last executing test programs: 18.147452267s ago: executing program 2 (id=2274): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xb, 0xb9, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r2 = open(0x0, 0x0, 0x0) mknodat$loop(r2, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r2, &(0x7f0000000100)='./file1\x00', r2, &(0x7f0000000240)='./file0\x00', 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c2) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000006c0), &(0x7f0000000280)=""/29, 0x2}, 0x20) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x5, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f00e50000008700060000090581030002c0b9ff09058202080000fd0009"], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) timerfd_create(0x8, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00'}, 0x10) syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000057eb0020fd070400fa8e0102030109021b00020000000009044a0000ff4868000904"], 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r3, &(0x7f00000000c0)=""/55, 0x37) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='15', 0x2}], 0x8) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) close(0x3) 16.338600849s ago: executing program 2 (id=2283): syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xb, 0xb9, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x1000) unlink(&(0x7f0000000280)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c2) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 16.116447781s ago: executing program 2 (id=2284): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xb, 0xb9, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f00000002c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r2, &(0x7f0000000100)='./file1\x00', r2, &(0x7f0000000240)='./file0\x00', 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c2) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000006c0), &(0x7f0000000280)=""/29, 0x2}, 0x20) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x5, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f00e50000008700060000090581030002c0b9ff09058202080000fd00090503020002"], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) timerfd_create(0x8, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00'}, 0x10) syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000057eb0020fd070400fa8e0102030109021b00020000000009044a0000ff4868000904"], 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r3, &(0x7f00000000c0)=""/55, 0x37) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='15', 0x2}], 0x8) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) close(0x3) 12.365351708s ago: executing program 2 (id=2320): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @empty, @remote, @local}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r5, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 11.43113671s ago: executing program 2 (id=2331): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x3, 0x3, 0xb, 0x0, 0x10001, 0xa, 0xb3, 0xff, 0xa, 0x4, 0x4, 0x0, 0x0, 0x2, 0x4, 0xa, 0x3, 0x2, 0xfd, '\x00', 0x0, 0xcb}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0x0, 0x0, 0x2, 0x10020f5b, 0x0, [{0xfe, 0xfc}, {}, {0x3a, 0x0, 0x9, '\x00', 0x3}, {0x0, 0x35, 0xfc}, {0x20, 0xc}, {0x0, 0x0, 0xc}, {0x0, 0x0, 0x8}, {0x1, 0x6, 0x3}, {0x0, 0x3}, {0xf, 0x1, 0x2}, {0x0, 0x0, 0xfe, '\x00', 0x3}, {0x0, 0xdc}, {0xfc, 0x0, 0x40}, {0x0, 0xf7, 0x3}, {0x7, 0x0, 0xa, '\x00', 0x39}, {0x0, 0x0, 0x0, '\x00', 0x8}, {0x0, 0x0, 0x0, '\x00', 0xfe}, {0x4, 0x0, 0xfa}, {0x0, 0x2}, {}, {0x0, 0x49, 0x0, '\x00', 0x1}, {}, {0x0, 0x0, 0xff}, {0x0, 0x0, 0x3}]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11.029897544s ago: executing program 2 (id=2334): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$TCFLSH(r6, 0x400455c8, 0x0) 8.922199831s ago: executing program 4 (id=2343): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r6, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r7, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 7.259842861s ago: executing program 4 (id=2349): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000059c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) getpid() sendmsg$NL80211_CMD_ASSOCIATE(r1, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000009c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4048000}, 0x20000800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, 0x0, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x10, &(0x7f0000000680), 0x1, 0x254, &(0x7f00000006c0)="$eJzs3T1oJGUcBvBnZnc9c7fIqY0gfoCIaCCcnWBzNgoHchwiggonojbKRYgJdomVjYXWKqlsgtgZLSVNsFEEq6gpYiNosDBYaLGyOxvJx+qqm+zIze8HszPvzsd/Zneed7bY2Q3QWOeTXEzSSjKbpJOkOLjA3dVwfthcndm8mvR6T/xcDJar2pX99c4lWUnyUJKNssjL7WRp/ZmdX7ceu++txc69H6w/PTPVgxza3dl+fO/9y29+fOnBpS+//vFykYvpHjquk1eMeK5dJLecRrH/iaJd9x7wT1x5/aNv+rm/Nck9g/x3UqZ6895euGGjkwfe+6t13/npq9unua/Ayev1Ov1r4EoPaJwySTdFOZekmi7LubnqM/y3rbPlK/MLr82+NL947YW6eyrgpHST7Uc/PfPJuSP5/6FV5X+oVetOAqein/8nr6x915/ek3JohjuqUT//s88t3x/5h8aRf2iQFw+1SvmH5hqf/1q+ogNMges/NJf8Q3PJP1zHOn8/W/6hueQfmkv+obkO5h8AaJbembrvQAbqUnf/AwAAAAAAAAAAAAAAAAAAHLc6s3l1f5hWzc/fTXYfSdIeVb81+D/i5MbB49lfiv5ifyqq1Sby7F0TbmBCH9Z89/VN30/8Ek7kizvrrJ4sX0tW3khyod0+fv4Vw/Pvv7t5zPzO8xMW+JeKI+2Hn5pu/aN+X6u3/qWt5LN+/3NhVP9T5rbBeHT/0x3/E8tjvfrbhBsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgav4IAAD//7ANbcM=") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) socket(0x10, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a80)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800b000100", @ANYRES32=r3, @ANYBLOB="080e0a006cf31744b5cde642d7a8244dc21e0918c5b2e341cc7393bd6eef22dbbc03e9e79984c8801c8373f4492714190a021c2a6715e1113c6027746bfcae69863e823a43cb3f6fbeb6c6a43be8", @ANYRES32=r3, @ANYBLOB], 0x44}}, 0x0) 5.511674452s ago: executing program 4 (id=2358): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x80, &(0x7f0000000000)={0x20, 0x0, 0xfffc, 0x4360}, 0x8, 0x10000007, 0x9, 0x0, 0x1, 0x101, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000280)='kfree\x00', r1}, 0x18) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, 0x0) 5.338064045s ago: executing program 4 (id=2362): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00', r1}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000004c0)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000380), 0x5, r2}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000082505a5a4400000000101090244000101000000090400000302060000052406000005240000000d240f0100000000000000000009058103200000000009058202080000000009050302"], 0x0) 3.888984132s ago: executing program 3 (id=2375): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ffffffff850000002d000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) stat(&(0x7f0000000080)='./file0\x00', 0x0) quotactl$Q_SETINFO(0xffffffff80000600, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x400, 0x1, 0x6}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000100)={{0x3, 0x1, 0x7f, 0x1, 0x401}}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000001c0)={0x4800}, 0x10) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.32803473s ago: executing program 3 (id=2376): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r6, {0x7, 0xfff2}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r7, &(0x7f0000002100)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f0000000a40)=""/4104, 0x1008}], 0x2}, 0x3}], 0x1, 0x0, 0x0) 3.083781292s ago: executing program 1 (id=2378): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) 2.991187754s ago: executing program 1 (id=2380): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lseek(0xffffffffffffffff, 0xfffffffffffffff9, 0x3) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 2.817839666s ago: executing program 3 (id=2381): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00'}, 0x10) add_key$fscrypt_provisioning(&(0x7f0000002500), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02"], 0x48, 0xfffffffffffffffe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) read(r2, &(0x7f0000000600)=""/73, 0x49) tkill(0x0, 0x7) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0aab57d2884ee40101e1457484153ade8fc0dd77653bff6d49e288027392e7f931dca53d4eda599103358e471ec42ca378860dd3d8caa84e97738fb7e6f0e5dc9cd275dda998b0bc5a038ba3b11764c8ef322f84e15b5bd934d1e69a4c81d694769dc27bfd5168b73b06b39182b3d3a1ad2ff0754eb347c7f1fee46e37b4f2f7981d8cef32cd90b0eb3381b50c06dc8eecd662ca768f7fd75c9e38f0cd0af3537acceb3a1cd5aa9195c2eefa6a05fa8447c21f8d53e149052c7d4b9d3936f6c2d45f70de99c866166c3c19fc9584d21e1b1164c1", @ANYRES32, @ANYBLOB="0000018000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000300), 0x75, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x5d00) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@gettfilter={0x24, 0x2e, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3}}}, 0x24}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x13, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r5}, 0x10) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r8 = dup(r7) bind$bt_l2cap(r8, &(0x7f00000021c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) listen(r7, 0x9) accept4$vsock_stream(r8, 0x0, 0x0, 0x80000) 2.157553314s ago: executing program 0 (id=2383): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x110e22fff6) close(r0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) 2.152162184s ago: executing program 0 (id=2384): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000dc0), r0) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f00000000c0)={0x2c, r2, 0x1, 0x70bd24, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0xb10bec4a173ecf9d}, 0x880) 2.115144914s ago: executing program 0 (id=2385): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 2.114907874s ago: executing program 0 (id=2386): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 2.114105314s ago: executing program 1 (id=2387): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=@ipv4_newrule={0x30, 0x20, 0x301, 0x0, 0xfffffffd, {0x2, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x8}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x6}, @FRA_GENERIC_POLICY=@FRA_TABLE={0x8, 0xf, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8885}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x6148, &(0x7f0000000340)={0x0, 0x13ea, 0x2, 0x2, 0x3c6}, &(0x7f0000000040), &(0x7f0000000140)) 2.057239535s ago: executing program 4 (id=2388): r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz0\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="170000000000000004000000ff00", @ANYRES16=r3], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_open_dev$vcsa(0x0, 0x1, 0x102) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r5}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r6, 0x18000000000002a0, 0x61, 0x0, &(0x7f0000000880)="b9ff030768441a8cb89e14f008008632e7429800", 0x0, 0x5, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.993656726s ago: executing program 0 (id=2389): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x105001, 0x0) close(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r2 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000003500)=[{{&(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000280)=""/24, 0x18}, {&(0x7f0000000380)=""/164, 0xa4}], 0x3}, 0x401}, {{&(0x7f0000000540)=@tipc, 0x80, &(0x7f0000000480)=[{&(0x7f00000005c0)=""/121, 0x79}, {&(0x7f0000001180)=""/4089, 0xff9}, {&(0x7f0000000700)=""/144, 0x90}], 0x3, &(0x7f0000000640)=""/40, 0x28}, 0x5}, {{&(0x7f00000007c0)=@ax25={{0x3, @rose}, [@remote, @rose, @remote, @default, @default, @remote, @netrom, @null]}, 0x80, &(0x7f0000003440)=[{&(0x7f0000000680)}, {&(0x7f0000000840)=""/118, 0x76}, {&(0x7f00000008c0)=""/114, 0x72}, {&(0x7f0000000940)=""/42, 0x2a}, {&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/203, 0xcb}, {&(0x7f0000000b00)=""/201, 0xc9}, {&(0x7f0000003180)=""/149, 0x95}, {&(0x7f0000003240)=""/212, 0xd4}, {&(0x7f0000003340)=""/194, 0xc2}], 0xa}, 0x1}], 0x3, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/14, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/13], 0x48) socket$inet6(0x10, 0x2, 0x2) socket$netlink(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket(0x10, 0x803, 0x0) 1.266751435s ago: executing program 3 (id=2390): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200002, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@jqfmt_vfsv1}, {@quota}, {@usrjquota}, {@data_err_ignore}, {@jqfmt_vfsv1}]}, 0x3, 0x580, &(0x7f0000000480)="$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") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000000000000064d564b"]) 1.201631476s ago: executing program 1 (id=2391): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028014000380"], 0x44}}, 0x0) 857.90088ms ago: executing program 1 (id=2392): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) getpeername$netlink(r0, 0x0, &(0x7f0000000040)) 786.473771ms ago: executing program 4 (id=2393): r0 = syz_usb_connect$uac1(0x2, 0xa5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029300030100000009040000000101"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x40, 0x4, 0x2, {0x2, 0x31}}, &(0x7f0000000140)={0x0, 0x3, 0x1b, @string={0x1b, 0x3, "f8959cae0b5e441a8a477937bf44e3ff73794b39bf566abb48"}}}, 0x0) 785.308021ms ago: executing program 0 (id=2394): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000700)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x3, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3e423f41) syz_open_pts(r1, 0x20000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) select(0x0, 0x0, 0x0, &(0x7f0000000940)={0x9, 0x800, 0x1ff, 0x9, 0x1200, 0x400, 0x10000000002, 0x5}, &(0x7f00000009c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000010c0)=@ipv6_getaddrlabel={0x1c, 0x4a, 0x3, 0x0, 0x0, {0xa, 0x0, 0x80}}, 0x1c}}, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x2b, 0x0, @void}, 0x10) 141.088219ms ago: executing program 3 (id=2395): r0 = syz_open_dev$evdev(&(0x7f0000000e80), 0x1, 0x8080) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000fc0)={0x16, 0x1, &(0x7f0000000000)='E'}) 104.737039ms ago: executing program 3 (id=2396): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) mount$overlay(0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file1'}}]}) socket$packet(0x11, 0x3, 0x300) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0x1ff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e21, 0xfffffffd, @local, 0x8}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) socket$inet6(0xa, 0x3, 0x8000000003c) syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') 0s ago: executing program 1 (id=2397): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xb, 0xb9, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f00000002c0)) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r2, &(0x7f0000000100)='./file1\x00', r2, &(0x7f0000000240)='./file0\x00', 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c2) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000006c0), &(0x7f0000000280)=""/29, 0x2}, 0x20) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x5, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f00e50000008700060000090581030002c0b9ff09058202080000fd00090503020002"], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) timerfd_create(0x8, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00'}, 0x10) syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000057eb0020fd070400fa8e0102030109021b00020000000009044a0000ff4868000904"], 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r3, &(0x7f00000000c0)=""/55, 0x37) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='15', 0x2}], 0x8) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) close(0x3) 0s ago: executing program 0 (id=2398): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0x380, 0x3f000002, &(0x7f0000000700)="c45c57ce395de5b289f07d637a223920f181c2e57d71483cfb2d075a3ff07258e080a194805cdb0c26d3f7ffb1e0d9cf4fa36dcb2168b72de48ac8f93e6804f1c4d70898d0810e044d7e1778eaac5dfdcc9f1208905522025bcfdf1b6f969b094d5c022c2b7ffefde71e0627b9a2069cc1e0175c4b8860aad4b0a103c589f676b6c4e85eb3950c533b6e62c39ccf9ae9bfe54ee5887358d44f46337fbe090d7c7e55847edee8130ffd3d1e719e01a68b0e691c0d35b0b56e0b514036342fd56f08ac0083f3c2fe41a1295a3d23cf3d160d4fd90f66beba68860456ed41272e1e68d16c2564c85f5556e18784113c493d13253e14d6eb891707fba3c30d07d5ee8619e4426cafec4cf6a3723c455d09b586b248", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) kernel