last executing test programs: 2m11.607507024s ago: executing program 2 (id=3): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000c80)='attr/exec\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0xf) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) copy_file_range(r4, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x11, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @generic={0x66}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1000000}, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) io_setup(0x3, &(0x7f0000000180)) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x5453, 0x0) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f00000001c0)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000), 0x1000000000000202, 0x1) ioctl$TCGETS(r5, 0x5401, &(0x7f0000000280)) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6092c01f00442f00fef300000000000000000000000000bb00000000000000570000"], 0x0) 2m10.50377874s ago: executing program 2 (id=6): r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000300)='westwood', 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0xe, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES64=r1, @ANYRESOCT=0x0, @ANYRES8=0x0], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, 0x3b) r5 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r7, 0x0, 0xc, 0x0, 0x0) fchdir(r6) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x1800, 0x0, 0x1}, 0x20) setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r8, &(0x7f0000000100)={0x2c, 0x0, r10}, 0x10) 2m9.57931918s ago: executing program 2 (id=9): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000000)='./file0\x00', 0x3010050, &(0x7f0000000600)=ANY=[], 0x41, 0x150c, &(0x7f0000001c00)="$eJzs3Au4TeXWOPAx3ved2iStJPd3vGOykstLkuSSkEiSJElyS0iSJAmJTW5JSELuSe4hucVO7vdb7klyJEkSEpK8/0en8znn63xf5/xP3+d7zh6/55nPfseaa4w15h77WWvO+Tx7fdNhUJV6VSvVYWb4l+Cff6QCQAoA9AWAqwEgAoCSWUtmBRwKGTWm/msvIv5YD0693B2Iy0nmn77J/NM3mX/6JvNP32T+6ZvMP32T+advMn8h0rMt03JdI1v63f737v+D3P//P0c+//+NHCo6+ot1Ra/r+E+kyPzTN5l/OqL+ssjwHw/J/NM3mX/6JvNP32T+/+YigIr/zW6Zf/om8xciPbvc959lu7zb5f77E0IIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgiRPpwNlxgA+Mv6cvclhBBCCCGEEEKIP0644nJ3IIQQQgghhBBCiP95CAo0GIggA1wBKZARMsGVkBmugixwNSTgGsgK10I2uA6yQw7ICbkgN+SBvGCBwAFDDPkgPyTheigAN0BBKASFoQh4KArF4EYoDjdBCbgZSsItUApuhdJQBspCObgNysPtUAEqQiW4AyrDnVAFqsJdUA3uhupwD9SAe6Em3Ae14H6oDQ9AHXgQ6sJDUA8ehvrwCDSAhtAIGkOT/6/8F6ALvAhdoRukQnfoAS9BT+gFvaEP9IWXoR+8Av3hVRgAA2EQvAaD4XUYAm/AUBgGw+FNGAEjYRSMhjEwFsbBWzAe3oYJ8A5MhEkwGabAVJgG0+FdmAEzYRa8B7PhfZgDc2EezIcF8AEshEWQBh/CYvgIlsBSWAbLYQWshFWwGtbAWlgH62EDbIRNsBm2wMewFbbBdtgBO2EX7IZPYA98CnvhM9gHn/+T+Wf+U35HBARUqNCgwQyYAVMwBTNhJsyMmTELZsEEJjArZsVsmA2zY3bMiTkxN+bGvJgXCQkZGfNhPkxiEgtgASyIBbEwFkaPHothMSyON2EJLIElsSSWwlJYGstgGSyH5bA8lscKWAErYSWsjJWxClbBu/AuvBurY3WsgTWwJtbEWlgLa2NtrIN1sC7WxXpYD+tjfWyADbARNsIm2ASbYlNshs2wBbbAltgSW2ErbI2tsQ22wbbYFtthO2yP7bEDdsCO2Ak74Qv4Ar6IL2I3rKy6Yw/sgT2xJ/bGPtgHX8Z++Aq+gq/iAByIg/A1fA1fxyF4GofiMByOw7G8GomjcDSyGovjcByOx/E4ASfgRJyEk3AKTsVpOB2n4wyciTPxPZyN7+P7OBfn4nxcgAtwIS7CNEzDxXgGl+BSXIbLcQWuxBW4GtfgalyH63EdbsSNuBk348f4MW7DbbgDd+Au3IWf4Cf4KX6KA3Af7sP9uB8P4AE8iAfxEB7Cw3gYj+ARPIpH8Rgew+N4Ak/iCTyFp/A0nsGzeBbP4Tk8j8/l/qrurkJrB4C6yCijMqgMKkWlqEwqk8qsMqssKotKqITKqrKqbCqbyq6yq5wqp8qtcqu8Kq8iRYpVrPKpfCqpkqqAKqAKqoKqsCqsvPKqmCqmiqviqoQqoUqqW1Qpdasqrcqo5r6cKqfKqxa+gqqoKqlKqrK6U1VRVVVVVU1VU9VVdVVD1VA1VU1VS92vaqvu2BsfVBcnU08NxPpqEDZQDVUj1Vi9jo+qpmoINlPNVQv1uBqGQ7GVaupbq6dUGzUK26pn1Gh8VrVXY7GDel51VJ1UZ/WC6qKa+a4Zfn0LVFOwp+qleqs+agbeqS5OrIp6VQ1QA9Ug9Zqaj6+rIeoNNVQNU8PVm2qEGqlGqdFqjBqrxqm31Hj1tpqg3lET1SQ1WU1RU9U0NV29q2aomWqWek/NVu+rOWqumqfmqwXqA7VQLVJp6kO1WH2klqilaplarlaolWqVWq3WqLVqnVqvNqiNapParLaoj9VWtU1tVzvUTrVL7VafqD3qU7VXfab2qc/VfvUndUB9oQ6qL9Uh9ZU6rL5WR9Q36qj6Vh1T36nj6oQ6qb5Xp9QP6rQ6o86qH9U59ZM6r35WF1RQoFErrbXRkc6gr9ApOqPOpK/UmfVVOou+Wif0NTqrvlZn09fp7DqHzqlz6dw6j86rrSbtNOtY59P5dVJfrwvoG3RBXUgX1kW010V1MX2jLq5v0iX0zbqkvkWX0rfq0rqMLqvL6dt0eX27rqAr6kr6Dl1Z36mr6Kr6Ll1N362r63t0DX2vrqnv07X0/bq2fkDX0Q/quvohXU8/rOvrR3QD3VA30o11E/2obqof0810c91CP65b6id0K/2kbq2f0m3007qtfka308/q9vo53UE/rzvqTrqz/llf0EF31d10qu6ue+iXdE/dS/fWfXRf/bLup1/R/fWreoAeqAfp1/Rg/boeot/QQ/UwPVy/qUfokXqUHq3H6LF6nH5Lj9dv6wn6HT1RT9KT9RQ9VU/TvX+tNOsfyH/77+T3/+XVN+st+mO9VW/T2/UOvVPv0rv1br1H79F79V69T+/T+/V+fUAf0Af1QX1IH9KH9WF9RB/RR/VRfUwf08f1Cf2j/l6f0j/o0/qMPqN/1Of0OX3+198BGDTKaGNMZDKYK0yKyWgymStNZnOVyWKuNglzjclqrjXZzHUmu8lhcppcJrfJY/Iaa8g4wyY2+Ux+kzTXmwLmBlPQFDKFTRHjTVFTzNz4L+f/Xn9NTBPT1DQ1zUwz08K0MC1NS9PKtDKtTWvTxrQxbU1b0860M+1Ne9PBdDAdTUfT2XQ2XUwX09V0Nakm1fQwL5meppfpbfqYvuZl08/0M/1NfzPADDCDzCAz2Aw2Q8wQM9QMNcPNcDPCjDCjzCgzxowx48w4M96MNxPMBDPRTDSTzWQz1Uw10810M8PMMLPMLDPbzDZzzBwzz8wzC8wCs9AsNGkmzSw2i80Ss9QsNcvNcrPSrDSrzWqz1qw16816s9FsNEvMFrPFbDVbzXaz3ew0O81us9vsMXvMXrPX7DP7zH6z3xwwB8xBc9AcMofMYXPYHDFHzFFz1Bwzx8xxc9ycNCfNKXPKnDanzVlz1pwz58x5c95cMBcunvZFKlKRiUyUIcoQpUQpUaYoU5Q5yhxlibJEiSgRZY2yRtmi66LsUY4oZ5Qryh3liVLBRhS5iKM4yhflj5LR9VGB6IaoYFQoKhwViXxUNCoW3RgVj26KSkQ3RyWjW6JS0a1R6ahMVDYqF90WlY9ujypEFaNK0R1R5ejOqEpUNborqhbdHVWP7olqRPdGNaP7olrR/VHt6IGoTvRgVDd6KKoXPRzVjx6JGkQNo0ZR46jJH1o/hNM5HvNdbTebarvbHvYl29P2sr1tH9vXvmz72Vdsf/uqHWAH2kH2NTvYvm6H2DfsUDvMDrdv2hF2pB1lR9sxdqwdZ9+y4+3bdoJ9x060k+xkO8VOtdPsdPuunWFn2ln2PTvbvm/n2Ll2np1vF9gP7EK7yKbZD+1i+5FdYpfaZXa5XWFX2lV2tV1j19p1dr3dYDfaTXaz3WI/tlvtNrvd7rA77S67235i99hP7V77md1nP7f77Z/sAfuFPWi/tIfsV/aw/doesd/Yo/Zbe8x+Z4/bE/ak/d6esj/Y0/aMPWt/tOfsT/a8/dlesOHiyf3Fj3cyZCgDZaAUSqFMlIkyU2bKQlkoQQnKSlkpG2Wj7JSdclJOyk25KS/lpYuYmPJRPkpSkgpQASpIBakwFSZPnopRMSpOxakElaCSVJJKUSkqTaWpLJWl2+g2up1up4pUke6gO+hOupOqUlWqRtWoOlWnGlSDalJNqkW1qDbVpjpUh+pSXapH9ag+1acG1IAaUSNqQk2oKTWlZtSMWlALakktqRW1otbUmtpQG2pLbakdtaP21J46UAfqSB2pM3WmLtSFulJXSqVU6kE9qCf1pN7Um/pSX+pH/ag/9acBNIAG0SAaTINpCA2hoTSMhtObNIJG0igaTWNoLI2jcTSextMEmkATaSJNpsk0labSdJpOM2gGzaJZNJtm0xyaQ/NoHi2gBbSQFlIapdFiWkxLaAkto2W0glbQKlpFa2gNraN1tIE20CbaRFtoC22lrbSdttNO2km7aTftoT20l/bSPtpH+2k/HaADdJAO0iE6RIfpMB2hI3SUjtIxOkbH6TidpJN0ik7RaTpNZ+ksnaOf6Dz9TBcoUIpTkMld6TK7q1wWd7VLcRndxTgCgItxTpfL5XZ5XF5nXXan4K9jcs4VdIVcYVfEeVfUFXM3/iYu7cq4sq6cu82Vd7e7Cr+Jq7m7XXV3j6vh7nVV3V1/E9d097la7mFX2z3i6riGrq5r7Oq5h11994hr4Bq6Rq6xa+mecK3ck661e8q1cU//Jl7oFrk1bq1b59a7Pe5Td9b96I64b9w595Pr6rq5vu5l18+94vq7V90AN/A38XD3phvhRrpRbrQb48b+Jp7spripbpqb7t51M9zM38QL3Adutktzc9xcN8/N/yW+2FOa+9Atdh+5JW6pW+aWuxVupVvlVv9Hr8vdRrfJbXa73Sduq9vmtrsdbqfb9Ut88Tj2us/cPve5O+y+dgfcF+6gO+oOua9+iS8e31H3rTvmvnPH3Ql30n3vTrkf3Gl35pfjv3js37uf3QUXHDCyYs2GI87AV3AKZ+RMfCVn5qs4C1/NCb6Gs/K1nI2v4+ycg3NyLs7NeTgvWyZ2zBxzPs7PSb6eC/ANXJALcWEuwp6LcjG+kYvzTVyCb+aSfAuX4lu5NJfhslyOb+PyfDtX4Ipcie/gyiFwFa7Kd3E1vpur8z1cg+/lmnwf1+L7uTY/wHX4Qa7LD3E9fpjr8yPcgBtyI27MTfhRbsqPcTNuzi34cW7JT3ArfpJb81Pchp/mtvwMt+NnuT0/xx34ee7Inbgzv8Bd+EXuyt04lbtzD36Je3Iv7s19uC+/zP34Fe7Pr/IAHsiD+DUezK/zEH6Dh/IwHs5v8ggeyaN4NI/hsTyO3+Lx/DZP4Hd4Ik/iyTyFp/I0ns7v8gyeybP4PZ7N7/McnsvzeD4v4A94IS/iNP6QF/NHvISX8jJezit4Ja/i1byG1/I6Xs8beCNv4s28hT/mrbyNt/MO3sm7eDd/wnv4U97Ln/E+/pz385/4AH/BB/lLPsRf8WH+mo/wN3yUv+Vj/B0f5xN8kr/nU/wDn+YzfJZ/5HP8E5/nn/kCB4YYYxXr2MRRnCG+Ik6JM8aZ4ivjzPFVcZb46jgRXxNnja+Ns8XXxdnjHHHOOFecO84T541tTLGLOY7jfHH+OBlfHxeIb4gLxoXiwnGR2MdF42LxjXHx+Ka4RHxzXDK+JS4V3xqXjsvED99bLr4tLh/fHleIK8aV4jviyvGdcZW4anxXXC2+O64e3xPXiO+NS8T3xbXi++Pa8QNxnfjBuG78UFwvfjiuHz8SN4gbxo3ixnGT+NG4afxY3CxuHreIH49bxk/EreIn49bxU3Gb+Onf3Z8ad497xC/FL8Uh3KPnJecnFyQ/SC5MLkqmJT9MLk5+lFySXJpcllyeXJFcmVyVXJ1ck1ybXJdcn9yQ3JjclNycDKHqFeDRK6+98ZHP4K/wKT6jz+Sv9Jn9VT6Lv9on/DU+q7/WZ/PX+ew+h8/pc/ncPo/P660n7zz72Ofz+X3SX+8L+Bt8QV/IF/ZFvPdFfTHf2DfxTXxT/5hv5pv7Fv5x/7h/wj/hn/RP+qd8G/+0b+uf8e38s769f84/55/3HX0n39m/4Lv4F31X382n+lTfw/fwPX1P39v39n19X9/P9/P9fX8/wA/wg/wgP9gP9kP8ED/UD/XD/XA/wo/wo/woP8aP8eP8OD/ej/cT/AQ/0U/0k/1kP9VP9dP9dD/Dz/Cz/Cw/u+BsP8fP8fP8PL/AL/AL/UKf5tP8Yr/YL/FL/DK/zK/wK/wqv8qv8Wv8Or/Ob/Ab/Ca/yW/xW/xWv9Vv99v9Tr/T7/a7/R6/x+/1e/0+v8/v9/v9AX/AH/Rf+kP+K3/Yf+2P+G/8Uf+tP+a/88f9CX/Sf+9P+R/8aX/Gn/U/+nP+J3/e/+wv+ODHJd5KjE+8nZiQeCcxMTEpMTkxJTE1MS0xPfFuYkZiZmJW4r3E7MT7iTmJuYl5ifmJBYkPEgsTixJpiQ8TixMfJZYkliaWJZYnViRWJkLIszUO+UL+kAzXhwLhhlAwFAqFQ5HgQ9FQLNwYioebQolwcygZbgmlwq2hdCgTyoZHQoPQMDQKjUOT8GhoGh4LzULz0CI8HlqGJ0Kr8GRoHZ4KbcLToW14JrQLz4b24bnQITwfOoZOoXN4IXQJL4auoVtIDd1Dj/BS6Bl6hd6hT+gbXg79wiuhf3g1DAgDw6DwWhgcXg9DwhthaBgWhoc3w4gwMowKo8OYMDaMC2+F8eHtMCG8EyaGSWFymBKmhmlheng3zAgzw6zwXpgd3g9zwtwwL8wPC8IHYWFYFNLCh2Fx+CgsCUvDsrA8rAgrw6qwOqwJa8O6sD5sCBvDprA5bAkfh61hW9gedoSdYVfYHT4Je8KnYW/4LOwLn4f94U/hQPgiHAxfhkPhq3A4fB2OhG/C0fBtOBa+C8fDiXAyfB9OhR/C6XAmnA0/hnPhp3A+/BwuyP+sCSGEEEL8Q/Tv7O/+dx7LAADq13UPALhqW65D/7nmhux/XvdSuVsmAOCpbh0e/MtWuXJqauqvz12iIco/FwASf1v/L/FSaAFPQGtoDsX/bn+9VKdz/Dv1k7cAZPqrnBS4FF+qf9N/Uf/Rx4cvLBWfzfrf1J8LUDD/pZyMcCm+VL/Ef1E/R9Pf6T/jF+MAmv1VTma4FF+qXwweg6eh9d88UwghhBBCCCGE+LNeqmy737t+vnh9nttcyrkCLsW/d30uhBBCCCGEEEKIy+/ZTp2ffLR16+bt/rEF/npf4J/LkoUs/m0XEfyfaOMPX1zudyYhhBBCCCHEH+3SSf/l7kQIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhEi//je+TuxyH6MQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQghxuf2/AAAA//8Nyjhx") creat(&(0x7f0000000580)='./bus\x00', 0x9e) rt_sigprocmask(0x0, &(0x7f0000000640)={[0x8]}, 0xfffffffffffffffe, 0x8) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1084, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x7) write(r1, &(0x7f00000001c0)='u', 0x1) sendfile(r1, r0, 0x0, 0x7ffff000) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x303000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) 2m8.706142029s ago: executing program 2 (id=13): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1f, 0x0, 0x0) capset(&(0x7f0000000500)={0x20071026}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000008a00000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x1f, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800800000000000000000000000000000006300e0ff0000000095000000000000000000007740c7b1ae01a8b3fd6a0598000000"], &(0x7f0000000100)='GPL\x00', 0x2, 0x10d, &(0x7f00000002c0)=""/196}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x14, 0x9, 0x3, 0x7, 0x40000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xb}, 0x50) syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x4064, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x6, 0x20, 0x5, {0x8, 0xb, 0x0, 0x1, 0x1, 0x1, 0x30, 0xc6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x5, 0xa, 0x80}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x4, 0x3, 0xff, {0xa, 0x25, 0x25, 0x9, 0x4, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xba, 0x2, 0xc, {0xa, 0x25, 0x25, 0x0, 0x6, 0x3}}}}}}}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) 2m8.008240052s ago: executing program 2 (id=15): r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff02000000000000", 0x1e5) recvmmsg$unix(r0, &(0x7f0000006440)=[{{0x0, 0x0, 0x0}}], 0x11, 0x10002, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000280)='./file2\x00', 0x2800008, &(0x7f0000000140)={[{@barrier}, {@jqfmt_vfsv0}, {@dax}, {@quota}, {@test_dummy_encryption_v1}, {@norecovery}, {@delalloc}, {@nogrpid}, {@nojournal_checksum}]}, 0x1, 0xbdd, &(0x7f0000001c00)="$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") r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) recvmsg(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x102) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) wait4(r2, 0x0, 0x40000000, 0x0) r3 = socket(0x10, 0x803, 0x6) fcntl$setpipe(r1, 0x407, 0x49) sendto(r3, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x0, 0x0) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000240)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000680)={0x1, 0x5, 0x0, 0x2}) 2m7.704658482s ago: executing program 32 (id=15): r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff02000000000000", 0x1e5) recvmmsg$unix(r0, &(0x7f0000006440)=[{{0x0, 0x0, 0x0}}], 0x11, 0x10002, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000280)='./file2\x00', 0x2800008, &(0x7f0000000140)={[{@barrier}, {@jqfmt_vfsv0}, {@dax}, {@quota}, {@test_dummy_encryption_v1}, {@norecovery}, {@delalloc}, {@nogrpid}, {@nojournal_checksum}]}, 0x1, 0xbdd, &(0x7f0000001c00)="$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") r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) recvmsg(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x102) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) wait4(r2, 0x0, 0x40000000, 0x0) r3 = socket(0x10, 0x803, 0x6) fcntl$setpipe(r1, 0x407, 0x49) sendto(r3, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x0, 0x0) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000240)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000680)={0x1, 0x5, 0x0, 0x2}) 1m46.029935525s ago: executing program 0 (id=190): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000003800000000006112000000000000950000000000000051fa7824c74186dcbeec0696c37b64e3b24da3183dbe97e805165c0f63cdc2e82818254950ee03568b88091e6a86450545c0e18e09"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) 1m45.981656696s ago: executing program 0 (id=191): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000034f0e61000000000000000004000000bb7f1a007600feff00002000950000000000ffff"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x3b) 1m45.924378938s ago: executing program 0 (id=193): unshare(0x40400) r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="09000000070000000000010003"], 0x50) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000002000072080003000500000000", 0x39}], 0x1) 1m45.86377254s ago: executing program 0 (id=194): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000400)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000}}, {@abort}]}, 0x0, 0x4c6, &(0x7f0000001180)="$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") openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r1) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff038}, {0x20, 0x0, 0x81, 0xfffff038}, {0x6, 0x0, 0x6}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff038}, {0x20, 0x0, 0x81, 0xfffff038}, {0x6, 0x0, 0x6}]}, 0x10) sendmmsg(r2, &(0x7f0000006680), 0x0, 0x0) (async) sendmmsg(r2, &(0x7f0000006680), 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0) (async) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f000000a100)="58785f58471eb4b5b3ff3946acaad41068511507291e72541d949ffc8a54ff637ccef1fe8511899ea7f3c82cbc6539763a34f6760c1608c911801ca672e62708ba4fc023749076ff6a0daba0caa57000acbd9ecf5e97201f7f14e715bc8c089c3d65e92fd65dedb76d61715067ccf6dfec2b56a48f2b274b564d90c3d868f2bdc07b7e636ad78904bca826fa69b7783e7be2b8e7c997b99225467747875695f6d500cb82b479fe9486bb94e06f796f89906bbfccc964830f86986760ade90c3f7a9dde3172a5124c1889075ad30b5ee2a5f257a6ac790a8e89b247ccbc8d241b7b95f8fc649deffc1bc37d51a8c3dfae38ac968eb48695de38df941f9632ef9ad6779e41ccea8a3ff1cac4fa4b47a152a8f9a1bb0094f41580bbf60fa11cfaf2c535a12c866e9414ee9b58226fbdb0d221e1bdc50e3fa300351364f6350030383856f1f809aee19f337f3d3435ae6754916be1eec24643cec1bd1007ffa38418735988cc901603895f66bd6450d54f99e1246ded898499d2a447f899c00368ce1dd4a4f4cf9cdf7d4f8b38d7b98a598ac490f1086ec712b0cb94610abfdb25b0f6947b46e1dd628897ab68445568578049fa6140250a5d821d70f102fadc2fa273a6e486f250712ec847de3b02a121e19775311e8629045f3404bdfa3207aecdac43c3571b86a9423bd716aa67cb688f9ee4f2b14ea42c89f2766c78fd4ec41ab34eebb4256e885bd7e3abe4348772993bb630aa3397084bbc66cdad664d6a9d33767cc375a44dbc0b08931053a6780a796fd31e1d7c512599f9e010883a52c07ec0938ce1acb3fe3baac6af9fb7e9d7942662e41bd3626d240d5ed34ebcbcc0ccf1c3280c76fbf6cdfb04bdb2d3b4ec6a8961b1eb036b211eff6247b95039cc67d222f2ff122340c56d74b4fffa79a202144bb10ad766f1fd6b3276342baf2fdbd26e9563dadd01fce19d7ec025d05d0494e53229379d13c1cae48ec058cff0bc1ccdc94a74b11a9bc87c580bb6a3f45fe15d15d89bf6102dc1085bfe27b2ab462aaf642b8ceed519cf88b31e9e00fdc23e8f6967a72b4c38b2458656dbf26dd75586731bb519a97d0ff43f4358cd40c7ed371ae8a24f46e320d4c4c0a1b8c42f10908a1c283d8032d76f52d4509d78c2f3a0716c37bc0c786ce9174a88d468e88a6d154e4712778aecded0ca5de28e52c04e33672ecea5135438e908aa1bf00e65ba6dacc4bd018b7bb1c30aa5d9acc679220cb5e7207f1759bd7722d10469225aae24973031a21358532a63aab42f33b1f8f40d545fec7799703ba067592b34247fbc7375acdcb3883ace7d34cf33484f2cf662f3f0e18b5c475ae311fb20f6e6b85320b2bc37e56512dc27815b37bfd9f172be1a119197eb53b535c440f97f24724e1d466309c0f8556965bd02d75c3dbe2baa0c6a515db07af1f77306577d0b38f0aa8cb188cf5523368951b8210f4bfc6afa0d058ad84656d27a46faef225e6268396ecb54a5182591bff3a86792db5454e238afe7c26eae85fd3c1c060760d89223bbdbe8966ae2558f47d799839cd959c974b69ad262cf8ab4fee554288e767ede9bc5d7f0cfba05966ef7858e41db363122680abe978345d45e4b52b73fe9f52ad26371a5b0539d88aa0c572aa01a41b079dde5a14e031ad903629d06c8d85ad82828c25a9ba7ce0fef2316eb011643e47feca7d280833f8b3008841fb2d88ea84df65b03aa5baaa29d6234ed5db8db461fc5df77aad38690277cd5dac1ed3c23c9f2778295578561f9a4d31159a826b4b62b2a867e6e8a9514edddaacad22106880e6633fb2f3b17c8d10bec633d6128489f7253b3e3e38e5942743ddd1547dfab27a152549f61891e3a5ad17f733b042f7ef915ad7423b9719fee9142407fe1d10ec8b64a21cd24fd39de4496ca3f394f07149bdbf1393181b5afee090ff40ee31d34a9c6a113e3823fac425fa85e212de1a9f7c4937ba64f3327961fccf85e6fa29be12de9589671d60d4658b1562ce7dedcde8ec79d265c13f5e197b66989c3f067d2801fcd78bb92b45e55fb4089a7cd3b179284af782ae0327ba56fc307a281772384448ee465dccefe41be8d75c8cd0eb5c0217d7ca706848f9b82500b77c2d838cbd536304556af87d3b6fb9183b5dc9cf2d0f7ecbb24d9f790151b9c6092dfb2c14decbe6448362cd7c13515f66a99c37b56134d12e8c7f1a5b75e14e47f84d8658f0b65ea91014e2e4fd361f03dbf8ca509d426ca1bba7e43ce918268393ff16b17d9e1bb49fb2b4f6eeb8b4b226c79303b19412a55b7ea7c8774ccebd8d66abe117a8be9a3c4faea730902136df57aff991b59dd71610ba4c8e1cded8287c21c56526f4fb6c502ea73ae310d56640990b3e695b278de6e1eebd51108cf7547c0e457e5fdf59691baf080dd3f5dc3c9a10bd4cc5e10ba42d4d3d9dc4f7ebe0bd2981a1d6fb06f7457dca1e56fac3f0fa7ca19ec2fb7940ee837e960d93a73bf085eaa2888fe3025aadd33cae85d63273be6ae3a92e35d78602d8e23b9460f04b7c0e0e710d10fdb0dd3fa9b880865603500d81dc7e968e8046569830b526e441f25f8b0af47d524aa80fd7dd9c3f72facec2032e2c06bc33c6b739c5368bf54e32b6acdca9d2d14276a8348ae92bfbd60f6aceecf98f3c6fe70747499b25667a96c52e21236421b27deafbc6b5e2b8a4ea2a0d3cd5ee1a10f3153b529b5c04a1961223a943842e17ee0cd114ce6983536400fc40f3d4708436954803fd60caf2b5ed7e4ce90bc75385e2424191c6a5038fa15d99aade49fa1affe63fb73078a6bb4ee560b0b521aeb33f507bdf876829f4d3f695197468e41503a10870a8e6df800608ac33dfdecc03f64d03fb6180287a684063c7edfc8db1366f6bb502fe446085f6acc4741b273a0b736f0f55da28967390bc7434db54ad0da9d1d002ceaa5c3e53efa95e7aaa792db32501a072e669da29fb734d771a6fa8c753fb2fcc204e31d668992473e7937fcf751bc79b125db1725f2a495bd2a4207e4db8d44810a4db5113705c5cb8733866ade3375d1bdbcb965cbd927e7d285f2933bf037911959088b64cfac0ff1e39244f2e9416653ed87ec564eb686af1062354a8bd7034c1022cb0d0b6996762ef4a0a3ab4f3deb459f023a867a38fcad2a10fcf0872862b386ff7c5ea7ce13abb112d1f0ed0723870eccc76d16f7e3cc00e28945bb93d9f2bd8e2017993102f0824867ec141f20df951202a2ab1cd796516ca0b4fdd9e6de8b82fcd30f9ab85cf0a5547e1ad1ef1ad5be7a878a16864d7c06b4ae002f3ba485a9bb36b8a591ecb64a4a5c0fd3b4beb015f58ea4cfe190f3b46cc4d9108d10c52a9de859814edac575d2a3d937a9b31db049e70aa76c085ab63d61c1317205c228f7027fa39125de8fec40ed7982e36a7cfa9fedca30f0b692bd4c7794f6b56d69ada1fed168cf03cc57321fe37e3a8cea4bd093e87b657fe5acb13d2591bebb526301d16707eaa38e52f913f8aa3e27b2387ca1a217ac69966e287ad5cb0286535d5d00b7006661dbc7923a066945c1a2040a4e95d7b0de4dc8217bf1d4e9b6cccc671fdd9a5770c21e749b407df8c463a3bf17e47bfcba6a890a0435d3fbb7252fe072b149b7bfeb185b088686dd70e0c9cda275497b553aff2b319f7d7b0ed64002c5f9f6ccfc3d55d8c908d314487452f37a650f4561326a84c660b6111702a87db03595b5d080c60288203f091de9f78b997e47233f4bab9b044a98ab118a6c45b7ca746cc2fb90182a923d67216412e24a955c0c2307acc47bdd319955249d8412a5ccf444437f53f524c69ba0167c920f0c1f775cd1a225636200a9e4adf61f418d20f717339d0c8c5386af0936f628cc589a8d5581c1c8cad0b564a3f38b606473280a3fa586a5ba932fd38eeb23096df29a92ab54c409f88ef4f03217f0bb90fea539e629d8a025c802f6b5c3d735fe950c8ff7136e6db287851dfbffea1ef81491a50cb75a103367e85afa3484d6af865dfbca91dc05632b0d94aa384ee0c585424a5ddf80babe0b913b0a2eedda34c7ea7814642a69f8eae868274b16fe0f52fb60b201e6685dad3f419413d5b8186992855a25ffe0d4773a14c7977181a120cbc42af4f9acca3fee1d54ccc125ea49b62ab60c58a0ecdf50ee7c16f3b6b12b254fc08fcc85d409eef7c3f30cf705617f926a17e6588a9fd7e34be9fd863a7b157a2d9a336356d568c2d2dbaf76c2d2b2ff8703748b860e36f02b04d6e4f2fd49511f12ce395dc18622cd51948a32cc432cd797d8a68838cebbbdd9bcb6f2e85719785706012e894cb043bb9a53998131fd4aae3321d81fc001e718c4a99c0580af1d4a0c81665cc5adcf337c8bc00fc0fb3c7be0d5e5ff6a6fae5891858eafedbed69223170ccc71ce36ae439d769c3520972601fbab93f54808d6950cb7cf1e5a3b32d8c6a975e3adccca0b2ee28a4eb5ca3b0ceb9d31a8f767c3f4486a62215171738007675a55abf5916513f7eb9b21ff291f2b4b48bbfcf394cf861fe016b3680be422a8bff49963ce096d1bc17186822b1392e68b1a05fa6c70bd2d9a164f12301a6e78caa8f4cd437497320d383e752dd224aeef80794d3