last executing test programs: 35.929285812s ago: executing program 3 (id=486): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000e00)='./file1\x00', 0x200012, &(0x7f0000000680)={[{@nodioread_nolock}, {@inlinecrypt}]}, 0x4, 0x5a7, &(0x7f0000001d00)="$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") pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r4, &(0x7f0000000000)='7', 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x6, 0x4, 0x4096, 0x89, 0x0, 0xffffffffffffffff, 0x100000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f0000000100)={0x2, 0x0, [{0xfe, 0x0, 0x6}, {0x4b564d03, 0x0, 0x7}]}) io_getevents(0x0, 0x5, 0x5, &(0x7f0000000500)=[{}, {}, {}, {}, {}], &(0x7f00000005c0)={0x0, 0x3938700}) r6 = dup(r1) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) mkdir(&(0x7f0000000000)='./mytrace\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mytrace\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mytrace/events/xhci-hcd/xhci_address_ctrl_ctx/inject\x00', 0x2, 0x0) write$binfmt_aout(r7, &(0x7f0000000cc0)=ANY=[@ANYBLOB="0b01"], 0xb0a) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000140), 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2df766646e1f29750caff60b3306ca488e8bbf0ce5a9ca", @ANYRESHEX=r6, @ANYBLOB=',\x00']) statfs(&(0x7f00000002c0)='./file0\x00', 0x0) 35.640345306s ago: executing program 3 (id=488): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r3 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, 0x0, 0x143041, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff4, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x187f9e6c, 0x7fffffffffffffff, 0x8, 0xffff, 0x2, 0x8000}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, &(0x7f0000000200)='S', 0x1, 0x8c87e33d61c665b6, &(0x7f00000001c0)={0x11, 0x88a8, r4, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, 0x14) close_range(r0, 0xffffffffffffffff, 0x8000000) 35.476978687s ago: executing program 3 (id=489): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xfa}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048094}, 0x40000) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8002008}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r1, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r2, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x60}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x48}]}, 0x38}, 0x1, 0x0, 0x0, 0x440e1}, 0x4000000) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8002000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r1, 0x301, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}]}, 0x24}}, 0xc0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r3, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, 0xf, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r4 = signalfd4(0xffffffffffffffff, &(0x7f00000005c0)={[0xffffffffffffffaf]}, 0x8, 0x1800) waitid$P_PIDFD(0x3, r4, &(0x7f0000000600), 0x80000000, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f00000006c0)={0x130, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7e}, {0x6, 0x11, 0x86}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xc21}, {0x6, 0x11, 0x5ce}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3fc}, {0x6, 0x11, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xd42f}, {0x6, 0x11, 0xffbe}}]}, 0x130}, 0x1, 0x0, 0x0, 0x20004010}, 0xc1) syz_genetlink_get_family_id$nfc(&(0x7f0000000880), r0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), r4) sendmsg$ETHTOOL_MSG_EEE_SET(r5, &(0x7f0000001b40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001b00)={&(0x7f0000000940)={0x11ac, r6, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_MODES_OURS={0x1180, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "798b83c231ae398995e5e1fb63b7d5871c008897e8d7e15f1811e5a96041a8b9a4edeefbaf3e12bc558146fc90bbf60fa991f6a4175716dd0806a88137dd7e13848fd1c01364ad8372d735355cff1a0b1e0ed69e627d3a1abad3231ced0f975a3131f85c653a5d0f366748d4d2054fea94a1606ef5fad3d0cd96af6c8bea60bd35037b6dc775ecb841f3a5517aa71495100aa918660ed48a39d667f4b95438b54dfb659c9cf7aeabd8ef1e3222a2b11ea8be428b11fad2f339367fb2f1b56f61acead149bc352de0c860f1641bc7b3aab008171aafb09dc122905a56767af82bd60752b2d4b1984084f7858050f9cba8d3333bfcee90e37684de3188d103339e3865956d1b5157aedd261549270001ba5bf6f4dffb45c4f0a954ae30d1a5442fecedf4c648b877beccea76c83f4d40512fae168a3506a65cbdf3525bbad34cb0dce7ab01d869a59f10ce063be740e4fd00bb341c028103d8a4cb04db01db8de4664547e88baf3453837da7565f2b177cec8d3d17ffcae652bc26467de568b55ca2916e65a5f81727e39034f8db299b961e24aade461fb105fc59d95d89dd2ac6caf94471c1027f782b2188e83ca16d00b07c544cf76a38ef5eceb1b358bca840c07a1826aa583d1e323803109a6757e9b020d7384de12ee3c87a06191b0c3a20422be3d1daeaf530200c863292f258106c172f0abc1d108c10525da5fe8441465f110c873df7ddd799d515fa84a4c962d469f23f5c1551d79bac79bbca10fbdebc87385c719953b5a289254fdea49c7928f40a33af39d728c3d76ed6da2a00b39705a03e63bfd4832a6a0e6ff265789a64b97213482352d9d04491fc44d7a85d88837d66cb3b0b98bd86c76893d763aae4eedc30c06d0e4d646827079708e4bb6ada89ec5512873cd30323d738dc775eed993585bcbcd61f2e8c126cd65a3c1f26f0e4bd42f4a224dc318f365da3e848d5a098a6effc1c394b4e3e76f7d4fc9e32a9d9ba86557a6e56a6a384b8a8a73ce221e80d217d290bb4e1a48efafa258dec2c8e9fae3a9970d66dcc80c030a14b2bec4349dfae752e0687003f86caa7a50cd2b4cb026ac9e87b2f847f48b0a3e904a19d1e8210eb160e198807b0f405754ca6b3af7589f61a388d1194837ebbabe7d4a2e80c0e5a7545fcdf9bc9d6d072807aa6dee5477a5c204857bfcfa5d3d4e6d2028fce473558625cf3e0722503b0fffa278d659fd23000e68eb9fd459203547c6379ab8f2cb5ed6cb6980dd7064f98d9b524e8372bda37db316655d85a14698165bff2fc6f442f255edeab848d5445999b0eef625ce7ed34c7faacbb573ddb5a0ce73f46cc47efe00d9012ea884e8d1c882356244f9fb7f3a59ea10e50e92c6fc0d8856da737959d2389ec6d0449ce51868e0638a50d9be9d980b8969144b1970ad5be603f95cab0cb555deaf66b456f5d054c5e27a1508f6f3de1f3ca5822601eab363a5927b72de2dd3bf0f163641dc84876bf2e1d4f1129226e07ddb69623de0190a46dbe943ea62ca1be9efed6caa57cd3023f7b81cc2e718e22e73c8ab08563fcf5d48aae7dee564411ec32e6f3594086ac1fcf2e775677853c87d819f23a83a3b7776edd79a258c9f8244e8b8cd9d412ff45cf3e13bb943caa512e43a20d655ec060eeb2a6b10b91568bf1190abfc87fc78099ae3e945144231ff20eb8ade332413b2d2b7f310cd25518e0c058c0d8234bde8acdb648a06875956d3d6a4c49906571b408dffa3ca686cabbc3b65c16ea0ca97a3ab9745c6564cbf2e304d6424bdc57d399ae56b0daf5b6b73496544dc961841cc759e628f94633cb0cdd164c02689873f08f056711de92fc01fb1ba500b1a9b0cd5ab19a85e22dd3854d2ae9c6a0cae3fef3a0241d9394cae225c28d3b2915432c60bf665d420acaea1a14842b48314