last executing test programs: 10.643594547s ago: executing program 0 (id=1016): r0 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010008020d00000904010102020d0000090582020002000000090503020002000000bc94ef907df247d46eaa274c8f51e61fb4cfc6664d5c9315a37e6e4eae4cdd654f17856753d01b00310244243631e819a05df18c7f"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000007c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0xc7, 0xe64, 0x0, 0x0, 0x0, 0x0, 0x401}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000080)='./file2\x00', 0x100080d, &(0x7f0000000a80)=ANY=[@ANYRES32=0x0, @ANYBLOB="de60d8dc536d5258d6a94ad55604a34dc65b7ef79c1a1754e4cadfe21823d0c10a15d53dba5f2d2bc67ef2477d0412534e2f5151c7a60c8f5d6c634d173fecb5de9207a7090d302229cd3f210d34e4584c824c9dda7d35e0d7a06cd667bf9cced32944ca27d8a80e62cf6310db869ee250fb65467e3b11ad5042d600c6b8f18454d57df621e578fef0a3a93c14609231", @ANYRES8, @ANYRESDEC, @ANYBLOB="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", @ANYRESOCT, @ANYRESOCT=0x0, @ANYRES32, @ANYRESDEC, @ANYRESOCT, @ANYRES64, @ANYRES8, @ANYBLOB="3dea3f"], 0xff, 0x1fc, &(0x7f0000002c80)="$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") stat(&(0x7f0000005280)='./file0\x00', 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x11}}}, 0x1e) connect$pptp(r2, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x3, 0x3ff, 0xd7d6, 0x8, 0xffffffffffffffff, 0xf, '\x00', r3, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x4}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0}, 0x90) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) writev(r6, &(0x7f0000000680)=[{&(0x7f00000002c0)="2614", 0xf00}], 0x1) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000000)={0x1, 0x40, 0xeb, 0x101, 0x1a, "3e450f5726b4412a3327c17f177f7b72f19409"}) 10.133665627s ago: executing program 2 (id=1021): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000b40), 0x2b842ac, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x400002d, 0x2, 0x0) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa1008a, &(0x7f00000003c0)=ANY=[], 0x21, 0x150f, &(0x7f0000000480)="$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") 9.153194764s ago: executing program 2 (id=1025): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x202, 0x0) write$tun(r0, &(0x7f0000000740)=ANY=[], 0x129) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000b00)={0x0, 0x0}, 0x10) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2e00000004000000000000000000000003000000000000008100"/46], 0x2e) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x80000000, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000000026001811", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) getsockopt$XDP_STATISTICS(r6, 0x11b, 0x7, &(0x7f0000000240), &(0x7f0000000300)=0x30) 8.212437107s ago: executing program 2 (id=1029): r0 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010008020d00000904010102020d0000090582020002000000090503020002000000bc94ef907df247d46eaa274c8f51e61fb4cfc6664d5c9315a37e6e4eae4cdd654f17856753d01b00310244243631e819a05df18c7f"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000007c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0xc7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x401}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000080)='./file2\x00', 0x100080d, &(0x7f0000000a80)=ANY=[@ANYRES32=0x0, @ANYBLOB="de60d8dc536d5258d6a94ad55604a34dc65b7ef79c1a1754e4cadfe21823d0c10a15d53dba5f2d2bc67ef2477d0412534e2f5151c7a60c8f5d6c634d173fecb5de9207a7090d302229cd3f210d34e4584c824c9dda7d35e0d7a06cd667bf9cced32944ca27d8a80e62cf6310db869ee250fb65467e3b11ad5042d600c6b8f18454d57df621e578fef0a3a93c14609231", @ANYRES8, @ANYRESDEC, @ANYBLOB="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", @ANYRESOCT, @ANYRESOCT=0x0, @ANYRES32, @ANYRESDEC, @ANYRESOCT, @ANYRES64, @ANYRES8, @ANYBLOB="3dea3f"], 0xff, 0x1fc, &(0x7f0000002c80)="$eJzsmb+LE0EUx78zu5c9DxFsLGwsPPBEb39F5ZorThArQYiilsFsQnCTSLJCEhANNjaWIoKt/4CFRSoLOztbLVQQLEwpWAgjMztuJokbExQN+D5wc995M/PmzbD7TbEgCOK/5cP7L+8enN25dBLAfmzC0fFP1ngOB7Le28e3TjzcPffk2ZunL5sHbg+n860DEGLx/WXiF3sWEtUTQtyZHN+UzaPJ2GVwHNf6Chhc3JXym1Ck8QgM15SygUwDrX1axJF7vRVXqvU48mUTyCaUTdHcS64eDRgq2dmEYMZ4p9e/UY7jqD0t1sSPfWaGlhXz7k/Vt8exq/uyPg7g6v17A9l3ddwHT+8SQACOQOsiGEpa78CB67rjKzHOf9ge57cWOf+/Euxr+hjIyMHtP5hZXsAqHPDvC/kC/XqycFag1IUEm47IFzqLHBoNX82u+rgqxecLhhzHUcZlPr3n9ZzXG3F84Tc2LegdZ4cs05+YDRwz/MmGnfmHlzRuep1ef7veKNeiWtQMw+IZ/5Tvnw69at2B7yk7muN/68qfNoz8a+YE4welwArolpOkHXSBpB1k/TBtDcctPW99Vmu48j+OraNpDnnJ6tjOz+th+o+r/1JtWbnFEwRBEARBEARBEARBEARBLMURMKSfQNSHKpFDeFHN/h4AAP//g4dqzQ==") stat(&(0x7f0000005280)='./file0\x00', 0x0) dup(0xffffffffffffffff) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000071122700000000009500c9df00000000de54efd337d35285c161c5277edb8ebb15b58f91a5ee2dfc464680aaeda509f80db720be849cfad349052a513d731f3e1ab1616de782ebeab3fad78b022a9488de94c51041787406824c841f2e132d053e63230d79544561215df07865865ca3b1d4cd0ca39c621b8bcb16c583a7d45d18615d25d7189e29edf825cc4555d6357089204333610ca3ad8e0bd555a1a819abd1c3df59e861ad355c8b4c483a06d01b"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x11}}}, 0x1e) connect$pptp(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000380)={0x14, &(0x7f00000006c0)={0x40, 0xd, 0xe7, {0xe7, 0x6, "173f3627f5404b6e6b6c7a5fe4db5a83630cce986a9b1b8a213f109c098e8fa8145a0c4d58bc15a92772afcb3cfa4d7e2a7522c1533c1654ae91d1ed9de1c4490488ed11953d195bfb6fd8238a0181bbcfe27e1ecaa79793ff27645914aaafa1312a1815193dcd7af2a7e1384c1c2b6a67c06d1bfd5e0591667a0e0cde45d7c90c09c32d950001ec07e82416c5f44e5e3746131bdd4e6fc9fcf839363c206f78edd1af9a3f17023f8844259347671b4826d8ab8d8fda1b2f6e5a420cf6744f519e6dbc730ec5c9d4f667f6b22dd1f256194a5f8a1e65342d2a3c38064047d914f2a96d173e"}}, &(0x7f0000000340)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000009c0)={0x44, &(0x7f0000000840)={0x20, 0x15, 0x98, "84bc90b51cd0cb9125a6e7ba8536532aa552e796d0962066dee140dc9098b68befdd1267ba1f3eb407d3414e363973a826bb58e6efa2124724fd15d9afcd8dc6ac33773032108a40e2ffca9b1cf6684a798b15c0a0e93352db7d01990f426d36904824d54395d1de1f39c411d16c7ff82b9709c5fa556c756296de1b1eb5c358f36ef7a5742a2f18151234126a99b7bdf4488555dff410dd"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000500)={0x20, 0x80, 0x1c, {0x7, 0x8a, 0x2, 0x3, 0x5, 0x1, 0x80, 0xa455, 0x400, 0xb6, 0xffff, 0x8}}, &(0x7f0000000640)={0x20, 0x85, 0x4, 0xffffffc0}, &(0x7f0000000900)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000940)={0x20, 0x87, 0x2, 0x3bf3}, &(0x7f0000000980)={0x20, 0x89, 0x2}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0}, 0x90) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) writev(r4, &(0x7f0000000680)=[{&(0x7f00000002c0)="2614", 0xf00}], 0x1) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000000)={0x1, 0x40, 0xeb, 0x101, 0x1a, "3e450f5726b4412a3327c17f177f7b72f19409"}) 6.305464826s ago: executing program 0 (id=1040): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe21, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0xffffffffffff4587, 0x4a0600) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f0000000100)=ANY=[@ANYBLOB="73ad00001500000002880b860e02878f0a8806450c83050b818f000004"]) r2 = syz_usb_connect$hid(0x4, 0x36, &(0x7f0000001a40)=ANY=[], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$HIDIOCSUSAGES(r3, 0x501c4814, &(0x7f0000000740)={{0x2, 0x2, 0x6, 0x81, 0x5, 0xffffffff}, 0x281, [0xfd28, 0x2, 0x1, 0x0, 0x4, 0x3, 0x100000, 0x3ff, 0x401, 0x3, 0x0, 0x2, 0x7, 0x94c, 0x3, 0x1, 0x0, 0x0, 0xfffffff8, 0x0, 0x101, 0x0, 0x3, 0x3f, 0x7, 0x6a2, 0x3, 0x0, 0x9cf3, 0x1, 0x8, 0x9135, 0x4, 0x852, 0x5a68, 0x9, 0x7, 0x7, 0x0, 0x5, 0x4, 0x4c, 0x1, 0x0, 0x56a7, 0x81, 0xb8, 0x6, 0x0, 0x40, 0x8, 0x6, 0x8, 0x1e6, 0xe7d, 0x200, 0x400, 0x0, 0xbe2d, 0x7853, 0x3, 0x800, 0x6, 0x1, 0x800, 0x40, 0x7, 0x1, 0x3, 0x2, 0x200, 0x3, 0xa58, 0x2, 0x100, 0x4, 0x1, 0x8000, 0x6, 0x7, 0x8001, 0x6, 0x7, 0x2, 0x2b66, 0x1, 0x0, 0xffffffff, 0x5, 0x13c59b9d, 0x5, 0x4, 0x1, 0x7, 0xd61, 0xfffff801, 0x800, 0x888, 0x5d, 0xfffffffc, 0x4, 0x8, 0x2, 0x10000, 0x3, 0x339, 0x0, 0x83, 0x8000, 0x0, 0x100, 0x9, 0x3, 0x0, 0xfffff001, 0xd303329, 0x983e, 0x36e, 0xda, 0x9, 0x1, 0x40, 0x0, 0xfffffffd, 0x6, 0xc90, 0x9, 0x1, 0x10000, 0xffffff7f, 0x9e, 0x1, 0xfff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8, 0x66, 0x4, 0x4, 0x7, 0x3b73, 0x2, 0x1, 0x6, 0xfa, 0x0, 0x800, 0x7, 0x2, 0x7f, 0x9, 0x9, 0x9, 0x9, 0x9, 0x80000000, 0x1, 0xfffffd8b, 0x0, 0x9, 0x101, 0xff, 0x7, 0x10000, 0x100, 0xa4, 0x7, 0x0, 0xfffffffe, 0x0, 0x7, 0x7, 0x6, 0x3, 0x80000000, 0x0, 0x101, 0x20, 0xc00, 0x5, 0x5, 0x401, 0x6, 0x4, 0xff, 0xfffff360, 0x1ff, 0xf02, 0x6, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x80000000, 0x2, 0x0, 0x6, 0x905, 0x8, 0x4, 0x7, 0x7, 0x1f, 0x0, 0x8000, 0x4, 0x6, 0x7, 0x7fff, 0x10001, 0x40, 0x407fff, 0xfffff734, 0x3, 0x0, 0x0, 0xde, 0xffffff80, 0x2, 0x6, 0x10001, 0x7ff, 0x7, 0x4, 0x2, 0x4, 0x6, 0x0, 0x4, 0x200, 0xff, 0x3, 0x5, 0x0, 0x6, 0x9, 0x1ff, 0x10000, 0x1f, 0x23a5, 0x8, 0x8, 0x5, 0x9, 0xfffffffd, 0x3, 0x9, 0x7, 0x3, 0x400, 0x9, 0x9, 0xaaa, 0x100, 0x0, 0x8f73, 0x80000001, 0x0, 0x10000, 0x0, 0x1, 0x6, 0x9, 0x4, 0x5a, 0x0, 0x20, 0x40, 0x8001, 0x0, 0x41242303, 0x6, 0x0, 0x8, 0x9, 0x8, 0xf2, 0x7fff, 0x0, 0x8001, 0x14a, 0x0, 0x800, 0xffffffff, 0x3, 0x3, 0x49, 0x8001, 0x1, 0x2, 0x0, 0x5, 0x1ff, 0x5, 0xa3a0, 0x16, 0x7fffffff, 0x2, 0x6, 0x8, 0x7ff, 0x0, 0x9, 0x8, 0x5, 0x2, 0x1, 0x9, 0x3, 0x0, 0x1, 0x0, 0x8, 0x1, 0x0, 0x231, 0xc0000, 0x3, 0x80000000, 0x6, 0xffffff12, 0x5, 0x8000, 0x8001, 0x57, 0x2, 0x5, 0xce, 0x9, 0x7, 0x401, 0x1, 0x0, 0x7, 0x6, 0x40000000, 0x7, 0x0, 0x4, 0x7, 0x6, 0xfff, 0xfffffffa, 0x2, 0x6, 0x2, 0x0, 0x5b8, 0x80000001, 0xb9, 0x8001, 0xfda, 0xffffbe5f, 0x100, 0x20, 0x0, 0xfff, 0x0, 0x5, 0x2, 0x80, 0x1000, 0x81, 0x0, 0x40, 0x7, 0xffff, 0x8, 0x2, 0x80, 0x2, 0x0, 0x1, 0x2e8f, 0x5713, 0x4, 0x5, 0x6, 0x2, 0xfffffffd, 0x80000000, 0x0, 0x80000000, 0x1ff, 0x10001, 0x0, 0x7fff, 0xa9, 0x1, 0x200, 0x100, 0x10001, 0x226d, 0x800, 0x7, 0x3f, 0x3, 0x4b, 0x5, 0x5, 0x4, 0x80000000, 0x4, 0x0, 0x0, 0x0, 0x6, 0x10000, 0x8, 0x7, 0x1000000, 0x6, 0x1f, 0x8f, 0x304, 0x9, 0x81, 0xd438, 0x1000, 0x9, 0x1, 0x101, 0xb0, 0x3ff, 0x80, 0xbd, 0x1, 0x9, 0x5, 0x2, 0x9, 0xd5e6, 0x4, 0x80, 0x401, 0x5, 0x0, 0x0, 0x0, 0x589c, 0x40000, 0x2, 0x7ff, 0x9, 0xbe, 0xfff, 0x2, 0x0, 0x6, 0x5, 0x4, 0x7fff, 0x100, 0x40000007, 0xffff, 0x1, 0x900000, 0x7fffffff, 0x200, 0x100, 0x2, 0x2, 0x4, 0x0, 0x0, 0x28, 0x3f, 0x47a3, 0x0, 0x1, 0xf2, 0x0, 0x4, 0x1000, 0x2, 0x4, 0x1f, 0x9e, 0x3, 0x621a, 0xfffffff8, 0x8, 0x1e8, 0x65ebcef6, 0x6, 0x1, 0x4, 0xd6, 0xff, 0x1, 0x0, 0x1, 0x0, 0x5, 0x3, 0x800, 0x9, 0x356, 0x4, 0x9, 0x7, 0x9, 0x4, 0x0, 0x44, 0x7fffffff, 0x6, 0xfff, 0xfffffb55, 0x1, 0x3, 0x37, 0x3, 0x1a93, 0x5, 0x0, 0x8, 0x1, 0x4, 0xa7a, 0x201, 0x1, 0x7, 0x6, 0x0, 0x0, 0x6, 0x0, 0xfffff215, 0x0, 0x6, 0x4, 0x401, 0x5201, 0x5af, 0x1, 0x6, 0x5, 0x401, 0x78, 0x100, 0x7, 0x8, 0xffff, 0x9d, 0x1, 0x6, 0x8000, 0x81, 0x0, 0x3, 0x800, 0xfffffff7, 0x7fffffff, 0xfffff000, 0x1000, 0x0, 0x6, 0x8, 0x7, 0x41, 0x8, 0x1, 0x100, 0x401, 0x4000000, 0x6, 0x532, 0xfffffffb, 0x1, 0x4, 0x3, 0xa3b, 0x5, 0x10000, 0x4, 0x100, 0x8, 0x401, 0x7f, 0x7, 0x3, 0x4, 0x0, 0x9, 0xffff, 0x0, 0x6, 0x8000, 0x7f, 0x4, 0x2, 0x4, 0x6, 0x2, 0x9, 0xfff, 0x80000001, 0x1f, 0x0, 0x5, 0x7fffffff, 0x4, 0x5, 0x1, 0x9, 0x1, 0x9de, 0x2ca, 0x5, 0x0, 0x7ff, 0x3, 0x5, 0x4, 0x4, 0x0, 0x1, 0x7f, 0x7, 0x8, 0x1f, 0x100, 0x7f, 0x0, 0x9, 0x0, 0x6, 0x5, 0x2, 0xbadf5ed, 0x0, 0x10001, 0x9, 0x7f, 0x36, 0x1f1dcc9a, 0x100, 0x20, 0x3, 0x0, 0xffffff7f, 0x0, 0x100, 0xffffffff, 0x3f, 0x0, 0x9, 0x3376, 0x600, 0x2, 0x7, 0x1, 0x8, 0x7, 0x9, 0x2, 0x2, 0xffffffff, 0x3000, 0x6, 0x7aa, 0x0, 0x3, 0x6, 0x1, 0x4, 0x0, 0x2, 0x4, 0x1ff, 0x1, 0x1, 0x80, 0xb7f, 0x5, 0x2, 0x0, 0x9, 0xffffffff, 0xfffffff8, 0x3ff, 0xffffff7f, 0x7, 0x0, 0x6, 0x1, 0x3, 0x8000, 0x3, 0x4, 0x4, 0x0, 0x35, 0x8001, 0x6, 0x10000, 0x80000001, 0xcec, 0x40, 0x0, 0x0, 0x200, 0x80000001, 0x1000, 0x3c, 0x0, 0x7, 0xffffffff, 0x4, 0x5, 0x80000000, 0x4, 0x40, 0x1cce9f1, 0x5, 0x56, 0x101, 0x2, 0x0, 0x5, 0x8, 0x8de3, 0x400, 0x6, 0x8000, 0x1, 0x83cb, 0x1, 0xffffffff, 0x7, 0x0, 0x7, 0x0, 0x100, 0x3, 0x8, 0x4b, 0x7ff, 0x1ff, 0x0, 0x7, 0x0, 0x8, 0x5, 0xffffffff, 0x8, 0xe6ea, 0x40, 0x5, 0xdac, 0xfffffffc, 0x8, 0x0, 0x0, 0x8, 0xfffffc00, 0x6, 0x7fff, 0x1, 0x4, 0x5, 0x6, 0x4, 0x4, 0x80000000, 0x8, 0x3, 0x6, 0xefe, 0x0, 0xb8, 0x400, 0x2, 0x9, 0x35c, 0x6, 0x8, 0x3, 0xfffffffd, 0x1f, 0x3450, 0x9, 0x5, 0x3, 0x0, 0x0, 0x1, 0x1000, 0x800, 0x6, 0x200, 0x3, 0x0, 0x7, 0x4, 0x400, 0x19, 0x917, 0x10000, 0x4, 0x2, 0x9ed5, 0x9, 0x6, 0x0, 0x0, 0x4, 0x1, 0x68, 0xfffffffe, 0x5, 0x2, 0x3f, 0x1ff, 0x4, 0x3, 0x101, 0x9, 0x1, 0x1, 0xfffffffa, 0x0, 0x0, 0xe1, 0x200, 0xd8e, 0xa3bbf3e4, 0x40, 0x9, 0x3470, 0x7ff, 0x1f, 0x7, 0xfffff269, 0x7f, 0x0, 0x7fff, 0x8, 0x65, 0x0, 0x1, 0x0, 0x2, 0x0, 0x19, 0x0, 0x5, 0x81, 0x0, 0x0, 0x4, 0xd911, 0x0, 0x9, 0x80000001, 0x320352c8, 0x8000, 0x8000, 0x5, 0x5, 0x8, 0x800, 0x10, 0x8, 0xb5, 0x4, 0x7fffffff, 0x3, 0x6, 0x0, 0x62, 0x3, 0x6, 0xfff, 0x6, 0x6e08, 0x0, 0x0, 0x8001, 0x7, 0x8001, 0x0, 0xfffff000, 0x3, 0x8299, 0x43b0000, 0xce, 0x3ff, 0x1, 0x0, 0x2, 0x6ca7, 0x7ff, 0x3, 0x4, 0x0, 0xffffff80, 0xc000000, 0x10000, 0x800, 0x4, 0x0, 0x1f, 0x9, 0x1, 0x3bc, 0x0, 0x1, 0x5, 0x7fff, 0x3ff, 0x9, 0x0, 0xcdf8, 0x4c9, 0x2, 0x8, 0x5, 0xffffff80, 0x6, 0x1ff, 0x7f, 0x800, 0xffffffff, 0x0, 0xedc5e6f, 0xffffffff, 0x1, 0x0, 0x0, 0x178, 0xfffffffd, 0x80, 0x0, 0x7, 0x7, 0x8df9, 0x401, 0x4, 0x3, 0x200, 0x7, 0x59, 0x1, 0x5d, 0x765, 0xfffffff7, 0xfffffffc, 0x8, 0x3, 0x20, 0x408, 0x0, 0x8001, 0x800, 0x9, 0xfffffff9, 0x10001, 0xc3, 0x1ff, 0xd15, 0x101, 0x400, 0x6, 0x400000, 0xff, 0x0, 0x5, 0xffff8001, 0x7fff, 0x1f, 0x2, 0xe3b2, 0x6, 0x3f, 0x3ff, 0x1, 0x8, 0x3e, 0x9, 0x50c, 0x5, 0x0, 0x42, 0x9, 0x4, 0x2, 0x0, 0x1, 0x401, 0x0, 0x4, 0x59, 0x7, 0x1b58332b, 0x6, 0x7ff, 0x0, 0x4, 0x5, 0x80000001, 0x8, 0x8, 0x0, 0xffff, 0xffffffff, 0x0, 0x3, 0x40, 0x1, 0x1, 0x9, 0x7fff, 0x401, 0x9, 0x9, 0xe575, 0x64]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0/../file0/../file0\x00', 0x0, 0x1210020, &(0x7f0000000000)={[{@uid, 0x41}]}) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r7, &(0x7f0000002140)={0x2020}, 0x2020) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x4, 0x3, 0x8, 0xff, 0x44, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, 0x10, 0x10, 0x50b76428, 0x40}}) 4.253686827s ago: executing program 2 (id=1055): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@private, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@dev}, 0x0, @in=@private=0xa010102}}, 0xe8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r4, 0x0, 0x0) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) sendmsg$key(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020adce80200"/16], 0x10}}, 0x0) recvmmsg(r4, &(0x7f0000000f00), 0x274, 0x10000, &(0x7f0000001000)={0x77359400}) 4.211676591s ago: executing program 2 (id=1056): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000740)=ANY=[], 0x129) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, 0x0, &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x200000, 0x1000}, 0x20) 3.255662335s ago: executing program 2 (id=1066): r0 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0000000905810300020000000904010008020d00000904010102020d0000090582020002000000090503020002000000bc94ef907df247d46eaa274c8f51e61fb4cfc6664d5c9315a37e6e4eae4cdd654f17856753d01b00310244243631e819a05df18c7f"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000007c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0xc7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x401}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000080)='./file2\x00', 0x100080d, &(0x7f0000000a80)=ANY=[@ANYRES32=0x0, @ANYBLOB="de60d8dc536d5258d6a94ad55604a34dc65b7ef79c1a1754e4cadfe21823d0c10a15d53dba5f2d2bc67ef2477d0412534e2f5151c7a60c8f5d6c634d173fecb5de9207a7090d302229cd3f210d34e4584c824c9dda7d35e0d7a06cd667bf9cced32944ca27d8a80e62cf6310db869ee250fb65467e3b11ad5042d600c6b8f18454d57df621e578fef0a3a93c14609231", @ANYRES8, @ANYRESDEC, @ANYBLOB="215aa15bf29ed2ff6f9241ff60693d298a3d41143bfc9091146111b4930c37eddcf542d641b821af229e7d8780d50b6f47fa3e5928555eb4d6d507d92b87b0b01c19c789895e02891afc082bb85a47087f168a6aa2c2bc51a3f3a404a4a1e6e2fbad00d592df65bd2a593f488bf41dbc7ea43fe2554fbe34e4a77f606f35e445aff55aaa19f7ffffffffffffff19bd4739c80c9e6681229c48e0c6de634c35c029c4eb3b4341ffff089416a3d63f08577a303758410658a4ec52e5b778eda9cd1bd8834e145c111690b0da927087e805000000000000008fd8b9bdfbdaa777db54127463a589eed325c34b6459505702f3a45f285c53c1b25bab2eef6324d67ad8d7e247317d80ff3ad9120b4e2294e67de9adaab76fa991571a187cd8f7fbc49bf45d6f8dbf69ef0d765a02ad98e802b1688148a8c017e3af238f82c49bbd8ba542fbfec5693d82158e3216b95656986f9d7eec7244a27dfaf8623fc76943bf142a61d9d6c622dbcac3d324d07be5a5cc88f85a857ff9d45924d5d82a04424d3453c96fafa37d952940f3147d5af234b39c3ff742a2e5300e10ee692a32f5c3321d44eadaa8c44bf9d534b52fe758082299e04f839e529a6d0293bf12770ac948730a0c367e117137c6fd930b1f306138163b7180e111d6926255a71bd227b1d27f2897721e3bda884b0792a81134d8fbc9aafc732b15aee5c9e0a835ac17b457efa36ce1095a3196d278207846ea81172826d49b87aac6e662bb824f16b0b65fc6989395ba022bd6af2f1830375c311bdf55f15d9830564e65dc76e5b7c9a91e857dbcef3909cfd628649337de6ff04a398f4325a430467aee51d7fa12ef61bc0b67d1e18e62754d8a2b65fb", @ANYRESOCT, @ANYRESOCT=0x0, @ANYRES32, @ANYRESDEC, @ANYRESOCT, @ANYRES64, @ANYRES8, @ANYBLOB="3dea3f"], 0xff, 0x1fc, &(0x7f0000002c80)="$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") stat(&(0x7f0000005280)='./file0\x00', 0x0) dup(0xffffffffffffffff) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000071122700000000009500c9df00000000de54efd337d35285c161c5277edb8ebb15b58f91a5ee2dfc464680aaeda509f80db720be849cfad349052a513d731f3e1ab1616de782ebeab3fad78b022a9488de94c51041787406824c841f2e132d053e63230d79544561215df07865865ca3b1d4cd0ca39c621b8bcb16c583a7d45d18615d25d7189e29edf825cc4555d6357089204333610ca3ad8e0bd555a1a819abd1c3df59e861ad355c8b4c483a06d01b"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x11}}}, 0x1e) connect$pptp(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000380)={0x14, &(0x7f00000006c0)={0x40, 0xd, 0xe7, {0xe7, 0x6, "173f3627f5404b6e6b6c7a5fe4db5a83630cce986a9b1b8a213f109c098e8fa8145a0c4d58bc15a92772afcb3cfa4d7e2a7522c1533c1654ae91d1ed9de1c4490488ed11953d195bfb6fd8238a0181bbcfe27e1ecaa79793ff27645914aaafa1312a1815193dcd7af2a7e1384c1c2b6a67c06d1bfd5e0591667a0e0cde45d7c90c09c32d950001ec07e82416c5f44e5e3746131bdd4e6fc9fcf839363c206f78edd1af9a3f17023f8844259347671b4826d8ab8d8fda1b2f6e5a420cf6744f519e6dbc730ec5c9d4f667f6b22dd1f256194a5f8a1e65342d2a3c38064047d914f2a96d173e"}}, &(0x7f0000000340)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000009c0)={0x44, &(0x7f0000000840)={0x20, 0x15, 0x98, "84bc90b51cd0cb9125a6e7ba8536532aa552e796d0962066dee140dc9098b68befdd1267ba1f3eb407d3414e363973a826bb58e6efa2124724fd15d9afcd8dc6ac33773032108a40e2ffca9b1cf6684a798b15c0a0e93352db7d01990f426d36904824d54395d1de1f39c411d16c7ff82b9709c5fa556c756296de1b1eb5c358f36ef7a5742a2f18151234126a99b7bdf4488555dff410dd"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000500)={0x20, 0x80, 0x1c, {0x7, 0x8a, 0x2, 0x3, 0x5, 0x1, 0x80, 0xa455, 0x400, 0xb6, 0xffff, 0x8}}, &(0x7f0000000640)={0x20, 0x85, 0x4, 0xffffffc0}, &(0x7f0000000900)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000940)={0x20, 0x87, 0x2, 0x3bf3}, &(0x7f0000000980)={0x20, 0x89, 0x2}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0}, 0x90) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) writev(r4, &(0x7f0000000680)=[{&(0x7f00000002c0)="2614", 0xf00}], 0x1) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000000)={0x1, 0x40, 0xeb, 0x101, 0x1a, "3e450f5726b4412a3327c17f177f7b72f19409"}) 