f206741363e74fa181c9f1dc47557553de620794f096c59ccd74a178f5adb466ad5a62fffc1886f56ebceca4ed46ed2396bcbc31160b4eb1b7d69642e33315e3adbdbe1b9794931e7babf745ecfca37dd4190013793d530df12d6521bc069a05a94e0ffe91900a0c2209a6914d2f85bd161ff77284198129a9b1ba600bda3e52769d39c1bd61c4a70c35e166da9a08b4d2f92deacb6e9034274305b6d254c4052868ba32bec9aa3cec75debe24e78e43374efffe444722a983935f9007fe3de37dd83c52be16e034d09592a179275dd0c91281be579cd19c0162123886893713f25cdae19cf258926bf2070741111eee6b3df708c3fc416b7d046c948bf8500779c0cd5460e640bb1f860f58052b8087e6eb2f16e48f4984c9f9fc9fb2652ac5305861ece5362db08ae912ba055af766da1322057d0bfa647d98b8d4f1e7ed43ecdf1050c0eb19dae93b8014da57241cdab4ffacf0ec1348d4a89b3e8ff187098d83d8eba34e5c7ad4215f1977968a9d337d08fd1188754e7cf41baf0189ccaa5f3b1005f807b0255ce1920ca7d919e4684af70c3d089a99922727c607a2b06e713dd61122842a913036f6cd64dfb313fbdf639fcbd712852bb85337d056685b0a54225ae27e1e8c7ce5acd1f017b8f712c268b9cc0ee26d26c63f0a8b0a40fccec5f945431a2e81c35720d178feb481092e4f51978493c5fd502f252bc0152f145f268ead14932990069169483ecc7abc901657460c8730715c078b61059bd2621f50fb838376e0b808a3f118f761efea45bbac4274016960063cc67c428e72e516685552dc3bf473e442d76f2d3ed07b319694490054302a538b52e3b8496b7e37fbf4a2ffff2b484f98fdb14c66ecb8447834733f8a7a5a3c83de34b6647842dd56d8201f9d9240f3b3a5b5cbccf174a08853d06fd164fe74e04608ae12df8a35b73517d22a87c7ebca60942932d03102ff7e8644611b5520b5ebce950945498ce19210c866e48284d18fb7e049deaa43ee5283e3dfad7316ba85490e93182d13efe7ba64ee5ceeaabcff3eb24d46a3a129dd5a6b82e8c48210cb1e6564833f3e15dda4dec383b4319741cebf6374cf2c5d64722afccf7c4e2d81ae28d45f2c35b764281f1f08fec8f8e9277277ae1ae8a8981f85e041d2450afc9374e978f73b66da9aadb2087223f28e21e946eb07710ec86cdcad0948d4ca93827ea34e28806d172c3feb83471ed2d4d7ada2360b209d16b9d35861082d85b6be3c3589a6bdaf6f9b5d52ac8fd7388e32b24f1d5d34b5442c1ceebde311decd709f075d064f07bc60ab14c101ef51039eed56ae1e0a374e3e956603737b3a16db684a81e9b8998a0bb9b17a0876a92b2a3b9924f44b16ae4c7ff376ea8a8c91b504c1dbeb522cf846fc3ec6b9a01f452eeb35cade34c6a0463b92c46e013ee7906ee934141870ddd1464ae688805933504a2dc7cb1f947e28bf22f5eea6afb5de3b950056bf44065b84fd5589385d0feec4ef1db4fb4b595957130e575dc383e3686f4674143debb23e17b398f32683fb4805f297369d0e5f2e63af6891491e4e37186b4a3dffbbdcfff63d1fea4e12d24ef96fde3ed7a323a3605cdf5eaa43da738004556c2c20aa30c40079bc2e9ebe102c1fcf5259f1e3acc6b2a2bc9da4d0b1252433c58a1810581152a235e93deabf7f728eace350bcc4db4f249d4234bbd858c4e61a0eda4e3db0ae530c78eb63425502d651fd0cb986341ba69c44ede18eb3ebf25b2336cdda02447a9e20426d8206368c63b5fd6828612d3b99f627e331bab0009579de8270c36aa03861c300d34f2a3703870712325190073e6c17d8699f6744acb1b5468f93b57ab0366796181a4f543511d7ea2b32606c33cda61e81ed1c2194d305be47a3f1a9145d023620af12e79ec188573526ec35b9ce44e95fdb3530bd0431dd12a227d0ffe317cda1bbd787979261d6c9cf728b3d6bec3ba6ae15a595a30fc242bc5f25d837c1c642219afcfe043bb68a82965574b8b2139789235b262cf4af95a538e6954acf8e27ac3c95328df6e4bd615a376cd96bbc9e0d9802fbb40f80a848225e076219e26e0e63f57330b8bda69ec8dbd8b3272798cbfbb085b1885a1c22b3e2df2a879020ac1110b7af4f53ac97f556596ba0e164df0c85842026a87cf9631c9c9d851549efd8ca37e3b863e88436d5da5f4d3b5b5528e2d08d92b0d3ac6a06a0699653718e93a25b5afe254a068e300751eb6c67e3f5a1813d58d428f1ec108b88ec81444ccb50e8452941510c11f2e80bfd712f64b32b686c92ce922baf6c8eed1e9f0717a654d53b3ce1001880de80b5b15362b20286db9dfdf6c41f48aae84d5ab12ac45310f0eefc56e54113bcf95c1b2a259895af2ae9c679de4e2b898bf8a40a199a2059f8248c1303351dca3fb38906a682f66a94ee660debd6eaaee7b2f1051781084b3c9d626263d011a3daf971b708750a77614753b89b5e1a77a52510ced5708083fb48c554dfd6aacfcf97650f3a3b3f97566050e76da968d4eceb83bc1e005ed1596d6e0ec5e2c90231e62496d7435ec5b28f805e3b7aefdd3718e4ff53065b8e4b15175d80eec59218d8278e711c6049bf6d62ae7069578e957135463d7616b37c1e4bf44d60dac6c7aa04cbbc4a64bb0cc0b059abb6b26f8ed5203232ddd8a6c5882e6e6c53068a71bc84c5834104e85bc96db2163798a3881929248b8c788e5bdc9e46e5f7f3f6ad43fad6fa381a0b924bd938702470b330fb90ba73d557c0d203d55edaed6e3a01aeb53b061dad57713ab27e1a9e0d06b534a65d85beb061bb5258bbb38179ea612a6f402affb8ca018ebf0d6f61d44d5a657c080c7d2dbc9b08c07713b17b0f173ada59b57abb401212f4f1fa026491b48d08cf46a704ab43e46de8ea596d68658523b61a156278b3b77bd1f4491381bfd874ed72b00675fd5b4b7c0ec13c6837434ba8e22230d32e7bb1287e488e14f5c5602cd4ca88012b244c7f23f4897e27027aa862ca139bc8b5fe14be7554832ab02e4ba19699a1e66825d94c7c44451062819a38d3376f0a3716b210c7adf4bfbbc303058aa2e054b3bd53539764f177b11b05451705550f90196997de3d1d480e500cd9d234078cb1a09c63d8911381d327402702c2765fe92b8ba3a0189b2b11b7460996c36eaae3ecb4f4e63bfafd7953ff086dfc0b12e616bbdca4707631467b830d244bd3f4371744bc8a4baac728a397818875d1b6a4a2f0d10be607122a6fe813f52e4456b8a5eb6c9ee0cf889f777a03cc26a055f9f259cfc4f8552b568a4b371260af062619dfb215ecfe7b318f8d627d2777bd5103d6ca2948d19d5812112962b63c2bf3d090ff19185dbc5ad49a580451de717c0baa288cd96669babe88a8b1ab6d0936c4c407878786695f46f59ef06c5c2166b661542c598b6e0551d490946182841184a7a0e669c6ccd73a342f65c4525dc7522dccab15fa72bd07588b5bca71635b9466ca72a504c74cca1c573e8d40d83d1b5c5326481ff8a2055a2e0fb997fe8e4787deaa2a8a57afe74a971e7f1f280895f2fc9d99c41416adef7b70ec47e7a12d0ca3c0ab1dba3c2d65bb172fde1fcd7f97692d3d8c9657e3277ce95947d59bf37dde3f35f7a5d76575f5c14caf7f0926c0896995a5f42efd0d38c42de202bea5b5db39bf697f9a96b54aefec723db523893186634763e7399bfa8029c2708dc817984528601c77a1d78bd4b2c85f10f5ca9363badcdab51a1b315cafa5c2ef64f60395f53efb9d60d89e1b2a5f147508c90d2b09476eee3cb9b5957669a77cd2c522909480dea9be3406d1779ffe4539f2e03efb5f8c2d040f0ea776ff869a36862246294d0ced556a129ef78327617052dc1ef5cfb4e5986ba2f0e063b90e1657d8977b58827a3c4e3d556eb3cf0540685f7c9eda461aa2ecc539fec3d2d56be99a518f11752f2be2f670c5fbe8010ac4eae0ede31c1a48f747ff2eac9fc069d3700a40bf5fcda80a3a4f5fa920f117a72de6da51195d2d7f0cc92ff7835bce2ba6b564832f582df56b24cf30c8297a826a4bbfe0afeb1da3e986b3d0a95509e0037d212a70178ecb246061e067238ea9238e4c4a9a7c6fc5dcba290970f50c52598423336c523f2de7580d059fb53934cb0beb208585e897fafeba30853e54badefa197478fe6b9f26ed0d33babb53acee7b7221d8e0cad7a6bd0d9383ced6391bf88ca7aa50c75c136075e87b92445f02fbbc92f7cb65fe2bbe0bf0c9fc2577da63a56f1efbeb276c1f4d01da6f6f7a842212d96dd45edcd2aee7f2c553ace15eb9336bb1804ec252998c5c8b25033894b05c01ce7c77b73ec0e239478c67d5378fe5a53fe6269025d54006e9bb1cbd09b81a39615517c609f3d74e377888f641587121f0f097b48d8be85800295ebab9407978a9cd379966577cb6e1f5261e4305696a2cdd50d8cb1964d3ae18ec730d40f9c782533efba47db8378c6aa15ce85985e211fff2659729599802a7b585cbef3a2762595f67e2054a0fb4457b146e7a656abb2c4b2387d760f7e5b8b7864132317d5ba29a662f50af8dc182d2fbe216db8e997ac856bc59855ca48999699cd6c5576cc47bf8a8c30638c7e08847e5083aa82068940409461d1065c2b53292d3ab145d5bb590bcd278e48ebd34920b18a2e1731c1855ae5a3ed637ff568d205a08cf98c58f5d79c99912e6c1ab257ece0d68ef13d69a56364419aac7df43f43d5faa9ad851c9810648f9050012e55475109ca3ada3452b78a7964377e0d862e022c73ca3ed6cee8c5fbb2d7c12f91c4851fea7c5b02e0a3c5364b7fcca110f20f8858465c498d7e9c6049417fc5c7d4e0059852a6d794af426e938a401cf43b2ba9f4f3f6f0f2eb710ecf3c0c36c4b3072597f805eca9cb14602292ec7d5601e6b1555c8d024aa4bb81a4cff98cb03725cb184ea7dbed6814106a1402bf68a2e51660af930a500d5530651a0dbf2fdc01a31a99be25350b5c8a5fe01155343d028c03e09009ef2c386a24eba8d842cac581402c8faec7dca1623afe25a230d8d4a8bd23df3cf12abedc2a50e387285acf1b3105011a2bdefb204a53b20be213b50f5244511f25852271e05c03fb9a799ac7ea675ffbde8de181368748a9707674e7e70f28a75e4036b6cf9e0693f91a65be4478b6630067ad8dae030a4b7b9784a206b2f7cfeeefc65aae11fc20190f4d6387bab05fa6de640bfbfb0c4f604878771aeace0676d12325e61b19a5317c4d4bb9fe6f3fc8b171f1116528b7cbcc4a91c26a729b512196828075f4d0aeac98887e2a6a19b4e1f1f66233962961c0d49df14c3e6123c9ec8dd7152ad045000107365fd5ed7ce6a6d65ae0736a7e227f77c9b0903d4589ac58ceb691583cdb93ae3fc792c886663cb7c5b0640deb66e29b3c69d2f1a3d1d47d7b672ee3c49e90bd406aa84a0189808924c4e67c5495b045e779c58ca65b42889f52d7315c66be3716dc8592b4875629cd0cb02c29d42bdf9ca5c16bc9051c2a6c09d0695bfba58c19a995838c022e9936c407d8999aa65e4a9d6d8eff99f8dcfac9b561375b6d1293441b9d32533161062c053c63ef09f6100cd748700a710f5bfc2a6297b15242b1f41e21bd004b885d6429a0d334a8c115f7d53d278dad24c9d295b97c50eb340d1e6d523f1757e2014c1605c3bd35f0cfdb74f79850423a37e2f95dfe41c56df09724d21065377f1818311f0c70aaf6fb2d4fc8d9eef576136617371d85481770ce9c390859eacfebba34e75a238ce80bcccadd6c42e8e186be3c15451131fbe9e345c05ab8e23f917d269686a9b5f06dd474f95757b9e5a3328416595539cbdfa69efa9702e5a268b1a70c6e5ff2c118a6e574bfecf17b1576e4f2f7ee566b0b2b5388476a68562991ac01412fa463b0f9e586ad4bde59e91a4b303268b5d8644cb7996cfbba422facd59875ed6ac057e563412255c412be0928a0b6fdb6f35d7008b5d5528ca796a4a69bd90b993a52da9c7d62f4b71a2763f822bb39f3ed39cc5ad5a4d51b5c27d31d105000f3f1e705ed5c42067106f3fe6d30151021bcab7f3a1ad9175b3d3644325aa676b9e057bf9d9aa3348b1d9b31bd639c59bb63f46a6c18794ae006db3b1ee20368160a82e26aee5a9fdc6b44df8be294f3ac0a1275e57ebf5e384b141ce89dd51aaf2248274468894645ba54bc4e6b9788b1eb5043c1f0dffe2e13c6179d0238d8cd037b6fe3e484445ab458fa09e4e8010d3288aa6e6cdbfba4b62c7984d058da8993d5de1df75a1ce8e3bd5875709fd2ede4cd5843e7102ed4031ed096a0c6e3ae9d522ad95ef4af83599507dd32fe3325819cdd7718c9797e921e6e365175e1dd53991edcd2baf27df8b1670d01967e97b3e3e75d297f908deedf2e3b91bd61973e8aa75a5a6f9db11525dd35556bbd13873602a320af74677832f93bd01f1e0631c882c8ab254a26b73a60a6c90cf9b96bd576e05b9befbce882c5d29198451bd15acaa894a5276ea9d870f49a33ee9d2429ef35a905b281deb75be54fa0c9e47be5876d7dce01986f2d0e7ae6df9b87a0ba6cfa55cec0c65dd386db5adc427eac18a00c9aded475417add4ebb8880ef3dd218a9ec3e6e13456f8de1630774e918fe5288dbaec3dd2a74698ec9e28ad573761b9e78af3d5c7a61e3eefc1a54c25bb841529b3fc9137836a2e7eff5ffae8e44f0257160da51ec0b3d144b92f1f43d2782513705baf5930903602d40cb4de87feca7243d2248a78a5d684e303ae147acc96e0b755eea77092b5f6efa723afc6c9a44c575738725815a9af1ced500", 0x2000, &(0x7f0000000200)={&(0x7f0000000380)={0x50, 0x0, 0x100000001, {0x7, 0x28, 0x7e, 0x2143844, 0x4004, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004080)="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", 0x2000, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x78, 0x0, 0x469f8328, {0xfffffffffffffffc, 0x1, 0x0, {0x0, 0x69ec2dea, 0x8, 0x201, 0x6dc6, 0x7651, 0x8, 0x7, 0xe000, 0xa000, 0xcd36, 0x0, 0xffffffffffffffff, 0x6, 0x8009}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000001063071220400001020301090269000342d35a50080b0101010620ca0904000000010120000924010900000900fe0904010000010220000904010101010220000905010940"], 0x0) (async) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000001063071220400001020301090269000342d35a50080b0101010620ca0904000000010120000924010900000900fe0904010000010220000904010101010220000905010940"], 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) (async) prlimit64(0x0, 0xe, 0x0, 0x0) r4 = getpgid(0x0) r5 = syz_pidfd_open(r4, 0x0) pidfd_getfd(r5, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0x498144ee9f642149, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x498144ee9f642149, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r6 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80001) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x145091, 0x0) syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b34000000000000000000000924030000000000000924050000f8211cfd0924030500000004000724050401"], 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0x2, 0x4fd, &(0x7f0000000b00)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 1m45.400280555s ago: executing program 0 (id=201): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000c80)='attr/exec\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0xf) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) copy_file_range(0xffffffffffffffff, 0x0, r4, 0x0, 0x8, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x11, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @generic={0x66}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1000000}, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) io_setup(0x3, &(0x7f0000000180)) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x5453, 0x0) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f00000001c0)) pipe(&(0x7f0000000040)) ioctl$TCGETS(r5, 0x5401, &(0x7f0000000280)) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6092c01f00442f00fef300000000000000000000000000bb00000000000000570000"], 0x0) 1m45.156406674s ago: executing program 0 (id=202): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000c80)='attr/exec\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0xf) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) copy_file_range(0xffffffffffffffff, 0x0, r4, 0x0, 0x8, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x11, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @generic={0x66}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1000000}, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) io_setup(0x3, &(0x7f0000000180)) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x5453, 0x0) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f00000001c0)) pipe(&(0x7f0000000040)) ioctl$TCGETS(r5, 0x5401, &(0x7f0000000280)) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6092c01f00442f00fef300000000000000000000000000bb00000000000000570000"], 0x0) 1m45.143353744s ago: executing program 33 (id=202): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000c80)='attr/exec\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0xf) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) copy_file_range(0xffffffffffffffff, 0x0, r4, 0x0, 0x8, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x11, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @generic={0x66}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1000000}, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) io_setup(0x3, &(0x7f0000000180)) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x5453, 0x0) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f00000001c0)) pipe(&(0x7f0000000040)) ioctl$TCGETS(r5, 0x5401, &(0x7f0000000280)) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6092c01f00442f00fef300000000000000000000000000bb00000000000000570000"], 0x0) 2.670205812s ago: executing program 1 (id=839): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfffffffffffffcfb, &(0x7f0000000280)={&(0x7f00000004c0)=@deltaction={0x14, 0x31, 0x8, 0x70bd26, 0x25dfdbfb}, 0x14}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x48) 2.612315204s ago: executing program 1 (id=840): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001400000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 2.376363121s ago: executing program 5 (id=845): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='stat\x00') read$FUSE(r4, &(0x7f0000003680)={0x2020}, 0x2020) read$hidraw(r4, &(0x7f0000000300)=""/230, 0xe6) 1.483121741s ago: executing program 5 (id=853): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) creat(&(0x7f0000000100)='./file0\x00', 0x64) 1.424234843s ago: executing program 5 (id=854): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0xa], 0x10000, 0x202}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x8, 0x6, 0x40}, {0xffffffff, 0x10000, 0xa, 0x3, 0x2, 0x0, 0x0, 0x0, 0x8a, 0xff}, {0x2000, 0x1000, 0xc, 0x0, 0x7, 0xc4, 0x0, 0x0, 0x48, 0x5, 0x0, 0xfc}, {0xeeef0000, 0x33331000, 0xa, 0x0, 0x1, 0x0, 0x7, 0x0, 0x8, 0xfd, 0x4, 0x4}, {0x6000, 0xffff1000, 0xe, 0x0, 0x0, 0x5, 0x0, 0xfd, 0x0, 0x3c}, {0x4, 0x0, 0xb, 0x78, 0x5, 0x80, 0x0, 0x0, 0x3, 0xff, 0x1}, {0x0, 0xeeee0000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x8}, {0x2, 0x6000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x70000, 0x8cc}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0x114, 0x0, 0xf801, 0x0, [0x80000001, 0x0, 0x81]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.421224293s ago: executing program 5 (id=857): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 1.403695214s ago: executing program 5 (id=858): r0 = open(&(0x7f0000000280)='.\x00', 0x10880, 0x6) unshare(0x20000400) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) 1.256198018s ago: executing program 5 (id=860): syz_usb_connect$uac1(0x0, 0x83, &(0x7f0000001c40)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71, 0x3, 0x1, 0xb, 0xe95a34303681b6b6, 0xf, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x5, 0x3}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x8f, 0x2, 0x80, 0x9, "", "89e1"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x6, 0xb, 0x3a, {0x7, 0x25, 0x1, 0x4, 0xcb, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x4, 0x3, 0x5, {0x7, 0x25, 0x1, 0x8, 0x0, 0x7fff}}}}}}}}]}}, &(0x7f0000001f40)={0xa, &(0x7f0000001d40)={0xa, 0x6, 0x300, 0x9, 0x9b, 0x6f, 0x10, 0x9}, 0x0, 0x0}) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) 879.203781ms ago: executing program 4 (id=872): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x34, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x10) 828.157233ms ago: executing program 4 (id=873): ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) preadv2(r0, &(0x7f0000000440)=[{&(0x7f0000000480)=""/238, 0xee}], 0x1, 0xdec5, 0x7, 0x12) 827.910063ms ago: executing program 4 (id=874): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000440)={'wg1\x00', &(0x7f0000000040)=@ethtool_gstrings={0x1b, 0x6, 0x5, "44896b5d3e"}}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d4"]) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 523.200283ms ago: executing program 3 (id=877): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000002c0)={0x3f, {0x0, 0x0, 0x0, 0x0, 0xc}}) 522.840493ms ago: executing program 3 (id=878): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200010, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xc41, 0x20) fallocate(r0, 0x20, 0x40f4, 0x3000000) 384.346507ms ago: executing program 3 (id=879): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180), 0x20001, 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000000)='9', 0x1}, {&(0x7f00000019c0)="b0", 0x1}], 0x2) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, 0x0) 331.436729ms ago: executing program 3 (id=880): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) 319.598689ms ago: executing program 3 (id=881): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x9}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xbc}}, 0x0) 256.266891ms ago: executing program 3 (id=882): syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001dc0), 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1ff) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$netlink(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0x40040c0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000e40)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x0, 0x270, 0xd0, 0x340, 0x0, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x270}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x1, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) 256.047791ms ago: executing program 4 (id=883): preadv(0xffffffffffffffff, 0x0, 0x0, 0x1006c, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@usrquota}, {@grpjquota}, {@nodelalloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") socket$inet(0x2, 0x2, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x22060, 0x10) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040), 0x0, 0x0, 0x0) fremovexattr(r0, &(0x7f0000000200)=@known='trusted.overlay.redirect\x00') 236.897612ms ago: executing program 4 (id=884): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x1e, 0x1003, 0x0, 0x4, 0x0}) 191.297964ms ago: executing program 4 (id=885): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001300)={0xfffffffffffffdcd, &(0x7f0000000580)={0x40, 0x15, 0x100, "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"}, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) r3 = syz_usb_connect$uac1(0x3, 0xa7, &(0x7f0000000000)=ANY=[@ANYBLOB="12015002000000206b1d01014000010203010902"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r3) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc"], 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r4 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x103d, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0xd8, 0x10, 0xc, {0x8, 0xb, 0x1, 0x2, 0x1, 0x1, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xe, 0x0, 0x3, {0xa, 0x25, 0x25, 0x7fffffff, 0xc, 0x180}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x6, 0x8000, 0x7, 0x2, 0x6, 0x4a, 0x9, 0x10}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7f, 0x4, 0x0, {0xa, 0x25, 0x25, 0x400, 0x8f, 0x2}}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r4, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$uac1(0x4, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$uac3(r4, &(0x7f0000000140)={0x14, &(0x7f0000000240)=ANY=[], 