602820cb53c36c7f40e3e7c87cdc5de4fb933fc3606e7fbf1d48411db5072c32de8b67f066c8bb2d37ecca1af0d99d1affbee0e25d685a40c222d75e6e36d748bcb1daf856b0c1dd2a9ea81f2add91c8036096581b0642a71c31b998e10b41fe3f6a11f077647d31eec3546128304723c13b9392e5264586c5d24d26c675000ccf6844f56786fc52d46f38f3580bb40a88f39465014009a333c29764f135950d9a099971fe1f3b8118c7e13c5a5a7c3450861a8036b32329112417d949396a874fcd4eaf9138195c1e795016c7051085066952da67662c7bf6cc2d4a012a8e83e4df1e39e088a2cfb240bdc31216bae66cdd87458baaed84661edfa81ed7bbfdff3f7b61d5153ae4f3a471f60e353e981d672bfeea9078eea542deab2c127ec967d9b103827f74a5f0e9ccc889b7f8f123f11d9ed0e494249f75dce32547a5866eea11bafe475837ad6c8aa48e823e8f657fa8f3da75349a7822e4e7de88163cbfe2560aa929d9711641d5b203a2f844e5b4c19a444fe20ec1126b9e9c9fa724fb5b612032776b3e4f936f8e46bad1f3edfb2198c00c99e09cf5358eef5e0aaf24f4144d7a6a0f2b43dfcf1f51694f3ff1835eadb4200e5c6c93a624507e1d4efc53a6e7b588412f3ead219a1df7220752b4574536fa8efd32b34de91d2e106102f61d2d42c401d8b75c9d9bfacbb2323f7c14d4903d47d0f00fb4e270d793f481524884f4d70660ddcb53ac4e271978639da20af63841eba2d519421c97cc7d911dbd9d0cc3b0490e570d2eb646ad8baf02e36951a55cbd0ad3985922966638d06df36f781a313256ebaea095c69be84c7ae0878f2ee3f6e95eb4cd6901a6aea7964afcc736f4758e6feb51b43c7d11dfefb5b67918d8e6b9576f9ac92fd5d6d04da538530f6d29eb9b2d6c7839baa6e3dc4dbe888cb83d6116e1ddc52df38eb5c8e3885981e9b47f4514605c71261e1fcb5c2f53bd111b5d0d78a02aa3577eaa1373d6123151fd1fc0f4ce54a791de8a9fe69c0e0b1f16f17bc3e81f1df3e17fa7a9becc234d535c6bb6a5e4d128a964975b1e6d5c7745ab4ec18ec19fd94c3bd8fe02f3cbce6098e13c0f3ced1bf48a9be28f4817f02784e5a4ace5b8be6945b23d43331f84506502fbe0573d1cc2d6e3e824f3293fb7052b910e4934da925acd4cd3f1f4751efdb896aa7fed7cd31657a37f0a559e97412683bd8851b49b27c7dcb5acba03e7ab5b54c30297a9c405d385258d302599c85d0b17743305d4eb90f33835edced9d0762fe942b210f9c7edec861cf723fc9fc87e42a42db01990f5873c05e0c46599ebbb705003ad690e5ecccdfd8e2c51e7642ce2e872bdd5f065c5f5492d2e276d22bf8c4312e84d336badc815f430230f8b5f916e0bdc9d39ebc0190379395eaa610a1a92e101e1ec913069cb6603ea5891fa95f3ff804dad78e4d5787c77bb157a6e12f810dfcadf9a86a232f2283b044f059c8d4a3c18482173980789472ec4b68fb29407c0011d9cf7743db20cc713b2ec190e77ae2fc8f4013af90501f713a2b78bda0b770a1e7fa1ed0149c5751ea2ab078213d1fe255eeca85610c66c62a4d2d1e4a1ca2828d9c2d2fdeea5b6ccb4ad715acf053ad1b36091e94d7923f0c58bc15e21bea4d7df0a44ed82aac9bd68cf527fb8eaf167cb4d54904e397ad84e79140940060c84718d065af9e7adc45eb91471f6a254ff495b83f4f203aac1d2c5d11f55848db5a62c3f0e2213d78edcbd78ac18e9b89ad8a400c7731e2bce2cf7c7cb18a2b06977aa48a5cba69a659c3ecf38967fb7bad01999fba52a832f6d0257072a0d9008f99838828997c4b89e1a88b64f9f79de436098d384ef47fc090d5a342f28c6b83ebd81932690489a989eaec097f93fb8c74bc3978b156922ca58d0ea271102c724027e87604abd45d521892ba357a2e30c8295b8cfba6e664ab1e7f4ae086c9a17de24b046384b520741b88a930b1fda661cf5e2824f1ab9b894f4ae7781ec2ec9e863cb29048e4f81d3c4f628c4197224a30c495291988244133f3ffc8bf1590b4a57ba3ee57a916c0bf175cdeb2dc4613729c06ed183091911bbbc1bbaa828746ee8c42a8bdc07dcea3a14152a702eb8de522cdcfbe44dbeb6003acd12b1a6775eb0f7eb7fbde44c7fabe58b3243b5f0a3a0296a314086211c9ec2d5ff7e16879e1718180701e74c5fead9b4fffdf5defee165b0b0f4f7781a5dab9e9cc2d58c1b769d13b7eec35b9a7b6610bc52a27847b0fadc754aa994a3319fd289d5d0f9311729ab656e0b2d505cc06a74ce7babf98aeaff2b6027a3e819a9fb7e273d69beb587d0fabead6bd73f3230b6508e1dbfe5be07750cf1e1c9e5c04aa428acd1da5aa7ef4962cda5d1a37c5c975ad03ff4d178cd201821071dbdd07d32d2991411a4561ed7a04b2d5b954311eab15045a39068709b482f744de0934fe61407873435186615ae47a68a7c7ac1569c6b991658363d4e7ca1839e485bd2ca024f28fdcbd4c796a95d1d0135b915ce7a7cf3dbff0f316647fc5d5088fbfb87c6c533070e9a0107f59f3f458e95753afeb7621b93092bc2c8d4bd2d7f405e42b594121e0d0379984fd1b4f0c6769557279b898cd2e9ab3f761bcb23659408d115da5cb0ed8ca176eae6e863ebd81f8a34a5ea832cbc543e84db0d846776de0a7dc813d48c1482c3e3fe323cae6939654c7aae02924a7718f6b7bac61b5e5af76e8f3b9f530c4e400f9590909a8db98a5ceff89571d5cd587c3d1676bbca8d5f6e7ee2be7c41b38a65ed52803961281015ef1ba9ca64008d3dfb0d1550335b7e84d93e6a63d6a0cbfd4f713cc8839e5fc07a148d16b75780df66dcab38e40cad7556440cd1713acb8e0e755894711fec3c36e235471e766018fd605c412245171785b74b862de4ac07b3f85ed656d7295c27fc6cc76d7b94010eb0fb01aa501d5373264adfbd94f7ca95cee731947ade616e72644ad9ff6de5fe97c52b938946fd9efa3a84ce596923b29b7718e0c65c97168e0cea57cde1fd1bf38736c1d78d90cc4401ab44c35625d12ae85e1c66dbf05cb6f53a3cd577cb6c189fd84cf5fc4ac886149fa5f265ec4252362c3c1abda9d6d6fc9a2f7198f9a448d2206d078f5b56110fcf1d4b2b53a98d6347263f5bcb0a686da97b7d13a209d57c2a24df4f5d7f9dd1219b6ebf3aa9c24c4780f9abfc928914286b5badbddf1956fd1327b6fc92546f350600ca4e75387017858b678db54b25759e9142ec952c332901a3f2755048868b55f616bb4658f5af531d06675d3957b406c92cdb7bf1e8e2163ceb20d36c31753d7329dbb7992d75c2f0ec78fc897e711cfc11995e340743045e7d1d9a6c3e491260a8baf30fcd7e415203c3f16ae939b624a1558113246304788d11da1d8c96fb5fb3813c51821cabfcc64502d7d71ac7179c3ad2fe9a38bc5f2c70026ac3f8b3c51559805cef166d941d97c455590e4ad56881a775b7ca350d3087f697c4793b966c8fd20834aa3ff74c3535d94dcc135bc006512de4da2530bd13deeee4722c4f6111e43683d5638a2bb9fb72301ba8a45576e57fedaa9288682b3831dc2066bb5b435e6fa3d4a69d84a6f527c644f26e8cf764fbf44aa4d4e9d66063c767292907304f2555944121c9d190fa02fa8bd33401b85ba938fad191dfa5c79d3e54c2b67c4ca8ca6c70660d65455082e8dcbe5280b852c20172607632ccf95affbbd88a101ea6c87862f09ab3ffcfa35cbf7289a62b4f40ffc36879898b3cf1072e622c655ddfe97b3a3dc4b51e36e4ea129f60c23227532c6cb950396b5da794afcee22209ba302ea38ab09ae276a59df821bb13e"}, @ETHTOOL_A_BITSET_VALUE={0x4d, 0x4, "1bc81feea2767a3f92b1d1e8ea89081a44705f3821c472d937873594ef671cd9808794774929f79719131498c0140f12119dac4292147a41acd2a841ec0db5fc4f4401011d61e0e90a"}, @ETHTOOL_A_BITSET_MASK={0x58, 0x5, "0223f0224cbfba20fa50f8c209000ec35e8dac804e6e3802db22684c8432a89f0afe44ece0d32e44ccb1115bb5f8a73907f497f722bae694b0dddd404933a22a6ce3458b9e00889f2809585a395dd8437629fb9b"}, @ETHTOOL_A_BITSET_VALUE={0xd0, 0x4, "7c9387a579cd9fe2b8de27ef990fec52f4c51cfca2c6575eafc865af952d63dcfff20fe940cc9cfd6b2d2f0f7c04b4da85736b1ffb8255ea8114fac126d4c6b185b5f9d162d59324cb2e9dec490c1583066110d348d20985af720bfb80e90ecae13bec3d9d4938883277b38a05c09098a3e418193112da37e54829a8d7bfaaecfda0575eaf338029ad050524baa2ba4549fcb7238507d6133749eccdcf66cfd9b2a099a8c64f8f79959a91e5cbb7680381d70f5d126e5d828d6c6ae07920e8f7717b0dadff8286b2eb405c10"}]}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x6}]}, 0x11ac}, 0x1, 0x0, 0x0, 0x1}, 0x14) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000001c00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5c8, 