D.006B: failed retrieving string descriptor #100: -71 [ 384.429513][ T337] usb 3-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 384.439110][ T5] uclogic 0003:256C:006D.006B: failed retrieving pen parameters: -71 [ 384.447064][ T5] uclogic 0003:256C:006D.006B: failed probing pen v1 parameters: -71 [ 384.455453][ T337] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.463598][ T5] uclogic 0003:256C:006D.006B: failed probing parameters: -71 [ 384.471606][ T5] uclogic: probe of 0003:256C:006D.006B failed with error -71 [ 384.479593][ T337] usb 3-1: config 0 descriptor?? [ 384.493885][ T5] usb 2-1: USB disconnect, device number 37 [ 384.730924][T11245] EXT4-fs (loop3): Ignoring removed bh option [ 384.769944][T11251] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 384.782725][T11250] EXT4-fs error (device loop0): ext4_find_dest_de:2076: inode #2: block 16: comm syz.0.3633: bad entry in directory: rec_len % 4 != 0 - offset=60, inode=15, rec_len=14, size=1024 fake=0 [ 384.788424][T11245] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 384.810993][T11245] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 384.820894][T11250] EXT4-fs error (device loop0): ext4_find_dest_de:2076: inode #2: block 16: comm syz.0.3633: bad entry in directory: rec_len % 4 != 0 - offset=60, inode=15, rec_len=14, size=1024 fake=0 [ 384.849039][T11245] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 384.856780][T11245] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 384.864689][T11245] System zones: 0-1, 15-15, 18-18, 34-34 [ 384.870468][T11245] EXT4-fs (loop3): orphan cleanup on readonly fs [ 384.876625][T11245] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 384.886277][T11245] EXT4-fs warning (device loop3): ext4_enable_quotas:6467: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 384.901087][T11245] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 384.907723][T11245] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.3630: bad orphan inode 16 [ 384.918158][T11245] ext4_test_bit(bit=15, block=18) = 1 [ 384.923382][T11245] is_bad_inode(inode)=0 [ 384.927350][T11245] NEXT_ORPHAN(inode)=0 [ 384.931544][T11245] max_ino=32 [ 384.934560][T11245] i_nlink=2 [ 384.937628][T11245] EXT4-fs (loop3): mounted filesystem without journal. Opts: bh,nobarrier,jqfmt=vfsold,jqfmt=vfsv1,,errors=continue [ 384.950013][ T24] audit: type=1326 audit(1723565808.099:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11259 comm="syz.1.3635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124b1379f9 code=0x7ffc0000 [ 384.989156][T11264] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3636'. [ 385.000742][ T24] audit: type=1326 audit(1723565808.099:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11259 comm="syz.1.3635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124b1379f9 code=0x7ffc0000 [ 385.032934][T11264] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=34 sclass=netlink_tcpdiag_socket pid=11264 comm=syz.1.3636 [ 385.064293][T11264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3636'. [ 385.075010][ T24] audit: type=1326 audit(1723565808.099:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11259 comm="syz.1.3635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f124b1379f9 code=0x7ffc0000 [ 385.103653][ T24] audit: type=1326 audit(1723565808.099:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11259 comm="syz.1.3635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124b1379f9 code=0x7ffc0000 [ 385.118933][ T337] usbhid 3-1:0.0: can't add hid device: -71 [ 385.127076][ T24] audit: type=1326 audit(1723565808.099:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11259 comm="syz.1.3635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f124b1379f9 code=0x7ffc0000 [ 385.143083][ T337] usbhid: probe of 3-1:0.0 failed with error -71 [ 385.156143][ T24] audit: type=1326 audit(1723565808.099:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11259 comm="syz.1.3635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124b1379f9 code=0x7ffc0000 [ 385.183595][ T337] usb 3-1: USB disconnect, device number 41 [ 385.190589][ T24] audit: type=1326 audit(1723565808.099:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11259 comm="syz.1.3635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f124b1379f9 code=0x7ffc0000 [ 385.217303][ T24] audit: type=1326 audit(1723565808.099:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11259 comm="syz.1.3635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f124b1379f9 code=0x7ffc0000 [ 385.240939][ T24] audit: type=1326 audit(1723565808.099:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11259 comm="syz.1.3635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f124b1379f9 code=0x7ffc0000 [ 385.315490][T11270] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 385.324950][T11270] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038 (0x7fffffff) [ 385.454275][T11279] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3638'. [ 385.778570][T11276] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 385.793557][T11276] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 385.808522][T11276] F2FS-fs (loop0): invalid crc value [ 385.815377][T11282] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 