0x0}, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x640000) syz_usb_disconnect(r5) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1770, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x43, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0xfe, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x8}}}}}]}}]}}, 0x0) ioctl$EVIOCGBITSW(r5, 0x40095505, 0x0) syz_usb_connect(0x3, 0x2f3, &(0x7f0000000040)=ANY=[], 0x0) 112.161196ms ago: executing program 6 (id=886): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a40)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x7, 0x5, 0xfffffffb, 0x7, 0x1, 0x2, 0xfffffffc, 0x81}}}}]}, 0x58}}, 0x24040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xfff2}, {0xffff, 0xffff}, {0x2, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x2004805d}, 0x0) 83.533097ms ago: executing program 1 (id=887): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000002a00)={0x0, 0x0, &(0x7f00000029c0)={&(0x7f0000002940)=ANY=[@ANYBLOB="020a07090700000029bd7000f9dbdf2505001a00"], 0x38}}, 0x4) 75.146017ms ago: executing program 6 (id=888): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x2c, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) 50.068948ms ago: executing program 1 (id=889): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='stat\x00') read$FUSE(r0, &(0x7f0000003680)={0x2020}, 0x2020) read$hidraw(r0, &(0x7f0000000300)=""/230, 0xe6) 49.898128ms ago: executing program 6 (id=890): r0 = socket$can_raw(0x1d, 0x3, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$can_raw(r0, &(0x7f0000000200), 0x10) 49.357088ms ago: executing program 1 (id=891): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0xffffff1f, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41063}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041000}, 0x4004) 367.91µs ago: executing program 6 (id=892): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unshare(0x24020400) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) 176.08µs ago: executing program 1 (id=893): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f0000002380)="$eJzs3c9vFFUcAPDvzG5LKWgX40GMCTUeIDFsW0BB4gE8Gg8mkqAnXPuDNCxgaE0sIbHcTLyowZMnT2qiR6+GGPXkweiJ/8CQEFP4A2pmdras7W5LYcuQ9vNJZve9eSzvO02++9503nQC2LFGs5c0Yn9EfJ5EjBT704gYzEtDEYutf3dv6dpktiWxvPzOv0kkEXF36dpk+/9Kivc92Us1/2T89UvEM5W1/c4tXL3QaDanrxT1sfmLH47NLVw9PHuxcX76/PSlI6+OH5147diJV47d/9DQox3rwvH0sz/ffOO7G+e+/uPHEy98msSp2Fu0dR5Hv4zG6MrPpFM1It7rd2clqRTH0+04AQB48qQdc7j9MRKVvNQyEvXZUoMDAAAA+uKTiFgGAAAAtrnE+T8AAABsc+11AHeXrk22t3JXJACPy53TEVFr5X/7/v5WSzUW8/ehGIiI4XtJx51Brfu9a33ofzQifvjq+IFsiy26Dx/obvF6RDzXbfxP8vyvFX90Y3X+pxEx3of+R1fV5T88Pt3yv3VesHH+n+pD//IfAAAAAAAA+ufm6daF/LXX/9OV9T/R5fpfpcu1u4ex8fW/9HYfugG6uHM64vWOZ/vc68j/Qq1S1J7K1wMMJDOzzenxiHg6Ig7FwK6sPrFOH9/+dPLvXm2d6/+yLeu/vRawiON2ddf/PzPVmG88yjEDLXeuRzxf7Zb/ycr4n/RY//v2A/bx29mfZ3q1bZz/wFZZ/ibiYNfx//4T3ZL1n883ls8HxtqzgrXOvvjr9736l/9Qnmz8H14//2tJ5/M65zbfx/jw4fO92h52/j+YnMmfKjpY7Pu4MT9/ZSJiMHlr7f4jm48ZtqN2PrTzJcv/Qy91P/9fb/6fJdn7xbdEGhGN4j2rf7Cqz13nfv+iVzzGfyhPlv9Tmxr/N1/48t2lM736f7Dx/1g+ph8q9vj9H6zvQRO07DgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgSZJGxN5I0vpKOU3r9Yg9EfFsDKfNy3PzL89c/ujSVNYWUYuBdGa2OT0eESOtepLVJ/Ly/fqRVfWjEbEvIm6M7M7r9cnLzamyDx4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAVeyJibyRpPSLSvJym9Xqr7Z+RsqMDAAAA+qZWdgAAAADAlnP+DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAj2nfg5q0kIhZP7s63zGDRNlBqZMBWS8sOAChNpewAgNJUyw4AKI1zfCDZoH2oZ4sZBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBOcnD/zVtJRCye3J1vmcGibaDUyICtlpYdAFCaStkBAKWplh0AUBrn+ECyQftQzxYzCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICdZG7h6oVGszl9RWHdQjUinoAwFBQeU6HsbyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2s/8CAAD//yT3/f8=") creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x44000, 0x0) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1, 0x0, 0x0, 0x1) 93.17µs ago: executing program 6 (id=894): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) lseek(r0, 0x1, 0x3) 0s ago: executing program 6 (id=895): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {}, {0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x8ba4, 0x3, 0x100000a, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) kernel console output (not intermixed with test programs): IOS Google 04/18/2026 [ 77.185384][ T1698] Call Trace: [ 77.188662][ T1698] __dump_stack+0x21/0x24 [ 77.192985][ T1698] dump_stack_lvl+0x1a7/0x208 [ 77.197644][ T1698] ? show_regs_print_info+0x18/0x18 [ 77.202834][ T1698] ? fat_search_long+0x1026/0x1100 [ 77.207946][ T1698] ? kmem_cache_free+0x100/0x2d0 [ 77.212878][ T1698] dump_stack+0x15/0x1c [ 77.217016][ T1698] should_fail+0x3c1/0x510 [ 77.221428][ T1698] ? fat_alloc_inode+0x1d/0xa0 [ 77.226169][ T1698] __should_failslab+0xa4/0xe0 [ 77.230941][ T1698] should_failslab+0x9/0x20 [ 77.235420][ T1698] kmem_cache_alloc+0x3d/0x2d0 [ 77.240160][ T1698] ? fat_get_block_bmap+0x3a0/0x3a0 [ 77.245338][ T1698] fat_alloc_inode+0x1d/0xa0 [ 77.249904][ T1698] ? fat_get_block_bmap+0x3a0/0x3a0 [ 77.255077][ T1698] new_inode_pseudo+0x62/0x210 [ 77.259815][ T1698] new_inode+0x28/0x1e0 [ 77.263949][ T1698] fat_build_inode+0x1fe/0x3d0 [ 77.268695][ T1698] vfat_lookup+0x2c0/0x510 [ 77.273091][ T1698] ? setup+0xe0/0xe0 [ 77.277111][ T1698] ? __kasan_check_write+0x14/0x20 [ 77.282197][ T1698] ? lockref_get_not_dead+0xe6/0x1c0 [ 77.287461][ T1698] __lookup_slow+0x2b8/0x410 [ 77.292030][ T1698] ? lookup_one_len+0x2d0/0x2d0 [ 77.296852][ T1698] ? lookup_fast+0x316/0x740 [ 77.301419][ T1698] ? __kasan_check_write+0x14/0x20 [ 77.306502][ T1698] lookup_slow+0x57/0x70 [ 77.310720][ T1698] walk_component+0x325/0x460 [ 77.315369][ T1698] link_path_walk+0x5b2/0xba0 [ 77.320019][ T1698] ? handle_lookup_down+0x130/0x130 [ 77.325193][ T1698] filename_parentat+0x200/0x5e0 [ 77.330112][ T1698] ? kern_path_locked+0x3a0/0x3a0 [ 77.335123][ T1698] filename_create+0xd4/0x680 [ 77.339776][ T1698] ? __check_object_size+0x2f4/0x3c0 [ 77.345123][ T1698] ? strncpy_from_user+0x193/0x2e0 [ 77.350207][ T1698] ? kern_path_create+0x40/0x40 [ 77.355290][ T1698] ? getname_flags+0x206/0x500 [ 77.360053][ T1698] do_mkdirat+0x5e/0x340 [ 77.364274][ T1698] __x64_sys_mkdirat+0x7b/0x90 [ 77.369014][ T1698] do_syscall_64+0x31/0x40 [ 77.373418][ T1698] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 77.379288][ T1698] RIP: 0033:0x7f12bfd61e59 [ 77.383677][ T1698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.403259][ T1698] RSP: 002b:00007f12be7bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 77.411648][ T1698] RAX: ffffffffffffffda RBX: 00007f12bffdafa0 RCX: 00007f12bfd61e59 [ 77.419598][ T1698] RDX: 00000000000001ff RSI: 0000200000000140 RDI: ffffffffffffff9c [ 77.427544][ T1698] RBP: 00007f12be7bc090 R08: 0000000000000000 R09: 0000000000000000 [ 77.435495][ T1698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.443443][ T1698] R13: 00007f12bffdb038 R14: 00007f12bffdafa0 R15: 00007ffd8cfe2888 [ 77.545836][ T1697] EXT4-fs (loop4): Unrecognized mount option "fowner=00000000000000000000" or missing value [ 77.548274][ T1705] netlink: 8 bytes leftover after parsing attributes in process `syz.3.404'. [ 77.637455][ T397] rndis_host 7-1:253.0: skipping garbage [ 77.646932][ T397] usb 7-1: USB disconnect, device number 2 [ 77.726399][ T1712] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 78.072957][ T1707] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 78.082588][ T1707] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 78.092148][ T1707] EXT4-fs (loop3): Test dummy encryption mode enabled [ 78.481471][ T1707] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c098, mo2=0003] [ 78.805233][ T1707] System zones: 0-5 [ 78.821294][ T1707] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,jqfmt=vfsold,inode_readahead_blks=0x0000000000000100,test_dummy_encryption=v1,auto_da_alloc,delalloc,nogrpid,minixdf,,errors=continue [ 78.944020][ T1731] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 78.953019][ T1731] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.002917][ T24] kauditd_printk_skb: 25 callbacks suppressed [ 79.002928][ T24] audit: type=1400 audit(1779974305.947:347): avc: denied { ioctl } for pid=1716 comm="syz.4.410" path="/81/file1/file2" dev="loop4" ino=16 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 79.231029][ T1744] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 79.240860][ T332] udevd[332]: incorrect ext4 checksum on /dev/loop3 [ 79.241988][ T1744] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 79.257481][ T1744] EXT4-fs (loop6): Test dummy encryption mode enabled [ 79.267313][ T1744] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c098, mo2=0003] [ 79.347677][ T1748] overlayfs: './file0' not a directory [ 79.443611][ T1744] System zones: 0-5 [ 79.464737][ T1744] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,jqfmt=vfsold,inode_readahead_blks=0x0000000000000100,test_dummy_encryption=v1,auto_da_alloc,delalloc,nogrpid,minixdf,,errors=continue [ 79.486276][ T1751] netlink: 8 bytes leftover after parsing attributes in process `syz.4.416'. [ 79.497183][ T1707] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 79.523019][ T1707] EXT4-fs error (device loop3): ext4_dirty_inode:6181: inode #15: comm syz.3.405: mark_inode_dirty error [ 79.579343][ T1707] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 79.603588][ T1707] EXT4-fs error (device loop3): ext4_dirty_inode:6181: inode #15: comm syz.3.405: mark_inode_dirty error [ 79.620684][ T1707] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.405: Invalid block bitmap block 2 in block_group 0 [ 79.636300][ T1757] netlink: 'syz.5.417': attribute type 5 has an invalid length. [ 79.657091][ T1707] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 79.678549][ T1707] EXT4-fs error (device loop3): ext4_dirty_inode:6181: inode #15: comm syz.3.405: mark_inode_dirty error [ 79.702830][ T1707] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 79.714911][ T1707] EXT4-fs error (device loop3): ext4_alloc_file_blocks:4545: inode #15: comm syz.3.405: mark_inode_dirty error [ 79.793489][ T9] EXT4-fs error (device loop3): ext4_map_blocks:632: inode #3: block 49: comm kworker/u4:1: lblock 1 mapped to illegal pblock 49 (length 1) [ 79.818238][ T1733] F2FS-fs (loop1): Test dummy encryption mode enabled [ 79.849396][ T9] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 79.857663][ T9] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -117). Quota may get out of sync! [ 79.860201][ T1733] F2FS-fs (loop1): invalid crc value [ 79.875661][ T9] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 79.884479][ T9] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 79.888881][ T1733] F2FS-fs (loop1): Found nat_bits in checkpoint [ 79.892828][ T9] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -117). Quota may get out of sync! [ 79.940773][ T1733] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 79.951924][ T1733] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 79.959084][ T1733] F2FS-fs (loop1): Start checkpoint disabled! [ 79.965805][ T1733] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 80.019854][ T1763] EXT4-fs (loop5): Unrecognized mount option "fowner=00000000000000000000" or missing value [ 80.028893][ T24] audit: type=1400 audit(1779974306.892:348): avc: denied { connect } for pid=1725 comm="syz.1.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 80.050995][ T24] audit: type=1400 audit(1779974306.892:349): avc: denied { write } for pid=1725 comm="syz.1.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 80.091652][ T9] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 80.130848][ T397] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 80.437713][ T1755] F2FS-fs (loop4): Found nat_bits in checkpoint [ 80.475068][ T1755] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 80.498779][ T1755] F2FS-fs (loop4): lookup inode (7) has corrupted xattr [ 80.506183][ T1755] F2FS-fs (loop4): lookup inode (7) has corrupted xattr [ 80.513268][ T5] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 80.521101][ T1755] xt_hashlimit: size too large, truncated to 1048576 [ 80.522536][ T397] usb 7-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 80.539021][ T397] usb 7-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 255, setting to 8 [ 80.550222][ T397] usb 7-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 80.611790][ T397] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.672071][ T1761] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 81.113128][ T1784] EXT4-fs (loop1): dax option not supported [ 81.349473][ T24] audit: type=1400 audit(1779974308.146:350): avc: denied { read } for pid=1789 comm="syz.5.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 81.395005][ T1761] FAT-fs (loop6): Directory bread(block 64) failed [ 81.414728][ T1761] FAT-fs (loop6): Directory bread(block 65) failed [ 81.559156][ T1761] FAT-fs (loop6): Directory bread(block 66) failed [ 81.655169][ T5] usb 4-1: Using ep0 maxpacket: 16 [ 81.662502][ T1761] FAT-fs (loop6): Directory bread(block 67) failed [ 81.687857][ T1761] FAT-fs (loop6): Directory bread(block 68) failed [ 81.694760][ T1761] FAT-fs (loop6): Directory bread(block 69) failed [ 81.703181][ T1761] FAT-fs (loop6): Directory bread(block 70) failed [ 81.710056][ T1761] FAT-fs (loop6): Directory bread(block 71) failed [ 81.717866][ T1761] FAT-fs (loop6): Directory bread(block 72) failed [ 81.724827][ T1761] FAT-fs (loop6): Directory bread(block 73) failed [ 81.815638][ T5] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 81.831593][ T5] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.842408][ T5] usb 4-1: config 0 has no interface number 0 [ 81.848824][ T5] usb 4-1: New USB device found, idVendor=0bd3, idProduct=05f4, bcdDevice= 0.5b [ 81.857941][ T5] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.858177][ T397] usb 7-1: string descriptor 0 read error: -71 [ 81.884593][ T5] usb 4-1: config 0 descriptor?? [ 81.888106][ T397] hub 7-1:32.0: USB hub found [ 81.975848][ T397] hub 7-1:32.0: config failed, can't read hub descriptor (err -22) [ 81.987401][ T1799] exfat: Unknown parameter '' [ 82.181432][ T397] usb 7-1: USB disconnect, device number 3 [ 82.194786][ T1770] udc-core: couldn't find an available UDC or it's busy [ 82.325363][ T1770] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 82.745757][ T5] uvcvideo: Found UVC 0.00 device (0bd3:05f4) [ 82.752793][ T5] uvcvideo: No valid video chain found. [ 82.788468][ T302] udevd[302]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:32.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 83.051741][ T1804] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 83.123660][ T1804] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 83.176714][ T1804] EXT4-fs (loop4): Test dummy encryption mode enabled [ 83.219981][ T1804] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c098, mo2=0003] [ 83.242471][ T1804] System zones: 0-5 [ 83.248593][ T1804] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,jqfmt=vfsold,inode_readahead_blks=0x0000000000000100,test_dummy_encryption=v1,auto_da_alloc,delalloc,nogrpid,minixdf,,errors=continue [ 83.284750][ T1822] EXT4-fs (loop1): Ignoring removed oldalloc option [ 83.307289][ T1823] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 83.334961][ T1822] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 83.359397][ T1823] ext4 filesystem being mounted at /46/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 83.412149][ T1822] EXT4-fs (loop1): 1 truncate cleaned up [ 83.433758][ T1822] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000008,errors=continue,inode_readahead_blks=0x0000000000080000,stripe=0x00000000000000c0,sysvgroups,oldalloc,,errors=continue [ 83.579336][ T1831] exfat: Deprecated parameter 'namecase' [ 83.594967][ T1831] exfat: Deprecated parameter 'utf8' [ 83.600448][ T1831] exfat: Unknown parameter 'iocharsetà' [ 83.782864][ T24] audit: type=1400 audit(1779974310.411:351): avc: denied { write } for pid=1821 comm="syz.6.435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 83.973964][ C0] hrtimer: interrupt took 16732 ns [ 84.038132][ T5] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 84.470278][ T397] usb 4-1: USB disconnect, device number 12 [ 85.338710][ T1860] EXT4-fs (loop4): Test dummy encryption mode enabled [ 85.481056][ T1860] EXT4-fs (loop4): Test dummy encryption mode enabled [ 85.499469][ T1857] EXT4-fs (loop5): Unrecognized mount option "fowner=00000000000000000000" or missing value [ 85.516673][ T5] usb 2-1: Using ep0 maxpacket: 8 [ 85.520522][ T1860] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 85.534955][ T1860] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable=0x0000000000000000,dioread_nolock,jqfmt=vfsv1,nojournal_checksum,minixdf,barrier=0x0000000000000a18,errors=remount-ro,lazytime,test_dummy_encryption,min_batch_time=0x0000000000000004, [ 85.615192][ T1860] EXT4-fs error (device loop4): ext4_add_entry:2442: inode #2: comm syz.4.445: Directory hole found for htree leaf block 0 [ 85.628389][ T1860] EXT4-fs (loop4): Remounting filesystem read-only [ 85.641061][ T5] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 85.649292][ T5] usb 2-1: config 0 has no interface number 0 [ 85.755855][ T1866] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 85.766559][ T1866] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 85.776295][ T1866] EXT4-fs (loop3): Test dummy encryption mode enabled [ 85.784509][ T1866] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c098, mo2=0003] [ 85.792651][ T1866] System zones: 0-5 [ 85.797108][ T1872] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 85.802485][ T1866] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,jqfmt=vfsold,inode_readahead_blks=0x0000000000000100,test_dummy_encryption=v1,auto_da_alloc,delalloc,nogrpid,minixdf,,errors=continue [ 85.806964][ T1872] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 85.837318][ T1872] EXT4-fs (loop4): Test dummy encryption mode enabled [ 85.847594][ T1872] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c098, mo2=0003] [ 85.856409][ T1872] System zones: 0-5 [ 85.869810][ T1881] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 85.886503][ T1872] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,jqfmt=vfsold,inode_readahead_blks=0x0000000000000100,test_dummy_encryption=v1,auto_da_alloc,delalloc,nogrpid,minixdf,,errors=continue [ 85.974935][ T1875] EXT4-fs (loop6): Ignoring removed nobh option [ 85.981872][ T5] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 85.990993][ T5] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.036423][ T5] usb 2-1: Product: syz [ 86.040623][ T5] usb 2-1: Manufacturer: syz [ 86.045254][ T5] usb 2-1: SerialNumber: syz [ 86.047201][ T1875] EXT4-fs (loop6): Mount option "noacl" will be removed by 3.5 [ 86.047201][ T1875] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 86.047201][ T1875] [ 86.067019][ T5] usb 2-1: config 0 descriptor?? [ 86.068019][ T1875] EXT4-fs (loop6): Ignoring removed orlov option [ 86.110703][ T1875] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobh,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,auto_da_alloc=0x000000000000d25d,lazytime,noacl,minixdf,orlov,,errors=continue [ 86.203802][ T24] audit: type=1400 audit(1779974312.675:352): avc: denied { mounton } for pid=1874 comm="syz.6.449" path=2F34392F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F627573 dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 86.240991][ T24] audit: type=1400 audit(1779974312.675:353): avc: denied { setattr } for pid=1874 comm="syz.6.449" name="work" dev="loop6" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 86.267801][ T24] audit: type=1400 audit(1779974312.675:354): avc: denied { remove_name } for pid=1874 comm="syz.6.449" name="#3" dev="loop6" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 86.290113][ T24] audit: type=1400 audit(1779974312.675:355): avc: denied { rename } for pid=1874 comm="syz.6.449" name="#3" dev="loop6" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 86.311838][ T24] audit: type=1400 audit(1779974312.675:356): avc: denied { unlink } for pid=1874 comm="syz.6.449" name="#3" dev="loop6" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 86.334191][ T24] audit: type=1400 audit(1779974312.675:357): avc: denied { unlink } for pid=1874 comm="syz.6.449" name="#4" dev="loop6" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 