console output (not intermixed with test programs): T4-fs (loop3): mounted filesystem without journal. Opts: norecovery,,errors=continue [ 560.650354][ T18] usb 1-1: can't set config #64, error -71 [ 560.660308][ T18] usb 1-1: USB disconnect, device number 76 [ 560.674600][ T820] usb 2-1: device descriptor read/8, error -71 [ 560.790188][ T8223] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 560.819238][ T8223] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 560.819238][ T8223] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 560.819238][ T8223] [ 560.868007][ T8223] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:163: inode #12: comm syz.3.2009: inline data xattr refers to an external xattr inode [ 560.884099][ T8223] EXT4-fs error (device loop3): ext4_orphan_get:1242: comm syz.3.2009: couldn't read orphan inode 12 (err -117) [ 560.898203][ T8250] EXT4-fs (loop1): Test dummy encryption mode enabled [ 560.918608][ T8223] EXT4-fs (loop3): mounted filesystem without journal. Opts: acl,mblk_io_submit,grpjquota=,sysvgroups,noacl,min_batch_time=0x0000000000000010,bsdgroups,noload,nodiscard,,errors=continue [ 560.945693][ T8250] EXT4-fs (loop1): 1 orphan inode deleted [ 560.951492][ T8250] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,inode_readahead_blks=0x0000000000000004,test_dummy_encryption,errors=remount-ro,inlinecrypt,barrier,noquota,data_err=abort, [ 560.970736][ T8250] ext4 filesystem being mounted at /385/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 561.234551][ T1067] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 561.642300][ T1067] usb 5-1: Using ep0 maxpacket: 32 [ 561.672126][ T8260] fuse: Unknown parameter 'fd0x0000000000000003' [ 561.707355][ T8262] overlayfs: failed to resolve './file0': -2 [ 561.764626][ T1067] usb 5-1: config 0 has an invalid interface number: 74 but max is 1 [ 561.772875][ T1067] usb 5-1: config 0 has no interface number 1 [ 561.959071][ T8266] EXT4-fs (loop3): Test dummy encryption mode enabled [ 562.001733][ T8266] EXT4-fs (loop3): 1 orphan inode deleted [ 562.007554][ T8266] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,inode_readahead_blks=0x0000000000000004,test_dummy_encryption,errors=remount-ro,inlinecrypt,barrier,noquota,data_err=abort, [ 562.026811][ T8266] ext4 filesystem being mounted at /355/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 562.039463][ T18] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 562.055786][ T1067] usb 5-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 562.067343][ T1067] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.076839][ T1067] usb 5-1: Product: syz [ 562.081033][ T1067] usb 5-1: Manufacturer: syz [ 562.086629][ T1067] usb 5-1: SerialNumber: syz [ 562.093479][ T1067] usb 5-1: config 0 descriptor?? [ 562.135956][ T1067] snd-usb-audio: probe of 5-1:0.74 failed with error -22 [ 562.578574][ T5] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 562.628042][ T1067] usb 5-1: USB disconnect, device number 75 [ 562.864690][ T5] usb 3-1: Using ep0 maxpacket: 16 [ 562.994808][ T5] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 563.006227][ T5] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 563.017202][ T5] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 563.168575][ T8274] EXT4-fs (loop1): Test dummy encryption mode enabled [ 563.214563][ T5] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 563.360019][ T8274] EXT4-fs (loop1): 1 orphan inode deleted [ 563.365902][ T8274] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,inode_readahead_blks=0x0000000000000004,test_dummy_encryption,errors=remount-ro,inlinecrypt,barrier,noquota,data_err=abort, [ 563.385147][ T8274] ext4 filesystem being mounted at /386/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 563.579970][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 563.588167][ T5] usb 3-1: SerialNumber: syz [ 563.605342][ T8262] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 563.614380][ T8288] overlayfs: failed to resolve './file1': -2 [ 563.749075][ T8290] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=49 sclass=netlink_audit_socket pid=8290 comm=syz.0.2025 [ 563.829154][ T8262] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 563.836995][ T8278] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 563.844291][ T8278] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 563.844291][ T8278] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 563.844291][ T8278] [ 563.868049][ T8278] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:163: inode #12: comm syz.3.2022: inline data xattr refers to an external xattr inode [ 563.883567][ T8278] EXT4-fs error (device loop3): ext4_orphan_get:1242: comm syz.3.2022: couldn't read orphan inode 12 (err -117) [ 563.896016][ T8278] EXT4-fs (loop3): mounted filesystem without journal. Opts: acl,mblk_io_submit,grpjquota=,sysvgroups,noacl,min_batch_time=0x0000000000000010,bsdgroups,noload,nodiscard,,errors=continue [ 563.914658][ T5] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 563.922619][ T5] usb 3-1: USB disconnect, device number 78 [ 564.104592][ T820] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 564.274603][ T331] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 564.308507][ T8301] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 564.317060][ T8301] EXT4-fs (loop3): invalid journal inode [ 564.322687][ T8301] EXT4-fs (loop3): can't get journal size [ 564.329654][ T8301] EXT4-fs (loop3): 1 truncate cleaned up [ 564.335328][ T8301] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,,errors=continue [ 564.354608][ T820] usb 5-1: Using ep0 maxpacket: 16 [ 564.875638][ T8298] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 564.959001][ T8298] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 564.959001][ T8298] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 564.959001][ T8298] [ 564.983939][ T8298] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:163: inode #12: comm syz.3.2028: inline data xattr refers to an external xattr inode [ 565.007683][ T8309] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 565.029488][ T8309] EXT4-fs (loop2): invalid journal inode [ 565.037000][ T8309] EXT4-fs (loop2): can't get journal size [ 565.043347][ T8298] EXT4-fs error (device loop3): ext4_orphan_get:1242: comm syz.3.2028: couldn't read orphan inode 12 (err -117) [ 565.061912][ T8309] EXT4-fs (loop2): 1 truncate cleaned up [ 565.067945][ T8309] EXT4-fs (loop2): mounted filesystem without journal. Opts: norecovery,,errors=continue [ 565.079453][ T8298] EXT4-fs (loop3): mounted filesystem without journal. Opts: acl,mblk_io_submit,grpjquota=,sysvgroups,noacl,min_batch_time=0x0000000000000010,bsdgroups,noload,nodiscard,,errors=continue [ 565.425656][ T820] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 565.436951][ T820] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 565.446736][ T820] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 565.478024][ T331] usb 2-1: Using ep0 maxpacket: 32 [ 565.534673][ T820] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 565.543914][ T820] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 566.166801][ T8309] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 566.198490][ T8309] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 566.198490][ T8309] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 566.198490][ T8309] [ 566.259009][ T8309] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:163: inode #12: comm syz.2.2029: inline data xattr refers to an external xattr inode [ 566.279982][ T8324] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,barrier=0x0000000000000005,dioread_lock,norecovery,nombcache,lazytime,noload,usrquota,noauto_da_alloc,resuid=0x0000000000000000,init_itable=0x0000000000000000,jqfmt=vfsv1,,errors=continue [ 566.305429][ T8309] EXT4-fs error (device loop2): ext4_orphan_get:1242: comm syz.2.2029: couldn't read orphan inode 12 (err -117) [ 566.319296][ T8309] EXT4-fs (loop2): mounted filesystem without journal. Opts: acl,mblk_io_submit,grpjquota=,sysvgroups,noacl,min_batch_time=0x0000000000000010,bsdgroups,noload,nodiscard,,errors=continue [ 566.698325][ T820] usb 5-1: SerialNumber: syz [ 566.702817][ T8324] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2032'. [ 566.721340][ T8332] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 566.730203][ T820] usb 5-1: can't set config #1, error -71 [ 566.730214][ T8332] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 566.736366][ T331] usb 2-1: config 0 has an invalid interface number: 74 but max is 1 [ 566.753439][ T820] usb 5-1: USB disconnect, device number 76 [ 566.759768][ T331] usb 2-1: config 0 has no interface number 1 [ 566.836710][ T8334] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 566.844696][ T331] usb 2-1: string descriptor 0 read error: -71 [ 566.846085][ T8334] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 566.846085][ T8334] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 566.846085][ T8334] [ 566.851305][ T331] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 566.870562][ T8334] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:163: inode #12: comm syz.1.2035: inline data xattr refers to an external xattr inode [ 566.878194][ T331] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.892964][ T8334] EXT4-fs error (device loop1): ext4_orphan_get:1242: comm syz.1.2035: couldn't read orphan inode 12 (err -117) [ 566.901809][ T331] usb 2-1: config 0 descriptor?? [ 566.917833][ T8334] EXT4-fs (loop1): mounted filesystem without journal. Opts: acl,mblk_io_submit,grpjquota=,sysvgroups,noacl,min_batch_time=0x0000000000000010,bsdgroups,noload,nodiscard,,errors=continue [ 566.934629][ T331] usb 2-1: can't set config #0, error -71 [ 566.944270][ T331] usb 2-1: USB disconnect, device number 79 [ 566.984695][ T18] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 567.035718][ T8339] fuse: Bad value for 'fd' [ 567.038750][ T8341] overlayfs: failed to resolve './file0': -2 [ 567.184669][ T3419] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 567.230095][ T8349] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=49 sclass=netlink_audit_socket pid=8349 comm=syz.2.2040 [ 567.242969][ T18] usb 4-1: Using ep0 maxpacket: 8 [ 567.364785][ T820] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 567.374848][ T18] usb 4-1: config 64 has an invalid interface number: 80 but max is 1 [ 567.383211][ T18] usb 4-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 567.393481][ T18] usb 4-1: config 64 has 1 interface, different from the descriptor's value: 2 [ 567.402558][ T18] usb 4-1: config 64 has no interface number 0 [ 567.464607][ T3419] usb 1-1: device descriptor read/64, error 18 [ 567.514557][ T331] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 567.564615][ T18] usb 4-1: New USB device found, idVendor=0781, idProduct=0100, bcdDevice= 1.00 [ 567.573746][ T18] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.581800][ T18] usb 4-1: Product: syz [ 567.586148][ T18] usb 4-1: Manufacturer: syz [ 567.590719][ T18] usb 4-1: SerialNumber: syz [ 567.604689][ T820] usb 5-1: Using ep0 maxpacket: 32 [ 567.724615][ T820] usb 5-1: config 0 has an invalid interface number: 74 but max is 1 [ 567.732773][ T820] usb 5-1: config 0 has no interface number 1 [ 567.754619][ T331] usb 2-1: Using ep0 maxpacket: 16 [ 567.854730][ T3419] usb 1-1: device descriptor read/64, error 18 [ 567.875015][ T18] usb-storage 4-1:64.80: USB Mass Storage device detected [ 567.882401][ T331] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 567.893807][ T331] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 567.903660][ T18] usb-storage 4-1:64.80: Quirks match for vid 0781 pid 0100: 1 [ 567.911268][ T820] usb 5-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 567.920383][ T820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.950846][ T331] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 567.965496][ T18] usb 4-1: USB disconnect, device number 64 [ 567.971915][ T820] usb 5-1: Product: syz [ 567.976648][ T820] usb 5-1: Manufacturer: syz [ 567.981242][ T820] usb 5-1: SerialNumber: syz [ 567.986591][ T820] usb 5-1: config 0 descriptor?? [ 568.025770][ T820] snd-usb-audio: probe of 5-1:0.74 failed with error -22 [ 568.064659][ T331] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 568.073734][ T331] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 568.081827][ T331] usb 2-1: SerialNumber: syz [ 568.104705][ T8341] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 568.124696][ T3419] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 568.228311][ T8353] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 568.236283][ T5] usb 5-1: USB disconnect, device number 77 [ 568.237094][ T8353] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 568.237094][ T8353] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 568.237094][ T8353] [ 568.260903][ T8353] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:163: inode #12: comm syz.2.2041: inline data xattr refers to an external xattr inode [ 568.276341][ T8353] EXT4-fs error (device loop2): ext4_orphan_get:1242: comm syz.2.2041: couldn't read orphan inode 12 (err -117) [ 568.288412][ T8353] EXT4-fs (loop2): mounted filesystem without journal. Opts: acl,mblk_io_submit,grpjquota=,sysvgroups,noacl,min_batch_time=0x0000000000000010,bsdgroups,noload,nodiscard,,errors=continue [ 568.327544][ T8341] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 568.376573][ T340] EXT4-fs error (device loop3): ext4_empty_dir:3039: inode #11: comm syz-executor: invalid size [ 568.387814][ T340] EXT4-fs warning (device loop3): ext4_rmdir:3320: inode #11: comm syz-executor: empty directory 'file1' has too many links (0) [ 568.406713][ T3419] usb 1-1: device descriptor read/64, error 18 [ 568.414731][ T331] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 568.422726][ T331] usb 2-1: USB disconnect, device number 80 [ 568.555670][ T8364] overlayfs: missing 'workdir' [ 568.664116][ T8362] EXT4-fs (loop2): Test dummy encryption mode enabled [ 568.730887][ T8362] EXT4-fs (loop2): 1 orphan inode deleted [ 568.736721][ T8362] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,inode_readahead_blks=0x0000000000000004,test_dummy_encryption,errors=remount-ro,inlinecrypt,barrier,noquota,data_err=abort, [ 568.755832][ T8362] ext4 filesystem being mounted at /459/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 569.144711][ T1067] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 569.621778][ T8369] fuse: Bad value for 'fd' [ 569.644470][ T8369] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 569.651857][ T8369] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 569.651857][ T8369] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 569.651857][ T8369] [ 569.671870][ T8369] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:163: inode #12: comm syz.1.2045: inline data xattr refers to an external xattr inode [ 569.687880][ T8369] EXT4-fs error (device loop1): ext4_orphan_get:1242: comm syz.1.2045: couldn't read orphan inode 12 (err -117) [ 569.700091][ T8369] EXT4-fs (loop1): mounted filesystem without journal. Opts: acl,mblk_io_submit,grpjquota=,sysvgroups,noacl,min_batch_time=0x0000000000000010,bsdgroups,noload,nodiscard,,errors=continue [ 569.715195][ T1067] usb 4-1: Using ep0 maxpacket: 32 [ 571.434658][ T1067] usb 4-1: config 0 has an invalid interface number: 74 but max is 1 [ 571.464668][ T1067] usb 4-1: config 0 has no interface number 1 [ 571.552486][ T8385] EXT4-fs (loop2): Test dummy encryption mode enabled [ 571.618696][ T8385] EXT4-fs (loop2): 1 orphan inode deleted [ 571.624540][ T8385] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,inode_readahead_blks=0x0000000000000004,test_dummy_encryption,errors=remount-ro,inlinecrypt,barrier,noquota,data_err=abort, [ 571.643893][ T8385] ext4 filesystem being mounted at /460/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 571.694651][ T1067] usb 4-1: string descriptor 0 read error: -71 [ 571.774363][ T1067] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 571.832912][ T8379] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 572.007398][ T8379] EXT4-fs (loop4): invalid journal inode [ 572.028264][ T1067] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.041065][ T8379] EXT4-fs (loop4): can't get journal size [ 572.060815][ T1067] usb 4-1: config 0 descriptor?? [ 572.084350][ T8379] EXT4-fs (loop4): 1 truncate cleaned up [ 572.117447][ T1067] usb 4-1: can't set config #0, error -71 [ 572.123283][ T8379] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,,errors=continue [ 572.142024][ T8402] overlayfs: missing 'lowerdir' [ 572.224841][ T1067] usb 4-1: USB disconnect, device number 65 [ 572.259919][ T8405] overlayfs: failed to resolve './file1': -2 [ 572.269391][ T8405] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2053'. [ 572.362918][ T8408] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=49 sclass=netlink_audit_socket pid=8408 comm=syz.1.2051 [ 572.499286][ T8412] overlayfs: missing 'workdir' [ 572.579050][ T8411] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 572.587985][ T8411] ext4 filesystem being mounted at /376/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 572.614570][ T3419] usb 1-1: device descriptor read/64, error -71 [ 572.734632][ T3419] usb usb1-port1: attempt power cycle [ 572.744605][ T18] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 572.984557][ T18] usb 4-1: Using ep0 maxpacket: 32 [ 572.989760][ T331] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 573.040665][ T8419] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 573.049903][ T8419] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 573.058999][ T8419] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 573.068180][ T8419] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a002c01c, mo2=0002] [ 573.076526][ T8419] System zones: 0-2, 18-18, 34-34 [ 573.082216][ T8419] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:864: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 573.097063][ T8419] EXT4-fs (loop1): 1 truncate cleaned up [ 573.102799][ T8419] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 573.134650][ T18] usb 4-1: config 0 has an invalid interface number: 74 but max is 1 [ 573.142760][ T18] usb 4-1: config 0 has no interface number 1 [ 573.148926][ T3419] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 573.214600][ T5] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 573.234593][ T331] usb 3-1: Using ep0 maxpacket: 32 [ 573.244591][ T3419] usb 1-1: Using ep0 maxpacket: 8 [ 573.314685][ T18] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 573.323763][ T18] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.331847][ T18] usb 4-1: Product: syz [ 573.336069][ T18] usb 4-1: Manufacturer: syz [ 573.340646][ T18] usb 4-1: SerialNumber: syz [ 573.345887][ T18] usb 4-1: config 0 descriptor?? [ 573.354617][ T331] usb 3-1: config 0 has an invalid interface number: 74 but max is 1 [ 573.362699][ T331] usb 3-1: config 0 has no interface number 1 [ 573.368909][ T3419] usb 1-1: config 64 has an invalid interface number: 80 but max is 1 [ 573.377437][ T3419] usb 1-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 573.388533][ T18] snd-usb-audio: probe of 4-1:0.74 failed with error -22 [ 573.395648][ T3419] usb 1-1: config 64 has 1 interface, different from the descriptor's value: 2 [ 573.406099][ T3419] usb 1-1: config 64 has no interface number 0 [ 573.474642][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 573.534606][ T331] usb 3-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 573.543684][ T331] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.551762][ T331] usb 3-1: Product: syz [ 573.555949][ T331] usb 3-1: Manufacturer: syz [ 573.560539][ T331] usb 3-1: SerialNumber: syz [ 573.565272][ T3419] usb 1-1: New USB device found, idVendor=0781, idProduct=0100, bcdDevice= 1.00 [ 573.574306][ T3419] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.582845][ T3419] usb 1-1: Product: syz [ 573.587239][ T331] usb 3-1: config 0 descriptor?? [ 573.592444][ T3419] usb 1-1: Manufacturer: syz [ 573.597191][ T3419] usb 1-1: SerialNumber: syz [ 573.604636][ T5] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 573.616153][ T5] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 573.624429][ T105] usb 4-1: USB disconnect, device number 66 [ 573.627203][ T5] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 573.633280][ T331] snd-usb-audio: probe of 3-1:0.74 failed with error -22 [ 573.655668][ T363] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 573.724627][ T5] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 573.733714][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 573.741833][ T5] usb 5-1: SerialNumber: syz [ 573.764589][ T8417] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 573.859118][ T105] usb 3-1: USB disconnect, device number 79 [ 573.875087][ T3419] usb-storage 1-1:64.80: USB Mass Storage device detected [ 573.883171][ T3419] usb-storage 1-1:64.80: Quirks match for vid 0781 pid 0100: 1 [ 573.906606][ T3419] usb 1-1: USB disconnect, device number 80 [ 573.924587][ T363] usb 2-1: device descriptor read/64, error 18 [ 573.987450][ T8417] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 574.074690][ T5] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 574.084686][ T5] usb 5-1: USB disconnect, device number 78 [ 574.314604][ T363] usb 2-1: device descriptor read/64, error 18 [ 574.338611][ T8429] EXT4-fs (loop3): Test dummy encryption mode enabled [ 574.452826][ T8429] EXT4-fs (loop3): 1 orphan inode deleted [ 574.458665][ T8429] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,inode_readahead_blks=0x0000000000000004,test_dummy_encryption,errors=remount-ro,inlinecrypt,barrier,noquota,data_err=abort, [ 574.477817][ T8429] ext4 filesystem being mounted at /363/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 574.594634][ T363] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 575.581713][ T363] usb 2-1: device descriptor read/64, error 18 [ 575.950358][ T8438] EXT4-fs (loop2): Test dummy encryption mode enabled [ 576.017261][ T8438] EXT4-fs (loop2): 1 orphan inode deleted [ 576.023023][ T8438] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,inode_readahead_blks=0x0000000000000004,test_dummy_encryption,errors=remount-ro,inlinecrypt,barrier,noquota,data_err=abort, [ 576.042557][ T8438] ext4 filesystem being mounted at /462/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 576.765085][ T8443] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 576.774879][ T8443] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 576.774879][ T8443] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 576.774879][ T8443] [ 576.801517][ T8443] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:163: inode #12: comm syz.4.2060: inline data xattr refers to an external xattr inode [ 576.816842][ T8443] EXT4-fs error (device loop4): ext4_orphan_get:1242: comm syz.4.2060: couldn't read orphan inode 12 (err -117) [ 576.832336][ T8443] EXT4-fs (loop4): mounted filesystem without journal. Opts: acl,mblk_io_submit,grpjquota=,sysvgroups,noacl,min_batch_time=0x0000000000000010,bsdgroups,noload,nodiscard,,errors=continue [ 577.015428][ T8470] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=49 sclass=netlink_audit_socket pid=8470 comm=syz.2.2067 [ 577.025867][ T8467] EXT4-fs (loop1): Test dummy encryption mode enabled [ 577.073413][ T8467] EXT4-fs (loop1): 1 orphan inode deleted [ 577.083265][ T8467] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,inode_readahead_blks=0x0000000000000004,test_dummy_encryption,errors=remount-ro,inlinecrypt,barrier,noquota,data_err=abort, [ 577.106063][ T8472] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000002,,errors=continue [ 577.157263][ T8467] ext4 filesystem being mounted at /395/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 577.175024][ T8472] ext4 filesystem being mounted at /379/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 578.137262][ T8484] overlayfs: failed to resolve './file1': -2 [ 578.434652][ T8491] overlayfs: missing 'workdir' [ 578.532476][ T8492] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=49 sclass=netlink_audit_socket pid=8492 comm=syz.0.2074 [ 578.704693][ T5] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 578.754562][ T363] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 578.934739][ T13] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 578.984556][ T5] usb 4-1: Using ep0 maxpacket: 16 [ 578.994554][ T363] usb 3-1: Using ep0 maxpacket: 16 [ 579.104669][ T5] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 579.115898][ T5] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 579.125912][ T363] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 579.137286][ T5] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 579.173926][ T363] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 579.207185][ T13] usb 5-1: Using ep0 maxpacket: 32 [ 579.212431][ T363] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 579.284684][ T5] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 579.293817][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 579.301861][ T5] usb 4-1: SerialNumber: syz [ 579.306606][ T363] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 579.315880][ T363] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 579.324179][ T363] usb 3-1: SerialNumber: syz [ 579.328853][ T13] usb 5-1: config 0 has an invalid interface number: 74 but max is 1 [ 579.337027][ T8484] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 579.337322][ T13] usb 5-1: config 0 has no interface number 1 [ 579.364649][ T8486] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 579.504642][ T13] usb 5-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 579.513699][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.522025][ T13] usb 5-1: Product: syz [ 579.526214][ T13] usb 5-1: Manufacturer: syz [ 579.530807][ T13] usb 5-1: SerialNumber: syz [ 579.536033][ T13] usb 5-1: config 0 descriptor?? [ 579.556685][ T8484] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 579.564689][ T3419] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 579.574670][ T5] cdc_ether: probe of 4-1:1.0 failed with error -71 [ 579.584113][ T13] snd-usb-audio: probe of 5-1:0.74 failed with error -22 [ 579.585771][ T8486] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 579.591383][ T5] usb 4-1: USB disconnect, device number 67 [ 579.664597][ T363] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 579.675363][ T363] usb 3-1: USB disconnect, device number 80 [ 579.794925][ T1067] usb 5-1: USB disconnect, device number 79 [ 579.814547][ T3419] usb 2-1: Using ep0 maxpacket: 16 [ 579.934608][ T3419] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 579.944755][ T3419] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 580.034614][ T3419] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 580.043642][ T3419] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 580.051657][ T3419] usb 2-1: SerialNumber: syz [ 580.094968][ T3419] cdc_ether 2-1:1.0: skipping garbage [ 580.100372][ T3419] usb 2-1: bad CDC descriptors [ 580.359345][ T8519] EXT4-fs (loop3): Test dummy encryption mode enabled [ 580.382654][ T8519] EXT4-fs (loop3): 1 orphan inode deleted [ 580.388457][ T8519] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,inode_readahead_blks=0x0000000000000004,test_dummy_encryption,errors=remount-ro,inlinecrypt,barrier,noquota,data_err=abort, [ 580.407707][ T8519] ext4 filesystem being mounted at /366/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 580.810835][ T8494] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 580.836349][ T8525] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=49 sclass=netlink_audit_socket pid=8525 comm=syz.2.2083 [ 581.155993][ T363] usb 2-1: USB disconnect, device number 83 [ 581.280814][ T8527] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000002,,errors=continue [ 581.313352][ T8527] ext4 filesystem being mounted at /381/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 581.682991][ T8547] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=49 sclass=netlink_audit_socket pid=8547 comm=syz.4.2086 [ 581.980086][ T8544] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 581.988704][ T8544] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 581.988704][ T8544] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 581.988704][ T8544] [ 582.011854][ T8550] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 582.023265][ T8550] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 582.025110][ T8544] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:163: inode #12: comm syz.3.2085: inline data xattr refers to an external xattr inode [ 582.031833][ T363] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 582.054714][ T8544] EXT4-fs error (device loop3): ext4_orphan_get:1242: comm syz.3.2085: couldn't read orphan inode 12 (err -117) [ 582.067145][ T8544] EXT4-fs (loop3): mounted filesystem without journal. Opts: acl,mblk_io_submit,grpjquota=,sysvgroups,noacl,min_batch_time=0x0000000000000010,bsdgroups,noload,nodiscard,,errors=continue [ 582.237725][ T8557] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 582.245028][ T8557] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 582.245028][ T8557] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 582.245028][ T8557] [ 582.263467][ T8557] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:163: inode #12: comm syz.3.2094: inline data xattr refers to an external xattr inode [ 582.278674][ T8557] EXT4-fs error (device loop3): ext4_orphan_get:1242: comm syz.3.2094: couldn't read orphan inode 12 (err -117) [ 582.290885][ T8557] EXT4-fs (loop3): mounted filesystem without journal. Opts: acl,mblk_io_submit,grpjquota=,sysvgroups,noacl,min_batch_time=0x0000000000000010,bsdgroups,noload,nodiscard,,errors=continue [ 582.294549][ T363] usb 3-1: Using ep0 maxpacket: 16 [ 582.454824][ T363] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 582.466797][ T363] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 582.477586][ T363] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 582.584619][ T1067] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 582.593307][ T363] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 582.604139][ T363] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 582.638837][ T363] usb 3-1: SerialNumber: syz [ 582.664634][ T5] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 582.694946][ T8546] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 582.778660][ T8566] EXT4-fs (loop4): Test dummy encryption mode enabled [ 582.810050][ T8566] EXT4-fs (loop4): 1 orphan inode deleted [ 582.815881][ T8566] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,inode_readahead_blks=0x0000000000000004,test_dummy_encryption,errors=remount-ro,inlinecrypt,barrier,noquota,data_err=abort, [ 582.835250][ T8566] ext4 filesystem being mounted at /383/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 582.967265][ T8546] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 582.974900][ T1067] usb 2-1: Using ep0 maxpacket: 32 [ 583.011799][ T5] usb 1-1: Using ep0 maxpacket: 16 [ 583.134878][ T1067] usb 2-1: config 0 has an invalid interface number: 74 but max is 1 [ 583.146085][ T8572] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000002,,errors=continue [ 583.158559][ T5] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 583.171631][ T1067] usb 2-1: config 0 has no interface number 1 [ 583.178563][ T363] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 583.187482][ T5] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 583.465859][ T8572] ext4 filesystem being mounted at /370/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 583.515589][ T363] usb 3-1: USB disconnect, device number 81 [ 583.522436][ T5] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 583.614726][ T5] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 583.634012][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 583.644105][ T5] usb 1-1: SerialNumber: syz [ 583.674706][ T1067] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 583.683752][ T1067] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.692553][ T8555] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 583.708338][ T1067] usb 2-1: Product: syz [ 583.712543][ T1067] usb 2-1: Manufacturer: syz [ 