385.824755][T11282] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038 (0x7fffffff) [ 385.835337][T11276] F2FS-fs (loop0): Found nat_bits in checkpoint [ 385.919977][T11286] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 385.929782][T11286] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038 (0x7fffffff) [ 385.931450][T11276] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 385.950782][T11276] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 386.194082][T10081] EXT4-fs error (device loop3): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 386.245353][ T407] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 386.256204][ T407] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 386.294094][T11302] 9pnet: Insufficient options for proto=fd [ 386.475814][T11307] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue [ 386.510159][T11306] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 386.519044][T11306] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038 (0x7fffffff) [ 386.769773][ T411] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 386.838108][ T470] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 386.906181][T11328] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3649'. [ 387.218188][ T411] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.229186][ T411] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.248118][ T470] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.248126][ T337] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 387.266473][ T411] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 387.275612][ T411] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.283595][ T470] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.293770][ T411] usb 2-1: config 0 descriptor?? [ 387.298660][ T470] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 387.307506][ T470] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.318968][ T470] usb 1-1: config 0 descriptor?? [ 387.528189][ T337] usb 4-1: too many configurations: 249, using maximum allowed: 8 [ 387.588259][ T336] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 387.599921][T11333] loop4: p3 < > p4 < > [ 387.603939][T11333] loop4: partition table partially beyond EOD, truncated [ 387.611255][T11333] loop4: p3 start 4284289 is beyond EOD, truncated [ 387.648241][ T337] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 387.655787][ T337] usb 4-1: can't read configurations, error -61 [ 387.778640][ T411] hid (null): bogus close delimiter [ 387.808681][ T337] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 387.839720][T11340] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 387.848759][T11340] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038 (0x7fffffff) [ 387.968164][ T336] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.979759][ T336] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.989506][ T336] usb 3-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 388.000832][ T336] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.012146][ T336] usb 3-1: config 0 descriptor?? [ 388.032957][ T411] usb 2-1: string descriptor 0 read error: -22 [ 388.039017][ T470] usb 1-1: language id specifier not provided by device, defaulting to English [ 388.098214][ T337] usb 4-1: too many configurations: 249, using maximum allowed: 8 [ 388.218146][ T337] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 388.225584][ T337] usb 4-1: can't read configurations, error -61 [ 388.231882][ T337] usb usb4-port1: attempt power cycle [ 388.429180][ T470] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.006C/input/input82 [ 388.440904][ T411] uclogic 0003:256C:006D.006D: failed retrieving string descriptor #100: -71 [ 388.449536][ T411] uclogic 0003:256C:006D.006D: failed retrieving pen parameters: -71 [ 388.457786][ T411] uclogic 0003:256C:006D.006D: failed probing pen v1 parameters: -71 [ 388.466754][ T470] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.006C/input/input83 [ 388.478955][ T411] uclogic 0003:256C:006D.006D: failed probing parameters: -71 [ 388.486803][ T411] uclogic: probe of 0003:256C:006D.006D failed with error -71 [ 388.494297][ T470] uclogic 0003:256C:006D.006C: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 388.507945][ T411] usb 2-1: USB disconnect, device number 38 [ 388.538280][ T336] usbhid 3-1:0.0: can't add hid device: -71 [ 388.544088][ T336] usbhid: probe of 3-1:0.0 failed with error -71 [ 388.551377][ T336] usb 3-1: USB disconnect, device number 42 [ 388.629775][ T5] usb 1-1: USB disconnect, device number 30 [ 388.648120][ T337] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 388.732557][T11351] 9pnet: Insufficient options for proto=fd [ 388.805839][ T337] usb 4-1: too many configurations: 249, using maximum allowed: 8 [ 388.948167][ T337] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 388.955826][ T337] usb 4-1: can't read configurations, error -61 [ 388.979983][T11357] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 388.989005][T11357] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038 (0x7fffffff) [ 389.005217][T11362] EXT4-fs (loop2): Mount option "nouser_xattr" will be removed by 3.5 [ 389.005217][T11362] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 389.005217][T11362] [ 