86.355900][ T24] audit: type=1400 audit(1779974312.675:358): avc: denied { setattr } for pid=1874 comm="syz.6.449" name="#20" dev="loop6" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 86.380377][ T5] uvcvideo: Found UVC 0.04 device syz (046d:08c3) [ 86.386865][ T5] uvcvideo 2-1:0.31: Entity type for entity င was not initialized! [ 86.401912][ T24] audit: type=1400 audit(1779974312.675:359): avc: denied { link } for pid=1874 comm="syz.6.449" name="#20" dev="loop6" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 86.424022][ T5] uvcvideo: Failed to create links for entity 5 [ 86.430299][ T5] uvcvideo: Failed to register entities (-22). [ 86.446008][ T24] audit: type=1400 audit(1779974312.685:360): avc: denied { unlink } for pid=1033 comm="syz-executor" name=66696C6507 dev="loop6" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 86.469022][ T24] audit: type=1400 audit(1779974312.760:361): avc: denied { rmdir } for pid=1033 comm="syz-executor" name="work" dev="loop6" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 86.469029][ T1872] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 86.470247][ T1872] EXT4-fs error (device loop4): ext4_dirty_inode:6181: inode #15: comm syz.4.448: mark_inode_dirty error [ 86.511669][ T1872] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 86.517276][ T428] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 86.521631][ T1872] EXT4-fs error (device loop4): ext4_dirty_inode:6181: inode #15: comm syz.4.448: mark_inode_dirty error [ 86.540054][ T1872] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.448: Invalid block bitmap block 2 in block_group 0 [ 86.553703][ T1872] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 86.563383][ T1872] EXT4-fs error (device loop4): ext4_dirty_inode:6181: inode #15: comm syz.4.448: mark_inode_dirty error [ 86.575098][ T1872] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 86.584842][ T1872] EXT4-fs error (device loop4): ext4_alloc_file_blocks:4545: inode #15: comm syz.4.448: mark_inode_dirty error [ 86.624034][ T112] EXT4-fs error (device loop4): ext4_map_blocks:632: inode #3: block 49: comm kworker/u4:2: lblock 1 mapped to illegal pblock 49 (length 1) [ 86.784529][ T428] usb 6-1: Using ep0 maxpacket: 8 [ 86.912972][ T428] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.952963][ T428] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 86.966110][ T428] usb 6-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 86.977950][ T428] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.986920][ T555] usb 2-1: USB disconnect, device number 8 [ 86.992993][ T428] usb 6-1: config 0 descriptor?? [ 87.034687][ T1912] netlink: 20 bytes leftover after parsing attributes in process `syz.6.457'. [ 87.168373][ T1918] EXT4-fs (loop3): Ignoring removed nobh option [ 87.192143][ T1918] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,delalloc,nojournal_checksum,nobh,bsddf,max_dir_size_kb=0x00000000000007b1,i_version,data_err=ignore,max_batch_time=0x0000000000000003,user_xattr,grpid,,errors=continue [ 87.579484][ T1918] netlink: 20 bytes leftover after parsing attributes in process `syz.3.460'. [ 88.033868][ T428] cypress 0003:04B4:DE61.0001: invalid report_size 60495 [ 88.054469][ T1929] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 88.065131][ T428] cypress 0003:04B4:DE61.0001: item 0 2 1 7 parsing failed [ 88.074838][ T428] cypress 0003:04B4:DE61.0001: parse failed [ 88.082007][ T1929] EXT4-fs (loop6): 1 truncate cleaned up [ 88.087732][ T1929] EXT4-fs (loop6): mounted filesystem without journal. Opts: barrier=0x0000000000000101,errors=remount-ro, [ 88.099493][ T428] cypress: probe of 0003:04B4:DE61.0001 failed with error -22 [ 88.290756][ T1947] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 88.416372][ T1945] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a800e018, mo2=0002] [ 88.429682][ T1960] netlink: 68 bytes leftover after parsing attributes in process `syz.1.464'. [ 88.440706][ T1945] System zones: 0-5 [ 88.446675][ T1945] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,nodioread_nolock,,errors=continue [ 88.469750][ T1957] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 88.505898][ T1957] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 88.517196][ T1957] EXT4-fs (loop6): Test dummy encryption mode enabled [ 88.585645][ T1957] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c098, mo2=0003] [ 88.593826][ T1957] System zones: 0-5 [ 88.598382][ T1957] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,jqfmt=vfsold,inode_readahead_blks=0x0000000000000100,test_dummy_encryption=v1,auto_da_alloc,delalloc,nogrpid,minixdf,,errors=continue [ 88.711645][ T1963] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 88.882481][ T302] udevd[302]: incorrect ext4 checksum on /dev/loop6 [ 88.901000][ T1957] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 88.910635][ T1957] EXT4-fs error (device loop6): ext4_dirty_inode:6181: inode #15: comm syz.6.469: mark_inode_dirty error [ 88.922390][ T1957] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 88.932126][ T1957] EXT4-fs error (device loop6): ext4_dirty_inode:6181: inode #15: comm syz.6.469: mark_inode_dirty error [ 88.943698][ T1957] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:476: comm syz.6.469: Invalid block bitmap block 2 in block_group 0 [ 88.957310][ T1957] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 88.966957][ T1957] EXT4-fs error (device loop6): ext4_dirty_inode:6181: inode #15: comm syz.6.469: mark_inode_dirty error [ 88.978388][ T1957] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 88.988015][ T1957] EXT4-fs error (device loop6): ext4_alloc_file_blocks:4545: inode #15: comm syz.6.469: mark_inode_dirty error [ 89.014187][ T112] EXT4-fs error (device loop6): ext4_map_blocks:632: inode #3: block 49: comm kworker/u4:2: lblock 1 mapped to illegal pblock 49 (length 1) [ 89.331167][ T1975] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0x2524ff13, utbl_chksum : 0xe619d30d) [ 89.397201][ T1975] Module has invalid ELF structures [ 89.420493][ T555] usb 6-1: USB disconnect, device number 5 [ 89.704000][ T1986] EXT4-fs (loop5): Test dummy encryption mode enabled [ 89.777962][ T1986] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8843c01c, mo2=0003] [ 89.864821][ T1986] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,delalloc,bsdgroups,test_dummy_encryption,errors=continue,bsddf,noauto_da_alloc,noblock_validity,,errors=continue [ 90.225408][ T555] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 90.481869][ T1999] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 90.491305][ T1999] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 90.500887][ T1999] EXT4-fs (loop1): Test dummy encryption mode enabled [ 90.508786][ T1999] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c098, mo2=0003] [ 90.517004][ T1999] System zones: 0-5 [ 90.523883][ T1999] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,jqfmt=vfsold,inode_readahead_blks=0x0000000000000100,test_dummy_encryption=v1,auto_da_alloc,delalloc,nogrpid,minixdf,,errors=continue [ 90.653304][ T1995] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 90.680976][ T1995] EXT4-fs (loop6): 1 truncate cleaned up [ 90.686830][ T1995] EXT4-fs (loop6): mounted filesystem without journal. Opts: barrier=0x0000000000000101,errors=remount-ro, [ 90.727645][ T555] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 90.738143][ T555] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 90.764567][ T2004] EXT4-fs (loop3): Unrecognized mount option "fowner=00000000000000000000" or missing value [ 90.799699][ T1999] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 90.816225][ T1999] EXT4-fs error (device loop1): ext4_dirty_inode:6181: inode #15: comm syz.1.479: mark_inode_dirty error [ 90.827914][ T1999] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 90.837788][ T1999] EXT4-fs error (device loop1): ext4_dirty_inode:6181: inode #15: comm syz.1.479: mark_inode_dirty error [ 90.853593][ T1999] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.479: Invalid block bitmap block 2 in block_group 0 [ 90.867597][ T1999] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 90.877314][ T1999] EXT4-fs error (device loop1): ext4_dirty_inode:6181: inode #15: comm syz.1.479: mark_inode_dirty error [ 90.888904][ T1999] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 90.898624][ T1999] EXT4-fs error (device loop1): ext4_alloc_file_blocks:4545: inode #15: comm syz.1.479: mark_inode_dirty error [ 90.952303][ T430] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 90.994929][ T555] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 91.005050][ T555] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.063074][ T555] usb 5-1: Product: syz [ 91.067495][ T555] usb 5-1: Manufacturer: syz [ 91.073285][ T555] usb 5-1: SerialNumber: syz [ 91.144535][ T394] EXT4-fs error (device loop1): ext4_map_blocks:632: inode #3: block 49: comm kworker/u4:5: lblock 1 mapped to illegal pblock 49 (length 1) [ 91.219172][ T430] usb 6-1: Using ep0 maxpacket: 16 [ 91.304287][ T2019] netlink: 68 bytes leftover after parsing attributes in process `syz.6.482'. [ 91.358145][ T430] usb 6-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 191, changing to 11 [ 91.369479][ T430] usb 6-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 91.433387][ T430] usb 6-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 91.452694][ T430] usb 6-1: config 1 interface 0 has no altsetting 0 [ 91.461079][ T2021] EXT4-fs (loop3): Ignoring removed bh option [ 91.467280][ T2021] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 91.477062][ T2021] EXT4-fs error (device loop3): ext4_iget_extra_inode:4692: inode #15: comm syz.3.484: corrupted in-inode xattr [ 91.489125][ T2021] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.484: couldn't read orphan inode 15 (err -117) [ 91.500974][ T430] usb 6-1: language id specifier not provided by device, defaulting to English [ 91.501237][ T2021] EXT4-fs (loop3): mounted filesystem without journal. Opts: sysvgroups,max_dir_size_kb=0x0000000000000009,bh,noload,data_err=ignore,usrjquota=,,errors=continue [ 91.635968][ T430] usb 6-1: New USB device found, idVendor=056a, idProduct=010d, bcdDevice= 0.40 [ 91.645101][ T430] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.653521][ T430] usb 6-1: Product: syz [ 91.657925][ T430] usb 6-1: Manufacturer: 늮ï¡ä˜½æ¤¨î•±ï‚–쯇ꮚ放愱ꀕꀞå뫻鳜㲷焔섘蘽Ṡê¤âµ¡ê©Žê‘†è€›å¼á¥¤ïƒƒä°žî»¾ã­‰î벡ᅤ갺枳⧌䬺艤流籖甪ắ殛é¾ëƒšæŠœâ¯éŽ§æ”½ì¬íœ±è‚±äŽ˜ì³“èŽè›¿ [ 91.679345][ T430] usb 6-1: SerialNumber: syz [ 91.700076][ T2009] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 91.777363][ T2029] EXT4-fs (loop3): Test dummy encryption mode enabled [ 91.784374][ T2029] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 91.795608][ T2029] EXT4-fs error (device loop3): ext4_orphan_get:1427: comm syz.3.486: bad orphan inode 131083 [ 91.806175][ T2029] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,user_xattr,,errors=continue [ 91.937379][ T2009] udc-core: couldn't find an available UDC or it's busy [ 91.944393][ T2009] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 92.170303][ T25] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 92.330658][ T430] usbhid 6-1:1.0: can't add hid device: -71 [ 92.336923][ T430] usbhid: probe of 6-1:1.0 failed with error -71 [ 92.353787][ T1993] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2320 sclass=netlink_route_socket pid=1993 comm=syz.4.477 [ 92.402670][ T430] usb 6-1: USB disconnect, device number 6 [ 92.476342][ T2039] EXT4-fs (loop6): dax option not supported [ 92.554946][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 92.726069][ T25] usb 4-1: unable to get BOS descriptor or descriptor too short [ 92.828944][ T2036] EXT4-fs (loop1): Unrecognized mount option "fowner=00000000000000000000" or missing value [ 92.843821][ T25] usb 4-1: config 42 has an invalid interface number: 178 but max is 0 [ 92.933142][ T25] usb 4-1: config 42 has no interface number 0 [ 93.011807][ T25] usb 4-1: config 42 interface 178 has no altsetting 0 [ 93.019943][ T1993] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 93.030719][ T1993] EXT4-fs (loop4): Test dummy encryption mode enabled [ 93.042227][ T1993] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c198, mo2=0003] [ 93.050405][ T1993] System zones: 0-5 [ 93.054866][ T1993] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,inlinecrypt,debug,test_dummy_encryption=v1,norecovery,delalloc,nogrpid,minixdf,,errors=continue [ 93.142731][ T555] cdc_ncm 5-1:1.0: bind() failure [ 93.164309][ T555] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 93.279254][ T555] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 93.290422][ T555] usb 5-1: USB disconnect, device number 9 [ 93.616509][ T2053] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 93.869490][ T25] usb 4-1: string descriptor 0 read error: -22 [ 93.956747][ T25] usb 4-1: New USB device found, idVendor=045e, idProduct=00f8, bcdDevice=e0.e5 [ 94.072607][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.166699][ T2059] netlink: 'syz.1.492': attribute type 1 has an invalid length. [ 94.176914][ T2061] netlink: 'syz.6.493': attribute type 1 has an invalid length. [ 94.196094][ T2061] netlink: 1 bytes leftover after parsing attributes in process `syz.6.493'. [ 94.222812][ T25] uvcvideo: Found UVC 0.00 device (045e:00f8) [ 94.449949][ T2065] netlink: 68 bytes leftover after parsing attributes in process `syz.6.494'. [ 94.489115][ T555] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 94.510702][ T25] uvcvideo: Failed to query (GET_INFO) UVC control 2 on unit 1: -71 (exp. 1). [ 94.532213][ T25] uvcvideo: Failed to query (GET_INFO) UVC control 3 on unit 1: -71 (exp. 1). [ 94.541288][ T25] uvcvideo: No valid video chain found. [ 94.580555][ T25] usb 4-1: USB disconnect, device number 13 [ 94.805113][ T2078] netlink: 96 bytes leftover after parsing attributes in process `syz.5.499'. [ 94.809698][ T555] usb 2-1: Using ep0 maxpacket: 8 [ 94.899174][ T2083] netlink: 68 bytes leftover after parsing attributes in process `syz.6.497'. [ 94.980800][ T555] usb 2-1: config 1 interface 0 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 16 [ 94.991091][ T555] usb 2-1: config 1 interface 0 has no altsetting 0 [ 95.227985][ T2085] EXT4-fs (loop5): dax option not supported [ 95.269867][ T555] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 95.338281][ T555] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.397030][ T555] usb 2-1: Product: syz [ 95.415027][ T555] usb 2-1: Manufacturer: syz [ 95.434712][ T555] usb 2-1: SerialNumber: syz [ 95.493815][ T2059] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 95.866186][ T2057] udc-core: couldn't find an available UDC or it's busy [ 95.873408][ T2057] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 95.966915][ T555] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 13 proto 2 vid 0x0525 pid 0xA4A8 [ 96.131977][ T555] usb 2-1: USB disconnect, device number 9 [ 96.138829][ T555] usblp0: removed [ 96.170076][ T2094] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 96.184951][ T2094] EXT4-fs (loop3): Ignoring removed oldalloc option [ 96.194427][ T2094] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 96.205391][ T2094] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a000c018, mo2=0002] [ 96.213479][ T2094] System zones: 1-12 [ 96.217748][ T2094] EXT4-fs (loop3): 1 truncate cleaned up [ 96.223401][ T2094] EXT4-fs (loop3): mounted filesystem without journal. Opts: data=journal,nobarrier,bsddf,stripe=0x0000000000003ffd,nomblk_io_submit,debug,oldalloc,auto_da_alloc,,errors=continue [ 96.274317][ T2097] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 96.289339][ T2097] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 96.299232][ T2097] EXT4-fs (loop6): Test dummy encryption mode enabled [ 96.308555][ T2094] netlink: 124 bytes leftover after parsing attributes in process `syz.3.502'. [ 96.317955][ T2094] netlink: 124 bytes leftover after parsing attributes in process `syz.3.502'. [ 96.327492][ T2094] netlink: 24 bytes leftover after parsing attributes in process `syz.3.502'. [ 96.337346][ T2097] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c098, mo2=0003] [ 96.364487][ T2097] System zones: 0-5 [ 96.369193][ T2097] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,jqfmt=vfsold,inode_readahead_blks=0x0000000000000100,test_dummy_encryption=v1,auto_da_alloc,delalloc,nogrpid,minixdf,,errors=continue [ 96.653258][ T2106] exFAT-fs (loop3): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d) [ 97.475640][ T2115] netlink: 96 bytes leftover after parsing attributes in process `syz.1.510'. [ 97.534257][ T2111] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 97.566737][ T2111] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 97.576312][ T2097] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 97.653639][ T2111] EXT4-fs (loop4): Test dummy encryption mode enabled [ 97.663336][ T2097] EXT4-fs error (device loop6): ext4_dirty_inode:6181: inode #15: comm syz.6.505: mark_inode_dirty error [ 97.762745][ T2111] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c098, mo2=0003] [ 97.803520][ T2111] System zones: 0-5 [ 97.810859][ T2111] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,jqfmt=vfsold,inode_readahead_blks=0x0000000000000100,test_dummy_encryption=v1,auto_da_alloc,delalloc,nogrpid,minixdf,,errors=continue [ 97.868018][ T2097] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 98.033700][ T2120] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 98.072666][ T2097] EXT4-fs error (device loop6): ext4_dirty_inode:6181: inode #15: comm syz.6.505: mark_inode_dirty error [ 98.187596][ T2120] incfs_lookup_dentry err:-117 [ 98.243831][ T2097] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:476: comm syz.6.505: Invalid block bitmap block 2 in block_group 0 [ 98.262006][ T2120] incfs: Can't find or create .index dir in ./file0 [ 98.343132][ T2120] incfs: mount failed -117 [ 98.433043][ T2097] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 98.479189][ T2097] EXT4-fs error (device loop6): ext4_dirty_inode:6181: inode #15: comm syz.6.505: mark_inode_dirty error [ 98.490682][ T2097] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 98.500306][ T2097] EXT4-fs error (device loop6): ext4_alloc_file_blocks:4545: inode #15: comm syz.6.505: mark_inode_dirty error [ 98.594705][ T394] EXT4-fs error (device loop6): ext4_map_blocks:632: inode #3: block 49: comm kworker/u4:5: lblock 1 mapped to illegal pblock 49 (length 1) [ 98.611707][ T2130] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 98.626168][ T2130] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 98.641084][ T302] udevd[302]: incorrect ext4 checksum on /dev/loop4 [ 98.646099][ T394] __quota_error: 19 callbacks suppressed [ 98.646107][ T394] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 98.661663][ T2130] EXT4-fs (loop1): Test dummy encryption mode enabled [ 98.674947][ T302] udevd[302]: incorrect ext4 checksum on /dev/loop4 [ 98.678523][ T394] Quota error (device loop6): dquot_write_dquot: Can't write quota structure (error -117). Quota may get out of sync! [ 98.689116][ T2130] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c098, mo2=0003] [ 98.695363][ T394] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 98.704473][ T2130] System zones: [ 98.710731][ T394] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 98.714998][ T2130] 0-5 [ 98.725752][ T2130] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,jqfmt=vfsold,inode_readahead_blks=0x0000000000000100,test_dummy_encryption=v1,auto_da_alloc,delalloc,nogrpid,minixdf,,errors=continue [ 98.735372][ T394] Quota error (device loop6): dquot_write_dquot: Can't write quota structure (error -117). Quota may get out of sync! [ 98.746509][ T2111] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 98.793579][ T2111] EXT4-fs error (device loop4): ext4_dirty_inode:6181: inode #15: comm syz.4.509: mark_inode_dirty error [ 98.816982][ T2111] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 98.837667][ T2137] netlink: 68 bytes leftover after parsing attributes in process `syz.3.514'. [ 98.847911][ T2111] EXT4-fs error (device loop4): ext4_dirty_inode:6181: inode #15: comm syz.4.509: mark_inode_dirty error [ 98.861207][ T2111] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.509: Invalid block bitmap block 2 in block_group 0 [ 98.876022][ T2111] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 