3.234970557s ago: executing program 0 (id=1067): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x202, 0x0) write$tun(r0, &(0x7f0000000740)=ANY=[], 0x129) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x4d}]}, 0x10) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2e00000004000000000000000000000003000000000000008100"/46], 0x2e) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x80000000, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) getsockopt$XDP_STATISTICS(r6, 0x11b, 0x7, &(0x7f0000000240), &(0x7f0000000300)=0x30) 2.872205235s ago: executing program 1 (id=1068): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000080)='./file0\x00', 0x2010050, &(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="574ebc0e94989fcde4c7e6c29d5b7d84ea1d3b850bb44bd48bb9519bc17acbb165391925581f91c0647c1d56315d4d044e055c5842362d6e3547a65f0d1dc45f590e08b80c1182db21b765ab93d407000000a9415a11b2facb5efbeda5c99dab23a7176fd9bdcc116a308a7b3a9e3562550da7ba26451b761e0bc1c92c045eee"], 0xff, 0x2ce, &(0x7f0000000640)="$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") bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) 2.772334793s ago: executing program 1 (id=1069): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x800714, &(0x7f0000000480)={[{@orlov}, {@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9c7c}}, {@debug}, {@grpquota}, {@errors_continue}, {@test_dummy_encryption}, {@auto_da_alloc}, {@nodiscard}]}, 0xfe, 0x449, &(0x7f0000000840)="$eJzs281vG0UbAPBn10n79jN5Syk0tDRQEBEfSZMW6IELCCQOICHBoRxDklahboOaINEqgoBQOaJK3BFHJP4CTnBBwAmJK9xRpQoCUgunoLV3U9uN03zYcYt/P2nbGe+sZx7vjnc8kw2gaw1m/yQRuyPil4joq2brCwxW/7uxOD/x9+L8RBJLS6//nlTKXV+cnyiKFsftyjNDaUT6cZJXUm/24qWz4+Xy1IU8PzJ37p2R2YuXnpo+N35m6szU+bGTJ08cH332mbGnWxJnFtf1gfdnDh18+c0rr06cuvLWD19l7T1wuLq/No5WGcwC/2OponHfo62urMP21KSTng42hHUpRUR2unor/b8vSnHz5PXFSx91tHFAW2X3pu3Ndy8sAf9hSXS6BUBnFDf67PdvsW3R0OOOcO356g+gLO4b+Vbd0xNpXqa3jfUPRsSphX8+z7Zo0zwEAECtb7Lxz5Mrjf/SOFBTbm++htIfEf+PiH0RcU9E7I+IeyMqZe+LiPvXWX/j0tCt45/06oYCW6Ns/PdcvrZVP/4rRn/RX8pzeyrx9yanp8tTx/LPZCh6t2f50VXq+PbFnz9ttq92/JdtWf3FWDBvx9Wehgm6yfG58VYNSq99GDHQs1L8yfJKQBIRByNiYH1vvbdITD/+5aFmhW4f/ypasM609EXEY9XzvxAN8ReS1dcnR/4X5aljI8VVcasff7r8WrP6NxV/C2Tnf2f99d9Qou+vpHa9dnb9dVz+9ZOmv2k2ev1vS96orFlvy197b3xu7sJoxLbklUq+7vWxm8cW+aJ8Fv/Q0ZX7/778mCz+ByIiu4gPR8SDEXEkb/tDEfFwRBxdJf7vX3jk7Y3H315Z/JMrfv8tX//99ed//YnS2e++blb/2s7/iUpqKH+l8v13G2tt4GY+OwAAALhbpBGxO5J0eDmdpsPD1b/h3x870/LM7NwTp2fePT9ZfUagP3rTYqarr2Y+dDRZyN+xmh/L54qL/cfzeePPSjsq+eGJmfJkh2OHbrerSf/P/FbqdOuAtvO8FnSvxv6fdqgdwNZz/4fupf9D99L/oXut1P8/aMgvrwUcaX97gK3j/g/dS/+H7qX/Q/fS/6Erbea5foluTkS6xZXu2PDhf+66Iz6xuyvR6W8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA1vg3AAD//9UA7oM=") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000240)='./bus\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2.708801398s ago: executing program 4 (id=1070): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2001004, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018400110800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) chdir(&(0x7f0000000040)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) 2.657974822s ago: executing program 4 (id=1071): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000a00)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000740)={@flat=@handle={0x73682a85, 0x0, 0x1}, @ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x1, 0x0}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) 2.610990446s ago: executing program 4 (id=1072): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x800714, &(0x7f0000000480)={[{@orlov}, {@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9c7c}}, {@debug}, {@grpquota}, {@errors_continue}, {@test_dummy_encryption}, {@auto_da_alloc}, {@nodiscard}]}, 0xfe, 0x449, &(0x7f0000000840)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='./bus/file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2.319744928s ago: executing program 0 (id=1074): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x77) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000080000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000040008500000083000000bf090000000000005509010000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000001380)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f00000012c0)={[{@test_dummy_encryption}, {@discard}, {@stripe={'stripe', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x5}}, {@jqfmt_vfsv0}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@data_err_abort}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) write$P9_RSTAT(r2, &(0x7f00000004c0)=ANY=[], 0x1001) 2.242264895s ago: executing program 1 (id=1076): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000740)=ANY=[], 0x129) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, 0x0, &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x0, 0x1000}, 0x20) 2.221630146s ago: executing program 4 (id=1077): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x0, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) sync() 2.1761866s ago: executing program 0 (id=1079): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x800714, &(0x7f0000000480)={[{@orlov}, {@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9c7c}}, {@debug}, {@grpquota}, {@errors_continue}, {@test_dummy_encryption}, {@auto_da_alloc}, {@nodiscard}]}, 0xfe, 0x449, &(0x7f0000000840)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000240)='./bus\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2.119765844s ago: executing program 3 (id=1080): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000080)='./file0\x00', 0x2010050, &(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="574ebc0e94989fcde4c7e6c29d5b7d84ea1d3b850bb44bd48bb9519bc17acbb165391925581f91c0647c1d56315d4d044e055c5842362d6e3547a65f0d1dc45f590e08b80c1182db21b765ab93d407000000a9415a11b2facb5efbeda5c99dab23a7176fd9bdcc116a308a7b3a9e3562550da7ba26451b761e0bc1c92c045eee"], 0xff, 0x2ce, &(0x7f0000000640)="$eJzs3M9LFH8cx/G3uu6uK7p7+PL98i2iN3UpgkG3e7CEUrRQqBtZEIw6W8tOu7IzGBuhduoa/REdxKM3oTp09dKtU5duHgo6JPRjYmdnddUVk9od0+cDdN7OzNvP58OM8hrBWb/17EEx7xh505XueK90iyzKhkiqVolUa5+6RCQudV0SlWaLcr7/87tT45O3r2Wy2ZEx1dHMxMW0qg6efvnw8fKZ127/zZXB1Zispe6uf0p/WPt37f/1HxP3C44WHC2VXTV1qvzejU7Zls4UnKKhesPzTMfSQunNpIh/vOyateN5uzw7W1WzNDOQmK1YjqNmqapFq6oSEalU1bxnFkpqGIYOJAT7iS2NjZkZv4wfuHm6DRPCb7uy68avVDJmj4j07To3t9SpWQEAgMNje/7Xnfnf1xVsa3u+e57X3H+w/L8a3SP/B/m+kf9tq57/Havi/lr+d8vq1vJ/hPx/ALmt/I8jq5b/E8HPr+/JneUhvyD/AwAAAAAAAAAAAAAAAAAAAADwN9jwvKTnecnGtvERC/4lvPF12PNEe3D9j7dxDQrVuIj9dC43lxOxe+s7N6+7JUOSlG/+/RCo16NXsyND6kvJK3sh6F+Yy/X4jZm8FMQWS4YlKanW/cP1ft3e3yuJ5v60JOWf1v3plv1ROXe2qd+QpLydlrLYMuPf11v988Oql69nd/T3+ecBAAAAAHAUGLqp5fO7Yex1vN6fyYv4z9f7/31gx/N1RE5Ewl07AAAAAADHhVN9VDRt26p0sIiLSPvHqq2us+tqUcxfCHP0sItk057GS6Q7Po1I86CxYBZtGuu/5y++/LlveGnl5NfwrmB4v5MAAAAAtMdW6N/7HO9jJ2cEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDx04nXiYW9RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCw+BkAAP//0b8mQA==") bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) 2.086533877s ago: executing program 4 (id=1081): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100000620702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) socket$key(0xf, 0x3, 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=ANY=[@ANYBLOB="38010000100013070000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000048000200656362286369706865725f6e756c6c29"], 0x138}, 0x1, 0xe}, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000106d049cc20000000000010902240001000000000904000001030000000921000000012205020905810300000000000e5ac39537e4aafc3fa660857c5e52c3180a3e5ba2cc0d6bd5494936d4e2548d4a7f506d8e7b361a5bb34248abd447a42530559e03f57b27c112c5cfccdb6b7fd2c29ff9f400303d10e29edec0238ec563a648a051f344a45d786d0663b1b70f96e62fb2b334b8afda34990b46da80667f6c5105de44"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) syz_usb_control_io$hid(r4, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="3d74b4220000031d6716f6"], 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ext4_mballoc_prealloc\x00', r0}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0020000005000000b7080000000000007ba1f8ff00000000bfa200000000000007020000f8ffffff93ffbaa2e3f604dd24e445b70300000000b704000000000000850000000700000095e4ffffffffffff2288706bb81d16c14955a5aa9a789c99e60290ff2eb02c1d02392df9e73d0d2bc90ab4a94c6e80e8559c29594589627602c1d2a3447079a5bc6e4d"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) r8 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000005304"], 0x14}}, 0x0) r9 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r10, 0xc0145401, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x0, 0x7fffffff}) r11 = open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0) ftruncate(r11, 0x2007ffb) sendfile(r11, r11, 0x0, 0x800000009) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000}, 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r12}, 0x10) pwritev2(r9, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0x0, 0x0, 0x0) write$cgroup_int(r5, &(0x7f0000000100), 0x1001) 2.022951392s ago: executing program 3 (id=1082): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2001004, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018400110800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000080)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) chdir(&(0x7f0000000040)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) 1.881857663s ago: executing program 3 (id=1083): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, 0x0, &(0x7f0000000040)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r6 = open$dir(0x0, 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r6, 0x800c6613, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f0000000080), 0x1, 0x52e, &(0x7f0000000a80)="$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") 1.864328555s ago: executing program 0 (id=1084): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x317, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x40}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x7f, 0x1, 0x6}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) signalfd(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, @val=@iter={0x0}}, 0x40) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r7, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r9}, 0x10) sendmmsg$inet(r8, &(0x7f0000004840)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000800)="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", 0x126}, {&(0x7f00000000c0)="15654d91fd691c85513e1dff9a607c8217479a71a5477af6dc523937c362c891afad759d937a08ca51d28419513cfb2df6efeaf3fc1b3b3a7c6403c4dcaead7eec60576bf60e65ef13a17fdb13fed40d65bd28b50a91ae2edc949328be69b2fac09c2cd5b8c36a0cc78ff862add091c2a40610e313fe192ecb054b57445696a4c6f9c2f8f201920480d6d5e8621d77a88d2087244fd50eee2d6ccfd03b713f3401890c1239064dfae7223cdbedf4edb3f38d590983d394", 0xb7}, {&(0x7f0000006a40)="21aac44f47fbf4f6496ce4e4b9a4d822b78eb9b455598c8b61d8495f74a4a25b52ff51750300f4c4ca6f376903868f6c4549a9614f3fe4b30498a27b658ee69fefa3edb52ed47b2ee8c004e5582c9bec82b153e8cf7f91e72d9054ffffbdbaf0fcd1c048ed3ee937b93ad633ad5a01d52d820466d46fbc4409535896a59dd1d94279d9c4df720e1871a57830a078e3c058ec6a5e0d2b233827600000000000000000ca00"/182, 0xb6}, {&(0x7f0000000180)="47b7ae525821a239fc7a10a2f198314f675756667db1e87b8453f3b2e6864abbac55304b04db64070368248b9b3d488fc59bc48e88b14f23a271edbd512b71e3d47f7f3885bb27e665e04225088a0f126d14ad611079f1fffffffffffffff94141486ed92c2044d31c44b77f94598161dc688a843a0b8fb4ed79cc3c58", 0x7d}, {&(0x7f0000000940)="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", 0x229}], 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="2400000000000000000000000700000001071336ac1414aaac1414aaac1e080100000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac14141d"], 0x48}}], 0x1, 0x0) 1.299695409s ago: executing program 1 (id=1085): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x202, 0x0) write$tun(r0, &(0x7f0000000740)=ANY=[], 0x129) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000b00)={0x1, &(0x7f0000000ac0)=[{0x4d}]}, 0x10) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="2e00000004000000000000000000000003000000000000008100"/46], 0x2e) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x80000000, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) getsockopt$XDP_STATISTICS(r6, 0x11b, 0x7, &(0x7f0000000240), &(0x7f0000000300)=0x30) 958.774866ms ago: executing program 3 (id=1086): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000a00)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000740)={@flat=@handle={0x73682a85, 0x0, 0x1}, @ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x1, 0x0}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) 910.762509ms ago: executing program 3 (id=1087): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x800714, &(0x7f0000000480)={[{@orlov}, {@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9c7c}}, {@debug}, {@grpquota}, {@errors_continue}, {@test_dummy_encryption}, {@auto_da_alloc}, {@nodiscard}]}, 0xfe, 0x449, &(0x7f0000000840)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000240)='./bus\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 618.271002ms ago: executing program 3 (id=1088): fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) syz_open_dev$usbfs(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7040000000000008500000001"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(r2, &(0x7f0000000080), 0xfffffd5e) 412.995268ms ago: executing program 1 (id=1089): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x800714, &(0x7f0000000480)={[{@orlov}, {@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9c7c}}, {@debug}, {@grpquota}, {@errors_continue}, {@test_dummy_encryption}, {@auto_da_alloc}, {@nodiscard}]}, 0xfe, 0x449, &(0x7f0000000840)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='./bus/file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 353.686473ms ago: executing program 4 (id=1090): socket$nl_netfilter(0x10, 0x3, 0xc) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r6 = open$dir(0x0, 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r6, 0x800c6613, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f0000000080), 0x1, 0x52e, &(0x7f0000000a80)="$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") 0s ago: executing program 1 (id=1091): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x800714, &(0x7f0000000480)={[{@orlov}, {@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9c7c}}, {@debug}, {@grpquota}, {@errors_continue}, {@test_dummy_encryption}, {@auto_da_alloc}, {@nodiscard}]}, 0xfe, 0x449, &(0x7f0000000840)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000240)='./bus\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 142.035646][ T9] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 142.038280][ T3449] EXT4-fs warning (device loop2): ext4_enable_quotas:6467: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 142.066338][ T3449] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 142.076427][ T3449] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.700: bg 0: block 40: padding at end of block bitmap is not set [ 142.121778][ T3449] EXT4-fs error (device loop2) in ext4_mb_clear_bb:5646: Corrupt filesystem [ 142.131576][ T3449] EXT4-fs (loop2): 1 truncate cleaned up [ 142.137168][ T3449] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 142.227260][ T3474] netlink: 12 bytes leftover after parsing attributes in process `syz.0.704'. [ 142.259557][ T796] usb 2-1: USB disconnect, device number 25 [ 142.265540][ T3474] device lo entered promiscuous mode [ 142.278159][ T796] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM [ 142.338307][ T3477] syz.2.700[3477] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.338368][ T3477] syz.2.700[3477] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.384772][ T3474] device lo left promiscuous mode [ 142.705606][ T3503] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 142.718935][ T3503] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038 (0x7fffffff) [ 142.808059][ T796] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 143.258004][ T796] usb 4-1: Using ep0 maxpacket: 16 [ 143.328671][ T3517] EXT4-fs (loop2): ea_inode feature is not supported for Hurd [ 143.339239][ T3494] F2FS-fs (loop4): Found nat_bits in checkpoint [ 143.369644][ T3494] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 143.376507][ T3494] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 143.408202][ T796] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.421399][ T796] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.430993][ T796] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 143.439971][ T796] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.489315][ T796] usb 4-1: config 0 descriptor?? [ 143.634880][ T3528] syz.0.715[3528] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 143.634939][ T3528] syz.0.715[3528] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 143.778021][ T802] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 144.009784][ T24] audit: type=1107 audit(1719962571.071:695): pid=3501 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 144.036270][ T3534] input: syz1 as /devices/virtual/input/input12 [ 144.063738][ T24] audit: type=1400 audit(1719962571.121:696): avc: denied { connect } for pid=3539 comm="syz.4.719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 144.069287][ T3540] netlink: 4 bytes leftover after parsing attributes in process `syz.4.719'. [ 144.086402][ T796] usbhid 4-1:0.0: can't add hid device: -71 [ 144.101064][ T796] usbhid: probe of 4-1:0.0 failed with error -71 [ 144.110841][ T796] usb 4-1: USB disconnect, device number 19 [ 144.127126][ T25] hid-generic 0000:0000:0000.001C: unknown main item tag 0x1 [ 144.134424][ T25] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 144.142638][ T25] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 144.149956][ T25] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 144.157171][ T25] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 144.164381][ T25] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 144.171577][ T25] hid-generic 0000:0000:0000.001C: unknown main item tag 0x4 [ 144.178831][ T25] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 144.186183][ T25] hid-generic 0000:0000:0000.001C: unknown main item tag 0x2 [ 144.193390][ T802] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 144.193408][ T25] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 144.211436][ T802] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 60258, setting to 1024 [ 144.211443][ T25] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 144.211457][ T25] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 144.224036][ T802] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 1024 [ 144.233049][ T25] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 144.238336][ T802] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 144.248338][ T25] hid-generic 0000:0000:0000.001C: unknown main item tag 0x4 [ 144.255503][ T802] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.264326][ T25] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 144.286354][ T25] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 144.296708][ T25] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 144.298304][ T3517] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 144.306535][ T25] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 144.321707][ T25] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 144.338008][ T25] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 144.338740][ T802] usb 3-1: invalid MIDI out EP 0 [ 144.345226][ T25] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 144.345241][ T25] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 144.345264][ T25] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 144.352187][ T802] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 144.368241][ T25] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 144.387370][ T25] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 144.397607][ T25] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 144.404907][ T25] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 144.412258][ T25] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 144.419667][ T25] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 144.426862][ T25] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 144.434660][ T25] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 144.441893][ T25] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 144.449223][ T25] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 144.456367][ T25] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 144.463625][ T25] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 144.471929][ T25] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 144.481149][ T25] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 144.490572][ T25] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 144.499658][ T25] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz0] on syz0 [ 144.601274][ T3552] binder: BINDER_SET_CONTEXT_MGR already set [ 144.609703][ T3548] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 144.612497][ T3552] binder: 3551:3552 ioctl 4018620d 20000040 returned -16 [ 144.625076][ T3548] EXT4-fs (loop0): orphan cleanup on readonly fs [ 144.638042][ T3548] EXT4-fs warning (device loop0): ext4_enable_quotas:6467: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 144.658171][ T3548] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 144.669254][ T3548] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.721: bg 0: block 40: padding at end of block bitmap is not set [ 144.683797][ T3556] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 144.688242][ T3548] EXT4-fs error (device loop0) in ext4_mb_clear_bb:5646: Corrupt filesystem [ 144.701237][ T3556] EXT4-fs (loop1): orphan cleanup on readonly fs [ 144.707657][ T3548] EXT4-fs (loop0): 1 truncate cleaned up [ 144.715627][ T3556] EXT4-fs warning (device loop1): ext4_enable_quotas:6467: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 144.731464][ T3548] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 144.749574][ T3556] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 144.810816][ T3556] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.724: bg 0: block 40: padding at end of block bitmap is not set [ 144.867372][ T3556] EXT4-fs error (device loop1) in ext4_mb_clear_bb:5646: Corrupt filesystem [ 144.904293][ T3556] EXT4-fs (loop1): 1 truncate cleaned up [ 144.927179][ T3556] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 145.055262][ T3565] syz.0.721[3565] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 145.055324][ T3565] syz.0.721[3565] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 145.177026][ T3569] syz.1.724[3569] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 145.188697][ T3569] syz.1.724[3569] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 145.371001][ T3567] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 145.424806][ T3567] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038 (0x7fffffff) [ 145.528357][ T3582] fuse: Unknown parameter '' [ 145.563797][ T1938] hid-generic 0000:0000:0000.001D: unknown main item tag 0x1 [ 145.565730][ T3582] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 145.571332][ T1938] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 145.590431][ T1938] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 145.599121][ T1938] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 145.606653][ T1938] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 145.614158][ T1938] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 145.621710][ T1938] hid-generic 0000:0000:0000.001D: unknown main item tag 0x4 [ 145.628997][ T1938] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 145.636251][ T1938] hid-generic 0000:0000:0000.001D: unknown main item tag 0x2 [ 145.643905][ T1938] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 145.651445][ T1938] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 145.668398][ T1938] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 145.685776][ T1938] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 145.696615][ T1938] hid-generic 0000:0000:0000.001D: unknown main item tag 0x4 [ 145.704087][ T1938] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 145.711369][ T25] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 145.718957][ T1938] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 145.726505][ T1938] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 145.736609][ T1938] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 145.744914][ T1938] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 145.752115][ T1938] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 145.759284][ T1938] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 145.766566][ T1938] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 145.775359][ T1938] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 145.782602][ T1938] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 145.789777][ T1938] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 145.796963][ T1938] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 145.804318][ T1938] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 145.811480][ T1938] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 145.818689][ T1938] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 145.825872][ T1938] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 145.833118][ T1938] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 145.840923][ T1938] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 145.851325][ T1938] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 145.859374][ T1938] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 145.866667][ T1938] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 145.878683][ T1938] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 145.888009][ T1938] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 145.897065][ T1938] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 145.905996][ T1938] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz0] on syz0 [ 145.928027][ T796] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 145.971938][ T3595] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 145.980110][ T3595] EXT4-fs (loop1): orphan cleanup on readonly fs [ 145.986704][ T3595] EXT4-fs warning (device loop1): ext4_enable_quotas:6467: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 146.002093][ T3595] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 146.009033][ T3595] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.737: bg 0: block 40: padding at end of block bitmap is not set [ 146.012766][ T1938] usb 3-1: USB disconnect, device number 24 [ 146.023115][ T794] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 146.023376][ T3595] EXT4-fs error (device loop1) in ext4_mb_clear_bb:5646: Corrupt filesystem [ 146.045575][ T3595] EXT4-fs (loop1): 1 truncate cleaned up [ 146.051090][ T3595] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 146.108165][ T25] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 146.128066][ T25] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 146.140230][ T25] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 146.152999][ T25] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 146.163607][ T25] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 146.177990][ T796] usb 5-1: Using ep0 maxpacket: 16 [ 146.204176][ T3602] syz.1.737[3602] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 146.204216][ T3602] syz.1.737[3602] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 146.318532][ T796] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.328056][ T25] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 146.334166][ T796] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.347995][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.359076][ T796] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 146.366655][ T25] usb 1-1: Product: syz [ 146.387984][ T25] usb 1-1: Manufacturer: syz [ 146.392475][ T25] usb 1-1: SerialNumber: syz [ 146.394940][ T796] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.418090][ T3574] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 146.426235][ T796] usb 5-1: config 0 descriptor?? [ 146.431271][ T794] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 146.443062][ T794] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 146.454114][ T794] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 146.468449][ T794] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 146.480570][ T794] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 146.643657][ T3574] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 146.650612][ T3574] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 146.668082][ T794] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 146.679733][ T794] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.687781][ T794] usb 4-1: Product: syz [ 146.691972][ T794] usb 4-1: Manufacturer: syz [ 146.696371][ T794] usb 4-1: SerialNumber: syz [ 146.728044][ T3589] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 146.894360][ T24] audit: type=1107 audit(1719962573.951:697): pid=3586 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 146.959044][ T3589] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 146.965836][ T3589] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 146.972789][ T796] usbhid 5-1:0.0: can't add hid device: -71 [ 146.978598][ T796] usbhid: probe of 5-1:0.0 failed with error -71 [ 146.988157][ T796] usb 5-1: USB disconnect, device number 22 [ 147.041114][ T3621] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 147.050075][ T3621] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038 (0x7fffffff) [ 147.076484][ T690] hid-generic 0000:0000:0000.001E: unknown main item tag 0x1 [ 147.083807][ T690] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 147.091249][ T690] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 147.098641][ T690] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 147.105790][ T690] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 147.113048][ T690] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 147.120455][ T690] hid-generic 0000:0000:0000.001E: unknown main item tag 0x4 [ 147.127647][ T690] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 147.135017][ T690] hid-generic 0000:0000:0000.001E: unknown main item tag 0x2 [ 147.142280][ T690] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 147.149444][ T690] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 147.156779][ T690] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 147.164014][ T690] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 147.171167][ T690] hid-generic 0000:0000:0000.001E: unknown main item tag 0x4 [ 147.178376][ T690] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 147.185550][ T690] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 147.192796][ T690] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 147.200010][ T690] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 147.207182][ T690] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 147.214461][ T690] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 147.221608][ T690] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 147.229039][ T690] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 147.237282][ T690] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 147.247012][ T690] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 147.255250][ T690] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 147.262579][ T690] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 147.269749][ T690] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 147.277086][ T690] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 147.284330][ T690] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 147.291521][ T690] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 147.298813][ T690] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 147.305986][ T690] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 147.313220][ T690] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 147.320445][ T690] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 147.327597][ T690] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 147.334850][ T690] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 147.342094][ T690] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 147.349241][ T690] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 147.356865][ T690] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz0] on syz0 [ 147.455648][ T3643] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 147.492981][ T3643] EXT4-fs (loop4): orphan cleanup on readonly fs [ 147.502018][ T3643] EXT4-fs warning (device loop4): ext4_enable_quotas:6467: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 147.516479][ T3643] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 147.523364][ T3643] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.751: bg 0: block 40: padding at end of block bitmap is not set [ 147.537592][ T3643] EXT4-fs error (device loop4) in ext4_mb_clear_bb:5646: Corrupt filesystem [ 147.542224][ T3574] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 147.547022][ T3643] EXT4-fs (loop4): 1 truncate cleaned up [ 147.558514][ T3643] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 147.558536][ T3574] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 147.710262][ T3648] syz.4.751[3648] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.710323][ T3648] syz.4.751[3648] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.802842][ T3650] netlink: 12 bytes leftover after parsing attributes in process `syz.1.752'. [ 147.823339][ T3650] device lo entered promiscuous mode [ 147.828845][ T3589] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 147.835622][ T3589] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 147.879292][ T3574] erofs: (device loop0): mounted with root inode @ nid 36. [ 147.894247][ T3574] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -1027 in[4096, 0] out[4096] [ 147.894253][ T3650] device lo left promiscuous mode [ 147.938067][ T25] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 147.948825][ T3654] device syzkaller0 entered promiscuous mode [ 147.958454][ T25] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 148.090774][ T3589] erofs: (device loop3): mounted with root inode @ nid 36. [ 148.106717][ T3589] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -1027 in[4096, 0] out[4096] [ 148.148062][ T794] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 148.175441][ T794] cdc_ncm 4-1:1.0 usb1: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM, 42:42:42:42:42:42 [ 148.662563][ T3700] EXT4-fs (loop2): Test dummy encryption mode enabled [ 148.678101][ T3700] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 148.690721][ T25] usb 4-1: USB disconnect, device number 20 [ 148.698302][ T25] cdc_ncm 4-1:1.0 usb1: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM [ 148.709534][ T3700] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,discard,stripe=0x0000000000000007,commit=0x0000000000000005,jqfmt=vfsv0,barrier=0x0000000000000005,max_batch_time=0x0000000000000002,data_err=abort,,errors=continue [ 148.872319][ T794] usb 1-1: USB disconnect, device number 17 [ 148.888466][ T794] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM [ 149.155861][ T3709] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 149.168978][ T3709] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 149.201243][ T3709] F2FS-fs (loop2): Found nat_bits in checkpoint [ 149.328877][ T3709] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 149.336418][ T3709] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 149.427248][ T3709] attempt to access beyond end of device [ 149.427248][ T3709] loop2: rw=2049, want=45224, limit=40427 [ 149.451005][ T3709] attempt to access beyond end of device [ 149.451005][ T3709] loop2: rw=0, want=45224, limit=40427 [ 150.273675][ T3767] device syzkaller0 entered promiscuous mode [ 150.398076][ T3764] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 150.408543][ T3764] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038 (0x7fffffff) [ 150.408979][ T3775] EXT4-fs (loop2): dax option not supported [ 150.435198][ T3775] fuse: Unknown parameter 'smackfsfloor' [ 150.451280][ T3775] 9pnet: Insufficient options for proto=fd [ 150.625962][ T3787] EXT4-fs (loop2): Test dummy encryption mode enabled [ 150.667557][ T3787] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 150.704959][ T3787] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,discard,stripe=0x0000000000000007,commit=0x0000000000000005,jqfmt=vfsv0,barrier=0x0000000000000005,max_batch_time=0x0000000000000002,data_err=abort,,errors=continue [ 151.359437][ T3796] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 151.367669][ T3796] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 151.378238][ T3800] F2FS-fs (loop2): Found nat_bits in checkpoint [ 151.395466][ T3796] F2FS-fs (loop0): Found nat_bits in checkpoint [ 151.449229][ T3796] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 151.456152][ T3796] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 151.465960][ T3800] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 151.473860][ T796] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 151.494216][ T2273] attempt to access beyond end of device [ 151.494216][ T2273] loop2: rw=2049, want=45104, limit=40427 [ 151.501830][ T3796] attempt to access beyond end of device [ 151.501830][ T3796] loop0: rw=2049, want=45224, limit=40427 [ 151.523810][ T3796] attempt to access beyond end of device [ 151.523810][ T3796] loop0: rw=0, want=45224, limit=40427 [ 151.646857][ T3822] device syzkaller0 entered promiscuous mode [ 151.749782][ T3831] EXT4-fs (loop1): Test dummy encryption mode enabled [ 151.758879][ T3831] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 151.842204][ T3831] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,discard,stripe=0x0000000000000007,commit=0x0000000000000005,jqfmt=vfsv0,barrier=0x0000000000000005,max_batch_time=0x0000000000000002,data_err=abort,,errors=continue [ 151.928179][ T796] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 151.946286][ T796] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 151.961081][ T796] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 151.975438][ T796] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 151.986722][ T796] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 152.012376][ T24] audit: type=1400 audit(1719962579.071:698): avc: denied { create } for pid=3834 comm="syz.0.