389.025026][T11362] EXT4-fs (loop2): Test dummy encryption mode enabled [ 389.031732][T11362] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 389.040738][T11362] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #17: comm syz.2.3660: iget: bogus i_mode (0) [ 389.052254][T11362] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.3660: couldn't read orphan inode 17 (err -117) [ 389.065432][T11362] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,nouser_xattr,barrier,barrier,test_dummy_encryption,nomblk_io_submit,,errors=continue [ 389.098122][ T53] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 389.118150][ T337] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 389.338200][ T53] usb 5-1: Using ep0 maxpacket: 16 [ 389.469948][T11377] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 389.479147][T11377] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038 (0x7fffffff) [ 389.489169][ T337] usb 4-1: too many configurations: 249, using maximum allowed: 8 [ 389.498299][ T53] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 389.507932][ T53] usb 5-1: can't read configurations, error -61 [ 389.628151][ T337] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 389.645724][ T337] usb 4-1: can't read configurations, error -61 [ 389.652274][ T337] usb usb4-port1: unable to enumerate USB device [ 389.668103][ T53] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 389.778867][T11384] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3664'. [ 389.791099][T11384] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=34 sclass=netlink_tcpdiag_socket pid=11384 comm=syz.3.3664 [ 389.805073][T11384] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3664'. [ 389.849134][T11386] 9p: Unknown uid 18446744073709551615 [ 389.892378][T11391] 9pnet: Insufficient options for proto=fd [ 389.938100][ T53] usb 5-1: Using ep0 maxpacket: 16 [ 389.958759][T11395] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 389.967531][T11395] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038 (0x7fffffff) [ 390.175099][ T53] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 390.207587][ T53] usb 5-1: can't read configurations, error -61 [ 390.302745][ T53] usb usb5-port1: attempt power cycle [ 390.360155][T11145] EXT4-fs error (device loop2): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 390.579765][T11411] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 390.648155][ T470] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 390.744879][T11406] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 390.754148][ T53] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 390.754287][T11406] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038 (0x7fffffff) [ 390.819899][T10584] EXT4-fs error (device loop1): ext4_mb_generate_buddy:808: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 390.878338][ T53] usb 5-1: Using ep0 maxpacket: 16 SYZFAIL: bad allocate request allocated=0 size=1328160339/1328160344 (errno 11: Resource temporarily unavailable) [ 390.911837][ T24] kauditd_printk_skb: 7 callbacks suppressed [ 390.911850][ T24] audit: type=1400 audit(1723565814.049:936): avc: denied { write } for pid=272 comm="syz-executor" path="pipe:[13351]" dev="pipefs" ino=13351 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 391.108221][ T470] usb 1-1: device descriptor read/all, error -71 [ 391.114445][ T53] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 391.122662][ T53] usb 5-1: can't read configurations, error -71 [ 391.838649][ T7] device bridge_slave_1 left promiscuous mode [ 391.844699][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.852106][ T7] device bridge_slave_0 left promiscuous mode [ 391.858077][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.865452][ T7] device veth1_macvtap left promiscuous mode [ 391.871305][ T7] device veth0_vlan left promiscuous mode [ 392.638502][ T5] Bluetooth: hci0: command 0x1003 tx timeout [ 392.644401][ T40] Bluetooth: hci0: sending frame failed (-49) [ 393.118962][ T7] device bridge_slave_1 left promiscuous mode [ 393.125028][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.132349][ T7] device bridge_slave_0 left promiscuous mode [ 393.138759][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.146312][ T7] device bridge_slave_1 left promiscuous mode [ 393.152400][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.159680][ T7] device bridge_slave_0 left promiscuous mode [ 393.165683][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.173400][ T7] device bridge_slave_1 left promiscuous mode [ 393.179393][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.186468][ T7] device bridge_slave_0 left promiscuous mode [ 393.192538][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.200308][ T7] device veth1_macvtap left promiscuous mode [ 393.206104][ T7] device veth0_vlan left promiscuous mode [ 393.212012][ T7] device veth1_macvtap left promiscuous mode [ 393.217814][ T7] device veth0_vlan left promiscuous mode [ 393.223659][ T7] device veth1_macvtap left promiscuous mode [ 393.229463][ T7] device veth0_vlan left promiscuous mode [ 394.718184][ T5] Bluetooth: hci0: command 0x1001 tx timeout [ 394.724678][ T40] Bluetooth: hci0: sending frame failed (-49) [ 396.798305][ T5] Bluetooth: hci0: command 0x1009 tx timeout