98.885826][ T2111] EXT4-fs error (device loop4): ext4_dirty_inode:6181: inode #15: comm syz.4.509: mark_inode_dirty error [ 98.907301][ T2139] EXT4-fs (loop6): Test dummy encryption mode enabled [ 98.922012][ T2111] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 98.934889][ T2111] EXT4-fs error (device loop4): ext4_alloc_file_blocks:4545: inode #15: comm syz.4.509: mark_inode_dirty error [ 98.955921][ T433] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 98.958941][ T2139] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue [ 99.023758][ T9] EXT4-fs error (device loop4): ext4_map_blocks:632: inode #3: block 49: comm kworker/u4:1: lblock 1 mapped to illegal pblock 49 (length 1) [ 99.039403][ T2139] ext4 filesystem being mounted at /65/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 99.050244][ T302] udevd[302]: incorrect ext4 checksum on /dev/loop1 [ 99.064002][ T9] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 99.100250][ T9] Quota error (device loop4): dquot_write_dquot: Can't write quota structure (error -117). Quota may get out of sync! [ 99.113141][ T2130] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 99.123517][ T2130] EXT4-fs error (device loop1): ext4_dirty_inode:6181: inode #15: comm syz.1.515: mark_inode_dirty error [ 99.137690][ T9] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 99.146452][ T2130] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 99.146607][ T9] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 99.164795][ T2130] EXT4-fs error (device loop1): ext4_dirty_inode:6181: inode #15: comm syz.1.515: mark_inode_dirty error [ 99.164911][ T9] Quota error (device loop4): dquot_write_dquot: Can't write quota structure (error -117). Quota may get out of sync! [ 99.191051][ T2130] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.515: Invalid block bitmap block 2 in block_group 0 [ 99.210230][ T2130] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 99.219846][ T2130] EXT4-fs error (device loop1): ext4_dirty_inode:6181: inode #15: comm syz.1.515: mark_inode_dirty error [ 99.231258][ T2130] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 99.233689][ T433] usb 6-1: Using ep0 maxpacket: 32 [ 99.247552][ T2130] EXT4-fs error (device loop1): ext4_alloc_file_blocks:4545: inode #15: comm syz.1.515: mark_inode_dirty error [ 99.287196][ T9] EXT4-fs error (device loop1): ext4_map_blocks:632: inode #3: block 49: comm kworker/u4:1: lblock 1 mapped to illegal pblock 49 (length 1) [ 99.409958][ T2151] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a800e018, mo2=0002] [ 99.434486][ T2151] System zones: 0-5 [ 99.439158][ T2151] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,nodioread_nolock,,errors=continue [ 99.458205][ T433] usb 6-1: unable to get BOS descriptor or descriptor too short [ 99.560677][ T433] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.572152][ T5] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 99.579723][ T433] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 99.724794][ T2163] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 99.846265][ T2160] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a800e018, mo2=0002] [ 99.854507][ T2160] System zones: 0-5 [ 99.859001][ T2160] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,nodioread_nolock,,errors=continue [ 99.869361][ T430] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 99.981728][ T5] usb 7-1: Using ep0 maxpacket: 32 [ 99.986912][ T433] usb 6-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 99.996096][ T433] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.004391][ T433] usb 6-1: Product: syz [ 100.261361][ T433] usb 6-1: Manufacturer: syz [ 100.265996][ T433] usb 6-1: SerialNumber: syz [ 100.287569][ T2165] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 100.355902][ T430] usb 4-1: Using ep0 maxpacket: 8 [ 100.366467][ T5] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.377446][ T5] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.387179][ T5] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 100.396303][ T5] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.405018][ T5] usb 7-1: config 0 descriptor?? [ 100.522134][ T430] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.533194][ T430] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 100.547330][ T430] usb 4-1: New USB device found, idVendor=046d, idProduct=c20a, bcdDevice= 0.00 [ 100.556608][ T430] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.584159][ T430] usb 4-1: config 0 descriptor?? [ 100.603868][ T2168] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 100.615096][ T2168] EXT4-fs (loop1): 1 truncate cleaned up [ 100.620726][ T2168] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier=0x0000000000000101,errors=remount-ro, [ 100.708458][ T433] usb 6-1: 1:1 : no or invalid class specific endpoint descriptor [ 100.716306][ T433] usb 6-1: 1:1 : sample bitwidth 41 in over sample bytes 2 [ 100.723561][ T433] usb 6-1: 1:1 : invalid channels 0 [ 100.740591][ T433] usb 6-1: 0:2 : does not exist [ 100.756307][ T433] usb 6-1: USB disconnect, device number 7 [ 100.763121][ T2173] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 100.774641][ T2173] incfs_lookup_dentry err:-117 [ 100.786648][ T2173] incfs: Can't find or create .index dir in ./file0 [ 100.793558][ T2173] incfs: mount failed -117 [ 100.924020][ T5] savu 0003:1E7D:2D5A.0002: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0 [ 101.284597][ T555] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 101.353478][ T430] logitech 0003:046D:C20A.0003: ignoring exceeding usage max [ 101.390984][ T2183] EXT4-fs (loop4): dax option not supported [ 101.496126][ T430] logitech 0003:046D:C20A.0003: unknown main item tag 0x0 [ 101.552626][ T555] usb 2-1: Using ep0 maxpacket: 16 [ 101.648857][ T430] logitech 0003:046D:C20A.0003: unknown main item tag 0x0 [ 101.680964][ T555] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 101.696893][ T555] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.858583][ T430] logitech 0003:046D:C20A.0003: unknown main item tag 0x0 [ 101.866086][ T430] logitech 0003:046D:C20A.0003: unknown main item tag 0xe [ 101.873256][ T555] usb 2-1: config 0 has no interface number 0 [ 101.879447][ T555] usb 2-1: New USB device found, idVendor=0bd3, idProduct=05f4, bcdDevice= 0.5b [ 101.888575][ T430] logitech 0003:046D:C20A.0003: unknown main item tag 0x0 [ 101.895872][ T555] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.904634][ T555] usb 2-1: config 0 descriptor?? [ 101.910423][ T25] usb 7-1: USB disconnect, device number 4 [ 101.916736][ T430] logitech 0003:046D:C20A.0003: hidraw1: USB HID v0.08 Device [HID 046d:c20a] on usb-dummy_hcd.3-1/input0 [ 101.928538][ T430] logitech 0003:046D:C20A.0003: no inputs found [ 101.941005][ T430] usb 4-1: USB disconnect, device number 14 [ 101.948547][ T555] uvcvideo: Found UVC 0.00 device (0bd3:05f4) [ 101.954134][ T2188] fido_id[2188]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 101.955508][ T555] uvcvideo: No valid video chain found. [ 102.175280][ T2176] udc-core: couldn't find an available UDC or it's busy [ 102.182966][ T2176] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 102.568694][ T2200] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,noauto_da_alloc,,errors=continue [ 102.589220][ T2200] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.784335][ T2207] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 102.827117][ T2207] incfs_lookup_dentry err:-117 [ 102.892877][ T2213] netlink: 68 bytes leftover after parsing attributes in process `syz.3.532'. [ 102.905872][ T2207] incfs: Can't find or create .index dir in ./file0 [ 102.952501][ T2207] incfs: mount failed -117 [ 103.092322][ T2216] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 103.113237][ T2216] FAULT_INJECTION: forcing a failure. [ 103.113237][ T2216] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 103.128653][ T2216] CPU: 1 PID: 2216 Comm: syz.6.537 Not tainted syzkaller #0 [ 103.135996][ T2216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 103.146054][ T2216] Call Trace: [ 103.149347][ T2216] __dump_stack+0x21/0x24 [ 103.153675][ T2216] dump_stack_lvl+0x1a7/0x208 [ 103.158441][ T2216] ? show_regs_print_info+0x18/0x18 [ 103.163637][ T2216] dump_stack+0x15/0x1c [ 103.167786][ T2216] should_fail+0x3c1/0x510 [ 103.172198][ T2216] should_fail_usercopy+0x1a/0x20 [ 103.177217][ T2216] _copy_from_user+0x20/0xd0 [ 103.181805][ T2216] strndup_user+0xb1/0x150 [ 103.186214][ T2216] __se_sys_mount+0xdf/0x390 [ 103.190803][ T2216] ? fput+0x1a/0x20 [ 103.194608][ T2216] ? __x64_sys_mount+0xd0/0xd0 [ 103.199371][ T2216] ? ____fput+0x15/0x20 [ 103.203528][ T2216] __x64_sys_mount+0xbf/0xd0 [ 103.208115][ T2216] do_syscall_64+0x31/0x40 [ 103.212536][ T2216] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 103.218418][ T2216] RIP: 0033:0x7f7f4ceebe59 [ 103.222827][ T2216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.242430][ T2216] RSP: 002b:00007f7f4b946028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 103.250837][ T2216] RAX: ffffffffffffffda RBX: 00007f7f4d164fa0 RCX: 00007f7f4ceebe59 [ 103.258808][ T2216] RDX: 0000200000000000 RSI: 0000200000000140 RDI: 0000200000000040 [ 103.266762][ T2216] RBP: 00007f7f4b946090 R08: 0000000000000000 R09: 0000000000000000 [ 103.274715][ T2216] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000001 [ 103.282683][ T2216] R13: 00007f7f4d165038 R14: 00007f7f4d164fa0 R15: 00007fff4d8f3508 [ 104.133868][ T322] usb 2-1: USB disconnect, device number 10 [ 104.641527][ T2245] netlink: 96 bytes leftover after parsing attributes in process `syz.4.546'. [ 104.830064][ T2251] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a800e018, mo2=0002] [ 104.851560][ T2247] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a800e018, mo2=0002] [ 104.863418][ T2251] System zones: 0-5 [ 104.867989][ T2251] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,nodioread_nolock,,errors=continue [ 104.875150][ T2247] System zones: [ 104.887459][ T25] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 104.960392][ T2247] 0-5 [ 105.123591][ T2247] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,nodioread_nolock,,errors=continue [ 105.797809][ T2265] netlink: 68 bytes leftover after parsing attributes in process `syz.4.549'. [ 105.808662][ T2264] raw_sendmsg: syz.1.550 forgot to set AF_INET. Fix it! [ 105.881617][ T25] usb 6-1: Using ep0 maxpacket: 16 [ 105.978337][ T2270] EXT4-fs (loop6): Ignoring removed bh option [ 106.008862][ T25] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 106.017028][ T25] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.055198][ T25] usb 6-1: config 0 has no interface number 0 [ 106.061505][ T25] usb 6-1: New USB device found, idVendor=0bd3, idProduct=05f4, bcdDevice= 0.5b [ 106.070650][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.081655][ T25] usb 6-1: config 0 descriptor?? [ 106.180875][ T2270] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable, [ 106.197979][ T25] uvcvideo: Found UVC 0.00 device (0bd3:05f4) [ 106.210270][ T25] uvcvideo: No valid video chain found. [ 106.255074][ T2267] FAT-fs (loop1): bogus number of reserved sectors [ 106.261738][ T2267] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 106.271239][ T2267] FAT-fs (loop1): Can't find a valid FAT filesystem [ 106.271688][ T24] kauditd_printk_skb: 7 callbacks suppressed [ 106.271703][ T24] audit: type=1400 audit(1779974331.466:368): avc: denied { read } for pid=2269 comm="syz.6.551" name="rtc0" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 106.306992][ T24] audit: type=1400 audit(1779974331.476:369): avc: denied { open } for pid=2269 comm="syz.6.551" path="/dev/rtc0" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 106.330397][ T24] audit: type=1400 audit(1779974331.476:370): avc: denied { ioctl } for pid=2269 comm="syz.6.551" path="/dev/rtc0" dev="devtmpfs" ino=258 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 106.425697][ T2243] udc-core: couldn't find an available UDC or it's busy [ 106.432788][ T2243] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 106.457291][ T24] audit: type=1400 audit(1779974331.625:371): avc: denied { map } for pid=2283 comm="syz.1.555" path="pipe:[21362]" dev="pipefs" ino=21362 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 106.460203][ T625] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 106.568830][ T432] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 108.501496][ T2298] EXT4-fs (loop3): dax option not supported [ 109.526976][ T1033] EXT4-fs error (device loop6): ext4_read_inline_dir:1614: inode #12: block 7: comm syz-executor: path /71/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 109.533427][ T625] usb 5-1: Using ep0 maxpacket: 16 [ 109.551149][ T1033] EXT4-fs (loop6): Remounting filesystem read-only [ 109.561639][ T1033] EXT4-fs error (device loop6): ext4_read_inline_dir:1614: inode #12: block 7: comm syz-executor: path /71/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 109.681108][ T625] usb 5-1: device descriptor read/all, error -71 [ 109.687903][ T433] usb 6-1: USB disconnect, device number 8 [ 109.711310][ T2308] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a800e018, mo2=0002] [ 109.747005][ T2308] System zones: 0-5 [ 109.777355][ T2308] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,nodioread_nolock,,errors=continue [ 109.929188][ T2333] netlink: 68 bytes leftover after parsing attributes in process `syz.6.563'. [ 110.009721][ T2339] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 110.080077][ T432] usb 7-1: device not accepting address 5, error -71 [ 111.199804][ T2347] EXT4-fs (loop4): dax option not supported [ 111.864665][ T25] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 112.080821][ T2361] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue [ 112.090006][ T2361] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.142472][ T433] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 112.175207][ T2366] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 112.197496][ T2366] EXT4-fs (loop3): 1 truncate cleaned up [ 112.203154][ T2366] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier=0x0000000000000101,errors=remount-ro, [ 112.345526][ T25] usb 6-1: unable to get BOS descriptor or descriptor too short [ 112.431279][ T25] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.441839][ T25] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 112.783973][ T25] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 112.794552][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.802763][ T25] usb 6-1: Product: syz [ 112.808338][ T25] usb 6-1: Manufacturer: syz [ 112.813047][ T25] usb 6-1: SerialNumber: syz [ 112.908450][ T25] usb 6-1: selecting invalid altsetting 1 [ 112.916230][ T25] usb 6-1: unit 6 not found! [ 112.923434][ T25] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 113.140769][ T25] usb 6-1: USB disconnect, device number 9 [ 113.225927][ T433] usb 2-1: Using ep0 maxpacket: 16 [ 113.290737][ T2383] netlink: 104 bytes leftover after parsing attributes in process `syz.6.582'. [ 113.299841][ T625] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 113.353923][ T2388] FAT-fs (loop6): Directory bread(block 64) failed [ 113.362128][ T2388] FAT-fs (loop6): Directory bread(block 65) failed [ 113.368986][ T433] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 113.370238][ T2388] FAT-fs (loop6): Directory bread(block 66) failed [ 113.380319][ T433] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.394169][ T2388] FAT-fs (loop6): Directory bread(block 67) failed [ 113.400711][ T2388] FAT-fs (loop6): Directory bread(block 68) failed [ 113.407983][ T2388] FAT-fs (loop6): Directory bread(block 69) failed [ 113.414662][ T433] usb 2-1: config 0 has no interface number 0 [ 113.420843][ T2388] FAT-fs (loop6): Directory bread(block 70) failed [ 113.427660][ T433] usb 2-1: New USB device found, idVendor=0bd3, idProduct=05f4, bcdDevice= 0.5b [ 113.437140][ T2388] FAT-fs (loop6): Directory bread(block 71) failed [ 113.443731][ T433] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.444378][ T2388] FAT-fs (loop6): Directory bread(block 72) failed [ 113.458292][ T2388] FAT-fs (loop6): Directory bread(block 73) failed [ 113.463308][ T433] usb 2-1: config 0 descriptor?? [ 113.521528][ T433] uvcvideo: Found UVC 0.00 device (0bd3:05f4) [ 113.771433][ T2350] udc-core: couldn't find an available UDC or it's busy [ 113.778465][ T433] uvcvideo: No valid video chain found. [ 113.784189][ T2350] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 113.820163][ T625] usb 5-1: Using ep0 maxpacket: 32 [ 113.857616][ T2400] EXT4-fs (loop5): orphan cleanup on readonly fs [ 113.871849][ T2400] EXT4-fs error (device loop5): ext4_find_extent:928: inode #4: comm syz.5.587: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 113.889227][ T2400] EXT4-fs (loop5): Remounting filesystem read-only [ 113.895907][ T2400] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=-117 [ 113.906108][ T2403] netlink: 68 bytes leftover after parsing attributes in process `syz.6.585'. [ 114.024832][ T2400] EXT4-fs warning (device loop5): ext4_enable_quotas:6495: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 114.069021][ T2400] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 114.089387][ T2400] EXT4-fs (loop5): mounted filesystem without journal. Opts: minixdf,errors=remount-ro, [ 114.250280][ T2407] EXT4-fs (loop5): orphan cleanup on readonly fs [ 114.257174][ T2407] EXT4-fs error (device loop5): ext4_find_extent:928: inode #4: comm syz.5.588: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0) [ 114.274336][ T2407] EXT4-fs (loop5): Remounting filesystem read-only [ 114.281135][ T2407] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=-117 [ 114.291071][ T2407] EXT4-fs warning (device loop5): ext4_enable_quotas:6495: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 114.305860][ T2407] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 114.312697][ T625] usb 5-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice= 3.02 [ 114.320230][ T2407] EXT4-fs (loop5): mounted filesystem without journal. Opts: minixdf,errors=remount-ro, [ 114.321944][ T625] usb 5-1: New USB device strings: Mfr=19, Product=95, SerialNumber=25 [ 114.339992][ T625] usb 5-1: Product: syz [ 114.344327][ T625] usb 5-1: Manufacturer: syz [ 114.348960][ T625] usb 5-1: SerialNumber: syz [ 114.354019][ T625] usb 5-1: config 0 descriptor?? [ 114.408525][ T625] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 114.422990][ T625] usb 5-1: Detected FT8U232AM [ 114.443526][ T625] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 114.455682][ T2411] EXT4-fs (loop3): Unrecognized mount option "fowner=00000000000000000000" or missing value [ 114.456137][ T2407] EXT4-fs error (device loop5): ext4_lookup:1827: inode #2: comm syz.5.588: 'file0' linked to parent dir [ 114.570321][ T2416] x_tables: ip6_tables: CT target: only valid in raw table, not Haw [ 114.586333][ T24] audit: type=1400 audit(1779974339.243:372): avc: denied { write } for pid=2406 comm="syz.5.