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 152.035199][ T24] audit: type=1400 audit(1719962579.071:699): avc: denied { write } for pid=3834 comm="syz.0.777" path="socket:[28499]" dev="sockfs" ino=28499 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 152.064920][ T24] audit: type=1400 audit(1719962579.071:700): avc: denied { nlmsg_read } for pid=3834 comm="syz.0.777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 152.248065][ T796] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 152.261777][ T3845] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 152.271236][ T796] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.271867][ T3845] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038 (0x7fffffff) [ 152.281777][ T796] usb 5-1: Product: syz [ 152.299389][ T3854] EXT4-fs (loop1): Ignoring removed orlov option [ 152.301038][ T796] usb 5-1: Manufacturer: syz [ 152.308979][ T3854] EXT4-fs (loop1): Test dummy encryption mode enabled [ 152.310778][ T796] usb 5-1: SerialNumber: syz [ 152.322659][ T3854] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a014e09c, mo2=0002] [ 152.331325][ T3854] System zones: 1-12 [ 152.336360][ T3854] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.787: casefold flag without casefold feature [ 152.348095][ T3805] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 152.364702][ T3854] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #12: comm syz.1.787: missing EA_INODE flag [ 152.368018][ T1938] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 152.380792][ T3854] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.787: error while reading EA inode 12 err=-117 [ 152.403472][ T3854] EXT4-fs (loop1): 1 orphan inode deleted [ 152.409095][ T3854] EXT4-fs (loop1): mounted filesystem without journal. Opts: orlov,minixdf,max_dir_size_kb=0x0000000000009c7c,debug,grpquota,errors=continue,test_dummy_encryption,auto_da_alloc,nodiscard,,errors=continue [ 152.593389][ T3805] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 152.600754][ T3805] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 153.182064][ T1938] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.192269][ T1938] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 153.281659][ T1938] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 153.292201][ T1938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 153.301345][ T1938] usb 1-1: SerialNumber: syz [ 153.449042][ T3882] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 153.468449][ T3882] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038 (0x7fffffff) [ 153.608816][ T1938] usb 1-1: 0:2 : does not exist [ 153.618574][ T1938] usb 1-1: USB disconnect, device number 18 [ 153.625917][ T1669] udevd[1669]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 153.718464][ T3805] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 153.725501][ T3805] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 153.848001][ T794] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 153.980893][ T3805] erofs: (device loop4): mounted with root inode @ nid 36. [ 153.989393][ T3805] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -1027 in[4096, 0] out[4096] [ 154.038025][ T796] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 154.045831][ T796] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM, 42:42:42:42:42:42 [ 154.141527][ T3904] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 154.150164][ T3904] EXT4-fs (loop2): orphan cleanup on readonly fs [ 154.156633][ T3904] EXT4-fs warning (device loop2): ext4_enable_quotas:6467: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 154.171755][ T3904] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 154.178773][ T3904] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.800: bg 0: block 40: padding at end of block bitmap is not set [ 154.218174][ T3904] EXT4-fs error (device loop2) in ext4_mb_clear_bb:5646: Corrupt filesystem [ 154.227587][ T3904] EXT4-fs (loop2): 1 truncate cleaned up [ 154.233479][ T3904] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 154.296198][ T3921] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 154.305041][ T3921] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038 (0x7fffffff) [ 154.378076][ T794] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.459074][ T3927] syz.2.800[3927] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 154.459419][ T3927] syz.2.800[3927] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 154.674132][ T3931] device pim6reg1 entered promiscuous mode [ 154.707657][ T798] usb 5-1: USB disconnect, device number 23 [ 154.718322][ T798] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM [ 154.768028][ T794] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 154.779686][ T794] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.787588][ T794] usb 4-1: Product: syz [ 154.792826][ T794] usb 4-1: Manufacturer: syz [ 154.797282][ T794] usb 4-1: SerialNumber: syz [ 155.212648][ T3964] device syzkaller0 entered promiscuous mode [ 155.490398][ T3986] device pim6reg1 entered promiscuous mode [ 155.578129][ T802] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 155.676638][ T3994] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 155.684970][ T3994] EXT4-fs (loop4): orphan cleanup on readonly fs [ 155.691723][ T3994] EXT4-fs warning (device loop4): ext4_enable_quotas:6467: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 155.706300][ T3994] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 155.713167][ T3994] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.818: bg 0: block 40: padding at end of block bitmap is not set [ 155.727492][ T3994] EXT4-fs error (device loop4) in ext4_mb_clear_bb:5646: Corrupt filesystem [ 155.736527][ T3994] EXT4-fs (loop4): 1 truncate cleaned up [ 155.742188][ T3994] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 155.831987][ T3992] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 155.840852][ T3992] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038 (0x7fffffff) [ 155.935505][ T4002] syz.4.818[4002] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 155.935877][ T4002] syz.4.818[4002] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 156.078060][ T794] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 156.097099][ T794] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 156.104402][ T802] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.114345][ T794] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 156.119794][ T802] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 156.218129][ T802] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 156.227221][ T802] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 156.235422][ T802] usb 3-1: SerialNumber: syz [ 156.298613][ T794] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 156.306161][ T794] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM, 42:42:42:42:42:42 [ 156.318812][ T794] usb 4-1: USB disconnect, device number 21 [ 156.324798][ T794] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM [ 156.415135][ T4005] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 156.423978][ T4005] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038 (0x7fffffff) [ 156.529757][ T4013] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 156.538378][ T4013] EXT4-fs (loop4): orphan cleanup on readonly fs [ 156.544834][ T4013] EXT4-fs warning (device loop4): ext4_enable_quotas:6467: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 156.560004][ T4013] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 156.566834][ T4013] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.821: bg 0: block 40: padding at end of block bitmap is not set [ 156.568582][ T802] usb 3-1: 0:2 : does not exist [ 156.581209][ T4013] EXT4-fs error (device loop4) in ext4_mb_clear_bb:5646: Corrupt filesystem [ 156.594632][ T4013] EXT4-fs (loop4): 1 truncate cleaned up [ 156.600219][ T4013] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 156.615137][ T802] usb 3-1: USB disconnect, device number 25 [ 156.708878][ T4016] EXT4-fs (loop1): #blocks per group too big: 65536 [ 156.798035][ T4021] syz.4.821[4021] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 156.798402][ T4021] syz.4.821[4021] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 157.110754][ T4031] device pim6reg1 entered promiscuous mode [ 157.132681][ T4034] netlink: 'syz.1.825': attribute type 30 has an invalid length. [ 157.298403][ T4051] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 157.307047][ T4051] EXT4-fs (loop2): orphan cleanup on readonly fs [ 157.314096][ T4051] EXT4-fs warning (device loop2): ext4_enable_quotas:6467: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 157.328676][ T4051] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 157.336400][ T4051] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.832: bg 0: block 40: padding at end of block bitmap is not set [ 157.351485][ T4051] EXT4-fs error (device loop2) in ext4_mb_clear_bb:5646: Corrupt filesystem [ 157.361022][ T4051] EXT4-fs (loop2): 1 truncate cleaned up [ 157.366543][ T4051] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 157.524525][ T4060] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 157.590218][ T4069] syz.2.832[4069] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 157.590533][ T4069] syz.2.832[4069] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 157.710442][ T4060] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038 (0x7fffffff) [ 157.858018][ T316] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 157.992399][ T4071] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.836: casefold flag without casefold feature [ 158.010118][ T4071] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #2: comm syz.3.836: missing EA_INODE flag [ 158.023326][ T4071] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.836: error while reading EA inode 2 err=-117 [ 158.035590][ T4071] EXT4-fs (loop3): 1 orphan inode deleted [ 158.041367][ T4071] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 158.148460][ T316] usb 5-1: too many configurations: 253, using maximum allowed: 8 [ 158.200952][ T4080] device pim6reg1 entered promiscuous mode [ 158.249040][ T4082] EXT4-fs (loop3): Test dummy encryption mode enabled [ 158.256835][ T4082] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 158.276036][ T4082] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,discard,stripe=0x0000000000000007,commit=0x0000000000000005,jqfmt=vfsv0,barrier=0x0000000000000005,max_batch_time=0x0000000000000002,data_err=abort,,errors=continue [ 158.299869][ T316] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 158.303065][ T4089] ------------[ cut here ]------------ [ 158.307473][ T24] audit: type=1400 audit(1719962585.361:701): avc: denied { mounton } for pid=4088 comm="syz.0.842" path="/106/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 158.334794][ T316] usb 5-1: can't read configurations, error -61 [ 158.341407][ T4089] WARNING: CPU: 1 PID: 4089 at fs/inode.c:361 inc_nlink+0x12b/0x130 [ 158.349507][ T4089] Modules linked in: [ 158.360212][ T4089] CPU: 0 PID: 4089 Comm: syz.0.842 Not tainted 5.10.218-syzkaller-00638-g3feee789f446 #0 [ 158.374020][ T4089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 158.384244][ T4089] RIP: 0010:inc_nlink+0x12b/0x130 [ 158.389340][ T4089] Code: f0 ff e9 30 ff ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 41 ff ff ff 4c 89 ff e8 5f c8 f0 ff e9 34 ff ff ff e8 c5 34 b3 ff <0f> 0b eb 80 90 55 48 89 e5 41 57 41 56 53 48 89 fb 49 bf 00 00 00 [ 158.410828][ T4089] RSP: 0018:ffffc90000f278e0 EFLAGS: 00010283 [ 158.416731][ T4089] RAX: ffffffff81b775bb RBX: 0000000000000000 RCX: 0000000000040000 [ 158.424892][ T4089] RDX: ffffc90005436000 RSI: 00000000000010f3 RDI: 00000000000010f4 [ 158.445338][ T4089] RBP: ffffc90000f27910 R08: ffffffff81b77534 R09: ffffed10220946d8 [ 158.473793][ T4089] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff11024298885 [ 158.484280][ T4089] R13: dffffc0000000000 R14: ffff8881214c43e0 R15: ffff8881214c4428 [ 158.487994][ T316] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 158.492477][ T4089] FS: 00007f1d88b0f6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 158.508620][ T4089] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 158.515024][ T4089] CR2: 00007ffe611a1da8 CR3: 0000000114a9d000 CR4: 00000000003526b0 [ 158.524300][ T4089] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 158.533591][ T4089] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 158.542563][ T4097] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 158.551791][ T4089] Call Trace: [ 158.554999][ T4089] ? show_regs+0x58/0x60 [ 158.563860][ T4097] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 158.571927][ T4089] ? __warn+0x160/0x2f0 [ 158.575144][ T4097] System zones: 0-2, 18-18, 34-35 [ 158.576158][ T4089] ? inc_nlink+0x12b/0x130 [ 158.582422][ T4097] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x0000000000000000,data_err=ignore,,errors=continue [ 158.585627][ T4089] ? report_bug+0x3d9/0x5b0 [ 158.602336][ T4089] ? inc_nlink+0x12b/0x130 [ 158.606527][ T4089] ? handle_bug+0x41/0x70 [ 158.610799][ T4089] ? exc_invalid_op+0x1b/0x50 [ 158.615351][ T4089] ? asm_exc_invalid_op+0x12/0x20 [ 158.616175][ T4106] EXT4-fs (loop3): Ignoring removed orlov option [ 158.620456][ T4089] ? inc_nlink+0xa4/0x130 [ 158.627502][ T4106] EXT4-fs (loop3): Test dummy encryption mode enabled [ 158.631091][ T4089] ? inc_nlink+0x12b/0x130 [ 158.638444][ T4106] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a014e09c, mo2=0002] [ 158.641815][ T4089] ? inc_nlink+0x12b/0x130 [ 158.649435][ T4106] System zones: 1-12 [ 158.653784][ T4089] v9fs_vfs_mkdir_dotl+0x423/0x570 [ 158.657780][ T4106] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.845: casefold flag without casefold feature [ 158.662558][ T4089] ? v9fs_vfs_symlink_dotl+0x500/0x500 [ 158.679998][ T4106] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #12: comm syz.3.845: missing EA_INODE flag [ 158.680313][ T4089] ? selinux_inode_mkdir+0x22/0x30 [ 158.696251][ T4095] F2FS-fs (loop1): Invalid log blocks per segment (5) [ 158.706487][ T4089] ? security_inode_mkdir+0xbc/0x100 [ 158.718384][ T4106] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.845: error while reading EA inode 12 err=-117 [ 158.721970][ T4089] vfs_mkdir+0x4cf/0x6c0 [ 158.730692][ T4095] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 158.745121][ T4089] open_or_create_special_dir+0xe6/0x1d0 [ 158.745132][ T4089] incfs_mount_fs+0x48d/0xa10 [ 158.745142][ T4089] ? incfs_unlink+0x80/0x80 [ 158.745155][ T4089] ? vfs_parse_fs_string+0x18c/0x220 [ 158.745165][ T4089] ? cap_capable+0x1ce/0x270 [ 158.745177][ T4089] legacy_get_tree+0xf1/0x190 [ 158.745188][ T4089] ? incfs_unlink+0x80/0x80 [ 158.745260][ T4089] vfs_get_tree+0x88/0x290 [ 158.752906][ T4106] EXT4-fs (loop3): 1 orphan inode deleted [ 158.765474][ T4089] do_new_mount+0x2ba/0xb30 [ 158.769563][ T4106] EXT4-fs (loop3): mounted filesystem without journal. Opts: orlov,minixdf,max_dir_size_kb=0x0000000000009c7c,debug,grpquota,errors=continue,test_dummy_encryption,auto_da_alloc,nodiscard,,errors=continue [ 158.778199][ T4089] ? do_move_mount_old+0x160/0x160 [ 158.788322][ T4095] F2FS-fs (loop1): Found nat_bits in checkpoint [ 158.794971][ T316] usb 5-1: too many configurations: 253, using maximum allowed: 8 [ 158.812875][ T4089] ? security_capable+0x87/0xb0 [ 158.836310][ T4089] ? ns_capable+0x89/0xe0 [ 158.841120][ T4089] path_mount+0x56f/0xcb0 [ 158.845828][ T4089] __se_sys_mount+0x2c4/0x3b0 [ 158.850374][ T4089] ? __x64_sys_mount+0xd0/0xd0 [ 158.857277][ T4089] ? fpu__clear_all+0x20/0x20 [ 158.862338][ T4089] __x64_sys_mount+0xbf/0xd0 [ 158.868074][ T4089] do_syscall_64+0x34/0x70 [ 158.873665][ T4089] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 158.879627][ T4095] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 158.882031][ T4089] RIP: 0033:0x7f1d8988df19 [ 158.886462][ T4095] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 158.890745][ T4089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.890752][ T4089] RSP: 002b:00007f1d88b0f048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 158.890764][ T4089] RAX: ffffffffffffffda RBX: 00007f1d89a1bf60 RCX: 00007f1d8988df19 [ 158.890771][ T4089] RDX: 0000000020000040 RSI: 0000000020000100 RDI: 0000000020000140 [ 158.890778][ T4089] RBP: 00007f1d898fcbcd R08: 0000000000000000 R09: 0000000000000000 [ 158.890784][ T4089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.890790][ T4089] R13: 000000000000000b R14: 00007f1d89a1bf60 R15: 00007ffe6d394658 [ 158.890799][ T4089] ---[ end trace 0493f65979462c3b ]--- [ 158.891338][ T4089] incfs_lookup_dentry err:-14 [ 158.933631][ T4097] EXT4-fs (loop0): re-mounted. Opts: (null) [ 158.958011][ T4089] incfs: Can't find or create .incomplete dir in ./file0 [ 158.992142][ T4089] incfs: mount failed -14 [ 158.992411][ T24] audit: type=1400 audit(1719962586.051:702): avc: denied { remove_name } for pid=4088 comm="syz.0.842" name=".index" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 159.018733][ T316] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 159.026194][ T316] usb 5-1: can't read configurations, error -61 [ 159.037991][ T316] usb usb5-port1: attempt power cycle [ 159.048359][ T24] audit: type=1400 audit(1719962586.051:703): avc: denied { rmdir } for pid=4088 comm="syz.0.842" name=".index" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 159.242214][ T4120] F2FS-fs (loop3): Found nat_bits in checkpoint [ 159.274455][ T4120] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 159.308215][ T637] attempt to access beyond end of device [ 159.308215][ T637] loop3: rw=2049, want=45104, limit=40427 [ 159.348098][ T798] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 159.457989][ T316] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 159.472252][ T4133] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 159.488660][ T4133] EXT4-fs (loop3): orphan cleanup on readonly fs [ 159.496307][ T4133] EXT4-fs warning (device loop3): ext4_enable_quotas:6467: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 159.514031][ T4133] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 159.521768][ T4133] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.850: bg 0: block 40: padding at end of block bitmap is not set [ 159.540454][ T4133] EXT4-fs error (device loop3) in ext4_mb_clear_bb:5646: Corrupt filesystem [ 159.549610][ T4133] EXT4-fs (loop3): 1 truncate cleaned up [ 159.555066][ T4133] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 159.597998][ T798] usb 2-1: Using ep0 maxpacket: 32 [ 159.603112][ T316] usb 5-1: too many configurations: 253, using maximum allowed: 8 [ 159.641515][ T332] Bluetooth: hci0: Frame reassembly failed (-84) [ 159.670234][ T4135] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 159.679550][ T4135] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038 (0x7fffffff) [ 159.797858][ T4143] syz.3.850[4143] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 159.798256][ T4143] syz.3.850[4143] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 159.908383][ T316] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 159.918811][ T798] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.927117][ T316] usb 5-1: can't read configurations, error -61 [ 159.951846][ T798] usb 2-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 159.951858][ T798] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.952527][ T798] usb 2-1: config 0 descriptor?? [ 159.988310][ T4147] device pim6reg1 entered promiscuous mode [ 160.019120][ T798] usb 2-1: bad CDC descriptors [ 160.088869][ T4151] EXT4-fs (loop0): Test dummy encryption mode enabled [ 160.095681][ T4151] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 160.106846][ T4151] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,discard,stripe=0x0000000000000007,commit=0x0000000000000005,jqfmt=vfsv0,barrier=0x0000000000000005,max_batch_time=0x0000000000000002,data_err=abort,,errors=continue [ 160.130839][ T316] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 160.223737][ T796] usb 2-1: USB disconnect, device number 26 [ 160.268085][ T316] usb 5-1: too many configurations: 253, using maximum allowed: 8 [ 160.294725][ T4158] EXT4-fs (loop0): Ignoring removed orlov option [ 160.304448][ T4158] EXT4-fs (loop0): Test dummy encryption mode enabled [ 160.329357][ T4158] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a014e09c, mo2=0002] [ 160.338102][ T4158] System zones: 1-12 [ 160.342334][ T4158] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.857: casefold flag without casefold feature [ 160.360399][ T4158] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #12: comm syz.0.857: missing EA_INODE flag [ 160.376171][ T4158] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.857: error while reading EA inode 12 err=-117 [ 160.390612][ T4158] EXT4-fs (loop0): 1 orphan inode deleted [ 160.398959][ T4158] EXT4-fs (loop0): mounted filesystem without journal. Opts: orlov,minixdf,max_dir_size_kb=0x0000000000009c7c,debug,grpquota,errors=continue,test_dummy_encryption,auto_da_alloc,nodiscard,,errors=continue [ 160.408126][ T316] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 160.431424][ T316] usb 5-1: can't read configurations, error -61 [ 160.438915][ T4164] EXT4-fs (loop2): Test dummy encryption mode enabled [ 160.440382][ T316] usb usb5-port1: unable to enumerate USB device [ 160.452358][ T4164] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 160.468452][ T4164] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,discard,stripe=0x0000000000000007,commit=0x0000000000000005,jqfmt=vfsv0,barrier=0x0000000000000005,max_batch_time=0x0000000000000002,data_err=abort,,errors=continue [ 160.613890][ T4173] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 160.625542][ T4173] EXT4-fs (loop0): orphan cleanup on readonly fs [ 160.634828][ T4179] device pim6reg1 entered promiscuous mode [ 160.645983][ T4173] EXT4-fs warning (device loop0): ext4_enable_quotas:6467: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 160.662037][ T4173] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 160.671359][ T4173] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.861: bg 0: block 40: padding at end of block bitmap is not set [ 160.686234][ T4173] EXT4-fs error (device loop0) in ext4_mb_clear_bb:5646: Corrupt filesystem [ 160.696520][ T4173] EXT4-fs (loop0): 1 truncate cleaned up [ 160.704151][ T4173] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 161.428538][ T3059] attempt to access beyond end of device [ 161.428538][ T3059] loop1: rw=2049, want=45104, limit=40427 [ 161.497557][ T4192] syz.0.861[4192] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.497894][ T4192] syz.0.861[4192] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.982602][ T4201] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 162.001979][ T4201] EXT4-fs (loop0): orphan cleanup on readonly fs [ 162.008839][ T4201] EXT4-fs warning (device loop0): ext4_enable_quotas:6467: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 162.009740][ T4198] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 162.023663][ T4201] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 162.032462][ T4198] ext4 filesystem being mounted at /172/file0 supports timestamps until 2038 (0x7fffffff) [ 162.048554][ T4201] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.868: bg 0: block 40: padding at end of block bitmap is not set [ 162.063064][ T4201] EXT4-fs error (device loop0) in ext4_mb_clear_bb:5646: Corrupt filesystem [ 162.072105][ T4201] EXT4-fs (loop0): 1 truncate cleaned up [ 162.077647][ T4201] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 162.206340][ T4206] syz.0.868[4206] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 162.206381][ T4206] syz.0.868[4206] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 162.346194][ T4208] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 162.365465][ T4208] EXT4-fs (loop3): orphan cleanup on readonly fs [ 162.372070][ T4208] EXT4-fs warning (device loop3): ext4_enable_quotas:6467: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 162.386564][ T4208] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 162.393414][ T4208] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.869: bg 0: block 40: padding at end of block bitmap is not set [ 162.407874][ T4208] EXT4-fs error (device loop3) in ext4_mb_clear_bb:5646: Corrupt filesystem [ 162.416902][ T4208] EXT4-fs (loop3): 1 truncate cleaned up [ 162.422447][ T4208] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 162.581108][ T4213] syz.3.869[4213] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 162.581652][ T4213] syz.3.869[4213] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 162.808940][ T4217] EXT4-fs (loop0): Ignoring removed orlov option [ 162.826824][ T4217] EXT4-fs (loop0): Test dummy encryption mode enabled [ 162.865051][ T4217] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a014e09c, mo2=0002] [ 162.875439][ T4217] System zones: 1-12 [ 162.880851][ T4217] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.871: casefold flag without casefold feature [ 162.898048][ T4217] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #12: comm syz.0.871: missing EA_INODE flag [ 162.910084][ T4217] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.871: error while reading EA inode 12 err=-117 [ 162.922353][ T4217] EXT4-fs (loop0): 1 orphan inode deleted [ 162.928080][ T4217] EXT4-fs (loop0): mounted filesystem without journal. Opts: orlov,minixdf,max_dir_size_kb=0x0000000000009c7c,debug,grpquota,errors=continue,test_dummy_encryption,auto_da_alloc,nodiscard,,errors=continue [ 163.203620][ T4230] device pim6reg1 entered promiscuous mode [ 163.368017][ T20] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 163.553456][ T4234] F2FS-fs (loop3): Found nat_bits in checkpoint [ 163.592254][ T4234] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 163.599151][ T4234] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 163.631024][ T4240] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 163.641445][ T4240] EXT4-fs (loop1): orphan cleanup on readonly fs [ 163.647916][ T4240] EXT4-fs warning (device loop1): ext4_enable_quotas:6467: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 163.678039][ T4240] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 163.708547][ T4240] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.878: bg 0: block 40: padding at end of block bitmap is not set [ 163.726255][ T4240] EXT4-fs error (device loop1) in ext4_mb_clear_bb:5646: Corrupt filesystem [ 163.736238][ T4240] EXT4-fs (loop1): 1 truncate cleaned up [ 163.741828][ T4240] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 163.759017][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.774498][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.904332][ T20] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 163.918168][ T20] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.10 [ 163.927229][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.997499][ T4255] syz.1.878[4255] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 163.998629][ T4255] syz.1.878[4255] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 164.081045][ T20] usb 1-1: config 0 descriptor?? [ 164.289333][ T4257] EXT4-fs (loop4): Ignoring removed orlov option [ 164.296672][ T4257] EXT4-fs (loop4): Test dummy encryption mode enabled [ 164.328390][ T4257] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a014e09c, mo2=0002] [ 164.336697][ T4257] System zones: 1-12 [ 164.344415][ T4257] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.882: casefold flag without casefold feature [ 164.361212][ T4257] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #12: comm syz.4.882: missing EA_INODE flag [ 164.374244][ T4257] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.882: error while reading EA inode 12 err=-117 [ 164.387872][ T4257] EXT4-fs (loop4): 1 orphan inode deleted [ 164.393760][ T4257] EXT4-fs (loop4): mounted filesystem without journal. Opts: orlov,minixdf,max_dir_size_kb=0x0000000000009c7c,debug,grpquota,errors=continue,test_dummy_encryption,auto_da_alloc,nodiscard,,errors=continue [ 164.472069][ T4262] vfat filesystem being mounted at /178/file0 supports timestamps until 2107 (0x10391447e) [ 164.549625][ T4267] binder: BINDER_SET_CONTEXT_MGR already set [ 164.555506][ T4267] binder: 4266:4267 ioctl 4018620d 20000040 returned -16 [ 164.598726][ T20] prodikeys 0003:041E:2801.001F: unexpected long global item [ 164.606115][ T20] prodikeys 0003:041E:2801.001F: hid parse failed [ 164.612883][ T20] prodikeys: probe of 0003:041E:2801.001F failed with error -22 [ 165.306406][ T795] usb 1-1: USB disconnect, device number 19 [ 165.457978][ T794] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 165.529537][ T4287] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 165.537872][ T4287] EXT4-fs (loop3): orphan cleanup on readonly fs [ 165.544603][ T4287] EXT4-fs warning (device loop3): ext4_enable_quotas:6467: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 165.559232][ T4287] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 165.566443][ T4287] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.890: bg 0: block 40: padding at end of block bitmap is not set [ 165.580875][ T4287] EXT4-fs error (device loop3) in ext4_mb_clear_bb:5646: Corrupt filesystem [ 165.590903][ T4287] EXT4-fs (loop3): 1 truncate cleaned up [ 165.596417][ T4287] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 165.670739][ T4291] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 165.679155][ T4291] EXT4-fs (loop2): orphan cleanup on readonly fs [ 165.685644][ T4291] EXT4-fs warning (device loop2): ext4_enable_quotas:6467: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 165.698378][ T794] usb 5-1: Using ep0 maxpacket: 16 [ 165.700474][ T4291] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 165.711775][ T4291] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.891: bg 0: block 40: padding at end of block bitmap is not set [ 165.726223][ T4291] EXT4-fs error (device loop2) in ext4_mb_clear_bb:5646: Corrupt filesystem [ 165.729524][ T4294] syz.3.890[4294] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 165.734787][ T4294] syz.3.890[4294] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 165.735307][ T4291] EXT4-fs (loop2): 1 truncate cleaned up [ 165.762322][ T4291] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 165.818046][ T794] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 165.844007][ T794] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 165.854296][ T794] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 165.857790][ T4296] EXT4-fs: failed to create workqueue [ 165.864172][ T794] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid maxpacket 65535, setting to 1024 [ 165.869355][ T4296] EXT4-fs (loop0): mount failed [ 165.880229][ T794] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 1024 [ 165.894898][ T794] usb 5-1: config 1 interface 0 has no altsetting 0 [ 165.901395][ T794] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 165.910486][ T794] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.966786][ T4304] syz.2.891[4304] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 165.967270][ T4304] syz.2.891[4304] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 166.179557][ T794] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 166.199947][ T4306] vfat filesystem being mounted at /119/file0 supports timestamps until 2107 (0x10391447e) [ 166.301078][ T4311] EXT4-fs (loop0): Ignoring removed orlov option [ 166.307416][ T4311] EXT4-fs (loop0): Test dummy encryption mode enabled [ 166.314831][ T4311] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a014e09c, mo2=0002] [ 166.322716][ T4311] System zones: 1-12 [ 166.327233][ T4311] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.894: casefold flag without casefold feature [ 166.340294][ T4311] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #12: comm syz.0.894: missing EA_INODE flag [ 166.352220][ T4311] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.894: error while reading EA inode 12 err=-117 [ 166.364742][ T4311] EXT4-fs (loop0): 1 orphan inode deleted [ 166.370915][ T4311] EXT4-fs (loop0): mounted filesystem without journal. Opts: orlov,minixdf,max_dir_size_kb=0x0000000000009c7c,debug,grpquota,errors=continue,test_dummy_encryption,auto_da_alloc,nodiscard,,errors=continue [ 166.401050][ T794] scsi host1: usb-storage 5-1:1.0 [ 166.468853][ T4318] vfat filesystem being mounted at /121/file0 supports timestamps until 2107 (0x10391447e) [ 166.930601][ T4324] EXT4-fs (loop0): Ignoring removed orlov option [ 166.938202][ T4324] EXT4-fs (loop0): Test dummy encryption mode enabled [ 166.945386][ T4324] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a014e09c, mo2=0002] [ 166.953281][ T4324] System zones: 1-12 [ 166.957577][ T4324] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.897: casefold flag without casefold feature [ 166.970418][ T4324] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #12: comm syz.0.897: missing EA_INODE flag [ 166.982030][ T4324] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.897: error while reading EA inode 12 err=-117 [ 166.994312][ T4324] EXT4-fs (loop0): 1 orphan inode deleted [ 166.999908][ T4324] EXT4-fs (loop0): mounted filesystem without journal. Opts: orlov,minixdf,max_dir_size_kb=0x0000000000009c7c,debug,grpquota,errors=continue,test_dummy_encryption,auto_da_alloc,nodiscard,,errors=continue [ 167.183926][ T4332] exfat filesystem being mounted at /104/qY3aK supports timestamps until 2107 (0x10391447f) [ 167.217527][ T24] audit: type=1400 audit(6014929890.269:704): avc: denied { read } for pid=4337 comm="syz.0.902" name="rtc0" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 167.242957][ T24] audit: type=1400 audit(6014929890.289:705): avc: denied { open } for pid=4337 comm="syz.0.902" path="/dev/rtc0" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 167.341923][ T4346] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 167.350208][ T4346] EXT4-fs (loop0): orphan cleanup on readonly fs [ 167.356615][ T4346] EXT4-fs warning (device loop0): ext4_enable_quotas:6467: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 167.372416][ T4346] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 167.382208][ T4346] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.905: bg 0: block 40: padding at end of block bitmap is not set [ 167.398390][ T4346] EXT4-fs error (device loop0) in ext4_mb_clear_bb:5646: Corrupt filesystem [ 167.401584][ T4347] EXT4-fs (loop3): Ignoring removed orlov option [ 167.410505][ T4346] EXT4-fs (loop0): 1 truncate cleaned up [ 167.418679][ T4346] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 167.431424][ T4347] EXT4-fs (loop3): Test dummy encryption mode enabled [ 167.448700][ T794] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 167.457813][ T4347] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a014e09c, mo2=0002] [ 167.487085][ T4347] System zones: 1-12 [ 167.497913][ T4347] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.906: casefold flag without casefold feature [ 167.516725][ T4347] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #12: comm syz.3.906: missing EA_INODE flag [ 167.530139][ T4347] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.906: error while reading EA inode 12 err=-117 [ 167.540934][ T4341] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 167.542582][ T4347] EXT4-fs (loop3): 1 orphan inode deleted [ 167.549915][ T4341] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 167.556619][ T4347] EXT4-fs (loop3): mounted filesystem without journal. Opts: orlov,minixdf,max_dir_size_kb=0x0000000000009c7c,debug,grpquota,errors=continue,test_dummy_encryption,auto_da_alloc,nodiscard,,errors=continue [ 167.566492][ T4341] F2FS-fs (loop2): invalid crc value [ 167.588284][ T4353] syz.0.905[4353] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 167.590997][ T4353] syz.0.905[4353] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 167.605021][ T4341] F2FS-fs (loop2): Found nat_bits in checkpoint [ 167.639181][ T4341] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 167.646323][ T4341] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 167.667211][ T4341] serio: Serial port ptm0 [ 167.722497][ T4341] attempt to access beyond end of device [ 167.722497][ T4341] loop2: rw=2049, want=45200, limit=40427 [ 167.770802][ T796] usb 5-1: USB disconnect, device number 28 [ 167.779266][ T4314] sddr09: could not read card info [ 167.785553][ T3104] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 167.793742][ T3104] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 167.806317][ T3104] sd 1:0:0:0: [sdb] Write Protect is off [ 167.813243][ T3104] sd 1:0:0:0: [sdb] Asking for cache data failed [ 167.819736][ T3104] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 167.830147][ T3104] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 167.840207][ T332] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 167.849688][ T332] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 167.871875][ T1669] udevd[1669]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 168.145566][ T795] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 168.588113][ T795] usb 4-1: too many configurations: 65, using maximum allowed: 8 [ 168.718259][ T4383] exfat: Unknown parameter './file0' [ 169.161443][ T4388] exfat filesystem being mounted at /107/qY3aK supports timestamps until 2107 (0x10391447f) [ 169.281610][ T4396] EXT4-fs (loop2): Ignoring removed orlov option [ 169.288129][ T4396] EXT4-fs (loop2): Test dummy encryption mode enabled [ 169.295441][ T4396] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a014e09c, mo2=0002] [ 169.305369][ T4396] System zones: 1-12 [ 169.309728][ T4396] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.917: casefold flag without casefold feature [ 169.322165][ T795] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 169.331122][ T795] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.339204][ T4396] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz.2.917: missing EA_INODE flag [ 169.350792][ T4396] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.917: error while reading EA inode 12 err=-117 [ 169.363436][ T4396] EXT4-fs (loop2): 1 orphan inode deleted [ 169.369297][ T4396] EXT4-fs (loop2): mounted filesystem without journal. Opts: orlov,minixdf,max_dir_size_kb=0x0000000000009c7c,debug,grpquota,errors=continue,test_dummy_encryption,auto_da_alloc,nodiscard,,errors=continue [ 169.511036][ T4409] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 169.519469][ T4409] EXT4-fs (loop0): orphan cleanup on readonly fs [ 169.525870][ T4409] EXT4-fs warning (device loop0): ext4_enable_quotas:6467: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 169.540969][ T4409] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 169.547727][ T4409] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.921: bg 0: block 40: padding at end of block bitmap is not set [ 169.562173][ T4409] EXT4-fs error (device loop0) in ext4_mb_clear_bb:5646: Corrupt filesystem [ 169.571134][ T4409] EXT4-fs (loop0): 1 truncate cleaned up [ 169.576701][ T4409] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 