583.717321][ T1067] usb 2-1: SerialNumber: syz [ 583.722547][ T1067] usb 2-1: config 0 descriptor?? [ 583.765405][ T1067] snd-usb-audio: probe of 2-1:0.74 failed with error -22 [ 583.781639][ T8585] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=49 sclass=netlink_audit_socket pid=8585 comm=syz.4.2099 [ 583.910097][ T8555] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 583.924612][ T5] cdc_ether: probe of 1-1:1.0 failed with error -71 [ 583.944616][ T5] usb 1-1: USB disconnect, device number 81 [ 583.996255][ T363] usb 2-1: USB disconnect, device number 84 [ 584.184589][ T1067] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 584.240637][ T8589] EXT4-fs (loop2): Test dummy encryption mode enabled [ 584.341917][ T8589] EXT4-fs (loop2): 1 orphan inode deleted [ 584.347799][ T8589] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,inode_readahead_blks=0x0000000000000004,test_dummy_encryption,errors=remount-ro,inlinecrypt,barrier,noquota,data_err=abort, [ 584.366948][ T8589] ext4 filesystem being mounted at /470/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 584.684769][ T1067] usb 4-1: Using ep0 maxpacket: 16 [ 585.396011][ T1067] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 585.406329][ T1067] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 586.344885][ T1067] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 586.355502][ T1067] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 586.363697][ T1067] usb 4-1: SerialNumber: syz [ 586.476248][ T1067] cdc_ether 4-1:1.0: skipping garbage [ 586.481963][ T1067] usb 4-1: bad CDC descriptors [ 586.708711][ T8584] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 586.765359][ T1067] usb 4-1: USB disconnect, device number 68 [ 587.410663][ T8603] EXT4-fs (loop4): Test dummy encryption mode enabled [ 588.032432][ T8618] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=49 sclass=netlink_audit_socket pid=8618 comm=syz.2.2105 [ 588.172087][ T8603] EXT4-fs: failed to create workqueue [ 588.177892][ T8603] EXT4-fs (loop4): mount failed [ 588.568734][ T8635] EXT4-fs (loop3): Test dummy encryption mode enabled [ 588.703343][ T8635] EXT4-fs (loop3): 1 orphan inode deleted [ 588.709163][ T8635] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,inode_readahead_blks=0x0000000000000004,test_dummy_encryption,errors=remount-ro,inlinecrypt,barrier,noquota,data_err=abort, [ 588.728359][ T8635] ext4 filesystem being mounted at /374/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 588.904402][ T8628] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000002,,errors=continue [ 588.917323][ T8628] ext4 filesystem being mounted at /386/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 589.014656][ T6113] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 589.624602][ T6113] usb 2-1: Using ep0 maxpacket: 16 [ 589.711470][ T8646] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=49 sclass=netlink_audit_socket pid=8646 comm=syz.2.2115 [ 589.754737][ T6113] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 589.772788][ T6113] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 589.791515][ T6113] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 589.837645][ T8647] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,barrier=0x0000000000000005,dioread_lock,norecovery,nombcache,lazytime,noload,usrquota,noauto_da_alloc,resuid=0x0000000000000000,init_itable=0x0000000000000000,jqfmt=vfsv1,,errors=continue [ 589.894747][ T6113] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 589.914000][ T6113] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 589.922320][ T6113] usb 2-1: SerialNumber: syz [ 589.928683][ T8649] EXT4-fs (loop4): Test dummy encryption mode enabled [ 589.952107][ T8647] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2117'. [ 589.963855][ T8649] EXT4-fs (loop4): 1 orphan inode deleted [ 589.969794][ T8632] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 589.980475][ T8649] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,inode_readahead_blks=0x0000000000000004,test_dummy_encryption,errors=remount-ro,inlinecrypt,barrier,noquota,data_err=abort, [ 590.001026][ T8649] ext4 filesystem being mounted at /387/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 590.202360][ T8632] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 590.244543][ T5] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 590.294650][ T6113] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 590.312252][ T6113] usb 2-1: USB disconnect, device number 85 [ 590.504561][ T5] usb 4-1: Using ep0 maxpacket: 8 [ 590.525200][ T8659] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 590.545211][ T8659] EXT4-fs (loop2): invalid journal inode [ 590.550886][ T8659] EXT4-fs (loop2): can't get journal size [ 590.575015][ T8659] EXT4-fs (loop2): 1 truncate cleaned up [ 590.580684][ T8659] EXT4-fs (loop2): mounted filesystem without journal. Opts: norecovery,,errors=continue [ 590.654598][ T5] usb 4-1: config 64 has an invalid interface number: 80 but max is 1 [ 590.662812][ T5] usb 4-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 590.695408][ T8656] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 590.702585][ T5] usb 4-1: config 64 has 1 interface, different from the descriptor's value: 2 [ 590.711828][ T5] usb 4-1: config 64 has no interface number 0 [ 590.718797][ T8656] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 590.718797][ T8656] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 590.718797][ T8656] [ 590.738926][ T8656] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:163: inode #12: comm syz.2.2118: inline data xattr refers to an external xattr inode [ 590.754029][ T8656] EXT4-fs error (device loop2): ext4_orphan_get:1242: comm syz.2.2118: couldn't read orphan inode 12 (err -117) [ 590.771220][ T8656] EXT4-fs (loop2): mounted filesystem without journal. Opts: acl,mblk_io_submit,grpjquota=,sysvgroups,noacl,min_batch_time=0x0000000000000010,bsdgroups,noload,nodiscard,,errors=continue [ 590.884679][ T5] usb 4-1: New USB device found, idVendor=0781, idProduct=0100, bcdDevice= 1.00 [ 590.893882][ T5] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.902553][ T5] usb 4-1: Product: syz [ 590.912354][ T5] usb 4-1: Manufacturer: syz [ 590.917186][ T5] usb 4-1: SerialNumber: syz [ 591.727596][ T5] usb-storage 4-1:64.80: USB Mass Storage device detected [ 591.739893][ T5] usb-storage 4-1:64.80: Quirks match for vid 0781 pid 0100: 1 [ 592.263278][ T363] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 592.270911][ T6113] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 592.412536][ T5] usb 4-1: USB disconnect, device number 69 [ 592.654781][ T363] usb 2-1: Using ep0 maxpacket: 32 [ 592.660104][ T6113] usb 3-1: Using ep0 maxpacket: 16 [ 592.794701][ T6113] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 592.794744][ T363] usb 2-1: config 0 has an invalid interface number: 74 but max is 1 [ 592.813547][ T6113] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 592.828564][ T363] usb 2-1: config 0 has no interface number 1 [ 592.924926][ T6113] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 592.934656][ T6113] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 592.943879][ T6113] usb 3-1: SerialNumber: syz [ 592.984721][ T1444] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 593.022672][ T6113] cdc_ether 3-1:1.0: skipping garbage [ 593.028531][ T6113] usb 3-1: bad CDC descriptors [ 593.044968][ T363] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 593.060531][ T363] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.070167][ T363] usb 2-1: Product: syz [ 593.074422][ T363] usb 2-1: Manufacturer: syz [ 593.080369][ T363] usb 2-1: SerialNumber: syz [ 593.104990][ T363] usb 2-1: config 0 descriptor?? [ 593.157386][ T363] snd-usb-audio: probe of 2-1:0.74 failed with error -22 [ 593.406145][ T820] usb 2-1: USB disconnect, device number 86 [ 593.416957][ T8676] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 593.428594][ T105] usb 3-1: USB disconnect, device number 82 [ 593.462317][ T1444] usb 5-1: Using ep0 maxpacket: 16 [ 593.505629][ T8694] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,barrier=0x0000000000000005,dioread_lock,norecovery,nombcache,lazytime,noload,usrquota,noauto_da_alloc,resuid=0x0000000000000000,init_itable=0x0000000000000000,jqfmt=vfsv1,,errors=continue [ 593.541584][ T8694] overlayfs: missing 'lowerdir' [ 593.548626][ T8694] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2126'. [ 593.594617][ T1444] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 593.605941][ T1444] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 593.616105][ T1444] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 593.704659][ T1444] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 593.713976][ T1444] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 593.722501][ T1444] usb 5-1: SerialNumber: syz [ 593.744619][ T8690] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 593.753410][ T8704] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=49 sclass=netlink_audit_socket pid=8704 comm=syz.0.2128 [ 593.824551][ T404] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 593.969468][ T8690] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 594.054656][ T1444] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 594.062639][ T1444] usb 5-1: USB disconnect, device number 80 [ 594.074580][ T404] usb 4-1: Using ep0 maxpacket: 8 [ 594.194645][ T404] usb 4-1: config 64 has an invalid interface number: 80 but max is 1 [ 594.202926][ T404] usb 4-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 594.213205][ T404] usb 4-1: config 64 has 1 interface, different from the descriptor's value: 2 [ 594.222189][ T404] usb 4-1: config 64 has no interface number 0 [ 594.384604][ T404] usb 4-1: New USB device found, idVendor=0781, idProduct=0100, bcdDevice= 1.00 [ 594.393809][ T404] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.401837][ T404] usb 4-1: Product: syz [ 594.406059][ T404] usb 4-1: Manufacturer: syz [ 594.410631][ T404] usb 4-1: SerialNumber: syz [ 594.415272][ T820] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 594.422883][ T105] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 594.654548][ T820] usb 2-1: Using ep0 maxpacket: 16 [ 594.664820][ T105] usb 3-1: Using ep0 maxpacket: 16 [ 594.705035][ T404] usb-storage 4-1:64.80: USB Mass Storage device detected [ 594.712769][ T404] usb-storage 4-1:64.80: Quirks match for vid 0781 pid 0100: 1 [ 594.774569][ T820] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 594.784806][ T105] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 594.796145][ T820] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 594.807426][ T105] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 594.817536][ T105] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 594.830890][ T820] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 594.840936][ T820] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 594.915952][ T8712] EXT4-fs (loop4): Project quota feature not enabled. Cannot enable project quota enforcement. [ 594.924379][ T404] usb 4-1: USB disconnect, device number 70 [ 594.932334][ T105] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 594.942409][ T820] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 594.951503][ T105] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 594.959545][ T820] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 594.967680][ T105] usb 3-1: SerialNumber: syz [ 594.973047][ T820] usb 2-1: SerialNumber: syz [ 594.984620][ T8708] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 595.014965][ T820] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 595.077831][ T8712] overlayfs: failed to resolve './file1': -2 [ 595.206402][ T8708] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 595.221532][ T8707] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 595.230784][ T404] usb 2-1: USB disconnect, device number 87 [ 595.236890][ T105] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 595.251122][ T105] usb 3-1: USB disconnect, device number 83 [ 595.322595][ T8727] fuse: Bad value for 'fd' [ 595.389461][ T8722] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 595.403114][ T8722] EXT4-fs (loop4): invalid journal inode [ 595.408875][ T8722] EXT4-fs (loop4): can't get journal size [ 595.416371][ T8722] EXT4-fs (loop4): 1 truncate cleaned up [ 595.422018][ T8722] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,,errors=continue [ 595.736585][ T363] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 595.848487][ T8719] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 595.855915][ T8719] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 595.855915][ T8719] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 595.855915][ T8719] [ 595.874499][ T8719] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:163: inode #12: comm syz.4.2133: inline data xattr refers to an external xattr inode [ 595.889918][ T8719] EXT4-fs error (device loop4): ext4_orphan_get:1242: comm syz.4.2133: couldn't read orphan inode 12 (err -117) [ 595.901926][ T8719] EXT4-fs (loop4): mounted filesystem without journal. Opts: acl,mblk_io_submit,grpjquota=,sysvgroups,noacl,min_batch_time=0x0000000000000010,bsdgroups,noload,nodiscard,,errors=continue [ 595.974551][ T363] usb 4-1: Using ep0 maxpacket: 16 [ 596.094751][ T363] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 596.106044][ T363] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 596.116214][ T8742] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 596.127663][ T8742] EXT4-fs (loop1): invalid journal inode [ 596.133404][ T8742] EXT4-fs (loop1): can't get journal size [ 596.139218][ T363] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 596.154772][ T8742] EXT4-fs (loop1): 1 truncate cleaned up [ 596.160429][ T8742] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,,errors=continue [ 596.224608][ T105] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 596.224651][ T363] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 596.241365][ T363] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 596.249390][ T363] usb 4-1: SerialNumber: syz [ 596.284611][ T8724] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 596.300066][ T8735] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 596.308520][ T8735] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 596.308520][ T8735] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 596.308520][ T8735] [ 596.314819][ T8754] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=49 sclass=netlink_audit_socket pid=8754 comm=syz.4.2139 [ 596.329185][ T8735] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:163: inode #12: comm syz.1.2137: inline data xattr refers to an external xattr inode [ 596.354785][ T8735] EXT4-fs error (device loop1): ext4_orphan_get:1242: comm syz.1.2137: couldn't read orphan inode 12 (err -117) [ 596.367016][ T8735] EXT4-fs (loop1): mounted filesystem without journal. Opts: acl,mblk_io_submit,grpjquota=,sysvgroups,noacl,min_batch_time=0x0000000000000010,bsdgroups,noload,nodiscard,,errors=continue [ 596.390857][ T8751] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 596.399980][ T8751] EXT4-fs (loop2): invalid journal inode [ 596.406082][ T8751] EXT4-fs (loop2): can't get journal size [ 596.413423][ T8751] EXT4-fs (loop2): 1 truncate cleaned up [ 596.419578][ T8751] EXT4-fs (loop2): mounted filesystem without journal. Opts: norecovery,,errors=continue [ 596.474577][ T105] usb 1-1: Using ep0 maxpacket: 16 [ 596.509158][ T8724] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 596.524635][ T363] cdc_ether: probe of 4-1:1.0 failed with error -71 [ 596.540401][ T8745] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 596.548672][ T363] usb 4-1: USB disconnect, device number 71 [ 596.559074][ T8745] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 596.559074][ T8745] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 596.559074][ T8745] [ 596.580499][ T8745] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:163: inode #12: comm syz.2.2151: inline data xattr refers to an external xattr inode [ 596.596115][ T8745] EXT4-fs error (device loop2): ext4_orphan_get:1242: comm syz.2.2151: couldn't read orphan inode 12 (err -117) [ 596.604599][ T105] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 596.618442][ T105] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 596.623236][ T8745] EXT4-fs (loop2): mounted filesystem without journal. Opts: acl,mblk_io_submit,grpjquota=,sysvgroups,noacl,min_batch_time=0x0000000000000010,bsdgroups,noload,nodiscard,,errors=continue [ 596.636764][ T105] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 596.657537][ T105] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 596.744612][ T105] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 596.753884][ T105] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 596.762040][ T105] usb 1-1: SerialNumber: syz [ 596.767234][ T8766] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=49 sclass=netlink_audit_socket pid=8766 comm=syz.1.2142 [ 596.825097][ T105] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 597.024532][ T6113] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 597.037261][ T8733] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 597.050120][ T363] usb 1-1: USB disconnect, device number 82 [ 597.099247][ T8771] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 597.109212][ T8771] EXT4-fs (loop2): invalid journal inode [ 597.115231][ T8771] EXT4-fs (loop2): can't get journal size [ 597.122384][ T8771] EXT4-fs (loop2): 1 truncate cleaned up [ 597.128340][ T8771] EXT4-fs (loop2): mounted filesystem without journal. Opts: norecovery,,errors=continue [ 597.146501][ T8774] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,barrier=0x0000000000000005,dioread_lock,norecovery,nombcache,lazytime,noload,usrquota,noauto_da_alloc,resuid=0x0000000000000000,init_itable=0x0000000000000000,jqfmt=vfsv1,,errors=continue [ 597.183677][ T8774] overlayfs: missing 'lowerdir' [ 597.190731][ T8774] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2144'. [ 597.264568][ T6113] usb 5-1: Using ep0 maxpacket: 32 [ 597.384618][ T6113] usb 5-1: config 0 has an invalid interface number: 74 but max is 1 [ 597.392705][ T6113] usb 5-1: config 0 has no interface number 1 [ 597.464548][ T1444] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 597.554608][ T6113] usb 5-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 597.563655][ T6113] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.571915][ T6113] usb 5-1: Product: syz [ 597.576260][ T6113] usb 5-1: Manufacturer: syz [ 597.580875][ T6113] usb 5-1: SerialNumber: syz [ 597.586469][ T6113] usb 5-1: config 0 descriptor?? [ 597.597088][ T8785] overlayfs: missing 'lowerdir' [ 597.603994][ T8785] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2146'. [ 597.625309][ T6113] snd-usb-audio: probe of 5-1:0.74 failed with error -22 [ 597.662384][ T8768] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 597.669748][ T8768] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 597.669748][ T8768] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 597.669748][ T8768] [ 597.687654][ T105] usb 2-1: new full-speed USB device number 88 using dummy_hcd [ 597.695574][ T8768] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:163: inode #12: comm syz.2.2143: inline data xattr refers to an external xattr inode [ 597.710427][ T1444] usb 4-1: Using ep0 maxpacket: 8 [ 597.715540][ T8768] EXT4-fs error (device loop2): ext4_orphan_get:1242: comm syz.2.2143: couldn't read orphan inode 12 (err -117) [ 597.727569][ T8768] EXT4-fs (loop2): mounted filesystem without journal. Opts: acl,mblk_io_submit,grpjquota=,sysvgroups,noacl,min_batch_time=0x0000000000000010,bsdgroups,noload,nodiscard,,errors=continue [ 597.829001][ T5] usb 5-1: USB disconnect, device number 81 [ 597.844589][ T1444] usb 4-1: config 64 has an invalid interface number: 80 but max is 1 [ 597.852800][ T1444] usb 4-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 597.863094][ T1444] usb 4-1: config 64 has 1 interface, different from the descriptor's value: 2 [ 597.872232][ T1444] usb 4-1: config 64 has no interface number 0 [ 597.894597][ T363] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 597.910470][ T8788] fuse: Unknown parameter '0x0000000000000004' [ 597.964541][ T105] usb 2-1: device descriptor read/64, error 18 [ 598.098405][ T8792] EXT4-fs (loop2): Test dummy encryption mode enabled [ 598.144628][ T363] usb 1-1: Using ep0 maxpacket: 8 [ 598.234722][ T1444] usb 4-1: New USB device found, idVendor=0781, idProduct=0100, bcdDevice= 1.00 [ 598.273793][ T1444] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.282982][ T1444] usb 4-1: Product: syz [ 598.288090][ T1444] usb 4-1: Manufacturer: syz [ 598.299562][ T8792] EXT4-fs (loop2): 1 orphan inode deleted [ 598.305390][ T8792] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,inode_readahead_blks=0x0000000000000004,test_dummy_encryption,errors=remount-ro,inlinecrypt,barrier,noquota,data_err=abort, [ 598.324539][ T8792] ext4 filesystem being mounted at /481/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 598.384756][ T363] usb 1-1: config 64 has an invalid interface number: 80 but max is 1 [ 598.403285][ T1444] usb 4-1: SerialNumber: syz [ 598.409326][ T363] usb 1-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 598.421894][ T363] usb 1-1: config 64 has 1 interface, different from the descriptor's value: 2 [ 598.431727][ T363] usb 1-1: config 64 has no interface number 0 [ 598.628966][ T363] usb 1-1: New USB device found, idVendor=0781, idProduct=0100, bcdDevice= 1.00 [ 598.663064][ T363] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.678241][ T363] usb 1-1: Product: syz [ 599.037499][ T363] usb 1-1: Manufacturer: syz [ 599.042134][ T363] usb 1-1: SerialNumber: syz [ 599.105310][ T1444] usb-storage 4-1:64.80: USB Mass Storage device detected [ 599.113436][ T1444] usb-storage 4-1:64.80: Quirks match for vid 0781 pid 0100: 1 [ 599.147616][ T1444] usb 4-1: USB disconnect, device number 72 [ 599.324964][ T363] usb-storage 1-1:64.80: USB Mass Storage device detected [ 599.332762][ T8798] F2FS-fs (loop4): Test dummy encryption mode enabled [ 599.341355][ T8798] F2FS-fs (loop4): invalid crc value [ 599.365710][ T363] usb-storage 1-1:64.80: Quirks match for vid 0781 pid 0100: 1 [ 599.373459][ T8798] F2FS-fs (loop4): Found nat_bits in checkpoint [ 599.394531][ T105] usb 2-1: device descriptor read/64, error 18 [ 599.408393][ T8798] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 599.450112][ T363] usb 1-1: USB disconnect, device number 83 [ 599.674592][ T105] usb 2-1: new full-speed USB device number 89 using dummy_hcd [ 599.840409][ T8820] overlayfs: missing 'lowerdir' [ 599.978515][ T8818] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 599.986805][ T105] usb 2-1: device descriptor read/64, error 18 [ 599.995760][ T8818] EXT4-fs (loop3): invalid journal inode [ 600.001492][ T8818] EXT4-fs (loop3): can't get journal size [ 600.014371][ T8818] EXT4-fs (loop3): 1 truncate cleaned up [ 600.033872][ T8818] EXT4-fs (loop3): mounted filesystem without journal. Opts: norecovery,,errors=continue [ 600.170846][ T8815] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 600.184675][ T8815] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 600.184675][ T8815] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 600.184675][ T8815] [ 600.204483][ T8815] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:163: inode #12: comm syz.3.2155: inline data xattr refers to an external xattr inode [ 600.219640][ T8815] EXT4-fs error (device loop3): ext4_orphan_get:1242: comm syz.3.2155: couldn't read orphan inode 12 (err -117) [ 600.231852][ T8815] EXT4-fs (loop3): mounted filesystem without journal. Opts: acl,mblk_io_submit,grpjquota=,sysvgroups,noacl,min_batch_time=0x0000000000000010,bsdgroups,noload,nodiscard,,errors=continue [ 600.324557][ T363] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 600.444756][ T105] usb 2-1: device descriptor read/64, error 18 [ 600.464545][ T1444] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 600.547201][ T8836] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=49 sclass=netlink_audit_socket pid=8836 comm=syz.2.2157 [ 600.574546][ T363] usb 1-1: Using ep0 maxpacket: 16 [ 600.608457][ T8837] EXT4-fs (loop1): Test dummy encryption mode enabled [ 600.682130][ T105] usb usb2-port1: attempt power cycle [ 600.686274][ T8837] EXT4-fs (loop1): 1 orphan inode deleted [ 600.693650][ T8837] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,inode_readahead_blks=0x0000000000000004,test_dummy_encryption,errors=remount-ro,inlinecrypt,barrier,noquota,data_err=abort, [ 600.712808][ T8837] ext4 filesystem being mounted at /407/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 600.816930][ T1444] usb 5-1: Using ep0 maxpacket: 16 [ 600.822689][ T363] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 600.944647][ T6113] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 600.984941][ T1444] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 600.997755][ T363] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 601.020219][ T1444] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 601.051990][ T363] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 601.086701][ T1444] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 601.214863][ T6113] usb 4-1: Using ep0 maxpacket: 16 [ 601.220284][ T363] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 601.234806][ T1444] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 601.254794][ T363] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 601.633394][ T1444] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 601.641460][ T363] usb 1-1: SerialNumber: syz [ 601.646197][ T1444] usb 5-1: SerialNumber: syz [ 601.674619][ T8823] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 601.674675][ T8820] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 601.702978][ T8843] fuse: Unknown parameter '0x0000000000000004' [ 601.709250][ T6113] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 601.719684][ T6113] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 601.743945][ T6113] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 601.758339][ T6113] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 601.844843][ T6113] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 601.854176][ T6113] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 601.863211][ T6113] usb 4-1: SerialNumber: syz [ 601.906426][ T6113] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 601.942645][ T8823] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 601.971717][ T8849] EXT4-fs (loop2): Test dummy encryption mode enabled [ 602.087236][ T8820] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 602.152323][ T8849] EXT4-fs (loop2): 1 orphan inode deleted [ 602.158272][ T8849] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,inode_readahead_blks=0x0000000000000004,test_dummy_encryption,errors=remount-ro,inlinecrypt,barrier,noquota,data_err=abort, [ 602.177443][ T8849] ext4 filesystem being mounted at /485/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 602.244519][ C0] raw-gadget gadget: ignoring, device is not running [ 602.252573][ T363] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 602.266762][ T363] usb 1-1: USB disconnect, device number 84 [ 602.299887][ T8831] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 602.308240][ T1444] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 602.336960][ T1444] usb 5-1: USB disconnect, device number 82 [ 602.486633][ T6113] usb 4-1: USB disconnect, device number 73 [ 603.044578][ T105] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 603.134626][ T105] usb 2-1: Using ep0 maxpacket: 32 [ 603.246761][ T8858] F2FS-fs (loop2): Test dummy encryption mode enabled [ 603.255394][ T8858] F2FS-fs (loop2): invalid crc value [ 603.276036][ T8858] F2FS-fs (loop2): Found nat_bits in checkpoint [ 603.308472][ T105] usb 2-1: config 0 has an invalid interface number: 74 but max is 1 [ 603.316920][ T105] usb 2-1: config 0 has no interface number 1 [ 603.320631][ T8858] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 603.363029][ T8866] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 603.534871][ T105] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 603.564672][ T105] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.613446][ T105] usb 2-1: Product: syz [ 603.640017][ T105] usb 2-1: Manufacturer: syz [ 603.669058][ T105] usb 2-1: SerialNumber: syz [ 603.735462][ T105] usb 2-1: config 0 descriptor?? [ 603.780348][ T105] snd-usb-audio: probe of 2-1:0.74 failed with error -22 [ 603.986824][ T105] usb 2-1: USB disconnect, device number 90 [ 604.265616][ T8883] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 604.427247][ T8883] EXT4-fs (loop2): invalid journal inode [ 604.485801][ T8883] EXT4-fs (loop2): can't get journal size [ 604.548726][ T8883] EXT4-fs (loop2): 1 truncate cleaned up [ 604.560223][ T8883] EXT4-fs (loop2): mounted filesystem without journal. Opts: norecovery,,errors=continue [ 604.704662][ T6113] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 604.974592][ T6113] usb 4-1: Using ep0 maxpacket: 16 [ 605.454614][ T6113] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 605.469073][ T6113] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 605.470473][ T8894] fuse: Unknown parameter '0x0000000000000004' [ 605.499487][ T6113] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 605.573275][ T8880] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 605.583801][ T8880] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 605.583801][ T8880] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 605.583801][ T8880] [ 605.602289][ T6113] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 605.624630][ T6113] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 605.642849][ T6113] usb 4-1: SerialNumber: syz [ 605.655199][ T8880] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:163: inode #12: comm syz.2.2168: inline data xattr refers to an external xattr inode [ 605.671410][ T8886] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 605.694684][ T8880] EXT4-fs error (device loop2): ext4_orphan_get:1242: comm syz.2.2168: couldn't read orphan inode 12 (err -117) [ 605.754682][ T8880] EXT4-fs (loop2): mounted filesystem without journal. Opts: acl,mblk_io_submit,grpjquota=,sysvgroups,noacl,min_batch_time=0x0000000000000010,bsdgroups,noload,nodiscard,,errors=continue [ 605.879367][ T8906] EXT4-fs (loop1): Test dummy encryption mode enabled [ 605.889063][ T8886] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 605.897970][ T8901] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=49 sclass=netlink_audit_socket pid=8901 comm=syz.4.2172 [ 605.949378][ T8906] EXT4-fs (loop1): 1 orphan inode deleted [ 605.968417][ T8906] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,inode_readahead_blks=0x0000000000000004,test_dummy_encryption,errors=remount-ro,inlinecrypt,barrier,noquota,data_err=abort, [ 605.987715][ T6113] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 606.001953][ T6113] usb 4-1: USB disconnect, device number 74 [ 606.101684][ T8906] ext4 filesystem being mounted at /411/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 606.175999][ T23] audit: type=1400 audit(1748471677.596:352): avc: denied { create } for pid=8913 comm="syz.0.2175" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 606.198022][ T8914] SELinux: Bad value for 'context' [ 606.212849][ T23] audit: type=1400 audit(1748471677.616:353): avc: denied { mounton } for pid=8913 comm="syz.0.2175" path="/493/file0" dev="tmpfs" ino=70876 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 606.287158][ T8916] overlayfs: missing 'lowerdir' [ 606.514584][ T6113] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 606.884538][ T105] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 606.924555][ T331] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 607.134620][ T105] usb 5-1: Using ep0 maxpacket: 16 [ 607.140582][ T8921] F2FS-fs (loop3): Test dummy encryption mode enabled [ 607.148800][ T8921] F2FS-fs (loop3): invalid crc value [ 607.162026][ T8921] F2FS-fs (loop3): Found nat_bits in checkpoint [ 607.164544][ T331] usb 3-1: Using ep0 maxpacket: 16 [ 607.197483][ T8921] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 607.247608][ T8930] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000002,,errors=continue [ 607.254649][ T105] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 607.260098][ T8930] ext4 filesystem being mounted at /413/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 607.270497][ T105] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 607.291576][ T105] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 607.304416][ T105] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 607.318226][ T331] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 607.324627][ T6113] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 607.329615][ T331] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 607.349489][ T331] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 607.351636][ T6113] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 607.424610][ T105] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 607.433709][ T105] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 607.442024][ T331] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 607.451783][ T105] usb 5-1: SerialNumber: syz [ 607.456170][ T6113] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 607.458474][ T331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 607.474259][ T331] usb 3-1: SerialNumber: syz [ 607.474830][ T6113] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 607.487374][ T6113] usb 1-1: SerialNumber: syz [ 607.494607][ T8918] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 607.553458][ T8916] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 607.560853][ T105] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 607.638004][ T8937] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,barrier=0x0000000000000005,dioread_lock,norecovery,nombcache,lazytime,noload,usrquota,noauto_da_alloc,resuid=0x0000000000000000,init_itable=0x0000000000000000,jqfmt=vfsv1,,errors=continue [ 607.747652][ T8937] overlayfs: missing 'lowerdir' [ 607.768455][ T8916] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 607.774836][ T8918] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 607.784627][ T331] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 607.805332][ T6113] usb 1-1: 0:2 : does not exist [ 607.806267][ T331] usb 3-1: USB disconnect, device number 84 [ 607.824740][ T6113] usb 1-1: USB disconnect, device number 85 [ 607.835726][ T363] usb 5-1: USB disconnect, device number 83 [ 608.108607][ T8946] EXT4-fs (loop3): Test dummy encryption mode enabled [ 608.188890][ T8946] EXT4-fs (loop3): 1 orphan inode deleted [ 608.194795][ T8946] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,inode_readahead_blks=0x0000000000000004,test_dummy_encryption,errors=remount-ro,inlinecrypt,barrier,noquota,data_err=abort, [ 608.213975][ T8946] ext4 filesystem being mounted at /385/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 608.473581][ T23] audit: type=1400 audit(1748471679.886:354): avc: denied { unlink } for pid=341 comm="syz-executor" name="file0" dev="tmpfs" ino=70876 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 610.256422][ T363] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 610.271930][ T8959] EXT4-fs (loop4): Test dummy encryption mode enabled [ 610.287058][ T8959] EXT4-fs (loop4): 1 orphan inode deleted [ 610.292842][ T8959] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,inode_readahead_blks=0x0000000000000004,test_dummy_encryption,errors=remount-ro,inlinecrypt,barrier,noquota,data_err=abort, [ 610.311951][ T8959] ext4 filesystem being mounted at /399/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 610.434337][ T8953] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 610.448983][ T8953] EXT4-fs (loop2): invalid journal inode [ 610.457662][ T8953] EXT4-fs (loop2): can't get journal size [ 610.494618][ T363] usb 1-1: Using ep0 maxpacket: 32 [ 610.530776][ T8953] EXT4-fs (loop2): 1 truncate cleaned up [ 610.541934][ T8953] EXT4-fs (loop2): mounted filesystem without journal. Opts: norecovery,,errors=continue [ 610.592414][ T23] audit: type=1400 audit(1748471682.006:355): avc: denied { load_policy } for pid=8970 comm="syz.1.2189" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 610.595785][ T8971] SELinux: failed to load policy [ 610.694579][ T363] usb 1-1: unable to get BOS descriptor or descriptor too short [ 610.705988][ T8973] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=49 sclass=netlink_audit_socket pid=8973 comm=syz.3.2188 [ 610.745438][ T8953] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 610.753573][ T8953] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 610.753573][ T8953] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 610.753573][ T8953] [ 612.006461][ T363] usb 1-1: config 1 interface 0 altsetting 206 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 612.029668][ T8953] EXT4-fs: failed to create workqueue [ 612.049324][ T8953] EXT4-fs (loop2): mount failed [ 612.106086][ T363] usb 1-1: config 1 interface 0 altsetting 206 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 612.241187][ T363] usb 1-1: config 1 interface 0 has no altsetting 0 [ 612.258947][ T8982] EXT4-fs (loop1): Test dummy encryption mode enabled [ 612.269045][ T8981] EXT4-fs (loop4): Test dummy encryption mode enabled [ 612.390248][ T8981] EXT4-fs (loop4): 1 orphan inode deleted [ 612.396056][ T8981] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,inode_readahead_blks=0x0000000000000004,test_dummy_encryption,errors=remount-ro,inlinecrypt,barrier,noquota,data_err=abort, [ 612.415241][ T8981] ext4 filesystem being mounted at /400/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 612.521917][ T8982] EXT4-fs (loop1): 1 orphan inode deleted [ 612.527770][ T8982] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,inode_readahead_blks=0x0000000000000004,test_dummy_encryption,errors=remount-ro,inlinecrypt,barrier,noquota,data_err=abort, [ 612.547239][ T8982] ext4 filesystem being mounted at /416/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 612.994576][ T363] usb 1-1: string descriptor 0 read error: -71 [ 613.000888][ T363] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.40 [ 613.013101][ T363] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.034668][ T363] usb 1-1: can't set config #1, error -71 [ 613.041373][ T363] usb 1-1: USB disconnect, device number 86 [ 613.172881][ T9007] overlayfs: missing 'lowerdir' [ 613.372577][ T9005] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,barrier=0x0000000000000005,dioread_lock,norecovery,nombcache,lazytime,noload,usrquota,noauto_da_alloc,resuid=0x0000000000000000,init_itable=0x0000000000000000,jqfmt=vfsv1,,errors=continue [ 613.424089][ T9005] overlayfs: missing 'lowerdir' [ 613.431464][ T9005] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2194'. [ 613.674548][ T363] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 613.704613][ T5] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 613.744561][ T404] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 613.873765][ T9016] EXT4-fs (loop4): Test dummy encryption mode enabled [ 613.944703][ T363] usb 1-1: Using ep0 maxpacket: 16 [ 613.950094][ T5] usb 2-1: Using ep0 maxpacket: 8 [ 614.020619][ T9016] EXT4-fs (loop4): 1 orphan inode deleted [ 614.026491][ T9016] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,inode_readahead_blks=0x0000000000000004,test_dummy_encryption,errors=remount-ro,inlinecrypt,barrier,noquota,data_err=abort, [ 614.045649][ T9016] ext4 filesystem being mounted at /402/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 614.274823][ T363] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 614.361703][ T363] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 614.414891][ T5] usb 2-1: config 64 has an invalid interface number: 80 but max is 1 [ 614.426154][ T363] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 614.443574][ T5] usb 2-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 614.455196][ T5] usb 2-1: config 64 has 1 interface, different from the descriptor's value: 2 [ 614.465632][ T5] usb 2-1: config 64 has no interface number 0 [ 614.887521][ T363] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 614.896692][ T363] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 614.905263][ T363] usb 1-1: SerialNumber: syz [ 614.924665][ T9007] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 614.974592][ T5] usb 2-1: New USB device found, idVendor=0781, idProduct=0100, bcdDevice= 1.00 [ 614.983692][ T5] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.991864][ T5] usb 2-1: Product: syz [ 614.994527][ T404] usb 4-1: Using ep0 maxpacket: 16 [ 614.996096][ T5] usb 2-1: Manufacturer: syz [ 615.005777][ T5] usb 2-1: SerialNumber: syz [ 615.114566][ T404] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 615.124698][ T331] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 615.132400][ T404] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 615.143868][ T404] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 615.144054][ T9025] EXT4-fs (loop4): Test dummy encryption mode enabled [ 615.154770][ T9007] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 615.168201][ T404] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 615.187846][ T9025] EXT4-fs (loop4): 1 orphan inode deleted [ 615.193932][ T9025] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,inode_readahead_blks=0x0000000000000004,test_dummy_encryption,errors=remount-ro,inlinecrypt,barrier,noquota,data_err=abort, [ 615.213134][ T9025] ext4 filesystem being mounted at /403/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 615.244674][ T363] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 615.258486][ T363] usb 1-1: USB disconnect, device number 87 [ 615.264668][ T404] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 615.274256][ T404] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 615.283472][ T404] usb 4-1: SerialNumber: syz [ 615.315672][ T5] usb-storage 2-1:64.80: USB Mass Storage device detected [ 615.318699][ T8997] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 615.330054][ T5] usb-storage 2-1:64.80: Quirks match for vid 0781 pid 0100: 1 [ 615.345020][ T404] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 615.372520][ T5] usb 2-1: USB disconnect, device number 91 [ 615.404542][ T331] usb 3-1: Using ep0 maxpacket: 32 [ 615.524561][ T331] usb 3-1: config 0 has an invalid interface number: 74 but max is 1 [ 615.532744][ T331] usb 3-1: config 0 has no interface number 1 [ 615.589767][ T8997] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 615.605453][ T363] usb 4-1: USB disconnect, device number 75 [ 615.694586][ T331] usb 3-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 615.714529][ T331] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.722700][ T331] usb 3-1: Product: syz [ 615.727168][ T331] usb 3-1: Manufacturer: syz [ 615.731809][ T331] usb 3-1: SerialNumber: syz [ 615.805264][ T331] usb 3-1: config 0 descriptor?? [ 615.845385][ T331] snd-usb-audio: probe of 3-1:0.74 failed with error -22 [ 616.219008][ T9038] EXT4-fs (loop1): Test dummy encryption mode enabled [ 616.247214][ T9038] EXT4-fs (loop1): 1 orphan inode deleted [ 616.253021][ T9038] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,inode_readahead_blks=0x0000000000000004,test_dummy_encryption,errors=remount-ro,inlinecrypt,barrier,noquota,data_err=abort, [ 616.272205][ T9038] ext4 filesystem being mounted at /418/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 617.578886][ T9045] EXT4-fs (loop3): Test dummy encryption mode enabled [ 617.611279][ T6113] usb 3-1: USB disconnect, device number 85 [ 617.703894][ T9045] EXT4-fs (loop3): 1 orphan inode deleted [ 617.709813][ T9045] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,inode_readahead_blks=0x0000000000000004,test_dummy_encryption,errors=remount-ro,inlinecrypt,barrier,noquota,data_err=abort, [ 617.729147][ T9045] ext4 filesystem being mounted at /388/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 618.208304][ T9052] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=49 sclass=netlink_audit_socket pid=9052 comm=syz.1.2204 [ 618.678885][ T9063] EXT4-fs (loop4): Test dummy encryption mode enabled [ 618.772585][ T9063] EXT4-fs (loop4): 1 orphan inode deleted [ 618.778384][ T9063] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,inode_readahead_blks=0x0000000000000004,test_dummy_encryption,errors=remount-ro,inlinecrypt,barrier,noquota,data_err=abort, [ 618.797588][ T9063] ext4 filesystem being mounted at /404/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 620.138820][ T829] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 620.594540][ T829] usb 3-1: Using ep0 maxpacket: 32 [ 620.622161][ T9077] overlayfs: missing 'lowerdir' [ 620.734582][ T829] usb 3-1: config 0 has an invalid interface number: 74 but max is 1 [ 620.743713][ T829] usb 3-1: config 0 has no interface number 1 [ 621.054754][ T829] usb 3-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 621.065284][ T829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.073506][ T829] usb 3-1: Product: syz [ 621.078989][ T829] usb 3-1: Manufacturer: syz [ 621.083796][ T829] usb 3-1: SerialNumber: syz [ 621.104558][ T1444] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 621.154529][ T829] usb 3-1: config 0 descriptor?? [ 621.206901][ T829] snd-usb-audio: probe of 3-1:0.74 failed with error -22 [ 621.374566][ T1444] usb 5-1: Using ep0 maxpacket: 16 [ 621.390671][ T6113] usb 3-1: USB disconnect, device number 86 [ 621.814612][ T1444] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 621.826025][ T1444] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 621.844533][ T829] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 621.856151][ T1444] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 621.871183][ T9090] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue [ 621.885567][ T9090] ext4 filesystem being mounted at /494/bus supports timestamps until (%ptR?) (0x7fffffff) [ 621.902600][ T9090] xt_TCPMSS: Only works on TCP SYN packets [ 621.944804][ T1444] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 621.978947][ T1444] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 621.988235][ T1444] usb 5-1: SerialNumber: syz [ 622.024743][ T9077] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 622.084602][ T829] usb 1-1: Using ep0 maxpacket: 16 [ 622.160559][ T9099] EXT4-fs (loop3): Test dummy encryption mode enabled [ 622.204655][ T829] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 622.262108][ T829] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 622.280616][ T9077] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 622.297875][ T9099] EXT4-fs (loop3): 1 orphan inode deleted [ 622.303673][ T9099] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,inode_readahead_blks=0x0000000000000004,test_dummy_encryption,errors=remount-ro,inlinecrypt,barrier,noquota,data_err=abort, [ 622.322888][ T9099] ext4 filesystem being mounted at /391/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 622.475109][ T1444] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 622.592090][ T1444] usb 5-1: USB disconnect, device number 84 [ 622.620791][ T829] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 622.653735][ T829] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 622.804605][ T829] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 622.818803][ T829] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 622.857217][ T829] usb 1-1: SerialNumber: syz [ 622.892980][ T9110] EXT4-fs (loop2): Test dummy encryption mode enabled [ 622.899908][ T9088] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 622.915152][ T829] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 622.925979][ T9112] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=49 sclass=netlink_audit_socket pid=9112 comm=syz.1.2218 [ 622.986378][ T9110] EXT4-fs (loop2): 1 orphan inode deleted [ 622.992152][ T9110] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,inode_readahead_blks=0x0000000000000004,test_dummy_encryption,errors=remount-ro,inlinecrypt,barrier,noquota,data_err=abort, [ 623.011398][ T9110] ext4 filesystem being mounted at /495/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 623.029946][ T9116] fuse: Bad value for 'group_id' [ 623.130235][ T9088] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 623.155718][ T829] usb 1-1: USB disconnect, device number 88 [ 623.158902][ T9116] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 623.174669][ T9116] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 623.174669][ T9116] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 623.174669][ T9116] [ 623.272830][ T9116] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:163: inode #12: comm syz.3.2219: inline data xattr refers to an external xattr inode [ 623.297540][ T9116] EXT4-fs error (device loop3): ext4_orphan_get:1242: comm syz.3.2219: couldn't read orphan inode 12 (err -117) [ 623.321496][ T9116] EXT4-fs (loop3): mounted filesystem without journal. Opts: acl,mblk_io_submit,grpjquota=,sysvgroups,noacl,min_batch_time=0x0000000000000010,bsdgroups,noload,nodiscard,,errors=continue [ 623.472048][ T9120] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 623.499801][ T9120] EXT4-fs (loop4): invalid journal inode [ 623.507707][ T9120] EXT4-fs (loop4): can't get journal size [ 623.521325][ T9120] EXT4-fs (loop4): 1 truncate cleaned up [ 623.527597][ T9120] EXT4-fs (loop4): mounted filesystem without journal. Opts: norecovery,,errors=continue [ 624.099388][ T9120] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 624.121916][ T9120] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 624.121916][ T9120] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 624.121916][ T9120] [ 624.166407][ T9120] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:163: inode #12: comm syz.4.2220: inline data xattr refers to an external xattr inode [ 624.194712][ T9120] EXT4-fs error (device loop4): ext4_orphan_get:1242: comm syz.4.2220: couldn't read orphan inode 12 (err -117) [ 624.391206][ T9120] EXT4-fs (loop4): mounted filesystem without journal. Opts: acl,mblk_io_submit,grpjquota=,sysvgroups,noacl,min_batch_time=0x0000000000000010,bsdgroups,noload,nodiscard,,errors=continue [ 625.338495][ T23] audit: type=1400 audit(1748471696.756:356): avc: denied { map } for pid=9148 comm="syz.2.2225" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 626.669482][ T9168] overlayfs: missing 'lowerdir' [ 629.004995][ T9177] EXT4-fs (loop4): Test dummy encryption mode enabled [ 629.044685][ T5] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 629.058157][ T9177] EXT4-fs (loop4): 1 orphan inode deleted [ 629.063932][ T9177] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,inode_readahead_blks=0x0000000000000004,test_dummy_encryption,errors=remount-ro,inlinecrypt,barrier,noquota,data_err=abort, [ 629.083080][ T9177] ext4 filesystem being mounted at /408/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 629.564557][ T5] usb 2-1: Using ep0 maxpacket: 16 [ 629.674529][ T820] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 629.724585][ T5] usb 2-1: unable to read config index 0 descriptor/all [ 629.731669][ T5] usb 2-1: can't read configurations, error -71 [ 629.797234][ T9197] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 629.804649][ T9197] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 629.804649][ T9197] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 629.804649][ T9197] [ 629.823313][ T9197] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:163: inode #12: comm syz.2.2234: inline data xattr refers to an external xattr inode [ 629.838282][ T9197] EXT4-fs error (device loop2): ext4_orphan_get:1242: comm syz.2.2234: couldn't read orphan inode 12 (err -117) [ 629.850306][ T9197] EXT4-fs (loop2): mounted filesystem without journal. Opts: acl,mblk_io_submit,grpjquota=,sysvgroups,noacl,min_batch_time=0x0000000000000010,bsdgroups,noload,nodiscard,,errors=continue [ 629.914530][ T820] usb 1-1: Using ep0 maxpacket: 16 [ 630.032931][ T9205] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 630.040157][ T820] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 630.051364][ T820] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 630.051554][ T9205] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 630.051554][ T9205] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 630.051554][ T9205] [ 630.061814][ T820] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 630.093539][ T9205] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:163: inode #12: comm syz.1.2238: inline data xattr refers to an external xattr inode [ 630.096947][ T9209] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,barrier=0x0000000000000005,dioread_lock,norecovery,nombcache,lazytime,noload,usrquota,noauto_da_alloc,resuid=0x0000000000000000,init_itable=0x0000000000000000,jqfmt=vfsv1,,errors=continue [ 630.109187][ T9205] EXT4-fs error (device loop1): ext4_orphan_get:1242: comm syz.1.2238: couldn't read orphan inode 12 (err -117) [ 630.169488][ T9205] EXT4-fs (loop1): mounted filesystem without journal. Opts: acl,mblk_io_submit,grpjquota=,sysvgroups,noacl,min_batch_time=0x0000000000000010,bsdgroups,noload,nodiscard,,errors=continue [ 630.258401][ T9217] EXT4-fs (loop2): Test dummy encryption mode enabled [ 630.281836][ T820] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 630.310765][ T9217] EXT4-fs (loop2): 1 orphan inode deleted [ 630.316585][ T9217] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,inode_readahead_blks=0x0000000000000004,test_dummy_encryption,errors=remount-ro,inlinecrypt,barrier,noquota,data_err=abort, [ 630.335797][ T9217] ext4 filesystem being mounted at /498/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 630.648672][ T9209] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 630.687671][ T9209] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 630.733887][ T9209] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2240'. [ 631.134556][ T820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 631.142580][ T820] usb 1-1: SerialNumber: syz [ 631.224680][ T9182] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 631.239737][ T820] cdc_ether: probe of 1-1:1.0 failed with error -22 [ 631.304577][ T363] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 631.415518][ T404] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 631.441419][ T9182] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 631.450303][ T820] usb 1-1: USB disconnect, device number 89 [ 631.544520][ T363] usb 5-1: Using ep0 maxpacket: 8 [ 631.654737][ T404] usb 4-1: Using ep0 maxpacket: 32 [ 631.664583][ T363] usb 5-1: config 64 has an invalid interface number: 80 but max is 1 [ 631.672846][ T363] usb 5-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 631.683258][ T363] usb 5-1: config 64 has 1 interface, different from the descriptor's value: 2 [ 631.692372][ T363] usb 5-1: config 64 has no interface number 0 [ 631.784691][ T404] usb 4-1: config 0 has an invalid interface number: 74 but max is 1 [ 631.793367][ T404] usb 4-1: config 0 has no interface number 1 [ 631.854562][ T363] usb 5-1: New USB device found, idVendor=0781, idProduct=0100, bcdDevice= 1.00 [ 631.863632][ T363] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.871869][ T363] usb 5-1: Product: syz [ 631.876143][ T363] usb 5-1: Manufacturer: syz [ 631.880728][ T363] usb 5-1: SerialNumber: syz [ 631.954782][ T404] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 632.004600][ T404] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.026817][ T404] usb 4-1: Product: syz [ 632.031068][ T404] usb 4-1: Manufacturer: syz [ 632.036150][ T404] usb 4-1: SerialNumber: syz [ 632.046427][ T404] usb 4-1: config 0 descriptor?? [ 632.065671][ T9228] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000002,,errors=continue [ 632.078601][ T9228] ext4 filesystem being mounted at /429/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 632.095960][ T404] snd-usb-audio: probe of 4-1:0.74 failed with error -22 [ 632.165073][ T363] usb-storage 5-1:64.80: USB Mass Storage device detected [ 632.194585][ T363] usb-storage 5-1:64.80: Quirks match for vid 0781 pid 0100: 1 [ 632.246100][ T363] usb 5-1: USB disconnect, device number 85 [ 632.318682][ T820] usb 4-1: USB disconnect, device number 76 [ 632.573875][ T9245] EXT4-fs (loop2): Test dummy encryption mode enabled [ 632.740193][ T9245] EXT4-fs (loop2): 1 orphan inode deleted [ 632.746023][ T9245] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,inode_readahead_blks=0x0000000000000004,test_dummy_encryption,errors=remount-ro,inlinecrypt,barrier,noquota,data_err=abort, [ 632.766173][ T9245] ext4 filesystem being mounted at /500/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 633.769327][ T9259] EXT4-fs (loop4): Test dummy encryption mode enabled [ 633.871336][ T9259] EXT4-fs (loop4): 1 orphan inode deleted [ 633.877305][ T9259] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,inode_readahead_blks=0x0000000000000004,test_dummy_encryption,errors=remount-ro,inlinecrypt,barrier,noquota,data_err=abort, [ 633.896465][ T9259] ext4 filesystem being mounted at /411/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 634.125262][ T9262] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 634.132452][ T9262] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 634.132452][ T9262] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 634.132452][ T9262] [ 634.151757][ T9262] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:163: inode #12: comm syz.3.2249: inline data xattr refers to an external xattr inode [ 634.214589][ T5] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 634.227432][ T9262] EXT4-fs error (device loop3): ext4_orphan_get:1242: comm syz.3.2249: couldn't read orphan inode 12 (err -117) [ 634.256611][ T9262] EXT4-fs (loop3): mounted filesystem without journal. Opts: acl,mblk_io_submit,grpjquota=,sysvgroups,noacl,min_batch_time=0x0000000000000010,bsdgroups,noload,nodiscard,,errors=continue [ 634.363955][ T9269] overlayfs: missing 'lowerdir' [ 634.524549][ T5] usb 1-1: Using ep0 maxpacket: 16 [ 634.644596][ T5] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 634.664520][ T5] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 634.685318][ T5] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 634.794578][ T5] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 634.803619][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 634.811866][ T5] usb 1-1: SerialNumber: syz [ 634.834600][ T9252] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 634.984606][ T1067] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 635.055434][ T9252] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 635.074603][ T5] cdc_ether: probe of 1-1:1.0 failed with error -71 [ 635.083182][ T5] usb 1-1: USB disconnect, device number 90 [ 635.234553][ T1067] usb 3-1: Using ep0 maxpacket: 16 [ 635.354686][ T1067] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 635.365893][ T1067] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 635.375808][ T1067] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 635.444593][ T1444] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 635.464650][ T363] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 635.472283][ T1067] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 635.481389][ T1067] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 635.489570][ T1067] usb 3-1: SerialNumber: syz [ 635.514707][ T9268] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 635.684558][ T1444] usb 2-1: Using ep0 maxpacket: 16 [ 635.714515][ T363] usb 4-1: Using ep0 maxpacket: 16 [ 635.736872][ T9268] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 635.754632][ T1067] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 635.764797][ T1067] usb 3-1: USB disconnect, device number 87 [ 635.818286][ T1444] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 635.828700][ T1444] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 635.840010][ T363] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 635.851187][ T1444] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 635.861180][ T363] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 635.870944][ T1444] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 635.883998][ T363] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 635.974612][ T1444] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 635.983669][ T1444] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 635.991699][ T363] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 636.004534][ T363] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 636.012624][ T363] usb 4-1: SerialNumber: syz [ 636.024528][ T1444] usb 2-1: SerialNumber: syz [ 636.054612][ T9273] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 636.054618][ T9275] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 636.075068][ T1444] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 636.083517][ T363] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 636.165868][ T9286] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue [ 636.179661][ T9286] ext4 filesystem being mounted at /414/bus supports timestamps until (%ptR?) (0x7fffffff) [ 636.202324][ T9286] xt_TCPMSS: Only works on TCP SYN packets [ 636.281945][ T9275] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 636.292247][ T820] usb 4-1: USB disconnect, device number 77 [ 636.320939][ T9273] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 636.343710][ T363] usb 2-1: USB disconnect, device number 94 [ 637.389884][ T9311] overlayfs: missing 'workdir' [ 637.920366][ T23] audit: type=1400 audit(1748471709.336:357): avc: denied { accept } for pid=9320 comm="syz.0.2267" lport=35220 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 637.988655][ T9318] EXT4-fs (loop1): Test dummy encryption mode enabled [ 638.006508][ T9291] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 638.017630][ T9318] EXT4-fs (loop1): 1 orphan inode deleted [ 638.023377][ T9318] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,inode_readahead_blks=0x0000000000000004,test_dummy_encryption,errors=remount-ro,inlinecrypt,barrier,noquota,data_err=abort, [ 638.029412][ T9291] FAT-fs (loop4): Filesystem has been set read-only [ 638.042487][ T9318] ext4 filesystem being mounted at /433/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 638.049672][ T9291] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 638.059575][ T1444] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 638.095132][ T9291] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 548) [ 638.134987][ T9328] overlayfs: missing 'lowerdir' [ 638.141056][ T9328] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2268'. [ 638.314508][ T1444] usb 3-1: Using ep0 maxpacket: 16 [ 638.414632][ T5] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 638.454624][ T1444] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 638.471300][ T1444] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 638.491850][ T1444] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 638.594590][ T1444] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 638.606922][ T1444] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 638.623599][ T1444] usb 3-1: SerialNumber: syz [ 638.654611][ T9311] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 638.664626][ T5] usb 1-1: Using ep0 maxpacket: 8 [ 638.784581][ T5] usb 1-1: config 64 has an invalid interface number: 80 but max is 1 [ 638.796041][ T5] usb 1-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 638.815927][ T5] usb 1-1: config 64 has 1 interface, different from the descriptor's value: 2 [ 638.834619][ T5] usb 1-1: config 64 has no interface number 0 [ 638.875623][ T9311] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 638.894605][ T1444] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 638.906637][ T1444] usb 3-1: USB disconnect, device number 88 [ 639.004596][ T5] usb 1-1: New USB device found, idVendor=0781, idProduct=0100, bcdDevice= 1.00 [ 639.013652][ T5] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.034520][ T5] usb 1-1: Product: syz [ 639.038698][ T5] usb 1-1: Manufacturer: syz [ 639.043290][ T5] usb 1-1: SerialNumber: syz [ 639.185885][ T9342] xt_bpf: check failed: parse error [ 639.335289][ T5] usb-storage 1-1:64.80: USB Mass Storage device detected [ 639.374584][ T105] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 639.383770][ T5] usb-storage 1-1:64.80: Quirks match for vid 0781 pid 0100: 1 [ 639.452191][ T5] usb 1-1: USB disconnect, device number 91 [ 639.614538][ T105] usb 4-1: Using ep0 maxpacket: 32 [ 639.734642][ T105] usb 4-1: config 0 has an invalid interface