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 114.598570][ T2418] exfat: Deprecated parameter 'utf8' [ 114.664220][ T322] usb 5-1: USB disconnect, device number 12 [ 114.771268][ T2418] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 114.814705][ T322] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 114.834230][ T322] ftdi_sio 5-1:0.0: device disconnected [ 114.866554][ T24] audit: type=1400 audit(1779974339.505:373): avc: denied { watch watch_reads } for pid=2417 comm="syz.6.590" path="/78/bus/file1" dev="loop6" ino=1048653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 115.145208][ T433] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 115.407500][ T2431] netlink: 16 bytes leftover after parsing attributes in process `syz.3.594'. [ 115.450208][ T2431] netlink: 16 bytes leftover after parsing attributes in process `syz.3.594'. [ 115.485266][ T625] usb 2-1: USB disconnect, device number 11 [ 115.566959][ T2441] udc-core: couldn't find an available UDC or it's busy [ 115.568515][ T2447] fuse: Bad value for 'fd' [ 115.574517][ T2441] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 115.596127][ T2447] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=2447 comm=syz.4.599 [ 115.700873][ T433] usb 7-1: Using ep0 maxpacket: 16 [ 115.829166][ T433] usb 7-1: config 0 interface 0 has no altsetting 0 [ 115.835897][ T433] usb 7-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 115.857259][ T433] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.868168][ T433] usb 7-1: config 0 descriptor?? [ 115.871916][ T322] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 115.873274][ T625] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 115.885713][ T2452] netlink: 68 bytes leftover after parsing attributes in process `syz.4.600'. [ 115.971659][ T2454] netlink: 'syz.5.601': attribute type 1 has an invalid length. [ 115.979491][ T2454] netlink: 1 bytes leftover after parsing attributes in process `syz.5.601'. [ 116.149683][ T625] usb 2-1: Using ep0 maxpacket: 16 [ 116.384810][ T25] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 116.397248][ T433] uclogic 0003:28BD:0071.0004: interface is invalid, ignoring [ 116.438330][ T322] usb 4-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice= 0.40 [ 116.447394][ T322] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.455466][ T322] usb 4-1: Product: syz [ 116.459729][ T322] usb 4-1: Manufacturer: syz [ 116.464321][ T322] usb 4-1: SerialNumber: syz [ 116.470384][ T625] usb 2-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice= 0.40 [ 116.479509][ T625] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.487535][ T625] usb 2-1: Product: syz [ 116.491745][ T625] usb 2-1: Manufacturer: syz [ 116.496314][ T625] usb 2-1: SerialNumber: syz [ 116.618919][ T432] usb 7-1: USB disconnect, device number 7 [ 116.641302][ T25] usb 6-1: Using ep0 maxpacket: 16 [ 116.799126][ T24] audit: type=1400 audit(1779974341.311:374): avc: denied { accept } for pid=2428 comm="syz.1.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 116.820739][ T322] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 116.863307][ T322] usb 4-1: USB disconnect, device number 15 [ 116.876666][ T25] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.889415][ T25] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.899732][ T25] usb 6-1: config 0 interface 0 has no altsetting 0 [ 116.906358][ T25] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 116.916184][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.927837][ T25] usb 6-1: config 0 descriptor?? [ 117.422697][ T625] snd-usb-audio: probe of 2-1:1.1 failed with error -2 [ 117.435073][ T625] usb 2-1: USB disconnect, device number 12 [ 117.496164][ T322] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 117.553218][ T2471] Illegal XDP return value 4294967294, expect packet loss! [ 117.664331][ T2456] udc-core: couldn't find an available UDC or it's busy [ 117.671408][ T2456] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 117.679826][ T433] usb 6-1: USB disconnect, device number 10 [ 117.752629][ T322] usb 7-1: Using ep0 maxpacket: 16 [ 117.816729][ T625] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 117.902260][ T25] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 117.909887][ T322] usb 7-1: config 0 has an invalid interface number: 64 but max is 0 [ 117.918271][ T322] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.928504][ T322] usb 7-1: config 0 has no interface number 0 [ 117.934594][ T322] usb 7-1: New USB device found, idVendor=0bd3, idProduct=05f4, bcdDevice= 0.5b [ 117.943589][ T322] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.952211][ T322] usb 7-1: config 0 descriptor?? [ 117.957212][ T430] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 117.998901][ T322] uvcvideo: Found UVC 0.00 device (0bd3:05f4) [ 118.005861][ T322] uvcvideo: No valid video chain found. [ 118.083885][ T625] usb 2-1: Using ep0 maxpacket: 16 [ 118.213831][ T2463] udc-core: couldn't find an available UDC or it's busy [ 118.220855][ T2463] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 118.254918][ T625] usb 2-1: unable to get BOS descriptor or descriptor too short [ 118.281424][ T430] usb 4-1: Using ep0 maxpacket: 32 [ 118.340418][ T625] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.350850][ T625] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 118.361833][ T25] usb 5-1: unable to get BOS descriptor or descriptor too short [ 118.413870][ T430] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.425573][ T25] usb 5-1: not running at top speed; connect to a high speed hub [ 118.433803][ T430] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.586228][ T430] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 118.595336][ T430] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 118.603862][ T430] usb 4-1: Product: syz [ 118.608148][ T430] usb 4-1: Manufacturer: syz [ 118.650813][ T430] hub 4-1:4.0: USB hub found [ 118.703776][ T25] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 118.703788][ T625] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 118.703805][ T625] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.712911][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.722043][ T625] usb 2-1: Product: syz [ 118.730282][ T25] usb 5-1: Product: syz [ 118.738065][ T625] usb 2-1: Manufacturer: syz [ 118.742353][ T25] usb 5-1: Manufacturer: syz [ 118.746314][ T625] usb 2-1: SerialNumber: syz [ 118.751090][ T25] usb 5-1: SerialNumber: syz [ 118.874680][ T430] hub 4-1:4.0: config failed, hub has too many ports! (err -19) [ 119.141895][ T625] usb 2-1: 0:2 : does not exist [ 119.149659][ T625] usb 2-1: USB disconnect, device number 13 [ 119.159807][ T25] usb 5-1: USB disconnect, device number 13 [ 119.216774][ T397] usb 4-1: USB disconnect, device number 16 [ 119.377265][ T453] udevd[453]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 119.607395][ T2490] netlink: 'syz.4.612': attribute type 1 has an invalid length. [ 119.615204][ T2490] netlink: 1 bytes leftover after parsing attributes in process `syz.4.612'. [ 119.628552][ T2487] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a800e018, mo2=0002] [ 119.639587][ T2487] System zones: 0-5 [ 119.651531][ T2487] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,nodioread_nolock,,errors=continue [ 120.011005][ T2498] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 120.183255][ T2501] netlink: 68 bytes leftover after parsing attributes in process `syz.3.613'. [ 120.329275][ T24] audit: type=1400 audit(1779974344.614:375): avc: denied { accept } for pid=2499 comm="syz.5.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 120.540523][ T433] usb 7-1: USB disconnect, device number 8 [ 120.667139][ T2508] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 120.674818][ T2508] FAT-fs (loop6): Filesystem has been set read-only [ 120.735638][ T2495] F2FS-fs (loop4): Test dummy encryption mode enabled [ 120.743108][ T2495] F2FS-fs (loop4): invalid crc value [ 120.749710][ T2495] F2FS-fs (loop4): Found nat_bits in checkpoint [ 120.775927][ T2511] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 120.786048][ T2495] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 120.799444][ T2520] netlink: 136 bytes leftover after parsing attributes in process `syz.6.620'. [ 120.799950][ T2511] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 120.808415][ T2520] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 120.862359][ T2511] EXT4-fs (loop1): Test dummy encryption mode enabled [ 120.878341][ T2511] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c098, mo2=0003] [ 120.893352][ T2511] System zones: 0-5 [ 120.919247][ T24] audit: type=1400 audit(1779974345.176:376): avc: denied { mounton } for pid=2493 comm="syz.4.614" path="/133/file0/file0/file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 120.933027][ T433] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=65380 sclass=netlink_xfrm_socket pid=433 comm=kworker/0:5 [ 120.955739][ T2511] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,jqfmt=vfsold,inode_readahead_blks=0x0000000000000100,test_dummy_encryption=v1,auto_da_alloc,delalloc,nogrpid,minixdf,,errors=continue [ 121.253098][ T24] audit: type=1400 audit(1779974345.279:377): avc: denied { map } for pid=2521 comm="syz.3.621" path="/dev/ashmem" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 121.329233][ T24] audit: type=1400 audit(1779974345.279:378): avc: denied { execute } for pid=2521 comm="syz.3.621" path="/dev/ashmem" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 121.454144][ T2528] EXT4-fs (loop6): Unrecognized mount option "fowner=00000000000000000000" or missing value [ 121.568545][ T2511] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 121.591573][ T2511] EXT4-fs error (device loop1): ext4_dirty_inode:6181: inode #15: comm syz.1.617: mark_inode_dirty error [ 121.707384][ T2534] overlayfs: overlapping lowerdir path [ 121.855482][ T2511] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 121.899546][ T2511] EXT4-fs error (device loop1): ext4_dirty_inode:6181: inode #15: comm syz.1.617: mark_inode_dirty error [ 121.920410][ T2511] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.617: Invalid block bitmap block 2 in block_group 0 [ 121.945608][ T2511] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 121.958452][ T2511] EXT4-fs error (device loop1): ext4_dirty_inode:6181: inode #15: comm syz.1.617: mark_inode_dirty error [ 121.971112][ T2511] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 121.980982][ T2511] EXT4-fs error (device loop1): ext4_alloc_file_blocks:4545: inode #15: comm syz.1.617: mark_inode_dirty error [ 122.000416][ T2538] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 122.100281][ T112] EXT4-fs error (device loop1): ext4_map_blocks:632: inode #3: block 49: comm kworker/u4:2: lblock 1 mapped to illegal pblock 49 (length 1) [ 122.128047][ T2541] EXT4-fs (loop4): Unrecognized mount option "fowner=00000000000000000000" or missing value [ 122.143871][ T112] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 122.153249][ T112] Quota error (device loop1): dquot_write_dquot: Can't write quota structure (error -117). Quota may get out of sync! [ 122.166273][ T112] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 122.174960][ T112] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 122.183474][ T112] Quota error (device loop1): dquot_write_dquot: Can't write quota structure (error -117). Quota may get out of sync! [ 122.920479][ T2546] overlayfs: overlapping lowerdir path [ 123.109340][ T623] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 123.121847][ T2551] cgroup: Invalid name [ 123.373458][ T623] usb 2-1: Using ep0 maxpacket: 16 [ 123.416271][ T625] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 123.501836][ T623] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 123.509983][ T623] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.520368][ T623] usb 2-1: config 0 has no interface number 0 [ 123.526602][ T623] usb 2-1: New USB device found, idVendor=0bd3, idProduct=05f4, bcdDevice= 0.5b [ 123.535864][ T623] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.547566][ T623] usb 2-1: config 0 descriptor?? [ 123.588773][ T623] uvcvideo: Found UVC 0.00 device (0bd3:05f4) [ 123.595865][ T623] uvcvideo: No valid video chain found. [ 123.672666][ T625] usb 7-1: Using ep0 maxpacket: 32 [ 123.803278][ T2545] udc-core: couldn't find an available UDC or it's busy [ 123.810269][ T2545] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 123.843669][ T625] usb 7-1: unable to get BOS descriptor or descriptor too short [ 124.062296][ T2559] netlink: 27 bytes leftover after parsing attributes in process `syz.3.630'. [ 124.123697][ T2563] netlink: 68 bytes leftover after parsing attributes in process `syz.4.629'. [ 124.143702][ T24] audit: type=1400 audit(1779974348.189:379): avc: denied { watch watch_reads } for pid=2560 comm="syz.5.631" path="/139/file1" dev="tmpfs" ino=798 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 124.237299][ T2561] overlayfs: unrecognized mount option "dont_measure" or missing value [ 124.313896][ T625] usb 7-1: string descriptor 0 read error: -22 [ 124.320181][ T625] usb 7-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 124.341522][ T625] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.359896][ T2561] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 124.362693][ T2570] netlink: 'syz.4.632': attribute type 6 has an invalid length. [ 124.369239][ T2561] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.389873][ T625] usb 7-1: unit 0 not found! [ 124.417169][ T2561] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.631: bg 0: block 112: padding at end of block bitmap is not set [ 124.819227][ T625] usb 7-1: USB disconnect, device number 9 [ 124.967650][ T2581] EXT4-fs (loop5): Unrecognized mount option "fowner=00000000000000000000" or missing value [ 125.051569][ T357] udevd[357]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 125.095942][ T2585] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 125.145678][ T2585] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 125.164332][ T2588] overlayfs: overlapping lowerdir path [ 125.199856][ T2585] EXT4-fs (loop3): Test dummy encryption mode enabled [ 125.258584][ T2585] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c098, mo2=0003] [ 125.293879][ T2585] System zones: 0-5 [ 125.298850][ T2585] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,jqfmt=vfsold,inode_readahead_blks=0x0000000000000100,test_dummy_encryption=v1,auto_da_alloc,delalloc,nogrpid,minixdf,,errors=continue [ 125.453422][ T2595] netlink: 4 bytes leftover after parsing attributes in process `syz.6.639'. [ 125.462893][ T2595] netlink: 4 bytes leftover after parsing attributes in process `syz.6.639'. [ 125.471938][ T2591] EXT4-fs (loop4): Unrecognized mount option "fowner=00000000000000000000" or missing value [ 125.491717][ T2595] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x596330fe, utbl_chksum : 0xe619d30d) [ 125.547044][ T625] usb 2-1: USB disconnect, device number 14 [ 125.568950][ T2595] netlink: 12 bytes leftover after parsing attributes in process `syz.6.639'. [ 125.658994][ T2585] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 125.681268][ T2585] EXT4-fs error (device loop3): ext4_dirty_inode:6181: inode #15: comm syz.3.637: mark_inode_dirty error [ 125.693508][ T2585] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 125.705463][ T2585] EXT4-fs error (device loop3): ext4_dirty_inode:6181: inode #15: comm syz.3.637: mark_inode_dirty error [ 125.717176][ T2585] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.637: Invalid block bitmap block 2 in block_group 0 [ 125.731189][ T2585] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 125.740906][ T2585] EXT4-fs error (device loop3): ext4_dirty_inode:6181: inode #15: comm syz.3.637: mark_inode_dirty error [ 125.766953][ T2585] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 125.777779][ T2585] EXT4-fs error (device loop3): ext4_alloc_file_blocks:4545: inode #15: comm syz.3.637: mark_inode_dirty error [ 125.930548][ T24] audit: type=1400 audit(1779974349.864:380): avc: denied { setopt } for pid=2601 comm="syz.5.642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 126.102275][ T2616] FAULT_INJECTION: forcing a failure. [ 126.102275][ T2616] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 126.115374][ T2616] CPU: 1 PID: 2616 Comm: syz.6.644 Not tainted syzkaller #0 [ 126.122640][ T2616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 126.132760][ T2616] Call Trace: [ 126.136054][ T2616] __dump_stack+0x21/0x24 [ 126.140360][ T2616] dump_stack_lvl+0x1a7/0x208 [ 126.145013][ T2616] ? thaw_kernel_threads+0x220/0x220 [ 126.150277][ T2616] ? vsnprintf+0x189c/0x1990 [ 126.154843][ T2616] ? show_regs_print_info+0x18/0x18 [ 126.160022][ T2616] dump_stack+0x15/0x1c [ 126.164169][ T2616] should_fail+0x3c1/0x510 [ 126.168561][ T2616] should_fail_usercopy+0x1a/0x20 [ 126.173559][ T2616] _copy_to_user+0x20/0x90 [ 126.177952][ T2616] simple_read_from_buffer+0xe9/0x160 [ 126.183301][ T2616] proc_fail_nth_read+0x1a6/0x220 [ 126.188300][ T2616] ? proc_fault_inject_write+0x310/0x310 [ 126.193907][ T2616] ? rw_verify_area+0x1c0/0x360 [ 126.198762][ T2616] ? proc_fault_inject_write+0x310/0x310 [ 126.204410][ T2616] vfs_read+0x209/0xa60 [ 126.208551][ T2616] ? __kasan_check_write+0x14/0x20 [ 126.213636][ T2616] ? kernel_read+0x70/0x70 [ 126.218032][ T2616] ? __kasan_check_write+0x14/0x20 [ 126.223117][ T2616] ? mutex_lock+0x92/0xf0 [ 126.227418][ T2616] ? mutex_trylock+0xa0/0xa0 [ 126.231980][ T2616] ? __fget_files+0x2c4/0x320 [ 126.236631][ T2616] ? __fdget_pos+0x2d2/0x380 [ 126.241222][ T2616] ? ksys_read+0x71/0x250 [ 126.245527][ T2616] ksys_read+0x149/0x250 [ 126.249744][ T2616] ? vfs_write+0xdc0/0xdc0 [ 126.254136][ T2616] ? debug_smp_processor_id+0x17/0x20 [ 126.259487][ T2616] __x64_sys_read+0x7b/0x90 [ 126.263969][ T2616] do_syscall_64+0x31/0x40 [ 126.268367][ T2616] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 126.274238][ T2616] RIP: 0033:0x7f7f4ceac68e [ 126.278637][ T2616] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 126.298237][ T2616] RSP: 002b:00007f7f4b945fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 126.306638][ T2616] RAX: ffffffffffffffda RBX: 00007f7f4b9466c0 RCX: 00007f7f4ceac68e [ 126.314591][ T2616] RDX: 000000000000000f RSI: 00007f7f4b9460a0 RDI: 0000000000000004 [ 126.322538][ T2616] RBP: 00007f7f4b946090 R08: 0000000000000000 R09: 0000000000000000 [ 126.330489][ T2616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.338462][ T2616] R13: 00007f7f4d165038 R14: 00007f7f4d164fa0 R15: 00007fff4d8f3508 [ 126.388627][ T112] EXT4-fs error (device loop3): ext4_map_blocks:632: inode #3: block 49: comm kworker/u4:2: lblock 1 mapped to illegal pblock 49 (length 1) [ 126.413503][ T2628] netlink: 60 bytes leftover after parsing attributes in process `syz.6.651'. [ 126.423148][ T112] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 126.432037][ T112] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -117). Quota may get out of sync! [ 126.445014][ T112] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 126.453943][ T112] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 126.462286][ T112] Quota error (device loop3): dquot_write_dquot: Can't write quota structure (error -117). Quota may get out of sync! [ 126.475148][ T2613] EXT4-fs (loop5): Unrecognized mount option "fowner=00000000000000000000" or missing value [ 126.646980][ T2639] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 126.666524][ T2639] EXT4-fs error (device loop4): ext4_free_branches:1026: inode #16: comm syz.4.654: invalid indirect mapped block 32768 (level 2) [ 126.683042][ T2639] EXT4-fs (loop4): 1 orphan inode deleted [ 126.688835][ T2639] EXT4-fs (loop4): 1 truncate cleaned up [ 126.694608][ T2639] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000004000000,jqfmt=vfsv0,nolazytime,,errors=continue [ 126.744895][ T322] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 126.803558][ T2653] netlink: 8 bytes leftover after parsing attributes in process `syz.3.657'. [ 127.032483][ T2660] overlayfs: overlapping lowerdir path [ 127.264691][ T322] usb 2-1: Using ep0 maxpacket: 16 [ 127.391591][ T322] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 127.400116][ T322] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.411445][ T322] usb 2-1: config 0 has no interface number 0 [ 127.418325][ T322] usb 2-1: New USB device found, idVendor=0bd3, idProduct=05f4, bcdDevice= 0.5b [ 127.429108][ T322] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.448532][ T2662] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x596330fe, utbl_chksum : 0xe619d30d) [ 127.545493][ T24] audit: type=1400 audit(1779974351.314:381): avc: denied { map } for pid=2654 comm="syz.3.659" path="/110/file0/file1" dev="loop3" ino=1048658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 127.572479][ T322] usb 2-1: config 0 descriptor?? [ 127.637812][ T322] uvcvideo: Found UVC 0.00 device (0bd3:05f4) [ 127.644933][ T322] uvcvideo: No valid video chain found. [ 127.667662][ T2657] EXT4-fs (loop4): Unrecognized mount option "fowner=00000000000000000000" or missing value [ 127.865972][ T2626] udc-core: couldn't find an available UDC or it's busy [ 127.873348][ T2626] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 128.631113][ T397] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 128.795790][ T24] audit: type=1400 audit(1779974352.540:382): avc: denied { write } for pid=2689 comm="syz.3.667" name="rtc0" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 128.919555][ T397] usb 6-1: Using ep0 maxpacket: 32 [ 129.111891][ T432] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 129.282883][ T430] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 