169.581825][ T4416] EXT4-fs (loop1): Ignoring removed orlov option [ 169.598245][ T4416] EXT4-fs (loop1): Test dummy encryption mode enabled [ 169.621660][ T4416] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a014e09c, mo2=0002] [ 169.638006][ T4416] System zones: 1-12 [ 169.649055][ T4416] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.923: casefold flag without casefold feature [ 169.678174][ T4416] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #12: comm syz.1.923: missing EA_INODE flag [ 169.690283][ T4416] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.923: error while reading EA inode 12 err=-117 [ 169.703233][ T4416] EXT4-fs (loop1): 1 orphan inode deleted [ 169.712088][ T4416] EXT4-fs (loop1): mounted filesystem without journal. Opts: orlov,minixdf,max_dir_size_kb=0x0000000000009c7c,debug,grpquota,errors=continue,test_dummy_encryption,auto_da_alloc,nodiscard,,errors=continue [ 169.735799][ T4419] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 169.749294][ T4419] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038 (0x7fffffff) [ 169.759548][ T4422] syz.0.921[4422] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 169.759609][ T4422] syz.0.921[4422] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 169.838050][ T795] uvcvideo: Found UVC 0.00 device (046d:08c1) [ 169.856186][ T795] uvcvideo: No valid video chain found. [ 170.102766][ T25] usb 4-1: USB disconnect, device number 22 [ 170.207995][ T794] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 170.461835][ T4433] exfat filesystem being mounted at /111/qY3aK supports timestamps until 2107 (0x10391447f) [ 170.488105][ T794] usb 5-1: Using ep0 maxpacket: 16 [ 170.648553][ T794] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 170.684022][ T794] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 170.693943][ T794] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 170.703718][ T794] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid maxpacket 65535, setting to 1024 [ 170.714906][ T794] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 1024 [ 170.725274][ T794] usb 5-1: config 1 interface 0 has no altsetting 0 [ 170.732028][ T794] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 170.741296][ T794] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.749328][ T4448] EXT4-fs (loop3): Ignoring removed orlov option [ 170.755806][ T4448] EXT4-fs (loop3): Test dummy encryption mode enabled [ 170.763822][ T4448] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a014e09c, mo2=0002] [ 170.771909][ T4448] System zones: 1-12 [ 170.776110][ T4448] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.930: casefold flag without casefold feature [ 170.789134][ T794] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 170.798804][ T4448] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #12: comm syz.3.930: missing EA_INODE flag [ 170.811075][ T4448] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.930: error while reading EA inode 12 err=-117 [ 170.823820][ T4448] EXT4-fs (loop3): 1 orphan inode deleted [ 170.829440][ T4448] EXT4-fs (loop3): mounted filesystem without journal. Opts: orlov,minixdf,max_dir_size_kb=0x0000000000009c7c,debug,grpquota,errors=continue,test_dummy_encryption,auto_da_alloc,nodiscard,,errors=continue [ 170.878651][ T4457] exfat: Unknown parameter './file0' [ 170.998759][ T794] scsi host1: usb-storage 5-1:1.0 [ 171.070280][ T4462] exfat filesystem being mounted at /187/qY3aK supports timestamps until 2107 (0x10391447f) [ 171.302690][ T4471] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 171.310830][ T4471] EXT4-fs (loop0): orphan cleanup on readonly fs [ 171.317340][ T4471] EXT4-fs warning (device loop0): ext4_enable_quotas:6467: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 171.331839][ T4471] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 171.338831][ T4471] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.936: bg 0: block 40: padding at end of block bitmap is not set [ 171.353015][ T4471] EXT4-fs error (device loop0) in ext4_mb_clear_bb:5646: Corrupt filesystem [ 171.362126][ T4471] EXT4-fs (loop0): 1 truncate cleaned up [ 171.367626][ T4471] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 171.466452][ T4474] syz.0.936[4474] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 171.466492][ T4474] syz.0.936[4474] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 171.558275][ T794] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 171.849706][ T4480] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 171.858984][ T4480] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038 (0x7fffffff) [ 171.958073][ T794] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.969202][ T794] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.978768][ T794] usb 4-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 171.987635][ T794] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.995961][ T794] usb 4-1: config 0 descriptor?? [ 172.008332][ T798] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 172.108008][ T795] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 172.260640][ T20] usb 5-1: USB disconnect, device number 29 [ 172.277986][ T4463] sddr09: could not read card info [ 172.283143][ T3104] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 172.290321][ T3104] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 172.296123][ T3104] sd 1:0:0:0: [sdb] Write Protect is off [ 172.303203][ T3104] sd 1:0:0:0: [sdb] Asking for cache data failed [ 172.309524][ T3104] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 172.323890][ T3104] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 172.343007][ T309] udevd[309]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 172.518033][ T795] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.543111][ T795] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.552894][ T795] usb 3-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 172.561887][ T795] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.571089][ T795] usb 3-1: config 0 descriptor?? [ 172.816220][ T316] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 173.029170][ T4508] EXT4-fs (loop0): Ignoring removed orlov option [ 173.035908][ T4508] EXT4-fs (loop0): Test dummy encryption mode enabled [ 173.043480][ T4508] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a014e09c, mo2=0002] [ 173.052686][ T4508] System zones: 1-12 [ 173.053728][ T795] itetech 0003:258A:6A88.0020: unexpected long global item [ 173.057194][ T4508] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.944: casefold flag without casefold feature [ 173.065591][ T795] itetech: probe of 0003:258A:6A88.0020 failed with error -22 [ 173.075942][ T316] usb 2-1: Using ep0 maxpacket: 32 [ 173.088764][ T4508] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #12: comm syz.0.944: missing EA_INODE flag [ 173.100125][ T798] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 173.100878][ T4508] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.944: error while reading EA inode 12 err=-117 [ 173.119765][ T4508] EXT4-fs (loop0): 1 orphan inode deleted [ 173.125290][ T4508] EXT4-fs (loop0): mounted filesystem without journal. Opts: orlov,minixdf,max_dir_size_kb=0x0000000000009c7c,debug,grpquota,errors=continue,test_dummy_encryption,auto_da_alloc,nodiscard,,errors=continue [ 173.152132][ T4508] overlayfs: failed to resolve './file0': -2 [ 173.237036][ T316] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.247888][ T316] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.257795][ T316] usb 2-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 173.266878][ T316] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.277531][ T316] usb 2-1: config 0 descriptor?? [ 173.395128][ T4491] udc-core: couldn't find an available UDC or it's busy [ 173.405777][ T4491] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 173.439366][ T53] usb 3-1: USB disconnect, device number 26 [ 173.678120][ T798] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 173.688991][ T798] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 173.699545][ T798] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 173.712192][ T798] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 173.722879][ T798] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 173.951666][ T4517] DRBG: could not allocate digest TFM handle: hmac(sha256) [ 174.000462][ T798] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 174.009908][ T798] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.018484][ T798] usb 5-1: Product: syz [ 174.022643][ T798] usb 5-1: Manufacturer: syz [ 174.030071][ T798] usb 5-1: SerialNumber: syz [ 174.048042][ T316] usbhid 2-1:0.0: can't add hid device: -71 [ 174.055162][ T316] usbhid: probe of 2-1:0.0 failed with error -71 [ 174.071957][ T316] usb 2-1: USB disconnect, device number 27 [ 174.078125][ T4506] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 174.178338][ T4528] exfat: Unknown parameter './file0' [ 174.268093][ T794] usbhid 4-1:0.0: can't add hid device: -71 [ 174.274078][ T794] usbhid: probe of 4-1:0.0 failed with error -71 [ 174.281523][ T794] usb 4-1: USB disconnect, device number 23 [ 174.298734][ T4506] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 174.315650][ T4506] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 174.891633][ T4538] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 174.901280][ T4538] EXT4-fs (loop1): orphan cleanup on readonly fs [ 174.913860][ T4538] EXT4-fs warning (device loop1): ext4_enable_quotas:6467: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 174.932434][ T4538] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 174.940450][ T4538] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.950: bg 0: block 40: padding at end of block bitmap is not set [ 174.956661][ T4538] EXT4-fs error (device loop1) in ext4_mb_clear_bb:5646: Corrupt filesystem [ 174.965797][ T4538] EXT4-fs (loop1): 1 truncate cleaned up [ 174.971409][ T4538] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 174.980914][ T4542] EXT4-fs (loop0): Test dummy encryption mode enabled [ 174.992614][ T4542] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 175.008934][ T4542] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,discard,stripe=0x0000000000000007,commit=0x0000000000000005,jqfmt=vfsv0,barrier=0x0000000000000005,max_batch_time=0x0000000000000002,data_err=abort,,errors=continue [ 175.193166][ T4554] syz.1.950[4554] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 175.193227][ T4554] syz.1.950[4554] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 175.197236][ T4550] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 175.215498][ T4506] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 175.224165][ T4550] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038 (0x7fffffff) [ 175.253800][ T4506] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 175.356486][ T4563] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 175.365839][ T4563] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038 (0x7fffffff) [ 175.654152][ T4506] erofs: (device loop4): mounted with root inode @ nid 36. [ 175.663735][ T4506] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -1027 in[4096, 0] out[4096] [ 175.708077][ T798] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 175.717003][ T798] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM, 42:42:42:42:42:42 [ 176.068569][ T794] usb 5-1: USB disconnect, device number 30 [ 176.088527][ T794] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM [ 176.160997][ T4594] EXT4-fs (loop3): Ignoring removed orlov option [ 176.170073][ T4594] EXT4-fs (loop3): Test dummy encryption mode enabled [ 176.181285][ T4594] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a014e09c, mo2=0002] [ 176.189488][ T4594] System zones: 1-12 [ 176.200331][ T4594] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.962: casefold flag without casefold feature [ 176.214706][ T4594] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #12: comm syz.3.962: missing EA_INODE flag [ 176.226859][ T4594] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.962: error while reading EA inode 12 err=-117 [ 176.239531][ T4594] EXT4-fs (loop3): 1 orphan inode deleted [ 176.245152][ T4594] EXT4-fs (loop3): mounted filesystem without journal. Opts: orlov,minixdf,max_dir_size_kb=0x0000000000009c7c,debug,grpquota,errors=continue,test_dummy_encryption,auto_da_alloc,nodiscard,,errors=continue [ 176.423008][ T4620] EXT4-fs (loop3): Test dummy encryption mode enabled [ 176.429871][ T4620] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 176.451001][ T4620] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,discard,stripe=0x0000000000000007,commit=0x0000000000000005,jqfmt=vfsv0,barrier=0x0000000000000005,max_batch_time=0x0000000000000002,data_err=abort,,errors=continue [ 176.451500][ T4615] exfat filesystem being mounted at /79/qY3aK supports timestamps until 2107 (0x10391447f) [ 176.519302][ T24] audit: type=1326 audit(6014929899.559:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4613 comm="syz.0.964" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1d8988df19 code=0x0 [ 176.997995][ T798] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 177.150965][ T4639] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 177.197196][ T4639] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038 (0x7fffffff) [ 177.398077][ T798] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.410322][ T798] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.420836][ T798] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 177.429693][ T798] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.438324][ T798] usb 5-1: config 0 descriptor?? [ 177.455502][ T4652] 9p filesystem being mounted at /81/file0 supports timestamps until 2106 (0xffffffff) [ 177.574326][ T4658] netlink: 12 bytes leftover after parsing attributes in process `syz.2.977'. [ 177.583430][ T4658] device lo entered promiscuous mode [ 177.598807][ T4658] vfat filesystem being mounted at /124/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2107 (0x10391447e) [ 177.624940][ T4658] device lo left promiscuous mode [ 177.701948][ T4664] EXT4-fs (loop2): Ignoring removed orlov option [ 177.708391][ T4664] EXT4-fs (loop2): Test dummy encryption mode enabled [ 177.715776][ T4664] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a014e09c, mo2=0002] [ 177.723883][ T4664] System zones: 1-12 [ 177.728883][ T4664] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.978: casefold flag without casefold feature [ 177.742523][ T4664] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz.2.978: missing EA_INODE flag [ 177.756046][ T4664] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.978: error while reading EA inode 12 err=-117 [ 177.770746][ T4664] EXT4-fs (loop2): 1 orphan inode deleted [ 177.776912][ T4664] EXT4-fs (loop2): mounted filesystem without journal. Opts: orlov,minixdf,max_dir_size_kb=0x0000000000009c7c,debug,grpquota,errors=continue,test_dummy_encryption,auto_da_alloc,nodiscard,,errors=continue [ 177.918832][ T798] isku 0003:1E7D:319C.0021: unknown main item tag 0x0 [ 177.925465][ T798] isku 0003:1E7D:319C.0021: unbalanced collection at end of report description [ 177.936337][ T798] isku 0003:1E7D:319C.0021: parse failed [ 177.942039][ T798] isku: probe of 0003:1E7D:319C.0021 failed with error -22 [ 177.968001][ T20] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 178.149191][ T53] usb 5-1: USB disconnect, device number 31 [ 178.359314][ T20] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 178.373390][ T20] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 178.384378][ T20] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 178.434221][ T20] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 178.445349][ T20] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 178.538291][ T4680] exfat: Unknown parameter './file0' [ 178.608416][ T20] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 178.617843][ T20] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.629333][ T20] usb 1-1: Product: syz [ 178.633359][ T20] usb 1-1: Manufacturer: syz [ 178.637766][ T20] usb 1-1: SerialNumber: syz [ 178.662285][ T4682] exfat filesystem being mounted at /197/qY3aK supports timestamps until 2107 (0x10391447f) [ 178.688362][ T4667] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 178.761692][ T4689] 9p filesystem being mounted at /127/file0 supports timestamps until 2106 (0xffffffff) [ 178.889276][ T4696] netlink: 12 bytes leftover after parsing attributes in process `syz.2.988'. [ 178.905981][ T4696] vfat filesystem being mounted at /129/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2107 (0x10391447e) [ 178.909579][ T4667] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 178.965039][ T4667] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 179.639080][ T4712] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 179.666793][ T4712] ext4 filesystem being mounted at /198/file0 supports timestamps until 2038 (0x7fffffff) [ 179.770158][ T4719] exfat filesystem being mounted at /97/qY3aK supports timestamps until 2107 (0x10391447f) [ 179.876972][ T4667] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 179.883850][ T4667] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 180.138858][ T4667] erofs: (device loop0): mounted with root inode @ nid 36. [ 180.148712][ T4667] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -1027 in[4096, 0] out[4096] [ 180.168124][ T20] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 180.191393][ T20] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 180.206179][ T4732] netlink: 12 bytes leftover after parsing attributes in process `syz.1.999'. [ 180.269040][ T4732] vfat filesystem being mounted at /88/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2107 (0x10391447e) [ 180.455556][ T4752] device veth1_macvtap left promiscuous mode [ 180.525555][ T20] usb 1-1: USB disconnect, device number 20 [ 180.553526][ T20] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM [ 180.853533][ T4755] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 180.867975][ T798] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 180.870961][ T4755] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 180.915203][ T4755] F2FS-fs (loop3): invalid crc value [ 180.924481][ T4755] F2FS-fs (loop3): Found nat_bits in checkpoint [ 180.988734][ T4755] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 180.995951][ T4755] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 181.036517][ T4755] serio: Serial port ptm0 [ 181.084875][ T4755] attempt to access beyond end of device [ 181.084875][ T4755] loop3: rw=2049, want=45200, limit=40427 [ 181.118067][ T798] usb 3-1: Using ep0 maxpacket: 16 [ 181.125807][ T332] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 181.138735][ T332] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 181.248083][ T798] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.258957][ T798] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.497486][ T798] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 181.506702][ T798] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.515278][ T798] usb 3-1: config 0 descriptor?? [ 181.552761][ T4791] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 181.564930][ T4791] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038 (0x7fffffff) [ 181.684935][ T4800] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1010'. [ 181.719851][ T4800] vfat filesystem being