0xd0, 0x0, 0xd0, 0x2e8, 0xd0, 0x4f8, 0x4f8, 0x4f8, 0x4f8, 0x4f8, 0x6, &(0x7f0000001b80), {[{{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x20}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x8}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@private2, @dev={0xfe, 0x80, '\x00', 0x44}, [0xffffff00, 0x0, 0xff000000, 0xff], [0xffffffff, 0xff, 0xffffffff, 0xffffffff], 'syzkaller1\x00', 'caif0\x00', {}, {0xff}, 0x89, 0x11, 0x2, 0x2d}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xf}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1}}}, {{@ipv6={@empty, @mcast1, [0xffffffff, 0xff, 0x0, 0xffffffff], [0xffffff00, 0xff, 0x0, 0xff000000], 'batadv0\x00', 'veth1_to_team\x00', {}, {0xff}, 0x87, 0xe9, 0x1, 0x18}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28}, {0xf}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@remote, @ipv4=@private=0xa010100, 0x24, 0x11, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x628) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002280), r4) sendmsg$IPVS_CMD_GET_DAEMON(r4, &(0x7f0000002340)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002300)={&(0x7f00000022c0)={0x28, r8, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x41}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x4040004) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r9 = syz_genetlink_get_family_id$nfc(&(0x7f00000023c0), r0) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f0000002480)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002440)={&(0x7f0000002400)={0x14, r9, 0x200, 0x70bd25, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x14) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000024c0), 0x3) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f00000025c0)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002580)={&(0x7f0000002540)={0x34, r1, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x4}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x40}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0xff}]}, 0x34}}, 0x8080) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r10, &(0x7f00000026c0)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002680)={&(0x7f0000002640)={0x2c, r2, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xd628}]}, 0x2c}, 0x1, 0x0, 0x0, 0x60000081}, 0x20000000) close_range(0xffffffffffffffff, r4, 0x0) 35.476598068s ago: executing program 3 (id=490): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x10000, &(0x7f0000000180)={[{@resgid}, {}, {@grpquota}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwIF6kCCIWxD/Au8fiH6B/RUELRUrQg5fIbGbbbZLNJunWbJ3PB6Z9b2ayb96++b79zs4uG0BhjWT/lCJejoivk4iDbdsGI984srLf0sNrk9mSxPLyJ38mkeTrWvsn+f/788pLEfHLFxHHS2vbrS8szlSq1XQur482Zi+P1hcWT1ycrUyn0+ml8YmJU29NjL/7zts96+vr5/7+7uO7H5z66ujStz/dP3Q7iTNxIN/W3o+ncKO9MhIj+XMyFGdW7TjWg8b6SbLTB8C2DORxPhTZHHAwBvKoB/7/rkfEMlBQifiHgmrlAa1r+x5dBz83Hry/cgG0tv+DK++NxJ7mtdG+peSJK6Psene4B+1nbfz8x53b2RJd3oe43oP2AFpu3IyIk4ODa+e/JJ//tu9k883jja1uo2ivP7CT7mb5zxvr5T+lR/lPrJP/7F8ndreje/yX7vegmY6y/O+9dfPfR1PX8EBee6GZ8w0lFy5W05MR8WJEHIuh3Vl9o/s5p5buLXfa1p7/ZUvWfisXzI/j/uDuJ/9mqtKoPE2f2z24GfHK4/w3iTXz/55mrrt6/LPn41xW+PXLrm0cSe+82mlb9/63630GvPxjxGvrjv/jO1rJxvcnR5vnw2jrrFjrr1tHfuvU/tb633vZ+O/buP/DSfv92vrW2/hhzz9pp23bPf93JZ82y7vydVcrjcbcWMSu5KO168cf/22r3to/6/+xoxvPf+ud/3sj4rNN9v/W4Vsdd+2H8Z/a0vhvvXDvw8+/79T+5sb/zWbpWL5mM/PfZg/waZ47AAAAAAAA6DeliDgQSan8qFwqlcsrn+84HPtK1Vq9cfxCbf7SVDS/KzscQ6XWne6DbZ+HGMs/D9uqj6+qT0TEoYj4ZmBvs16erFWndrrzAAAAAAAAAAAAAAAAAAAA0Cf2d/j+f+b3gZ0+OuCZ85PfUFxd478Xv/QE9CWv/1Bc4h+KS/xDcYl/KC7xD8Ul/qG4xD8Ul/gHAAAAAAAAAAAAAAAAAAAAAAAAAACAnjp39my2LC89vDaZ1aeuLMzP1K6cmErrM+XZ+cnyZG3ucnm6VpuupuXJ2my3x6vWapfHxmP+6mgjrTdG6wuL52dr85ca5y/OVqbT8+nQf9IrAAAAAAAAAAAAAAAAAAAAeL7UFxZnKtVqOqfQsXA6+uIwtl1Iuo3y6fxk2NIjR14Y3PkOKjyDwg5PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ5t8AAAD//8nLNLM=") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3008409, 0x0, 0x4, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x7) chdir(&(0x7f0000000140)='./file0\x00') inotify_init1(0x0) timer_create(0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) write$binfmt_format(r0, &(0x7f0000000040)='0\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x10000, &(0x7f0000000180)={[{@resgid}, {}, {@grpquota}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwIF6kCCIWxD/Au8fiH6B/RUELRUrQg5fIbGbbbZLNJunWbJ3PB6Z9b2ayb96++b79zs4uG0BhjWT/lCJejoivk4iDbdsGI984srLf0sNrk9mSxPLyJ38mkeTrWvsn+f/788pLEfHLFxHHS2vbrS8szlSq1XQur482Zi+P1hcWT1ycrUyn0+ml8YmJU29NjL/7zts96+vr5/7+7uO7H5z66ujStz/dP3Q7iTNxIN/W3o+ncKO9MhIj+XMyFGdW7TjWg8b6SbLTB8C2DORxPhTZHHAwBvKoB/7/rkfEMlBQifiHgmrlAa1r+x5dBz83Hry/cgG0tv+DK++NxJ7mtdG+peSJK6Psene4B+1nbfz8x53b2RJd3oe43oP2AFpu3IyIk4ODa+e/JJ//tu9k883jja1uo2ivP7CT7mb5zxvr5T+lR/lPrJP/7F8ndreje/yX7vegmY6y/O+9dfPfR1PX8EBee6GZ8w0lFy5W05MR8WJEHIuh3Vl9o/s5p5buLXfa1p7/ZUvWfisXzI/j/uDuJ/9mqtKoPE2f2z24GfHK4/w3iTXz/55mrrt6/LPn41xW+PXLrm0cSe+82mlb9/63630GvPxjxGvrjv/jO1rJxvcnR5vnw2jrrFjrr1tHfuvU/tb633vZ+O/buP/DSfv92vrW2/hhzz9pp23bPf93JZ82y7vydVcrjcbcWMSu5KO168cf/22r3to/6/+xoxvPf+ud/3sj4rNN9v/W4Vsdd+2H8Z/a0vhvvXDvw8+/79T+5sb/zWbpWL5mM/PfZg/waZ47AAAAAAAA6DeliDgQSan8qFwqlcsrn+84HPtK1Vq9cfxCbf7SVDS/KzscQ6XWne6DbZ+HGMs/D9uqj6+qT0TEoYj4ZmBvs16erFWndrrzAAAAAAAAAAAAAAAAAAAA0Cf2d/j+f+b3gZ0+OuCZ85PfUFxd478Xv/QE9CWv/1Bc4h+KS/xDcYl/KC7xD8Ul/qG4xD8Ul/gHAAAAAAAAAAAAAAAAAAAAAAAAAACAnjp39my2LC89vDaZ1aeuLMzP1K6cmErrM+XZ+cnyZG3ucnm6VpuupuXJ2my3x6vWapfHxmP+6mgjrTdG6wuL52dr85ca5y/OVqbT8+nQf9IrAAAAAAAAAAAAAAAAAAAAeL7UFxZnKtVqOqfQsXA6+uIwtl1Iuo3y6fxk2NIjR14Y3PkOKjyDwg5PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ5t8AAAD//8nLNLM=") (async) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3008409, 0x0, 0x4, 0x0, 0x0) (async) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) (async) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x7) (async) chdir(&(0x7f0000000140)='./file0\x00') (async) inotify_init1(0x0) (async) timer_create(0x0, 0x0, 0x0) (async) timer_create(0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) (async) write$binfmt_format(r0, &(0x7f0000000040)='0\x00', 0x2) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) (async) 35.250458335s ago: executing program 3 (id=491): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x22000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000001c0)={{0x0, 0x1, 0x9221, 0x0, 0x33}}) (async) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r2 = socket$unix(0x1, 0x5, 