129.421778][ T432] usb 4-1: device descriptor read/64, error -71 [ 129.667602][ T430] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 129.678847][ T430] usb 5-1: config 0 interface 0 has no altsetting 0 [ 129.685519][ T430] usb 5-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 129.694640][ T430] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.703566][ T430] usb 5-1: config 0 descriptor?? [ 129.820969][ T322] usb 2-1: USB disconnect, device number 15 [ 129.892094][ T432] usb 4-1: device descriptor read/64, error -71 [ 130.141823][ T24] audit: type=1400 audit(1779974353.804:383): avc: denied { create } for pid=2730 comm="syz.6.681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 130.180618][ T432] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 130.192802][ T24] audit: type=1400 audit(1779974353.850:384): avc: denied { audit_control } for pid=2706 comm="syz.4.673" capability=30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 130.266138][ T430] usbhid 5-1:0.0: can't add hid device: -71 [ 130.272207][ T430] usbhid: probe of 5-1:0.0 failed with error -71 [ 130.279386][ T430] usb 5-1: USB disconnect, device number 14 [ 130.394669][ T2733] EXT4-fs (loop6): Unrecognized mount option "fowner=00000000000000000000" or missing value [ 130.501108][ T432] usb 4-1: device descriptor read/64, error -71 [ 130.875111][ T397] usb 6-1: unable to get BOS descriptor or descriptor too short [ 130.935648][ T432] usb 4-1: device descriptor read/64, error -71 [ 130.939205][ T397] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 130.968069][ T397] usb 6-1: can't read configurations, error -71 [ 131.112938][ T432] usb usb4-port1: attempt power cycle [ 131.217953][ T2750] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 131.227286][ T2750] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.366711][ T397] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 131.389256][ T2754] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 131.406008][ T2754] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 131.416380][ T2754] F2FS-fs (loop4): Found nat_bits in checkpoint [ 131.439083][ T2754] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 131.445267][ T2775] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 131.446285][ T2754] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 131.475186][ T2775] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 131.485148][ T2775] EXT4-fs (loop6): Test dummy encryption mode enabled [ 131.493167][ T2775] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c098, mo2=0003] [ 131.501541][ T2775] System zones: 0-5 [ 131.506177][ T2775] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,jqfmt=vfsold,inode_readahead_blks=0x0000000000000100,test_dummy_encryption=v1,auto_da_alloc,delalloc,nogrpid,minixdf,,errors=continue [ 131.561261][ T2754] attempt to access beyond end of device [ 131.561261][ T2754] loop4: rw=10241, want=45104, limit=40427 [ 131.575055][ T2754] attempt to access beyond end of device [ 131.575055][ T2754] loop4: rw=2049, want=45104, limit=40427 [ 131.576742][ T2782] attempt to access beyond end of device [ 131.576742][ T2782] loop4: rw=2049, want=45112, limit=40427 [ 131.633794][ T432] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 131.644740][ T397] usb 6-1: Using ep0 maxpacket: 16 [ 131.657401][ T24] audit: type=1400 audit(1779974355.226:385): avc: denied { read } for pid=2753 comm="syz.4.688" name="file0" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 131.772835][ T397] usb 6-1: config 0 has an invalid interface number: 64 but max is 0 [ 131.781016][ T397] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.793717][ T397] usb 6-1: config 0 has no interface number 0 [ 131.800365][ T397] usb 6-1: New USB device found, idVendor=0bd3, idProduct=05f4, bcdDevice= 0.5b [ 131.809467][ T397] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.817991][ T397] usb 6-1: config 0 descriptor?? [ 131.858229][ T432] usb 4-1: device descriptor read/8, error -71 [ 131.863042][ T397] uvcvideo: Found UVC 0.00 device (0bd3:05f4) [ 131.871654][ T397] uvcvideo: No valid video chain found. [ 131.900477][ T2801] netlink: 'syz.6.701': attribute type 1 has an invalid length. [ 131.908230][ T2801] netlink: 1 bytes leftover after parsing attributes in process `syz.6.701'. [ 131.939048][ T24] audit: type=1400 audit(1779974355.479:386): avc: denied { bind } for pid=2802 comm="syz.6.702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 131.958432][ T24] audit: type=1400 audit(1779974355.479:387): avc: denied { listen } for pid=2802 comm="syz.6.702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 131.977989][ T24] audit: type=1400 audit(1779974355.479:388): avc: denied { connect } for pid=2802 comm="syz.6.702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 131.997617][ T24] audit: type=1400 audit(1779974355.479:389): avc: denied { write } for pid=2802 comm="syz.6.702" path="socket:[25091]" dev="sockfs" ino=25091 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 132.021075][ T2796] EXT4-fs (loop1): Unrecognized mount option "fowner=00000000000000000000" or missing value [ 132.076078][ T2747] udc-core: couldn't find an available UDC or it's busy [ 132.083191][ T2747] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 132.136048][ T432] usb 4-1: device descriptor read/8, error -71 [ 132.222701][ T2809] exfat: Deprecated parameter 'utf8' [ 132.228463][ T2809] exfat: Deprecated parameter 'utf8' [ 132.234597][ T2809] exfat: Deprecated parameter 'utf8' [ 132.356589][ T2809] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 132.524335][ T2815] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a800e018, mo2=0002] [ 132.532761][ T2815] System zones: 0-5 [ 132.542013][ T2815] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,nodioread_nolock,,errors=continue [ 132.920041][ T2823] EXT4-fs (loop1): Unrecognized mount option "euid>00000000000000000000" or missing value [ 132.951974][ T2825] EXT4-fs (loop6): Ignoring removed orlov option [ 132.958567][ T2825] EXT4-fs (loop6): Test dummy encryption mode enabled [ 132.966006][ T2825] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsold,errors=continue,orlov,prjquota,minixdf,barrier=0x0000000000000000,usrjquota=min_batch_time=0x00000000ffffffff,nouid32,test_dummy_encryption,,errors=continue [ 133.030009][ T2825] EXT4-fs error (device loop6): htree_dirblock_to_tree:1063: inode #2: comm syz.6.707: Directory hole found for htree leaf block 0 [ 133.058667][ T2836] EXT4-fs (loop1): Ignoring removed nobh option [ 133.079698][ T2836] EXT4-fs (loop1): Mount option "noacl" will be removed by 3.5 [ 133.079698][ T2836] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 133.079698][ T2836] [ 133.097877][ T2836] EXT4-fs (loop1): Ignoring removed orlov option [ 133.108325][ T2852] netlink: 8 bytes leftover after parsing attributes in process `syz.4.716'. [ 133.120327][ T2836] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,auto_da_alloc=0x000000000000d25d,lazytime,noacl,minixdf,orlov,,errors=continue [ 133.146812][ T2848] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a800e018, mo2=0002] [ 133.155428][ T2848] System zones: 0-5 [ 133.159515][ T2854] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 133.159919][ T2848] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,nodioread_nolock,,errors=continue [ 133.167446][ T2854] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 133.219237][ T2854] EXT4-fs (loop4): 1 truncate cleaned up [ 133.224986][ T2854] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,mblk_io_submit,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004, [ 133.268559][ T24] audit: type=1400 audit(1779974356.723:390): avc: denied { map } for pid=2858 comm="syz.1.718" path="socket:[24233]" dev="sockfs" ino=24233 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 133.298654][ T24] audit: type=1400 audit(1779974356.751:391): avc: denied { listen } for pid=2858 comm="syz.1.718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 133.486426][ T25] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 133.819265][ T2866] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=2866 comm=syz.4.717 [ 134.081963][ T2864] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 135.370857][ T428] usb 6-1: USB disconnect, device number 12 [ 135.376883][ T397] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 135.522435][ T2872] EXT4-fs (loop5): Ignoring removed oldalloc option [ 135.537734][ T2872] EXT4-fs (loop5): Ignoring removed oldalloc option [ 135.544393][ T2872] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 135.567354][ T2872] EXT4-fs (loop5): mounted filesystem without journal. Opts: stripe=0x0000000000000004,bsddf,nodioread_nolock,norecovery,dioread_nolock,oldalloc,oldalloc,sysvgroups,norecovery,,errors=continue [ 135.630417][ T25] usb 7-1: Using ep0 maxpacket: 8 [ 135.658007][ T2878] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 135.669025][ T2878] EXT4-fs (loop3): 1 truncate cleaned up [ 135.674921][ T2878] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier=0x0000000000000101,errors=remount-ro, [ 135.705458][ T397] usb 2-1: device descriptor read/64, error -71 [ 135.721437][ T24] audit: type=1400 audit(1779974359.025:392): avc: denied { mount } for pid=2889 comm="syz.3.726" name="/" dev="ramfs" ino=25210 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 135.745237][ T2887] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a800e018, mo2=0002] [ 135.753416][ T2887] System zones: 0-5 [ 135.757854][ T2887] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,nodioread_nolock,,errors=continue [ 135.799199][ T2890] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,acl,,errors=continue [ 135.809122][ T2890] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.842693][ T24] audit: type=1400 audit(1779974359.128:393): avc: denied { unmount } for pid=280 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 135.862657][ T25] usb 7-1: unable to get BOS descriptor or descriptor too short [ 135.913237][ T2896] netlink: 8 bytes leftover after parsing attributes in process `syz.3.727'. [ 135.951233][ T25] usb 7-1: config 15 has an invalid interface number: 55 but max is 0 [ 135.967727][ T25] usb 7-1: config 15 has no interface number 0 [ 136.011741][ T25] usb 7-1: config 15 interface 55 has no altsetting 0 [ 136.179547][ T2899] EXT4-fs (loop3): Ignoring removed nobh option [ 136.185969][ T2899] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 136.185969][ T2899] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 136.185969][ T2899] [ 136.203964][ T2899] EXT4-fs (loop3): Ignoring removed orlov option [ 136.212135][ T2899] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,auto_da_alloc=0x000000000000d25d,lazytime,noacl,minixdf,orlov,,errors=continue [ 136.218237][ T25] usb 7-1: string descriptor 0 read error: -71 [ 136.238392][ T25] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea7a, bcdDevice=82.de [ 136.247546][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.271609][ T25] usb 7-1: can't set config #15, error -71 [ 136.281310][ T25] usb 7-1: USB disconnect, device number 10 [ 136.335659][ T397] usb 2-1: device descriptor read/64, error -71 [ 136.363785][ T2904] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a800e018, mo2=0002] [ 136.372083][ T2904] System zones: 0-5 [ 136.376770][ T2904] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug,journal_dev=0x0000000000000802,inlinecrypt,nouid32,grpjquota=,nobarrier,nodiscard,nodiscard,nodioread_nolock,,errors=continue [ 136.456392][ T24] audit: type=1400 audit(1779974359.699:394): avc: denied { shutdown } for pid=2909 comm="syz.5.731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 136.992934][ T428] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 137.064889][ T2917] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 137.083767][ T397] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 137.350938][ T428] usb 4-1: Using ep0 maxpacket: 16 [ 137.490035][ T428] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 137.498264][ T397] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 137.556326][ T428] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.592361][ T397] usb 2-1: config 0 interface 0 has no altsetting 0 [ 137.653620][ T397] usb 2-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 137.666486][ T428] usb 4-1: config 0 has no interface number 0 [ 137.721851][ T428] usb 4-1: New USB device found, idVendor=0bd3, idProduct=05f4, bcdDevice= 0.5b [ 137.751407][ T397] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.807033][ T428] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.851516][ T397] usb 2-1: config 0 descriptor?? [ 137.884035][ T428] usb 4-1: config 0 descriptor?? [ 137.940567][ T2926] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 137.962700][ T428] uvcvideo: Found UVC 0.00 device (0bd3:05f4) [ 138.015067][ T428] uvcvideo: No valid video chain found. [ 138.192872][ T2926] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 138.214842][ T2926] EXT4-fs (loop6): Test dummy encryption mode enabled [ 138.241248][ T2908] udc-core: couldn't find an available UDC or it's busy [ 138.248521][ T2908] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 138.258478][ T2926] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c098, mo2=0003] [ 138.266863][ T2926] System zones: 0-5 [ 138.271649][ T2926] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,jqfmt=vfsold,inode_readahead_blks=0x0000000000000100,test_dummy_encryption=v1,auto_da_alloc,delalloc,nogrpid,minixdf,,errors=continue [ 138.352547][ T2910] F2FS-fs (loop5): Invalid log sectorsize (0) [ 138.382595][ T2910] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 138.442729][ T2910] F2FS-fs (loop5): invalid crc value [ 138.596013][ T2910] F2FS-fs (loop5): Found nat_bits in checkpoint [ 138.611893][ T397] usbhid 2-1:0.0: can't add hid device: -71 [ 138.621219][ T397] usbhid: probe of 2-1:0.0 failed with error -71 [ 138.628870][ T2937] exFAT-fs (loop4): failed to load upcase table (idx : 0x000106cd, chksum : 0x3aeaf2c0, utbl_chksum : 0xe619d30d) [ 138.633489][ T397] usb 2-1: USB disconnect, device number 17 [ 138.650494][ T2926] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 138.672912][ T2926] EXT4-fs error (device loop6): ext4_dirty_inode:6181: inode #15: comm syz.6.737: mark_inode_dirty error [ 138.675544][ T2910] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 138.684623][ T2926] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 138.701448][ T2926] EXT4-fs error (device loop6): ext4_dirty_inode:6181: inode #15: comm syz.6.737: mark_inode_dirty error [ 138.712072][ T2910] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 138.713856][ T2926] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:476: comm syz.6.737: Invalid block bitmap block 2 in block_group 0 [ 138.734377][ T2926] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 138.743956][ T2926] EXT4-fs error (device loop6): ext4_dirty_inode:6181: inode #15: comm syz.6.737: mark_inode_dirty error [ 138.755601][ T2926] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5971: Corrupt filesystem [ 138.765348][ T2926] EXT4-fs error (device loop6): ext4_alloc_file_blocks:4545: inode #15: comm syz.6.737: mark_inode_dirty error [ 138.837496][ T2942] EXT4-fs (loop4): Ignoring removed nobh option [ 138.845197][ T9] EXT4-fs error (device loop6): ext4_map_blocks:632: inode #3: block 49: comm kworker/u4:1: lblock 1 mapped to illegal pblock 49 (length 1) [ 138.849033][ T2942] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 138.849033][ T2942] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 138.849033][ T2942] [ 138.877275][ T2942] EXT4-fs (loop4): Ignoring removed orlov option [ 138.884151][ T9] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 138.892929][ T9] Quota error (device loop6): dquot_write_dquot: Can't write quota structure (error -117). Quota may get out of sync! [ 138.904039][ T2942] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,auto_da_alloc=0x000000000000d25d,lazytime,noacl,minixdf,orlov,,errors=continue [ 138.905659][ T9] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 138.933916][ T9] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 138.942122][ T9] Quota error (device loop6): dquot_write_dquot: Can't write quota structure (error -117). Quota may get out of sync! [ 139.072097][ T24] audit: type=1400 audit(1779974362.160:395): avc: denied { mount } for pid=2945 comm="syz.4.743" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 139.094201][ T24] audit: type=1400 audit(1779974362.160:396): avc: denied { listen } for pid=2945 comm="syz.4.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 139.113712][ T24] audit: type=1400 audit(1779974362.160:397): avc: denied { accept } for pid=2945 comm="syz.4.743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 139.135756][ T2948] EXT4-fs (loop6): Ignoring removed oldalloc option [ 139.147396][ T2948] EXT4-fs (loop6): Ignoring removed oldalloc option [ 139.156810][ T2948] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 139.188147][ T2948] EXT4-fs (loop6): mounted filesystem without journal. Opts: stripe=0x0000000000000004,bsddf,nodioread_nolock,norecovery,dioread_nolock,oldalloc,oldalloc,sysvgroups,norecovery,,errors=continue [ 139.255663][ T2960] netlink: 20 bytes leftover after parsing attributes in process `syz.5.742'. [ 139.616281][ T397] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 139.699199][ T432] usb 4-1: USB disconnect, device number 21 [ 140.089318][ T24] audit: type=1400 audit(1779974363.115:398): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 140.758194][ T2979] EXT4-fs (loop3): Ignoring removed nobh option [ 140.764763][ T2979] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 140.764763][ T2979] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 140.764763][ T2979] [ 140.782606][ T2979] EXT4-fs (loop3): Ignoring removed orlov option [ 140.790827][ T2979] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,auto_da_alloc=0x000000000000d25d,lazytime,noacl,minixdf,orlov,,errors=continue [ 140.810416][ T24] audit: type=1400 audit(1779974363.761:399): avc: denied { setattr } for pid=2989 comm="syz.1.755" name="fuse" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 141.037535][ T555] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 141.038753][ T3011] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 141.082062][ T3015] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=3015 comm=syz.3.763 [ 141.091115][ T3011] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=3011 comm=syz.3.763 [ 141.107616][ T3015] EXT4-fs error (device loop3): ext4_lookup:1834: inode #2: comm syz.3.763: deleted inode referenced: 12 [ 141.119457][ T3015] EXT4-fs error (device loop3): ext4_lookup:1834: inode #2: comm syz.3.763: deleted inode referenced: 12 [ 141.130945][ T3016] EXT4-fs error (device loop3): ext4_lookup:1834: inode #2: comm syz.3.763: deleted inode referenced: 12 [ 141.320421][ T2997] F2FS-fs (loop1): Test dummy encryption mode enabled [ 141.337695][ T2997] F2FS-fs (loop1): invalid crc value [ 141.358785][ T2997] F2FS-fs (loop1): Found nat_bits in checkpoint [ 141.518663][ T555] usb 7-1: unable to get BOS descriptor or descriptor too short [ 141.614815][ T555] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.626152][ T2997] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 141.633887][ T555] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 141.778221][ T555] usb 7-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 141.886281][ T555] usb 7-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 141.999547][ T555] usb 7-1: config 1 interface 1 has no altsetting 1 [ 142.245139][ T555] usb 7-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 142.261132][ T555] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.292034][ T555] usb 7-1: Product: syz [ 142.300885][ T555] usb 7-1: Manufacturer: syz [ 142.310099][ T555] usb 7-1: SerialNumber: syz [ 142.545129][ T3041] EXT4-fs (loop5): Ignoring removed nobh option [ 142.553580][ T3041] EXT4-fs (loop5): Mount option "noacl" will be removed by 3.5 [ 142.553580][ T3041] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 142.553580][ T3041] [ 142.574998][ T3041] EXT4-fs (loop5): Ignoring removed orlov option [ 142.583653][ T3041] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobh,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,auto_da_alloc=0x000000000000d25d,lazytime,noacl,minixdf,orlov,,errors=continue [ 143.530005][ T3061] EXT4-fs (loop5): Ignoring removed bh option [ 143.598994][ T3061] EXT4-fs (loop5): mounted filesystem without journal. Opts: max_batch_time=0x0000000000020005,grpid,debug_want_extra_isize=0x0000000000000008,barrier=0x0000000000000100,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,delalloc,bh,init_itable, [ 143.873929][ T3065] 9pnet: Insufficient options for proto=fd [ 144.075609][ T3056] F2FS-fs (loop4): invalid crc value [ 144.082307][ T3056] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 144.275382][ T5] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 144.307463][ T397] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 144.596019][ T5] usb 2-1: device descriptor read/64, error -71 [ 144.692297][ T397] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 144.701377][ T397] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.711991][ T397] usb 4-1: config 0 descriptor?? [ 144.772939][ T3093] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=122 sclass=netlink_route_socket pid=3093 comm=syz.4.782 [ 145.697046][ T555] snd-usb-audio: probe of 7-1:1.0 failed with error -22 [ 145.708590][ T555] usb 7-1: USB disconnect, device number 11 [ 145.764872][ T5] usb 2-1: device descriptor read/64, error -71 [ 146.421568][ T3114] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3114 comm=syz.5.789 [ 146.722569][ T5] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 147.274210][ T20] usb 4-1: USB disconnect, device number 22 [ 147.376183][ T5] usb 2-1: device descriptor read/64, error -71 [ 147.965747][ T24] audit: type=1400 audit(1779974370.480:400): avc: denied { accept } for pid=3153 comm="syz.6.804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 148.224480][ T3163] netlink: 48 bytes leftover after parsing attributes in process `syz.4.806'. [ 148.235620][ T24] audit: type=1400 audit(1779974370.732:401): avc: denied { mount } for pid=3159 comm="syz.4.806" name="/" dev="configfs" ino=12739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 148.686484][ T24] audit: type=1400 audit(1779974370.732:402): avc: denied { search } for pid=3159 comm="syz.4.806" name="/" dev="configfs" ino=12739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 148.712366][ T24] audit: type=1400 audit(1779974370.732:403): avc: denied { setattr } for pid=3159 comm="syz.4.806" name="/" dev="configfs" ino=12739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 148.734695][ T24] audit: type=1400 audit(1779974371.181:404): avc: denied { create } for pid=3167 comm="syz.3.809" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 148.755419][ T24] audit: type=1400 audit(1779974371.181:405): avc: denied { mounton } for pid=3167 comm="syz.3.809" path="/139/file0" dev="tmpfs" ino=801 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 148.869117][ T24] audit: type=1400 audit(1779974371.322:406): avc: denied { connect } for pid=3165 comm="syz.5.807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 148.924937][ T24] audit: type=1400 audit(1779974371.322:407): avc: denied { read } for pid=3165 comm="syz.5.807" path="socket:[25917]" dev="sockfs" ino=25917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 149.028387][ T3176] kvm [3171]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 149.054054][ T3176] kvm [3171]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 149.065624][ T3176] kvm [3171]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 149.120324][ T3176] kvm [3171]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 149.163825][ T3176] kvm [3171]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 149.187785][ T3176] kvm [3171]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 149.206806][ T3176] kvm [3171]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 149.227785][ T3176] kvm [3171]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 149.246861][ T3176] kvm [3171]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 149.266711][ T3176] kvm [3171]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 149.351278][ T15] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 149.520489][ T3193] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 149.618453][ T15] usb 6-1: Using ep0 maxpacket: 32 [ 149.757451][ T15] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.772904][ T15] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.113975][ T15] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 150.138514][ T15] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.191534][ T15] usb 6-1: config 0 descriptor?? [ 150.627632][ T3221] netlink: 8 bytes leftover after parsing attributes in process `syz.6.826'. [ 150.645670][ T15] hub 6-1:0.0: USB hub found [ 150.761842][ T5] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 150.879438][ T15] hub 6-1:0.0: 1 port detected [ 150.932886][ T25] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 151.010580][ T3230] tap0: tun_chr_ioctl cmd 1074025677 [ 151.015944][ T3230] tap0: linktype set to 270 [ 151.020689][ T5] usb 5-1: Using ep0 maxpacket: 32 [ 151.146578][ T5] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 151.155677][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.164260][ T5] usb 5-1: config 0 descriptor?? [ 151.185363][ T3234] tipc: Started in network mode [ 151.190301][ T3234] tipc: Own node identity eef7115c93fd, cluster identity 4711 [ 151.197887][ T3234] tipc: Enabled bearer , priority 0 [ 151.205861][ T3234] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 151.213890][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 151.217995][ T3234] tipc: Resetting bearer [ 151.226400][ T3233] tipc: Disabling bearer [ 151.338908][ T25] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 151.347198][ T25] usb 4-1: config 0 has no interface number 0 [ 151.353556][ T25] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 151.363832][ T25] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 151.504461][ T432] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 151.542101][ T25] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 151.551194][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.560154][ T25] usb 4-1: Product: syz [ 151.564389][ T25] usb 4-1: Manufacturer: syz [ 151.569041][ T25] usb 4-1: SerialNumber: syz [ 151.591517][ T25] usb 4-1: config 0 descriptor?? [ 151.616983][ T3223] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 151.623999][ T3223] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 151.659555][ T5] hub 6-1:0.0: activate --> -90 [ 151.766332][ T432] usb 2-1: Using ep0 maxpacket: 32 [ 151.852801][ T3223] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 151.859833][ T3223] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 151.894653][ T432] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 152.065580][ T432] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 152.074694][ T432] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 152.082903][ T432] usb 2-1: Product: syz [ 152.087126][ T432] usb 2-1: Manufacturer: syz [ 152.091742][ T432] usb 2-1: SerialNumber: syz [ 152.097017][ T432] usb 2-1: config 0 descriptor?? [ 152.108318][ T25] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 152.119024][ T3232] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 152.140669][ T432] hub 2-1:0.0: bad descriptor, ignoring hub [ 152.146660][ T432] hub: probe of 2-1:0.0 failed with error -5 [ 152.482362][ T432] usb 2-1: USB disconnect, device number 20 [ 152.562542][ T322] usb 5-1: USB disconnect, device number 15 [ 152.814489][ T555] usb 6-1: USB disconnect, device number 14 [ 152.822475][ T5] usb 6-1-port1: config error [ 153.163548][ T24] audit: type=1400 audit(1779974375.346:408): avc: denied { mounton } for pid=3258 comm="syz.4.838" path="/proc/559/task" dev="proc" ino=26087 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 153.250540][ T555] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 153.265522][ T555] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 153.480647][ T3271] hub 8-0:1.0: USB hub found [ 153.485708][ T3271] hub 8-0:1.0: 1 port detected [ 153.665742][ T5] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 153.766281][ T25] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 153.776710][ T25] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 153.787111][ T25] asix: probe of 4-1:0.34 failed with error -71 [ 153.794353][ T25] usb 4-1: USB disconnect, device number 23 [ 153.839413][ T432] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 154.106542][ T5] usb 2-1: Using ep0 maxpacket: 32 [ 154.234908][ T5] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 154.244038][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.332506][ T3296] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 154.647678][ T432] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 154.657809][ T432] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 154.738431][ T3317] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue [ 154.749460][ T432] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 154.749495][ T3317] ext4 filesystem being mounted at /212/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.758541][ T432] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 154.758550][ T432] usb 7-1: SerialNumber: syz [ 154.854579][ T25] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 155.068871][ T432] usb 7-1: cannot find UAC_HEADER [ 155.074052][ T432] snd-usb-audio: probe of 7-1:1.0 failed with error -22 [ 155.083248][ T432] usb 7-1: USB disconnect, device number 12 [ 155.143117][ T25] usb 6-1: Using ep0 maxpacket: 32 [ 155.230084][ T24] audit: type=1400 audit(1779974377.283:409): avc: denied { remount } for pid=3345 comm="syz.3.876" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 155.304094][ T3350] EXT4-fs (loop3): Ignoring removed bh option [ 155.314294][ T25] usb 6-1: unable to get BOS descriptor or descriptor too short [ 155.315648][ T3350] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable, [ 155.406411][ T24] audit: type=1404 audit(1779974377.442:410): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 155.421800][ T24] audit: type=1400 audit(1779974377.461:411): avc: denied { ioctl } for pid=3308 comm="syz.5.860" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 155.449403][ T24] audit: type=1400 audit(1779974377.461:412): avc: denied { create } for pid=3308 comm="syz.5.860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 155.463709][ T25] usb 6-1: string descriptor 0 read error: -71 [ 155.469861][ T24] audit: type=1400 audit(1779974377.461:413): avc: denied { ioctl } for pid=3355 comm="syz.3.879" path="socket:[26964]" dev="sockfs" ino=26964 ioctlcmd=0x5882 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 155.485870][ T25] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 155.510628][ T24] audit: type=1400 audit(1779974377.479:414): avc: denied { read write } for pid=280 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 155.530791][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.543703][ T24] audit: type=1400 audit(1779974377.489:415): avc: denied { create } for pid=3357 comm="syz.3.880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 155.564253][ T24] audit: type=1400 audit(1779974377.489:416): avc: denied { read write } for pid=280 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 155.588404][ T24] audit: type=1400 audit(1779974377.489:417): avc: denied { create } for pid=3359 comm="syz.3.881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 155.596160][ T25] usb 6-1: can't set config #1, error -71 [ 155.609215][ T24] audit: type=1400 audit(1779974377.517:418): avc: denied { read write } for pid=280 comm="syz-executor" name="loop3" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 155.649569][ T25] usb 6-1: USB disconnect, device number 15 [ 155.686360][ T364] usb 2-1: USB disconnect, device number 21 [ 155.773512][ T3391] ================================================================== [ 155.781637][ T3391] BUG: KASAN: slab-out-of-bounds in tc_setup_flow_action+0x842/0x32b0 [ 155.789918][ T3391] Read of size 8 at addr ffff88811202fcc0 by task syz.6.895/3391 [ 155.797625][ T3391] [ 155.799959][ T3391] CPU: 0 PID: 3391 Comm: syz.6.895 Not tainted syzkaller #0 [ 155.807230][ T3391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 155.817286][ T3391] Call Trace: [ 155.820577][ T3391] __dump_stack+0x21/0x24 [ 155.824913][ T3391] dump_stack_lvl+0x1a7/0x208 [ 155.829632][ T3391] ? show_regs_print_info+0x18/0x18 [ 155.834842][ T3391] ? thaw_kernel_threads+0x220/0x220 [ 155.840138][ T3391] print_address_description+0x7f/0x2c0 [ 155.845690][ T3391] ? tc_setup_flow_action+0x842/0x32b0 [ 155.851157][ T3391] kasan_report+0xe2/0x130 [ 155.855574][ T3391] ? flow_action_cookie_create+0x28/0x90 [ 155.861201][ T3391] ? tc_setup_flow_action+0x842/0x32b0 [ 155.866660][ T3391] __asan_report_load8_noabort+0x14/0x20 [ 155.872289][ T3391] tc_setup_flow_action+0x842/0x32b0 [ 155.877573][ T3391] ? __kmalloc+0x1a4/0x330 [ 155.881987][ T3391] ? flow_rule_alloc+0x32/0x2c0 [ 155.886839][ T3391] mall_replace_hw_filter+0x2cc/0x8a0 [ 155.892210][ T3391] ? pcpu_block_update_hint_alloc+0x8bf/0xc50 [ 155.898274][ T3391] ? mall_set_parms+0x410/0x410 [ 155.903124][ T3391] ? tcf_exts_destroy+0xb0/0xb0 [ 155.907972][ T3391] ? pcpu_alloc+0xf9b/0x16b0 [ 155.912568][ T3391] ? mall_set_parms+0x19d/0x410 [ 155.917416][ T3391] mall_change+0x546/0x760 [ 155.921834][ T3391] ? __kasan_check_write+0x14/0x20 [ 155.926939][ T3391] ? mall_get+0xa0/0xa0 [ 155.931095][ T3391] ? tcf_chain_tp_insert_unique+0xac1/0xc10 [ 155.936980][ T3391] ? nla_strcmp+0xf4/0x140 [ 155.941392][ T3391] tc_new_tfilter+0x1452/0x1a90 [ 155.946236][ T3391] ? mall_get+0xa0/0xa0 [ 155.950385][ T3391] ? tcf_gate_entry_destructor+0x20/0x20 [ 155.956030][ T3391] ? security_capable+0x87/0xb0 [ 155.960875][ T3391] ? ns_capable+0x8c/0xf0 [ 155.965204][ T3391] ? netlink_net_capable+0x125/0x160 [ 155.970480][ T3391] ? tcf_gate_entry_destructor+0x20/0x20 [ 155.976104][ T3391] rtnetlink_rcv_msg+0x845/0xcc0 [ 155.981041][ T3391] ? rtnetlink_bind+0x80/0x80 [ 155.985714][ T3391] ? arch_stack_walk+0xee/0x140 [ 155.990564][ T3391] ? stack_trace_save+0xa6/0xf0 [ 155.995409][ T3391] ? stack_trace_snprint+0xf0/0xf0 [ 156.000522][ T3391] ? avc_has_perm+0x168/0x3d0 [ 156.005192][ T3391] ? memcpy+0x56/0x70 [ 156.009168][ T3391] ? avc_has_perm+0x27f/0x3d0 [ 156.013844][ T3391] ? __kasan_slab_alloc+0xbd/0xf0 [ 156.018869][ T3391] ? slab_post_alloc_hook+0x5d/0x2f0 [ 156.024153][ T3391] ? avc_has_perm_noaudit+0x260/0x260 [ 156.029522][ T3391] ? selinux_nlmsg_lookup+0x3fb/0x4a0 [ 156.034889][ T3391] netlink_rcv_skb+0x1f5/0x440 [ 156.039653][ T3391] ? rtnetlink_bind+0x80/0x80 [ 156.044313][ T3391] ? netlink_ack+0xb70/0xb70 [ 156.048908][ T3391] ? __netlink_lookup+0x387/0x3b0 [ 156.053919][ T3391] rtnetlink_rcv+0x1c/0x20 [ 156.058320][ T3391] netlink_unicast+0x876/0xa40 [ 156.063076][ T3391] netlink_sendmsg+0x89c/0xb50 [ 156.067820][ T3391] ? netlink_getsockopt+0x530/0x530 [ 156.073002][ T3391] ? security_socket_sendmsg+0x82/0xa0 [ 156.078455][ T3391] ? netlink_getsockopt+0x530/0x530 [ 156.083640][ T3391] ____sys_sendmsg+0x5b7/0x8f0 [ 156.088383][ T3391] ? __sys_sendmsg_sock+0x40/0x40 [ 156.093394][ T3391] ? import_iovec+0x7c/0xb0 [ 156.097881][ T3391] ___sys_sendmsg+0x236/0x2e0 [ 156.102553][ T3391] ? __sys_sendmsg+0x280/0x280 [ 156.107311][ T3391] ? alloc_file+0x82/0x540 [ 156.111706][ T3391] ? __fdget+0x1a1/0x230 [ 156.115921][ T3391] __x64_sys_sendmsg+0x1f9/0x2c0 [ 156.120837][ T3391] ? __kasan_check_write+0x14/0x20 [ 156.125918][ T3391] ? ___sys_sendmsg+0x2e0/0x2e0 [ 156.130750][ T3391] ? __kasan_check_read+0x11/0x20 [ 156.135759][ T3391] ? exit_to_user_mode_prepare+0x9a/0xa0 [ 156.141366][ T3391] do_syscall_64+0x31/0x40 [ 156.145760][ T3391] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 156.151630][ T3391] RIP: 0033:0x7f7f4ceebe59 [ 156.156027][ T3391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.175613][ T3391] RSP: 002b:00007f7f4b946028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.184008][ T3391] RAX: ffffffffffffffda RBX: 00007f7f4d164fa0 RCX: 00007f7f4ceebe59 [ 156.191958][ T3391] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 156.199908][ T3391] RBP: 00007f7f4cf81d6f R08: 0000000000000000 R09: 0000000000000000 [ 156.207873][ T3391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 156.215837][ T3391] R13: 00007f7f4d165038 R14: 00007f7f4d164fa0 R15: 00007fff4d8f3508 [ 156.223789][ T3391] [ 156.226097][ T3391] Allocated by task 3391: [ 156.230408][ T3391] __kasan_kmalloc+0xda/0x110 [ 156.235073][ T3391] __kmalloc+0x1a4/0x330 [ 156.239292][ T3391] tcf_idr_create+0x5f/0x790 [ 156.243859][ T3391] tcf_idr_create_from_flags+0x61/0x70 [ 156.249288][ T3391] tcf_gact_init+0x2e6/0x560 [ 156.253850][ T3391] tcf_action_init_1+0x443/0x6e0 [ 156.258778][ T3391] tcf_action_init+0x227/0x780 [ 156.263519][ T3391] tcf_exts_validate+0x248/0x570 [ 156.268439][ T3391] mall_set_parms+0x4b/0x410 [ 156.273003][ T3391] mall_change+0x47a/0x760 [ 156.277393][ T3391] tc_new_tfilter+0x1452/0x1a90 [ 156.282233][ T3391] rtnetlink_rcv_msg+0x845/0xcc0 [ 156.287149][ T3391] netlink_rcv_skb+0x1f5/0x440 [ 156.291889][ T3391] rtnetlink_rcv+0x1c/0x20 [ 156.296303][ T3391] netlink_unicast+0x876/0xa40 [ 156.301044][ T3391] netlink_sendmsg+0x89c/0xb50 [ 156.305879][ T3391] ____sys_sendmsg+0x5b7/0x8f0 [ 156.310642][ T3391] ___sys_sendmsg+0x236/0x2e0 [ 156.315294][ T3391] __x64_sys_sendmsg+0x1f9/0x2c0 [ 156.320206][ T3391] do_syscall_64+0x31/0x40 [ 156.324599][ T3391] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 156.330458][ T3391] [ 156.332765][ T3391] The buggy address belongs to the object at ffff88811202fc00 [ 156.332765][ T3391] which belongs to the cache kmalloc-192 of size 192 [ 156.346794][ T3391] The buggy address is located 0 bytes to the right of [ 156.346794][ T3391] 192-byte region [ffff88811202fc00, ffff88811202fcc0) [ 156.360384][ T3391] The buggy address belongs to the page: [ 156.365997][ T3391] page:ffffea0004480bc0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11202f [ 156.376203][ T3391] flags: 0x4000000000000200(slab) [ 156.381205][ T3391] raw: 4000000000000200 0000000000000000 0000000100000001 ffff888100043380 [ 156.389785][ T3391] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 156.398363][ T3391] page dumped because: kasan: bad access detected [ 156.404751][ T3391] page_owner tracks the page as allocated [ 156.410451][ T3391] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 96, ts 4439579203, free_ts 0 [ 156.425352][ T3391] prep_new_page+0x179/0x180 [ 156.429930][ T3391] get_page_from_freelist+0x223b/0x23d0 [ 156.435452][ T3391] __alloc_pages_nodemask+0x290/0x620 [ 156.440797][ T3391] new_slab+0x84/0x3f0 [ 156.444847][ T3391] ___slab_alloc+0x2a6/0x450 [ 156.449418][ T3391] __slab_alloc+0x63/0xa0 [ 156.453745][ T3391] kmem_cache_alloc_trace+0x1b0/0x2e0 [ 156.459115][ T3391] kernfs_fop_open+0x343/0xb30 [ 156.463852][ T3391] do_dentry_open+0x793/0x1090 [ 156.468588][ T3391] vfs_open+0x73/0x80 [ 156.472545][ T3391] path_openat+0x280f/0x31c0 [ 156.477110][ T3391] do_filp_open+0x1e2/0x410 [ 156.481584][ T3391] do_sys_openat2+0x19f/0x750 [ 156.486233][ T3391] __x64_sys_openat+0x136/0x160 [ 156.491057][ T3391] do_syscall_64+0x31/0x40 [ 156.495451][ T3391] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 156.501312][ T3391] page_owner free stack trace missing [ 156.506650][ T3391] [ 156.508949][ T3391] Memory state around the buggy address: [ 156.514556][ T3391] ffff88811202fb80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 156.522589][ T3391] ffff88811202fc00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 156.530640][ T3391] >ffff88811202fc80: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 156.538689][ T3391] ^ [ 156.544815][ T3391] ffff88811202fd00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 156.552846][ T3391] ffff88811202fd80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 156.560876][ T3391] ================================================================== [ 156.568910][ T3391] Disabling lock debugging due to kernel taint May 28 13:19:38 syzkaller kern.alert kernel: [ 156.404751][ T3391] page_owner tracks the page as allocated May 28 13:19:38 syzkaller kern.alert kernel: [ 156.410451][ T3391] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 96, ts 4439579203, free_ts 0 May 28 13:19:38 syzkaller kern.alert kernel: [ 156.501312][ T3391] page_owner free stack trace missing