number: 74 but max is 1 [ 639.747479][ T105] usb 4-1: config 0 has no interface number 1 [ 639.914523][ T3419] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 639.924719][ T105] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 639.933794][ T105] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.942038][ T105] usb 4-1: Product: syz [ 639.946339][ T105] usb 4-1: Manufacturer: syz [ 639.950919][ T105] usb 4-1: SerialNumber: syz [ 639.956221][ T105] usb 4-1: config 0 descriptor?? [ 639.995463][ T105] snd-usb-audio: probe of 4-1:0.74 failed with error -22 [ 640.018281][ T9359] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 640.027318][ T9359] EXT4-fs (loop1): invalid journal inode [ 640.032989][ T9359] EXT4-fs (loop1): can't get journal size [ 640.040213][ T9359] EXT4-fs (loop1): 1 truncate cleaned up [ 640.049174][ T9359] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,,errors=continue [ 640.154531][ T3419] usb 3-1: Using ep0 maxpacket: 16 [ 640.197638][ T9353] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 640.205082][ T9353] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 640.205082][ T9353] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 640.205082][ T9353] [ 640.221084][ T820] usb 4-1: USB disconnect, device number 78 [ 640.224764][ T9353] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:163: inode #12: comm syz.1.2276: inline data xattr refers to an external xattr inode [ 640.243787][ T9353] EXT4-fs error (device loop1): ext4_orphan_get:1242: comm syz.1.2276: couldn't read orphan inode 12 (err -117) [ 640.255728][ T9353] EXT4-fs (loop1): mounted filesystem without journal. Opts: acl,mblk_io_submit,grpjquota=,sysvgroups,noacl,min_batch_time=0x0000000000000010,bsdgroups,noload,nodiscard,,errors=continue [ 640.274574][ T3419] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 640.286021][ T3419] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 640.296018][ T3419] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 640.384632][ T3419] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 640.393722][ T3419] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 640.401763][ T3419] usb 3-1: SerialNumber: syz [ 640.434865][ T9348] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 640.465369][ T3419] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 640.669764][ T9348] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 641.357177][ T3419] usb 3-1: USB disconnect, device number 89 [ 641.402769][ T9376] EXT4-fs (loop4): Test dummy encryption mode enabled [ 641.420269][ T9376] EXT4-fs (loop4): 1 orphan inode deleted [ 641.426094][ T9376] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,inode_readahead_blks=0x0000000000000004,test_dummy_encryption,errors=remount-ro,inlinecrypt,barrier,noquota,data_err=abort, [ 641.445552][ T9376] ext4 filesystem being mounted at /420/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 641.669913][ T9388] overlayfs: missing 'workdir' [ 641.798074][ T9390] EXT4-fs (loop3): Test dummy encryption mode enabled [ 642.247462][ T9390] EXT4-fs (loop3): 1 orphan inode deleted [ 642.253252][ T9390] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,inode_readahead_blks=0x0000000000000004,test_dummy_encryption,errors=remount-ro,inlinecrypt,barrier,noquota,data_err=abort, [ 642.272473][ T9390] ext4 filesystem being mounted at /401/file0 supports timestamps until (%ptR?) (0x7fffffff) [ 642.870745][ T9395] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2286'. [ 643.080977][ T9402] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,barrier=0x0000000000000005,dioread_lock,norecovery,nombcache,lazytime,noload,usrquota,noauto_da_alloc,resuid=0x0000000000000000,init_itable=0x0000000000000000,jqfmt=vfsv1,,errors=continue [ 643.128429][ T9402] overlayfs: missing 'lowerdir' [ 643.134556][ T3419] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 643.139730][ T9402] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2287'. [ 643.169618][ T9414] tmpfs: Unknown parameter 'nolazytime¢âÄž€ ¦ôàä©DlvpV‰‚´à ö˜9: óˆœ$ªVñQ™úÐ p3 [ 646.029837][ T9510] loop3: p3 size 134217728 extends beyond EOD, truncated [ 646.091289][ T164] loop3: p1 < > p3 [ 646.097062][ T164] loop3: p3 size 134217728 extends beyond EOD, truncated [ 646.135746][ T9519] EXT4-fs (loop4): Unsupported blocksize for fs encryption [ 646.743444][ T380] udevd[380]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 646.761725][ T4021] udevd[4021]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 647.095221][ T4021] udevd[4021]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 647.136255][ T380] udevd[380]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 648.678473][ T23] kauditd_printk_skb: 1 callbacks suppressed [ 648.678485][ T23] audit: type=1400 audit(1748471720.096:369): avc: denied { read write } for pid=9543 comm="syz.1.2336" name="loop1" dev="devtmpfs" ino=75129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 648.709199][ T23] audit: type=1400 audit(1748471720.096:370): avc: denied { open } for pid=9543 comm="syz.1.2336" path="/dev/loop1" dev="devtmpfs" ino=75129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 648.734072][ T23] audit: type=1400 audit(1748471720.096:371): avc: denied { ioctl } for pid=9543 comm="syz.1.2336" path="/dev/loop1" dev="devtmpfs" ino=75129 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 649.322271][ T9542] F2FS-fs (loop3): invalid crc value [ 649.342176][ T9542] F2FS-fs (loop3): Found nat_bits in checkpoint [ 649.566992][ T9542] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 650.100553][ T340] attempt to access beyond end of device [ 650.100553][ T340] loop3: rw=2049, want=45104, limit=40427 [ 650.263304][ T9574] loop1: p1 < > p3 [ 650.269300][ T9574] loop1: p3 size 134217728 extends beyond EOD, truncated [ 650.305758][ T23] audit: type=1400 audit(1748471721.726:372): avc: denied { ioctl } for pid=9580 comm="syz.4.2349" path="socket:[75256]" dev="sockfs" ino=75256 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 650.407167][ T380] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 650.418614][ T339] __loop_clr_fd: partition scan of loop1 failed (rc=-16) [ 650.419805][ T4021] blk_update_request: I/O error, dev loop1, sector 9 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 650.440491][ T380] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 650.453563][ T4021] blk_update_request: I/O error, dev loop1, sector 9 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 650.464639][ T4021] Buffer I/O error on dev loop1p3, logical block 8, async page read [ 650.465971][ T380] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 650.472661][ T4021] blk_update_request: I/O error, dev loop1, sector 10 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 650.480806][ T380] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 650.492027][ T4021] Buffer I/O error on dev loop1p3, logical block 9, async page read [ 650.502651][ T380] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 650.510737][ T4021] blk_update_request: I/O error, dev loop1, sector 11 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 650.518658][ T380] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 650.529806][ T4021] Buffer I/O error on dev loop1p3, logical block 10, async page read [ 650.540878][ T380] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 650.556631][ T380] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 650.556672][ T4021] blk_update_request: I/O error, dev loop1, sector 12 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 650.567710][ T380] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 650.582567][ T4021] Buffer I/O error on dev loop1p3, logical block 11, async page read [ 650.587077][ T9582] EXT4-fs (loop4): Unsupported blocksize for fs encryption [ 650.595000][ T4021] Buffer I/O error on dev loop1p3, logical block 12, async page read [ 650.610259][ T9585] EXT4-fs (loop1): Unsupported blocksize for fs encryption [ 650.671567][ T9582] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2349'. [ 650.685170][ T9582] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2349'. [ 650.691624][ T9595] syz.3.2352[9595] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 650.691732][ T9595] syz.3.2352[9595] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 650.714305][ T4021] Buffer I/O error on dev loop1p3, logical block 8, async page read [ 652.133793][ T23] audit: type=1400 audit(1748471723.546:373): avc: denied { write } for pid=9611 comm="syz.4.2358" name="001" dev="devtmpfs" ino=10443 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 652.168224][ T9614] incfs: Can't find or create .index dir in ./file0 [ 652.170290][ T23] audit: type=1400 audit(1748471723.586:374): avc: denied { mounton } for pid=9613 comm="syz.3.2360" path="/411/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 652.182260][ T9614] incfs: mount failed -5 [ 652.197928][ T23] audit: type=1400 audit(1748471723.586:375): avc: denied { write } for pid=9613 comm="syz.3.2360" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 652.223555][ T23] audit: type=1400 audit(1748471723.586:376): avc: denied { add_name } for pid=9613 comm="syz.3.2360" name=".index" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 652.245475][ T23] audit: type=1400 audit(1748471723.586:377): avc: denied { associate } for pid=9613 comm="syz.3.2360" name=".index" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 652.273964][ T9607] device wg2 left promiscuous mode [ 652.336573][ T8007] IPv6: ADDRCONF(NETDEV_CHANGE): C: link becomes ready [ 652.343969][ T8007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 652.352621][ T8007] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 652.361034][ T8007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 652.369918][ T8007] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 652.378395][ T8007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 652.386710][ T8007] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 652.394961][ T8007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 652.466771][ T9623] debugfs: Directory 'vcpu0' with parent '9623-4' already present! [ 652.594632][ T6113] usb 5-1: new full-speed USB device number 86 using dummy_hcd [ 654.259593][ T6113] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 654.283425][ T6113] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 654.457709][ T9659] device syzkaller0 entered promiscuous mode [ 654.464618][ T6113] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 654.473655][ T6113] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 654.481704][ T6113] usb 5-1: SerialNumber: syz [ 654.535464][ T6113] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 654.548501][ T6113] usb-storage 5-1:1.0: USB Mass Storage device detected [ 654.556318][ T6113] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 654.565477][ T6113] scsi host1: usb-storage 5-1:1.0 [ 654.749854][ T9674] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2380'. [ 654.986010][ T404] usb 5-1: USB disconnect, device number 86 [ 657.297144][ T9703] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,jqfmt=vfsv1,quota,usrjquota=,data_err=ignore,jqfmt=vfsv1,,errors=continue [ 657.414553][ T5] usb 5-1: new full-speed USB device number 87 using dummy_hcd [ 657.566538][ T9723] overlayfs: missing 'lowerdir' [ 657.895650][ T9727] kasan: CONFIG_KASAN_INLINE enabled [ 657.900971][ T9727] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 657.909201][ T9727] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 657.916127][ T9727] CPU: 1 PID: 9727 Comm: syz.0.2398 Not tainted 5.4.292-syzkaller-00021-gcd8e74fa0fa3 #0 [ 657.925911][ T9727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 657.935956][ T9727] RIP: 0010:bpf_skb_ancestor_cgroup_id+0x11d/0x280 [ 657.942429][ T9727] Code: 02 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 94 42 26 fe 4d 8b 36 49 8d be 1c 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 3b 01 00 00 45 8b be 1c 01 00 00 44 89 [ 657.962107][ T9727] RSP: 0018:ffff8881c8d5f978 EFLAGS: 00010203 [ 657.968243][ T9727] RAX: 0000000000000023 RBX: fffffffffffffe00 RCX: 0000000000000002 [ 657.976223][ T9727] RDX: ffff8881e86f9f80 RSI: 0000000000000080 RDI: 000000000000011c [ 657.984177][ T9727] RBP: ffff8881c8d5f998 R08: 0000000000000040 R09: ffffed103db5ca31 [ 657.992136][ T9727] R10: ffffed103db5ca31 R11: 1ffff1103db5ca2e R12: dffffc0000000000 [ 658.000092][ T9727] R13: ffffc900000ad020 R14: 0000000000000000 R15: 0000000000000080 [ 658.008050][ T9727] FS: 00007efd9a45f6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 658.016962][ T9727] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 658.023535][ T9727] CR2: 0000001b30d1fffc CR3: 00000001e211a000 CR4: 00000000003406a0 [ 658.031493][ T9727] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 658.039535][ T9727] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 658.047485][ T9727] Call Trace: [ 658.050763][ T9727] bpf_prog_dcdd7aeecda69f3f+0x6c1/0x1000 [ 658.056468][ T9727] ? trace_event_raw_event_xdp_bulk_tx+0x1f0/0x350 [ 658.062968][ T9727] ? __x64_sys_bpf+0x7b/0x90 [ 658.067538][ T9727] ? do_syscall_64+0xcf/0x170 [ 658.072197][ T9727] ? entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 658.078254][ T9727] ? ktime_get+0x10d/0x140 [ 658.082653][ T9727] bpf_test_run+0x1ea/0x5d0 [ 658.087140][ T9727] ? eth_type_trans+0x2c2/0x5e0 [ 658.091971][ T9727] ? bpf_ctx_init+0x1b0/0x1b0 [ 658.096633][ T9727] ? eth_get_headlen+0x1f0/0x1f0 [ 658.101552][ T9727] ? __kasan_check_write+0x14/0x20 [ 658.106671][ T9727] bpf_prog_test_run_skb+0x721/0xdc0 [ 658.111959][ T9727] ? __bpf_trace_bpf_test_finish+0x30/0x30 [ 658.117769][ T9727] bpf_prog_test_run+0x21a/0x2a0 [ 658.122700][ T9727] __se_sys_bpf+0x49a/0x570 [ 658.127192][ T9727] ? __x64_sys_bpf+0x90/0x90 [ 658.131766][ T9727] ? fpu__clear+0x3b0/0x3b0 [ 658.136256][ T9727] ? __kasan_check_read+0x11/0x20 [ 658.141273][ T9727] __x64_sys_bpf+0x7b/0x90 [ 658.145675][ T9727] do_syscall_64+0xcf/0x170 [ 658.150162][ T9727] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 658.156039][ T9727] RIP: 0033:0x7efd9bdf6969 [ 658.160438][ T9727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 658.180034][ T9727] RSP: 002b:00007efd9a45f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 658.188440][ T9727] RAX: ffffffffffffffda RBX: 00007efd9c01dfa0 RCX: 00007efd9bdf6969 [ 658.196403][ T9727] RDX: 0000000000000040 RSI: 0000200000000280 RDI: 000000000000000a [ 658.204361][ T9727] RBP: 00007efd9be78ab1 R08: 0000000000000000 R09: 0000000000000000 [ 658.212317][ T9727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 658.220273][ T9727] R13: 0000000000000000 R14: 00007efd9c01dfa0 R15: 00007ffca8a69018 [ 658.228232][ T9727] Modules linked in: [ 658.232307][ T9727] ---[ end trace debc0139e6960c4d ]--- [ 658.237888][ T9727] RIP: 0010:bpf_skb_ancestor_cgroup_id+0x11d/0x280 [ 658.244419][ T9727] Code: 02 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 94 42 26 fe 4d 8b 36 49 8d be 1c 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 3b 01 00 00 45 8b be 1c 01 00 00 44 89 [ 658.264142][ T9727] RSP: 0018:ffff8881c8d5f978 EFLAGS: 00010203 [ 658.270220][ T9727] RAX: 0000000000000023 RBX: fffffffffffffe00 RCX: 0000000000000002 [ 658.278339][ T9727] RDX: ffff8881e86f9f80 RSI: 0000000000000080 RDI: 000000000000011c [ 658.286372][ T9727] RBP: ffff8881c8d5f998 R08: 0000000000000040 R09: ffffed103db5ca31 [ 658.294386][ T9727] R10: ffffed103db5ca31 R11: 1ffff1103db5ca2e R12: dffffc0000000000 [ 658.302479][ T9727] R13: ffffc900000ad020 R14: 0000000000000000 R15: 0000000000000080 [ 658.310484][ T9727] FS: 00007efd9a45f6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 658.314543][ T5] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 658.319538][ T9727] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 658.330134][ T5] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 658.336199][ T9727] CR2: 0000001b30d1fffc CR3: 00000001e211a000 CR4: 00000000003406a0 [ 658.336213][ T9727] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 658.361014][ T9727] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 658.369099][ T9727] Kernel panic - not syncing: Fatal exception [ 658.375522][ T9727] Kernel Offset: disabled [ 658.379838][ T9727] Rebooting in 86400 seconds..