mounted at /102/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2107 (0x10391447e) [ 181.869044][ T4809] EXT4-fs (loop4): Test dummy encryption mode enabled [ 181.875920][ T4809] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 181.886962][ T4809] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,discard,stripe=0x0000000000000007,commit=0x0000000000000005,jqfmt=vfsv0,barrier=0x0000000000000005,max_batch_time=0x0000000000000002,data_err=abort,,errors=continue [ 181.990357][ T24] audit: type=1107 audit(6014929905.049:707): pid=4756 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 182.078004][ T798] usbhid 3-1:0.0: can't add hid device: -71 [ 182.083801][ T798] usbhid: probe of 3-1:0.0 failed with error -71 [ 182.090952][ T798] usb 3-1: USB disconnect, device number 27 [ 182.328002][ T20] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 182.368020][ T316] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 182.407611][ T24] audit: type=1326 audit(6014929905.459:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4826 comm="syz.3.1020" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f238e474f19 code=0x0 [ 182.507973][ T24] audit: type=1400 audit(6014929905.559:709): avc: denied { mounton } for pid=4826 comm="syz.3.1020" path="/202/file0" dev="tmpfs" ino=1155 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 182.698471][ T20] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 182.712519][ T20] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 182.727995][ T20] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 182.741024][ T20] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 182.751981][ T316] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 182.763642][ T316] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 182.774555][ T20] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 182.785430][ T316] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 182.798605][ T316] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 182.808132][ T4833] exfat filesystem being mounted at /134/qY3aK supports timestamps until 2107 (0x10391447f) [ 182.819551][ T316] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 182.958700][ T20] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 182.968469][ T20] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.977627][ T20] usb 1-1: Product: syz [ 183.006533][ T20] usb 1-1: Manufacturer: syz [ 183.011803][ T316] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 183.022864][ T20] usb 1-1: SerialNumber: syz [ 183.027948][ T316] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.043857][ T316] usb 2-1: Product: syz [ 183.050432][ T316] usb 2-1: Manufacturer: syz [ 183.059452][ T4817] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 183.069321][ T316] usb 2-1: SerialNumber: syz [ 183.098038][ T4819] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 183.289364][ T4817] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 183.394251][ T4819] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 183.429744][ T4817] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 183.436960][ T4819] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 183.477725][ T4841] vfat filesystem being mounted at /203/w5T)`)YFnA@T<3ڂ$rcnHwC" -8 supports timestamps until 2107 (0x10391447e) [ 184.171339][ T4859] exfat filesystem being mounted at /110/qY3aK supports timestamps until 2107 (0x10391447f) [ 184.288943][ T4817] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 184.295998][ T4817] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 184.458197][ T4819] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 184.466658][ T4819] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 184.565653][ T4817] erofs: (device loop0): mounted with root inode @ nid 36. [ 184.613283][ T4817] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -1027 in[4096, 0] out[4096] [ 184.718126][ T20] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 184.723289][ T4819] erofs: (device loop1): mounted with root inode @ nid 36. [ 184.737977][ T798] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 184.744133][ T20] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 184.770888][ T4819] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -1027 in[4096, 0] out[4096] [ 184.798150][ T316] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 184.838572][ T316] cdc_ncm 2-1:1.0 usb1: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM, 42:42:42:42:42:42 [ 185.045360][ T20] usb 2-1: USB disconnect, device number 28 [ 185.054262][ T20] cdc_ncm 2-1:1.0 usb1: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM [ 185.475761][ T4893] F2FS-fs (loop3): Found nat_bits in checkpoint [ 185.488071][ T798] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 185.498973][ T798] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 185.509570][ T798] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 185.522233][ T798] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 185.533008][ T798] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 185.568002][ T4893] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 185.597038][ T795] usb 1-1: USB disconnect, device number 21 [ 185.608488][ T795] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM [ 185.642949][ T637] attempt to access beyond end of device [ 185.642949][ T637] loop3: rw=2049, want=45104, limit=40427 [ 185.671896][ T4924] vfat filesystem being mounted at /93/file0 supports timestamps until 2107 (0x10391447e) [ 185.698078][ T798] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 185.708264][ T798] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.725114][ T798] usb 3-1: Product: syz [ 185.754469][ T798] usb 3-1: Manufacturer: syz [ 185.763596][ T798] usb 3-1: SerialNumber: syz [ 185.798043][ T4862] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 185.919982][ T4938] vfat filesystem being mounted at /94/file0 supports timestamps until 2107 (0x10391447e) [ 185.938930][ T4943] 9p filesystem being mounted at /209/file0 supports timestamps until 2106 (0xffffffff) [ 186.020999][ T4862] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 186.037861][ T4862] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 186.462167][ T4959] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 186.470234][ T4959] EXT4-fs (loop4): orphan cleanup on readonly fs [ 186.476645][ T4959] EXT4-fs warning (device loop4): ext4_enable_quotas:6467: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 186.491035][ T4959] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 186.497768][ T4959] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1042: bg 0: block 40: padding at end of block bitmap is not set [ 186.548608][ T4959] EXT4-fs error (device loop4) in ext4_mb_clear_bb:5646: Corrupt filesystem [ 186.559870][ T4959] EXT4-fs (loop4): 1 truncate cleaned up [ 186.640026][ T4959] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 186.810467][ T4964] syz.4.1042[4964] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 186.810514][ T4964] syz.4.1042[4964] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 186.938317][ T4862] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 186.956379][ T4862] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 186.956883][ T4967] EXT4-fs (loop3): Test dummy encryption mode enabled [ 186.969851][ T4967] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 186.980966][ T4967] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,discard,stripe=0x0000000000000007,commit=0x0000000000000005,jqfmt=vfsv0,barrier=0x0000000000000005,max_batch_time=0x0000000000000002,data_err=abort,,errors=continue [ 187.059446][ T4975] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1047'. [ 187.169322][ T4979] vfat filesystem being mounted at /213/file0 supports timestamps until 2107 (0x10391447e) [ 187.206531][ T4862] erofs: (device loop2): mounted with root inode @ nid 36. [ 187.252849][ T4862] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -1027 in[4096, 0] out[4096] [ 187.308036][ T798] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 187.314378][ T798] cdc_ncm 3-1:1.0: dwNtbInMaxSize=3 is too small. Using 2048 [ 187.321955][ T798] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 187.376129][ T20] hid-generic 0000:0000:0000.0022: unknown main item tag 0x1 [ 187.385218][ T20] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 187.392613][ T20] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 187.399942][ T20] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 187.407247][ T20] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 187.414884][ T20] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 187.422169][ T20] hid-generic 0000:0000:0000.0022: unknown main item tag 0x4 [ 187.429371][ T20] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 187.436524][ T20] hid-generic 0000:0000:0000.0022: unknown main item tag 0x2 [ 187.443764][ T20] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 187.450980][ T20] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 187.458310][ T20] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 187.465549][ T20] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 187.472798][ T20] hid-generic 0000:0000:0000.0022: unknown main item tag 0x4 [ 187.479951][ T20] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 187.487148][ T20] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 187.494390][ T20] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 187.498723][ T4984] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 187.501579][ T20] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 187.515211][ T4984] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 187.516526][ T20] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 187.525196][ T4984] F2FS-fs (loop3): invalid crc value [ 187.531752][ T20] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 187.538359][ T4984] F2FS-fs (loop3): Found nat_bits in checkpoint [ 187.544157][ T20] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 187.557736][ T20] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 187.565286][ T20] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 187.572798][ T20] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 187.576504][ T4984] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 187.580341][ T20] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 187.588051][ T4984] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 187.595778][ T20] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 187.607736][ T798] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 187.610963][ T20] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 187.628032][ T20] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 187.636402][ T20] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 187.651032][ T20] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 187.652426][ T4984] serio: Serial port ptm0 [ 187.662462][ T20] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 187.670232][ T20] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 187.677530][ T20] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 187.685067][ T20] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 187.692647][ T20] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 187.700199][ T20] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 187.707602][ T20] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 187.713643][ T4984] attempt to access beyond end of device [ 187.713643][ T4984] loop3: rw=2049, want=45200, limit=40427 [ 187.719025][ T20] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 187.743500][ T20] hid-generic 0000:0000:0000.0022: hidraw0: HID v0.00 Device [syz0] on syz0 [ 187.758538][ T3104] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 187.768209][ T3104] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 187.808359][ T796] usb 3-1: USB disconnect, device number 28 [ 187.818161][ T796] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM [ 188.245397][ T795] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 188.628029][ T795] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.638791][ T795] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.648564][ T795] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 188.657461][ T795] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.666126][ T795] usb 5-1: config 0 descriptor?? [ 188.844591][ T5043] vfat filesystem being mounted at /216/file0 supports timestamps until 2107 (0x10391447e) [ 188.896810][ T794] hid-generic 0000:0000:0000.0023: unknown main item tag 0x1 [ 188.904663][ T794] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 188.914518][ T794] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 188.921948][ T794] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 188.929754][ T794] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 188.937093][ T794] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 188.944467][ T794] hid-generic 0000:0000:0000.0023: unknown main item tag 0x4 [ 188.951900][ T794] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 188.959342][ T794] hid-generic 0000:0000:0000.0023: unknown main item tag 0x2 [ 188.966628][ T794] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 188.973977][ T794] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 188.981548][ T794] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 188.989054][ T794] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 188.996342][ T794] hid-generic 0000:0000:0000.0023: unknown main item tag 0x4 [ 189.003685][ T794] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 189.011100][ T794] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 189.018489][ T794] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 189.025751][ T794] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 189.033195][ T794] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 189.040546][ T794] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 189.048260][ T794] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 189.059165][ T794] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 189.061870][ T5056] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 189.067053][ T794] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 189.067068][ T794] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 189.067085][ T794] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 189.083248][ T5056] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 189.089331][ T794] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 189.097274][ T5056] F2FS-fs (loop1): invalid crc value [ 189.104399][ T794] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 189.116044][ T5056] F2FS-fs (loop1): Found nat_bits in checkpoint [ 189.116449][ T794] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 189.137360][ T794] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 189.145530][ T795] isku 0003:1E7D:319C.0024: unknown main item tag 0x0 [ 189.152155][ T795] isku 0003:1E7D:319C.0024: unbalanced collection at end of report description [ 189.154480][ T5056] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 189.161190][ T794] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 189.167880][ T5056] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 189.175351][ T795] isku 0003:1E7D:319C.0024: parse failed [ 189.187973][ T795] isku: probe of 0003:1E7D:319C.0024 failed with error -22 [ 189.192257][ T5056] serio: Serial port ptm0 [ 189.195073][ T794] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 189.209428][ T794] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 189.216720][ T794] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 189.223961][ T794] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 189.231236][ T794] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 189.238443][ T794] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 189.245723][ T794] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 189.251094][ T5056] attempt to access beyond end of device [ 189.251094][ T5056] loop1: rw=2049, want=45200, limit=40427 [ 189.252889][ T794] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 189.271550][ T794] hid-generic 0000:0000:0000.0023: hidraw0: HID v0.00 Device [syz0] on syz0 [ 189.292492][ T3104] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 189.301547][ T3104] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 189.347948][ T794] usb 5-1: USB disconnect, device number 32 [ 189.519331][ T5073] EXT4-fs (loop1): Ignoring removed orlov option [ 189.525779][ T5073] EXT4-fs (loop1): Test dummy encryption mode enabled [ 189.533483][ T5073] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a014e09c, mo2=0002] [ 189.541303][ T5073] System zones: 1-12 [ 189.545348][ T5073] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.1065: casefold flag without casefold feature [ 189.648104][ T20] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 189.672248][ T5073] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #12: comm syz.1.1065: missing EA_INODE flag [ 189.716509][ T5066] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 189.726295][ T5066] ext4 filesystem being mounted at /218/file0 supports timestamps until 2038 (0x7fffffff) [ 189.746938][ T5073] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.1065: error while reading EA inode 12 err=-117 [ 189.759493][ T5073] EXT4-fs (loop1): 1 orphan inode deleted [ 189.765054][ T5073] EXT4-fs (loop1): mounted filesystem without journal. Opts: orlov,minixdf,max_dir_size_kb=0x0000000000009c7c,debug,grpquota,errors=continue,test_dummy_encryption,auto_da_alloc,nodiscard,,errors=continue [ 189.793203][ T5073] overlayfs: failed to resolve './file0': -2 [ 189.881467][ T5082] vfat filesystem being mounted at /107/file0 supports timestamps until 2107 (0x10391447e) [ 190.005904][ T5089] 9p filesystem being mounted at /117/file0 supports timestamps until 2106 (0xffffffff) [ 190.060519][ T5086] EXT4-fs (loop1): Ignoring removed orlov option [ 190.072498][ T5086] EXT4-fs (loop1): Test dummy encryption mode enabled [ 190.079291][ T20] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 190.080510][ T5086] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a014e09c, mo2=0002] [ 190.091151][ T20] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 190.101172][ T5086] System zones: [ 190.115568][ T20] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 190.115591][ T20] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 190.115604][ T20] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 190.159567][ T5086] 1-12 [ 190.164342][ T5086] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.1069: casefold flag without casefold feature [ 190.181039][ T5086] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #12: comm syz.1.1069: missing EA_INODE flag [ 190.194842][ T5093] EXT4-fs (loop4): Ignoring removed orlov option [ 190.195305][ T5086] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.1069: error while reading EA inode 12 err=-117 [ 190.202687][ T5093] EXT4-fs (loop4): Test dummy encryption mode enabled [ 190.220673][ T5093] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a014e09c, mo2=0002] [ 190.228553][ T5086] EXT4-fs (loop1): 1 orphan inode deleted [ 190.229105][ T5093] System zones: 1-12 [ 190.234269][ T5086] EXT4-fs (loop1): mounted filesystem without journal. Opts: orlov,minixdf,max_dir_size_kb=0x0000000000009c7c,debug,grpquota,errors=continue,test_dummy_encryption,auto_da_alloc,nodiscard,,errors=continue [ 190.238988][ T5093] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.1072: casefold flag without casefold feature [ 190.270180][ T5093] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #12: comm syz.4.1072: missing EA_INODE flag [ 190.288035][ T20] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 190.310302][ T5093] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1072: error while reading EA inode 12 err=-117 [ 190.326002][ T20] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.327163][ T5093] EXT4-fs (loop4): 1 orphan inode deleted [ 190.339901][ T5093] EXT4-fs (loop4): mounted filesystem without journal. Opts: orlov,minixdf,max_dir_size_kb=0x0000000000009c7c,debug,grpquota,errors=continue,test_dummy_encryption,auto_da_alloc,nodiscard,,errors=continue [ 190.369665][ T20] usb 3-1: Product: syz [ 190.378110][ T20] usb 3-1: Manufacturer: syz [ 190.383270][ T20] usb 3-1: SerialNumber: syz [ 190.390610][ T5086] overlayfs: failed to resolve './file0': -2 [ 190.399528][ T5100] EXT4-fs (loop0): Test dummy encryption mode enabled [ 190.415681][ T5100] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 190.438057][ T5068] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 190.449091][ T5100] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,discard,stripe=0x0000000000000007,commit=0x0000000000000005,jqfmt=vfsv0,barrier=0x0000000000000005,max_batch_time=0x0000000000000002,data_err=abort,,errors=continue [ 190.600086][ T5112] vfat filesystem being mounted at /222/file0 supports timestamps until 2107 (0x10391447e) [ 190.628941][ T5116] EXT4-fs (loop0): Ignoring removed orlov option [ 190.646884][ T5116] EXT4-fs (loop0): Test dummy encryption mode enabled [ 190.657154][ T5116] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a014e09c, mo2=0002] [ 190.665132][ T5116] System zones: 1-12 [ 190.669984][ T5116] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.1079: casefold flag without casefold feature [ 190.674412][ T5068] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 190.689312][ T5116] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #12: comm syz.0.1079: missing EA_INODE flag [ 190.698014][ T5068] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 190.707281][ T5116] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.1079: error while reading EA inode 12 err=-117 [ 190.721003][ T5116] EXT4-fs (loop0): 1 orphan inode deleted [ 190.726556][ T5116] EXT4-fs (loop0): mounted filesystem without journal. Opts: orlov,minixdf,max_dir_size_kb=0x0000000000009c7c,debug,grpquota,errors=continue,test_dummy_encryption,auto_da_alloc,nodiscard,,errors=continue [ 190.779040][ T5124] 9p filesystem being mounted at /223/file0 supports timestamps until 2106 (0xffffffff) [ 190.794847][ T5116] overlayfs: failed to resolve './file0': -2 [ 190.898013][ T25] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 191.059962][ T5126] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 191.068778][ T5126] ext4 filesystem being mounted at /224/file0 supports timestamps until 2038 (0x7fffffff) [ 191.128019][ T796] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 191.137968][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 191.258105][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.276099][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.287960][ T25] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 191.297136][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.307429][ T25] usb 5-1: config 0 descriptor?? [ 191.598474][ T5068] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 191.605916][ T5068] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 191.648020][ T796] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.658756][ T796] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.668291][ T796] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 191.680955][ T796] usb 1-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice= 0.00 [ 191.689851][ T796] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.698291][ T796] usb 1-1: config 0 descriptor?? [ 191.770440][ T24] audit: type=1107 audit(6014929914.829:710): pid=5119 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 191.848067][ T25] usbhid 5-1:0.0: can't add hid device: -71 [ 191.853868][ T25] usbhid: probe of 5-1:0.0 failed with error -71 [ 191.862224][ T25] usb 5-1: USB disconnect, device number 33 [ 191.878533][ T5068] erofs: (device loop2): mounted with root inode @ nid 36. [ 191.879233][ T5141] EXT4-fs (loop3): Ignoring removed orlov option [ 191.889134][ T5068] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -1027 in[4096, 0] out[4096] [ 191.932578][ T5141] EXT4-fs (loop3): Test dummy encryption mode enabled [ 191.940361][ T5141] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a014e09c, mo2=0002] [ 191.948262][ T20] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 191.949332][ T5141] System zones: 1-12 [ 191.954716][ T20] cdc_ncm 3-1:1.0: dwNtbInMaxSize=3 is too small. Using 2048 [ 191.959330][ T5141] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.1087: casefold flag without casefold feature [ 191.965779][ T20] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 191.983514][ T5141] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #12: comm syz.3.1087: missing EA_INODE flag [ 191.995076][ T5141] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.1087: error while reading EA inode 12 err=-117 [ 192.007364][ T5141] EXT4-fs (loop3): 1 orphan inode deleted [ 192.013073][ T5141] EXT4-fs (loop3): mounted filesystem without journal. Opts: orlov,minixdf,max_dir_size_kb=0x0000000000009c7c,debug,grpquota,errors=continue,test_dummy_encryption,auto_da_alloc,nodiscard,,errors=continue [ 192.046736][ T5141] overlayfs: failed to resolve './file0': -2 [ 192.094394][ T25] hid-generic 0000:0000:0000.0025: unknown main item tag 0x1 [ 192.101664][ T25] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 192.108875][ T25] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 192.116016][ T25] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 192.123258][ T25] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 192.130442][ T25] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 192.137624][ T25] hid-generic 0000:0000:0000.0025: unknown main item tag 0x4 [ 192.144966][ T25] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 192.152191][ T25] hid-generic 0000:0000:0000.0025: unknown main item tag 0x2 [ 192.159555][ T25] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 192.167087][ T25] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 192.175888][ T20] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42 [ 192.203155][ T25] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 192.216922][ T25] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 192.226198][ T25] hid-generic 0000:0000:0000.0025: unknown main item tag 0x4 [ 192.235073][ T25] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 192.242330][ T25] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 192.249576][ T25] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 192.256762][ T25] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 192.267009][ T25] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 192.274671][ T25] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 192.282120][ T25] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 192.285137][ T5149] EXT4-fs (loop1): Ignoring removed orlov option [ 192.289718][ T25] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 192.300026][ T5149] EXT4-fs (loop1): Test dummy encryption mode enabled [ 192.303022][ T25] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 192.316973][ T25] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 192.324666][ T25] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 192.387442][ T25] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 192.395020][ T25] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 192.395592][ T5149] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a014e09c, mo2=0002] [ 192.406287][ T25] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 192.417374][ T25] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 192.424599][ T25] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 192.428075][ T5149] System zones: [ 192.435150][ T794] usb 3-1: USB disconnect, device number 29 [ 192.437699][ T25] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 192.451695][ T25] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 192.451947][ T794] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM [ 192.469672][ T5149] 1-12 [ 192.558534][ T5149] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.1089: casefold flag without casefold feature [ 192.559308][ T25] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 192.580417][ T5149] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #12: comm syz.1.1089: missing EA_INODE flag [ 192.592342][ T5149] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.1089: error while reading EA inode 12 err=-117 [ 192.592725][ T25] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 192.605437][ T5149] EXT4-fs (loop1): 1 orphan inode deleted [ 192.612291][ T25] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 192.617300][ T5149] EXT4-fs (loop1): mounted filesystem without journal. Opts: orlov,minixdf,max_dir_size_kb=0x0000000000009c7c,debug,grpquota,errors=continue,test_dummy_encryption,auto_da_alloc,nodiscard,,errors=continue [ 192.625241][ T25] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 192.653980][ T5176] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 192.665368][ T5176] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038 (0x7fffffff) [ 192.687589][ T25] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 192.694870][ T25] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 192.702413][ T20] ================================================================== [ 192.710286][ T20] BUG: KASAN: use-after-free in __list_del_entry_valid+0xa6/0x120 [ 192.717928][ T20] Read of size 8 at addr ffff88811fe7cc68 by task kworker/1:0/20 [ 192.725549][ T20] [ 192.727842][ T20] CPU: 1 PID: 20 Comm: kworker/1:0 Tainted: G W 5.10.218-syzkaller-00638-g3feee789f446 #0 [ 192.738852][ T20] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 192.748856][ T20] Workqueue: events linkwatch_event [ 192.753877][ T20] Call Trace: [ 192.757009][ T20] dump_stack_lvl+0x1e2/0x24b [ 192.761512][ T20] ? printk+0xd1/0x111 [ 192.765411][ T20] ? bfq_pos_tree_add_move+0x43b/0x43b [ 192.770709][ T20] ? wake_up_klogd+0xb8/0xf0 [ 192.775148][ T20] ? panic+0x812/0x812 [ 192.779047][ T20] print_address_description+0x81/0x3b0 [ 192.784432][ T20] kasan_report+0x179/0x1c0 [ 192.788852][ T20] ? __list_del_entry_valid+0xa6/0x120 [ 192.794141][ T20] ? __list_del_entry_valid+0xa6/0x120 [ 192.799524][ T20] __asan_report_load8_noabort+0x14/0x20 [ 192.804990][ T20] __list_del_entry_valid+0xa6/0x120 [ 192.810113][ T20] process_one_work+0x43f/0xbd0 [ 192.814805][ T20] worker_thread+0xaea/0x1510 [ 192.819325][ T20] kthread+0x34b/0x3d0 [ 192.823221][ T20] ? worker_clr_flags+0x180/0x180 [ 192.828256][ T20] ? kthread_blkcg+0xd0/0xd0 [ 192.832678][ T20] ret_from_fork+0x1f/0x30 [ 192.836926][ T20] [ 192.839094][ T20] Allocated by task 20: [ 192.843091][ T20] ____kasan_kmalloc+0xdb/0x110 [ 192.847782][ T20] __kasan_kmalloc+0x9/0x10 [ 192.852125][ T20] __kmalloc+0x1aa/0x330 [ 192.856196][ T20] kvmalloc_node+0x82/0x130 [ 192.860538][ T20] alloc_netdev_mqs+0x8e/0xcd0 [ 192.865143][ T20] alloc_etherdev_mqs+0x33/0x40 [ 192.869830][ T20] usbnet_probe+0x1ff/0x2860 [ 192.874277][ T20] usb_probe_interface+0x5b6/0xa90 [ 192.879206][ T20] really_probe+0x3eb/0xaf0 [ 192.883538][ T20] driver_probe_device+0xfd/0x260 [ 192.888403][ T20] __device_attach_driver+0x29b/0x410 [ 192.893609][ T20] bus_for_each_drv+0x183/0x200 [ 192.898293][ T20] __device_attach+0x30a/0x500 [ 192.902892][ T20] device_initial_probe+0x1a/0x20 [ 192.907751][ T20] bus_probe_device+0xbe/0x1e0 [ 192.912353][ T20] device_add+0x889/0xbc0 [ 192.916519][ T20] usb_set_configuration+0x19a5/0x1f30 [ 192.921816][ T20] usb_generic_driver_probe+0x8b/0x150 [ 192.927115][ T20] usb_probe_device+0x144/0x260 [ 192.931797][ T20] really_probe+0x3eb/0xaf0 [ 192.936142][ T20] driver_probe_device+0xfd/0x260 [ 192.940994][ T20] __device_attach_driver+0x29b/0x410 [ 192.946202][ T20] bus_for_each_drv+0x183/0x200 [ 192.950895][ T20] __device_attach+0x30a/0x500 [ 192.955487][ T20] device_initial_probe+0x1a/0x20 [ 192.960350][ T20] bus_probe_device+0xbe/0x1e0 [ 192.964946][ T20] device_add+0x889/0xbc0 [ 192.969120][ T20] usb_new_device+0xbbc/0x1760 [ 192.973717][ T20] hub_event+0x2d3b/0x47c0 [ 192.977969][ T20] process_one_work+0x6dc/0xbd0 [ 192.982656][ T20] worker_thread+0xaea/0x1510 [ 192.987175][ T20] kthread+0x34b/0x3d0 [ 192.991074][ T20] ret_from_fork+0x1f/0x30 [ 192.995319][ T20] [ 192.997491][ T20] Freed by task 794: [ 193.001234][ T20] kasan_set_track+0x4b/0x70 [ 193.005655][ T20] kasan_set_free_info+0x23/0x40 [ 193.010444][ T20] ____kasan_slab_free+0x121/0x160 [ 193.015474][ T20] __kasan_slab_free+0x11/0x20 [ 193.020077][ T20] slab_free_freelist_hook+0xc0/0x190 [ 193.025280][ T20] kfree+0xc3/0x270 [ 193.028931][ T20] kvfree+0x35/0x40 [ 193.032658][ T20] netdev_freemem+0x3f/0x60 [ 193.037000][ T20] netdev_release+0x7f/0xb0 [ 193.041346][ T20] device_release+0x95/0x1c0 [ 193.045767][ T20] kobject_put+0x178/0x260 [ 193.050306][ T20] put_device+0x1f/0x30 [ 193.054270][ T20] free_netdev+0x384/0x470 [ 193.058521][ T20] usbnet_disconnect+0x242/0x3a0 [ 193.063296][ T20] usb_unbind_interface+0x1fa/0x8c0 [ 193.068342][ T20] device_release_driver_internal+0x506/0x7c0 [ 193.074250][ T20] device_release_driver+0x19/0x20 [ 193.079193][ T20] bus_remove_device+0x2f8/0x360 [ 193.083955][ T20] device_del+0x68b/0xf00 [ 193.088121][ T20] usb_disable_device+0x380/0x720 [ 193.092979][ T20] usb_disconnect+0x32a/0x890 [ 193.097489][ T20] hub_event+0x1e73/0x47c0 [ 193.101743][ T20] process_one_work+0x6dc/0xbd0 [ 193.106430][ T20] worker_thread+0xaea/0x1510 [ 193.111031][ T20] kthread+0x34b/0x3d0 [ 193.114936][ T20] ret_from_fork+0x1f/0x30 [ 193.119182][ T20] [ 193.121351][ T20] Last potentially related work creation: [ 193.126916][ T20] kasan_save_stack+0x3b/0x60 [ 193.131428][ T20] __kasan_record_aux_stack+0xd3/0x100 [ 193.136725][ T20] kasan_record_aux_stack_noalloc+0xb/0x10 [ 193.142366][ T20] insert_work+0x56/0x310 [ 193.146530][ T20] __queue_work+0x970/0xd10 [ 193.150869][ T20] queue_work_on+0x105/0x160 [ 193.155297][ T20] usbnet_link_change+0xeb/0x100 [ 193.160069][ T20] usbnet_probe+0x1dff/0x2860 [ 193.164583][ T20] usb_probe_interface+0x5b6/0xa90 [ 193.169529][ T20] really_probe+0x3eb/0xaf0 [ 193.173869][ T20] driver_probe_device+0xfd/0x260 [ 193.178733][ T20] __device_attach_driver+0x29b/0x410 [ 193.183937][ T20] bus_for_each_drv+0x183/0x200 [ 193.188624][ T20] __device_attach+0x30a/0x500 [ 193.193227][ T20] device_initial_probe+0x1a/0x20 [ 193.198086][ T20] bus_probe_device+0xbe/0x1e0 [ 193.202772][ T20] device_add+0x889/0xbc0 [ 193.206939][ T20] usb_set_configuration+0x19a5/0x1f30 [ 193.212238][ T20] usb_generic_driver_probe+0x8b/0x150 [ 193.217528][ T20] usb_probe_device+0x144/0x260 [ 193.222228][ T20] really_probe+0x3eb/0xaf0 [ 193.226552][ T20] driver_probe_device+0xfd/0x260 [ 193.231413][ T20] __device_attach_driver+0x29b/0x410 [ 193.236618][ T20] bus_for_each_drv+0x183/0x200 [ 193.241306][ T20] __device_attach+0x30a/0x500 [ 193.245908][ T20] device_initial_probe+0x1a/0x20 [ 193.250767][ T20] bus_probe_device+0xbe/0x1e0 [ 193.255542][ T20] device_add+0x889/0xbc0 [ 193.259714][ T20] usb_new_device+0xbbc/0x1760 [ 193.264306][ T20] hub_event+0x2d3b/0x47c0 [ 193.268561][ T20] process_one_work+0x6dc/0xbd0 [ 193.273244][ T20] worker_thread+0xaea/0x1510 [ 193.277777][ T20] kthread+0x34b/0x3d0 [ 193.281663][ T20] ret_from_fork+0x1f/0x30 [ 193.285919][ T20] [ 193.288088][ T20] The buggy address belongs to the object at ffff88811fe7c000 [ 193.288088][ T20] which belongs to the cache kmalloc-4k of size 4096 [ 193.302067][ T20] The buggy address is located 3176 bytes inside of [ 193.302067][ T20] 4096-byte region [ffff88811fe7c000, ffff88811fe7d000) [ 193.315342][ T20] The buggy address belongs to the page: [ 193.320834][ T20] page:ffffea00047f9e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11fe78 [ 193.330875][ T20] head:ffffea00047f9e00 order:3 compound_mapcount:0 compound_pincount:0 [ 193.339037][ T20] flags: 0x4000000000010200(slab|head) [ 193.344332][ T20] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100042c00 [ 193.352751][ T20] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 193.361164][ T20] page dumped because: kasan: bad access detected [ 193.367422][ T20] page_owner tracks the page as allocated [ 193.372975][ T20] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 288, ts 24924497044, free_ts 0 [ 193.390947][ T20] prep_new_page+0x166/0x180 [ 193.395366][ T20] get_page_from_freelist+0x2d8c/0x2f30 [ 193.400744][ T20] __alloc_pages_nodemask+0x435/0xaf0 [ 193.405973][ T20] new_slab+0x80/0x400 [ 193.409878][ T20] ___slab_alloc+0x302/0x4b0 [ 193.414285][ T20] __slab_alloc+0x63/0xa0 [ 193.418450][ T20] kmem_cache_alloc_trace+0x1bd/0x2e0 [ 193.423657][ T20] ipv6_add_dev+0x579/0x10b0 [ 193.429513][ T20] addrconf_notify+0x58e/0xe90 [ 193.435240][ T20] raw_notifier_call_chain+0x8c/0xf0 [ 193.440574][ T20] call_netdevice_notifiers+0x145/0x1b0 [ 193.445956][ T20] register_netdevice+0x1066/0x13f0 [ 193.450987][ T20] veth_newlink+0x667/0xb50 [ 193.455328][ T20] rtnl_newlink+0x1516/0x2000 [ 193.459839][ T20] rtnetlink_rcv_msg+0x955/0xc50 [ 193.464616][ T20] netlink_rcv_skb+0x1cf/0x410 [ 193.469209][ T20] page_owner free stack trace missing [ 193.474419][ T20] [ 193.476611][ T20] Memory state around the buggy address: [ 193.482064][ T20] ffff88811fe7cb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 193.493315][ T20] ffff88811fe7cb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 193.502779][ T20] >ffff88811fe7cc00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 193.512444][ T20] ^ [ 193.520086][ T20] ffff88811fe7cc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 193.527974][ T20] ffff88811fe7cd00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 193.535867][ T20] ================================================================== [ 193.543958][ T20] Disabling lock debugging due to kernel taint [ 193.576505][ T25] hid-generic 0000:0000:0000.0025: hidraw0: HID v0.00 Device [syz0] on syz0 [ 193.780598][ T5189] EXT4-fs (loop1): Ignoring removed orlov option [ 193.787059][ T5189] EXT4-fs (loop1): Test dummy encryption mode enabled [ 193.794371][ T5189] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a014e09c, mo2=0002] [ 193.802270][ T5189] System zones: 1-12 [ 193.806571][ T5189] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.1091: casefold flag without casefold feature [ 193.819315][ T5189] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #12: comm syz.1.1091: missing EA_INODE flag [ 193.831140][ T5189] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.1091: error while reading EA inode 12 err=-117 [ 193.847567][ T5189] EXT4-fs (loop1): 1 orphan inode deleted [ 193.853382][ T5189] EXT4-fs (loop1): mounted filesystem without journal. Opts: orlov,minixdf,max_dir_size_kb=0x0000000000009c7c,debug,grpquota,errors=continue,test_dummy_encryption,auto_da_alloc,nodiscard,,errors=continue [ 193.883718][ T5189] overlayfs: failed to resolve './file1': -2 [ 193.948069][ T796] usbhid 1-1:0.0: can't add hid device: -71 [ 193.953849][ T796] usbhid: probe of 1-1:0.0 failed with error -71 [ 193.960734][ T796] usb 1-1: USB disconnect, device number 22