0x0) (async) syz_ublk_setup_io_uring(0x2288, &(0x7f00000001c0)={0x0, 0x30de, 0x1000, 0x0, 0x14a}, 0x0, 0x0, 0x0) (async) r3 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async, rerun: 64) r4 = fsmount(r3, 0x1, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet(0x2, 0x2, 0x1) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r6) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}], 0x20}, 0x80) (async) ioctl$TCSETS(r4, 0x5402, &(0x7f00000002c0)={0x7, 0x6, 0x9, 0x7fc0, 0x6, "e755d09ef14d0a784961bdfebe984dbc1af5c3"}) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x30b5, 0x0, 0x3, 0x158, 0x0, r5}, &(0x7f0000000100)=0x0, &(0x7f0000000280), &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r9, 0x0, r10, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xa, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) (async) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = dup(r12) syz_ublk_setup_queues(r13, r11, &(0x7f0000000540)={0x0, 0xbd, 0x10, 0x2, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0xfffffffe, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2a65, 0x40000, 0x2, 0x26d}}], 0x1, 0x0, 0x0) connect$unix(r2, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000280)=@secondary) (async, rerun: 64) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r13, 0x80585414, &(0x7f0000000340)) (rerun: 64) 35.016686584s ago: executing program 3 (id=493): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="020200000d0000000000000000000000030006000000000002000000ac1414bb000000000000000002000100000000000000090300000000030005000000000002000000ac1414aa000000000000000001001500080000000100140000000000010017", @ANYRES32=r2], 0x68}, 0x1, 0x7}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2000) ioctl$OCFS2_IOC_GROUP_ADD(r1, 0x40186f02, &(0x7f0000000080)={0xbfb, 0x3, 0x7, 0x100}) 34.912062511s ago: executing program 32 (id=493): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="020200000d0000000000000000000000030006000000000002000000ac1414bb000000000000000002000100000000000000090300000000030005000000000002000000ac1414aa000000000000000001001500080000000100140000000000010017", @ANYRES32=r2], 0x68}, 0x1, 0x7}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2000) ioctl$OCFS2_IOC_GROUP_ADD(r1, 0x40186f02, &(0x7f0000000080)={0xbfb, 0x3, 0x7, 0x100}) 6.005903382s ago: executing program 0 (id=680): unshare(0x64000600) r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(0xffffffffffffffff, 0x111, 0x3, 0x801, 0xfd91) r1 = syz_io_uring_setup(0x2fe0, &(0x7f0000000000)={0x0, 0x103a, 0x10000, 0x1, 0x223}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r1, 0x24, &(0x7f0000000140)={0x6, 0x1, '\x00', @zc_export={r0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4010) 5.902571268s ago: executing program 0 (id=682): pipe(&(0x7f0000000440)) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000008140)={0x2020}, 0x207f) preadv(0xffffffffffffffff, &(0x7f0000000900)=[{&(0x7f00000000c0)}, {0x0}, {0x0}], 0x3, 0x1, 0x7) mount(0x0, 0x0, 0x0, 0x1003840, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000300)={[{@debug}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@commit={'commit', 0x3d, 0x8}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@nouser_xattr}, {@minixdf}, {@jqfmt_vfsv0}, {@errors_remount}, {@jqfmt_vfsv0}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@noinit_itable}, {@inlinecrypt}]}, 0x1, 0xbde, &(0x7f0000002140)="$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") syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) openat(0xffffffffffffffff, 0x0, 0x222501, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x4, 0x7ffc0005}]}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) rt_sigtimedwait(&(0x7f0000000240)={[0xfffffffffffffffb]}, 0x0, 0x0, 0x8) 4.437311831s ago: executing program 0 (id=690): io_uring_setup(0x180d, &(0x7f0000000140)={0x0, 0xfb09, 0x400, 0x8001002, 0x24}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0xdc}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x101}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @local, 0x5}, 0x1c) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x5) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xaf4, 0x0) 4.214975697s ago: executing program 1 (id=694): r0 = socket$key(0xf, 0x3, 0x2) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r0, 0x0, r2, 0x0, 0x6, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) ioctl$int_in(r2, 0x5452, &(0x7f0000000200)=0x1) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/profiling', 0x1, 0x1) write$FUSE_NOTIFY_DELETE(r3, 0x0, 0x0) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000400)='9,', 0x2}], 0x1) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) listen(r1, 0x6) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000900)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f0000002080)="$eJzs3V9rW+UfAPDvSdv9//3WwRjqhRR24WQuXVv/TBA2L0WHA72foc3KaLqMJh1rHWy7cDfeyBBEHIgvwHsvh2/AVyHoYMgoeuFN5aQnW9YkTZtlNvN8PnC25znnpN/z5DnPk+/JSUgAuTWR/lOIeDkivkoiDrdsG41s48TGfmuPbsymSxLr65/8kUSSrWvun2T/H8wqL0XEz19EnCy0x62trC6UKpXyUlafrC9enaytrJ66vFiaL8+Xr0zPzJx5a2b63XfeHlhbX7/w17cf3//gzJfH17758cGRu0mci0PZttZ2PINbrZWJmMiek7E4t2nHqQEEGyZJrx06nAPsvpFsnI9FOgccjpFs1AP/fTcjYh3IqcT4h5xq5gHNa/sBXQe/MB6+v3EB1N7+0Y33RmJf49rowFry1JVRer07PoD4aYyffr93N12ix/sQNwcQD6Dp1u2IOD062j7/Jdn817/T23jXb3OMvL3+wG66n+Y/b3TKfwqP85/okP8c7DB2+9F7/BceDCBMV2n+917H/Pfx1DU+ktX+18j5xpJLlyvl0xHx/4g4EWN703q/93Na8790SeM3c8HsOB6M7n36MXOleqnPcG0e3o545Un+m0Tb/L+vketu7v/0+biwzRjHyvde7batd/tbDT4DXv8h4rWO/f/kjlay9f3Jycb5MNk8K9r9eefYL93i76z9g5f2/4Gt2z+etN6vre08xvf7/i5329bv+b8n+bRR3pOtu16q15emIvYkH7Wvn37y2Ga9uX/a/hPHt57/Op3/+yPis222/87R7mnQMPT/3I76f+eFXz/8/Ltu8bfX/282SieyNduZ/7Z7gM/y3AEAAAAAAMCwKUTEoUgKxcflQqFY3Ph8x9E4UKhUa/WTl6rLV+ai8V3Z8RgrNO90H275PMRU9nnYZn16U30mIo5ExNcj+xv14my1MrfbjQcAAAAAAAAAAAAAAAAAAIAhcbDL9/9Tv43s9tEBz52f/Ib86jn+B/FLT8BQ8voP+WX8Q34Z/5Bfxj/kl/EP+WX8Q34Z/5Bfxj8AAAAAAAAAAAAAAAAAAAAAAAAAAAAM1IXz59Nlfe3Rjdm0PndtZXmheu3UXLm2UFxcni3OVpeuFuer1flKuThbXez19yrV6tWp6Vi+Plkv1+qTtZXVi4vV5Sv1i5cXS/Pli+Wxf6VVAAAAAAAAAAAAAAAAAAAA8GKprawulCqV8pJC18LZGIrD6LuQ9Orls9nJ0FeI0d1voMJzKOzyxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALf4JAAD//5CPL9Y=") r4 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x163) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r4, 0x9000) fallocate(r4, 0x0, 0x0, 0x8800000) open(&(0x7f0000000040)='./file1\x00', 0x8300, 0x4f) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 2.153521461s ago: executing program 2 (id=709): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x4, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xab}}, &(0x7f0000000480)='GPL\x00'}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r1}, 0x70) 2.133513227s ago: executing program 2 (id=710): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000e00)='./file1\x00', 0x200012, &(0x7f0000000680)={[{@nodioread_nolock}, {@inlinecrypt}]}, 0x4, 0x5a7, &(0x7f0000001d00)="$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") pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='7', 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x6, 0x4, 0x4096, 0x89, 0x0, 0xffffffffffffffff, 0x100000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f0000000100)={0x2, 0x0, [{0xfe, 0x0, 0x6}, {0x4b564d03, 0x0, 0x7}]}) io_getevents(0x0, 0x5, 0x5, &(0x7f0000000500)=[{}, {}, {}, {}, {}], &(0x7f00000005c0)={0x0, 0x3938700}) r5 = dup(r1) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mkdir(&(0x7f0000000000)='./mytrace\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mytrace\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mytrace/events/xhci-hcd/xhci_address_ctrl_ctx/inject\x00', 0x2, 0x0) write$binfmt_aout(r6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="0b01"], 0xb0a) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000140), 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2df766646e1f29750caff60b3306ca488e8bbf0ce5a9ca", @ANYRESHEX=r5, @ANYBLOB=',\x00']) statfs(&(0x7f00000002c0)='./file0\x00', 0x0) 1.890498439s ago: executing program 2 (id=717): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl(r0, 0x891d, &(0x7f0000000200)='veth0:') r1 = syz_usb_connect(0x0, 0x1a2, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYRESHEX, @ANYRESHEX=0x0], 0x0) clock_gettime(0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@ipv6_newaddr={0x40, 0x14, 0x101, 0x70bd26, 0x25dffbf8, {0xa, 0x38, 0x78, 0xff, r3}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004051}, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x840000000002, 0x3, 0x100) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000c00), 0x400080, 0x0) ioctl$PPPIOCGFLAGS1(r7, 0x8004745a, &(0x7f0000000c40)) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet(r6, 0x0, 0x0, 0xfffe) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x8, 0x0, 0xff, r8}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_ADDRESS={0x14, 0x1, @empty}, @IFA_RT_PRIORITY={0x8, 0x9, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) syz_usb_control_io$uac2(r1, &(0x7f0000000980)={0x14, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="00031e000000a5037ad6fd27d6209837e9fff8ab26b777bc3f00"/36]}, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') r10 = syz_usb_connect$cdc_ncm(0x2, 0x90, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7e, 0x2, 0x1, 0x5d, 0xc0, 0x2, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "c69987"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x100, 0xb, 0x1}, {0x6, 0x24, 0x1a, 0x7ff, 0x2}, [@acm={0x4, 0x24, 0x2, 0x4}, @network_terminal={0x7, 0x24, 0xa, 0x31, 0x81, 0x2, 0x7}, @acm={0x4, 0x24, 0x2, 0x8}, @mbim={0xc, 0x24, 0x1b, 0x7, 0x400, 0x5, 0x9, 0x3, 0x4b}, @acm={0x4, 0x24, 0x2, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x4, 0x7, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x3, 0xfb, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x8a, 0xe0, 0x7}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x4, 0x7, 0x2, 0xff, 0x3}, 0x66, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x6, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x418}}, {0xce, &(0x7f0000000200)=@string={0xce, 0x3, "b3956f892c538ec061b1e58756f38695a0b86e2ba70a1c71af425bb61a02799bc2b58ee62827faf107a2a13e81875fbc1531535ac9a46e58b4105f93d70832c61beaca7625013a5e38bdd0b55bdce88fc6b7a7b104db142942e5cee8ac54d9775fb5945ff41923eb7b58260257ba4a07b6c22ff724ae3748a584c50e59398d66335664ae9aa8206d07774dd512e39132db6ca504f3ff4ae184044f89b4ff68cb72fa4f263d9d3fb337ed830d2212b81296223fcc7a87df2724bbaa1fc57f9324d2a8041da812a08ed9acf089"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x41c}}, {0xe4, &(0x7f0000000340)=@string={0xe4, 0x3, "acce16c3dc8ab0311b925e0e839cdca8dfc270f3b3069770834bff5483e51c8f1f9cd9bf1a4bff8a326748b0cabc08a7648a9765600c9a58f3a22d01537c5890514d020df2de68bbf6fc1a8e60ea9827a790c47011ffa571e82d1b8272bbe01115bd7b2145cac4b4685c392cb9a398f0b13111d8674ef6335a648d6b2d39d8f954933da519163595895fd22179ba5f6517cc06b843c288aab3efc82c4fedccd52ee6ddecefcb2435078504e10eb61d90a367dca24eddb050b620194ecf4b9c805d7f0baa11e42be275ed6cc2809e7ed13f1aff806fd252247b6b53d9605e17bc7da6"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x41b}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x430}}]}) syz_usb_control_io$cdc_ncm(r10, &(0x7f0000000600)={0x14, &(0x7f0000000540)={0x40, 0xa, 0x6d, {0x6d, 0x0, "af207d5d7e43f963647a3d902f8d0a754074b7fb987d9f6b49381873a72a65f8ac7bd22f06c154d91e1686a302622821dba1ed99c630f6bc1a93f8c46719ff5cbe459acafe69acf094004fb2cf592af8112ed64b7a6af5e6f1fea720022eb25509bc57e9844d9810554b57"}}, &(0x7f00000005c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000a40)={0x44, &(0x7f0000000640)={0x20, 0x16, 0x1c, "c3730b861c7f90cad804fd7b1723dbb6662b8714f4ee8aa06d281b1f"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000006c0)={0x0, 0x8, 0x1}, &(0x7f00000008c0)={0x20, 0x80, 0x1c, {0x0, 0xac01, 0xffff, 0x6, 0x0, 0xc, 0x4, 0x8, 0x8, 0x0, 0x1, 0x9ee}}, &(0x7f0000000900)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000000940)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000009c0)={0x20, 0x87, 0x2, 0x6}, &(0x7f0000000a00)={0x20, 0x89, 0x2}}) lseek(r9, 0x2000, 0x0) ioctl$UFFDIO_CONTINUE(r9, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000f75000/0x3000)=nil, 0x3000}, 0x1}) 1.376072989s ago: executing program 0 (id=718): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)={'#! ', '', [], 0xa, "5136e92ac9c39d508bf77de3"}, 0x10) syz_usb_connect$uac2(0x5, 0x9d, &(0x7f0000000080)=ANY=[@ANYBLOB="12015002000000408205160040000102030109028b00030107000b080b010101ff20050904000000010120000924010900041500070c240305ff01070200ec000609040100000102200009040101010102200006240201023e102401050103030000000309000000cd09050109000223ff0e08"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0xe2002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r2, 0x4068aea3, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$AUDIT_USER_AVC(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x64, 0x453, 0x20, 0x70bd2d, 0x25dfdbff, "76418691b79adc167fedee421662e0c181863c587b9e371e5e1066d2ed7e35d0923dc7d8f6c7b7675b92d493f2014b1d050fb57c5ecfef53054b6edf6b23fac439400c565d245fc90c99e13627fe1bd705e7", ["", "", "", "", "", "", ""]}, 0x64}, 0x1, 0x0, 0x0, 0x2000c885}, 0x200440d0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fd7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./dev/ram0\x00', 0x80002, 0x0) pwrite64(r4, &(0x7f0000001000)="fc", 0xfffffdd8, 0x7) 1.375931219s ago: executing program 4 (id=719): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000100)='syzkaller\x00'}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x80, 0xfd}]}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.276019705s ago: executing program 4 (id=720): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x4, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xab}}, &(0x7f0000000480)='GPL\x00'}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r1}, 0x70) 1.263585918s ago: executing program 4 (id=721): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x116) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='7', 0x1) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r1, 0xc008aec1, &(0x7f00000002c0)={0x2, 0x0, [{0x80000019, 0x5, 0x0, 0xffffffff, 0x81, 0x0, 0x2}, {0x0, 0x5d81, 0x1, 0x7, 0x5, 0x8, 0x101}]}) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x5a, 0x0, 0x0, 0x1, 0x3}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r2, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e1e, 0x80000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@pktinfo={{0x24, 0x29, 0x32, {@local}}}], 0x28}, 0x4040) r3 = syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000100)=ANY=[@ANYBLOB='iocharset=maciceland,iocharset=default,gid=', @ANYRESHEX=0x0, @ANYRES64=0x0], 0x1, 0x153d, &(0x7f0000001980)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000480)={[{@nobh}, {@auto_da_alloc}, {@jqfmt_vfsold}]}, 0x3, 0x4cc, &(0x7f0000000c80)="$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") r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003ec0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@restrict={0x3, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x30, 0x5f, 0x0, 0x0, 0x30, 0x2e]}}, &(0x7f0000002ec0)=""/4096, 0x2c, 0x1000, 0x1, 0xfffffffb}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000003f00)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7db, '\x00', 0x0, r4, 0x2, 0x3, 0x1}, 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) recvmsg$inet_nvme(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000004c0)=""/187, 0xbb}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/170, 0xaa}, {&(0x7f0000000740)=""/243, 0xf3}, {&(0x7f0000000840)=""/54, 0x36}], 0x5, &(0x7f0000000900)=""/168, 0xa8}, 0x2023) r6 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r6, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x0, 0x8000000200007, 0x282b, 0x20103, 0x80001, {0x200004, 0x10005c62, 0x7fff, 0x1000000000, 0x83, 0x5, 0x10000006, 0x6, 0x0, 0x0, 0x0, 0xee00, 0xee00, 0x8, 0xa}}, {0x0, 0xa}}}, 0xa0) sendfile(r6, r6, &(0x7f0000000100)=0x4, 0x8112) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000880) creat(0x0, 0x140) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x80) syz_usb_connect$uac1(0x0, 0x81, &(0x7f0000000140)=ANY=[@ANYBLOB="12011001000000401e0420304000010203010902"], 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r7, 0x4, &(0x7f0000000200)='hugetlb.2MB.usage_in_bytes\x00', &(0x7f0000000240)='./proc\x00', r3) 1.172376621s ago: executing program 5 (id=722): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/bcdUSB\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='0x0', 0x3) 1.172145061s ago: executing program 5 (id=723): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0xd3, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0xb}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0xc, 0x0, &(0x7f00000049c0)=[@free_buffer], 0x0, 0x0, 0x0}) 1.171560511s ago: executing program 1 (id=724): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/split_huge_pages\x00', 0x1, 0x0) write(r0, &(0x7f0000000180), 0x0) 1.162305854s ago: executing program 5 (id=725): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@jqfmt_vfsold}, {@errors_continue}, {@grpjquota}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@noauto_da_alloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@usrjquota, 0x5}, {@min_batch_time={'min_batch_time', 0x3d, 0xffffffff}}, {@nouid32}, {@test_dummy_encryption}]}, 0xff, 0x47b, &(0x7f00000005c0)="$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") r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f00000000c0)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f00000006c0)=""/72, 0x48, 0x0, 0x0, 0x0, 0x3, 0x10000000}}, 0x120) writev(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)="0e0000", 0x3}, {&(0x7f00000006c0)}], 0x2) 1.004652964s ago: executing program 5 (id=726): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'erspan0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = open(&(0x7f0000000000)='./file1\x00', 0x143142, 0x80) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f0000000040)={0x4, 0xf5}) 850.167083ms ago: executing program 5 (id=727): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000800000004000000000000070000000003000000000000080100000000000000000000090200000000002e2e5f"], 0x0, 0x44}, 0x20) syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000180)=ANY=[], 0x1, 0x214, &(0x7f0000000240)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) 828.824158ms ago: executing program 5 (id=728): io_uring_setup(0x180d, &(0x7f0000000140)={0x0, 0xfb09, 0x400, 0x8001002, 0x24}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a32000000001400048008000240000000000800014000000001"], 0xdc}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x101}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @local, 0x5}, 0x1c) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x5) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xaf4, 0x0) 729.180894ms ago: executing program 4 (id=729): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000e00)='./file1\x00', 0x200012, &(0x7f0000000680)={[{@nodioread_nolock}, {@inlinecrypt}]}, 0x4, 0x5a7, &(0x7f0000001d00)="$eJzs3c9rHFUcAPDv22zSpmmbVAStPRgo2IKaNGlFEcEW682DPwqeCsYkLaXbNjQRbK3YQv0P9A8QvAkiHotIUS9evQleBSkWaXPxtjK7s+m23c3PTaZ2Ph/Y5r15u3zfZPvNm3n7ZjaA0hrN/qlE7I2IuRQx3NZWjbxxtPm8u3euTC/euTKdol5/758UKd/Wen7Kfw7lL94eEb/9lOKJvofjzl+6fHaqVpu9mNfHF87Njc9fuvzimXNTp2dPz56fnHh54qUjhyePHNrYDuaxd0XEL2PHq9dPvbHvu+mv93z2wzc3UhyNnfnT2vejV0ZjdOl30i77vb7S62AF6cv3p/0tTtUCO8SatN6//oh4KoajL+69ecPx+TuFdg7YVPUUUQdKKsl/KKnWcUB2/tt6FHtEAmyV28eaEwB3U3Nub3Ep/6vNucHY3pgb2LGYon1aJ0XEBmfmGrIYc8+l4ewRmzQPB3R29VpEPN1p/E+N3BxpzOJn+V+5L/8rEfF2/jPb/u46448+UJf/sHU2kv8ftOX/h+uML/8BAAAAAACgd24ei4gXOn3+V1la/xMd1v8MRcTRHsRf+fO/yq0ehAE6uH0s4rWIaK39W2zL/9xIX17b1VgP0J9OnanNHoqI3RFxMPq3ZfWJZWKM7vu1v2tb2/q/7JHFb60FzPtxq7rt/tfMTC1MbWSfgabb1yKeqXbK/7Q0/qcHxv9d+dg/t8oY9eOv/9ytbeX8BzZL/auIAx3H/3t3rkjL359jvHE8MN46KnjYJydvfN8tvvyH4mTj/47l838ktd+vZ37tMT79+48N5H/n4/+BdKJxy5mBfNvHUwsLFyciBtJbD2+fXHuf4XHUyodWvmT5f3B/5/P/bsf/mcGIuLrKmCd+fPN6tzbjPxRn8FrEzJrG/9UUBu/bsv/9L//tFn914/+Rxph+MN9i/g+Wt9pMLbqfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPB/VImInZEqY0vlSmVsLGIoIp6MHZXahfmF509d+Oj8TNbW+P7/Suubfoeb9dT6/v+RtvrkA/XDEbEnIr7oG2zUx6Yv1GaK3nkAAAAAAAAAAAAAAAAAAAB4RAx1uf4/81df0b0DNl216A4AhZH/UF7yH8pL/kN5yX8or3Xl/9He9wPYesZ/KC/5D+Ul/6G8+urfniy6DwAAAAAAQM/sefbm7ykirr462HhkBvK2/kJ7Bmw2q3ihvNziB8rL0j8or5XO8c0BwOMvrdC+fd2vBAAAAAAAAAAAAAB65cBe1/9DWVWK7gBQmO7X/7szADzuXP8P5eUcH3D9PwAAAAAAAAAAAAA8+uYvXT47VavNXlxvYdvGXq6gsNrCn7ub/2cflf6svRCpBxm3RYWi/zIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAt/wUAAP//rJP1RA==") pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r4, &(0x7f0000000000)='7', 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x6, 0x4, 0x4096, 0x89, 0x0, 0xffffffffffffffff, 0x100000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f0000000100)={0x2, 0x0, [{0xfe, 0x0, 0x6}, {0x4b564d03, 0x0, 0x7}]}) io_getevents(0x0, 0x5, 0x5, &(0x7f0000000500)=[{}, {}, {}, {}, {}], &(0x7f00000005c0)={0x0, 0x3938700}) r6 = dup(r1) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) mkdir(&(0x7f0000000000)='./mytrace\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mytrace\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mytrace/events/xhci-hcd/xhci_address_ctrl_ctx/inject\x00', 0x2, 0x0) write$binfmt_aout(r7, &(0x7f0000000cc0)=ANY=[@ANYBLOB="0b01"], 0xb0a) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000140), 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2df766646e1f29750caff60b3306ca488e8bbf0ce5a9ca", @ANYRESHEX=r6, @ANYBLOB=',\x00']) statfs(&(0x7f00000002c0)='./file0\x00', 0x0) 688.710904ms ago: executing program 4 (id=730): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="000004000000c71aaaca"], 0x0, 0x0, 0x0, 0x0}) 604.600356ms ago: executing program 1 (id=731): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000100)='syzkaller\x00'}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x80, 0xfd}]}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 563.304056ms ago: executing program 1 (id=732): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x4, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xab}}, &(0x7f0000000480)='GPL\x00'}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r1}, 0x70) 537.971152ms ago: executing program 1 (id=733): mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000002040)=0x4, 0x4) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000001d40)=0xe, 0x4) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000690005"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/91, 0x5b}}, {{&(0x7f0000000000)=@isdn, 0x0, &(0x7f0000000640)=[{&(0x7f0000000080)=""/225}, {&(0x7f00000001c0)=""/65}, {&(0x7f0000000d40)=""/4096}, {&(0x7f0000000240)=""/99}, {&(0x7f00000002c0)=""/122}, {&(0x7f0000000340)=""/217}, {&(0x7f00000008c0)=""/35}, {&(0x7f0000000500)=""/227}, {&(0x7f0000000600)=""/1}]}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000700)=""/27}], 0x0, &(0x7f0000000780)=""/112}}], 0x40000000000024a, 0x40002002, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0xffffffffffffff5f, 0x0, &(0x7f0000000440)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="64000000645d218294f3f18c9aedde46790e6a4bc0a4c636541b3bf547060f8af14c2cd02e201c39b2e00a70bb9ef1c06af475af39463d385f7404a4287417a7001802d2844c3f9a4baa3071163a716f49d5940e092c33e65c6e91d7322d7be55a95", @ANYRES16=r4, @ANYBLOB="1c012cbd7000fedbdf250d00000005001d00190000000500070010000000050018000000000006000800feff000005001b00d00000000500170004000000050019004000000005001d000f00000006000800a3aa000006000a0000000000"], 0x64}, 0x1, 0x0, 0x0, 0x50}, 0x40) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000001c40)=0x4) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000500)=0xffff0080) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000000)=0x3) 480.558067ms ago: executing program 1 (id=734): syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) fsopen(&(0x7f00000000c0)='virtiofs\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file0\x00', 0x1200082, &(0x7f0000000500)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c757466382c756d61736b3d30303030303030303030303030303030303032313632362c696f636861727365743d63703935302c646973636172642c616c6c6f775f7574696d653d3030303030303030352c6572726f72733d72656d6f756e742d726f2c646973636172642c00d50194377d24b5953951fbb0e6d220906e9a2129e54509e955e3ac3e9dd76061aeb341a8ae53564e8062892d06cab1be25d1de2b9d46be57d2e9c2ded432413ab147de643c400dba4f15a90c962bcd8d805d7d5f57"], 0x5, 0x1530, &(0x7f0000002f80)="$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") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = syz_open_procfs(0x0, 0x0) openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000000), 0x2, 0x0) getdents64(r3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0xfffffffffffffffe, 0x242) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0xb0ff, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x7}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x7, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{}, {0x6, 0x0, 0x5, 0x7}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 245.875697ms ago: executing program 2 (id=735): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0xd3, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0xb}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0xc, 0x0, &(0x7f00000049c0)=[@free_buffer], 0x0, 0x0, 0x0}) 102.835363ms ago: executing program 2 (id=736): syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000180)=ANY=[], 0x1, 0x214, &(0x7f0000000240)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x1f00, &(0x7f0000000140)) 52.303956ms ago: executing program 4 (id=737): open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) (async) r0 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r0, 0x1) open(&(0x7f0000000300)='.\x00', 0x100000, 0x40) (async) r1 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x40) flock(r1, 0x1) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./bus\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") (async) r2 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./bus\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = eventfd(0x7ff) read(r4, &(0x7f0000001000), 0x8) (async) read(r4, &(0x7f0000001000), 0x8) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00') (async) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00') read$FUSE(r5, &(0x7f0000004100)={0x2020}, 0x2020) (async) read$FUSE(r5, &(0x7f0000004100)={0x2020, 0x0, 0x0}, 0x2020) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x4, &(0x7f0000000800), 0x1, 0x76a, &(0x7f0000001800)="$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") socket$key(0xf, 0x3, 0x2) (async) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="020200000d0000000000000000000000030006000000000002000000ac1414bb000000000000000002000100000000000000090300000000030005000000000002000000ac1414aa000000000000000001001500080000000100140000000000010017", @ANYRES32=r7], 0x68}, 0x1, 0x7}, 0x10) (async) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="020200000d0000000000000000000000030006000000000002000000ac1414bb000000000000000002000100000000000000090300000000030005000000000002000000ac1414aa000000000000000001001500080000000100140000000000010017", @ANYRES32=r7], 0x68}, 0x1, 0x7}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x1000808, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r9) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYBLOB="97d8f031a0eacf5210cf7a9103d6276e17e2afbaea929a903cdf5bbac0c019f4850527cdcfc2ea2f1efbf4fb131126ad2225d663f10d1c7d0fa3091007d10e01ec1014ec94009aa941e0a7c391c45bacae3fa0653cad4a546b69abf3a0f442cbba751776a0064c4b7e72938aae9bbd127bab507bc7c8f04057220174e9c41c61f7d40bc894e542ef8f3330f0b6925b53d18133e2b27c247b517b", @ANYRES8=r2], 0x3c}}, 0x20004000) (async) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYBLOB="97d8f031a0eacf5210cf7a9103d6276e17e2afbaea929a903cdf5bbac0c019f4850527cdcfc2ea2f1efbf4fb131126ad2225d663f10d1c7d0fa3091007d10e01ec1014ec94009aa941e0a7c391c45bacae3fa0653cad4a546b69abf3a0f442cbba751776a0064c4b7e72938aae9bbd127bab507bc7c8f04057220174e9c41c61f7d40bc894e542ef8f3330f0b6925b53d18133e2b27c247b517b", @ANYRES8=r2], 0x3c}}, 0x20004000) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r10], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r8, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c000000130005002cbd70000000000000000000", @ANYRES32=r10, @ANYBLOB="12030000000000000a00d7ceec0f5e8dae8301cf805f8735d6376600770afdaa465651dc5755d53ff2447ea899e0d4848febe3d540f6d791573f91c53d92e299be2404d8eb89cafabd72395d917121207759716776ddcd35db862ae6810e4c0bdd1bc561e715c8d3c6794585c7a26ee73bf141a225ac93c7a2cc2f9b9d43bab06ba56883a795b8869b9fb0bc08a8afbf01d872201adc7093e08a0342d6cbc2f19a060446b868c5fdc6ac2de7be3bda616f43a25703473c5d30108228e2"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) (async) sendmsg$nl_route(r8, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c000000130005002cbd70000000000000000000", @ANYRES32=r10, @ANYBLOB="12030000000000000a00d7ceec0f5e8dae8301cf805f8735d6376600770afdaa465651dc5755d53ff2447ea899e0d4848febe3d540f6d791573f91c53d92e299be2404d8eb89cafabd72395d917121207759716776ddcd35db862ae6810e4c0bdd1bc561e715c8d3c6794585c7a26ee73bf141a225ac93c7a2cc2f9b9d43bab06ba56883a795b8869b9fb0bc08a8afbf01d872201adc7093e08a0342d6cbc2f19a060446b868c5fdc6ac2de7be3bda616f43a25703473c5d30108228e2"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000080000007f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x0, 0xa, &(0x7f0000000600)=ANY=[@ANYBLOB="18080000000000000000008510000006000000181000000000000000", @ANYRESDEC=r6, @ANYRESOCT], &(0x7f0000000000)='GPL\x00', 0x0, 0x3d}, 0x94) socket(0x1, 0x803, 0x0) chdir(&(0x7f0000000300)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000a00)='./file1\x00', 0x0) 44.740648ms ago: executing program 0 (id=738): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000804000000002e"], &(0x7f00000003c0)=""/237, 0x37, 0xed, 0x1}, 0x20) 22.940363ms ago: executing program 0 (id=739): r0 = getpid() r1 = getpgrp(r0) r2 = syz_pidfd_open(r1, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext2\x00', &(0x7f0000000280)='./file0\x00', 0x1000410, &(0x7f0000000300)={[{@test_dummy_encryption_v1}, {@grpquota}], [{@measure}]}, 0x4, 0x4f8, &(0x7f0000000a40)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100)) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000180)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) lseek(r6, 0x851, 0x0) socket(0xf, 0x1, 0x57c) r9 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001ff, 0x101301) ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0xfffffff6, 0xc0, &(0x7f0000000080)={0x0, 0x3, 0x1, 0x5}, 0x8, 0x8000, 0xfffffffc, 0x0, 0x1000010, 0x20004, 0x0}) accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, 0x0) setns(r2, 0x24020000) 0s ago: executing program 2 (id=740): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000e00)='./file1\x00', 0x200012, &(0x7f0000000680)={[{@nodioread_nolock}, {@inlinecrypt}]}, 0x4, 0x5a7, &(0x7f0000001d00)="$eJzs3c9rHFUcAPDv22zSpmmbVAStPRgo2IKaNGlFEcEW682DPwqeCsYkLaXbNjQRbK3YQv0P9A8QvAkiHotIUS9evQleBSkWaXPxtjK7s+m23c3PTaZ2Ph/Y5r15u3zfZPvNm3n7ZjaA0hrN/qlE7I2IuRQx3NZWjbxxtPm8u3euTC/euTKdol5/758UKd/Wen7Kfw7lL94eEb/9lOKJvofjzl+6fHaqVpu9mNfHF87Njc9fuvzimXNTp2dPz56fnHh54qUjhyePHNrYDuaxd0XEL2PHq9dPvbHvu+mv93z2wzc3UhyNnfnT2vejV0ZjdOl30i77vb7S62AF6cv3p/0tTtUCO8SatN6//oh4KoajL+69ecPx+TuFdg7YVPUUUQdKKsl/KKnWcUB2/tt6FHtEAmyV28eaEwB3U3Nub3Ep/6vNucHY3pgb2LGYon1aJ0XEBmfmGrIYc8+l4ewRmzQPB3R29VpEPN1p/E+N3BxpzOJn+V+5L/8rEfF2/jPb/u46448+UJf/sHU2kv8ftOX/h+uML/8BAAAAAACgd24ei4gXOn3+V1la/xMd1v8MRcTRHsRf+fO/yq0ehAE6uH0s4rWIaK39W2zL/9xIX17b1VgP0J9OnanNHoqI3RFxMPq3ZfWJZWKM7vu1v2tb2/q/7JHFb60FzPtxq7rt/tfMTC1MbWSfgabb1yKeqXbK/7Q0/qcHxv9d+dg/t8oY9eOv/9ytbeX8BzZL/auIAx3H/3t3rkjL359jvHE8MN46KnjYJydvfN8tvvyH4mTj/47l838ktd+vZ37tMT79+48N5H/n4/+BdKJxy5mBfNvHUwsLFyciBtJbD2+fXHuf4XHUyodWvmT5f3B/5/P/bsf/mcGIuLrKmCd+fPN6tzbjPxRn8FrEzJrG/9UUBu/bsv/9L//tFn914/+Rxph+MN9i/g+Wt9pMLbqfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPB/VImInZEqY0vlSmVsLGIoIp6MHZXahfmF509d+Oj8TNbW+P7/Suubfoeb9dT6/v+RtvrkA/XDEbEnIr7oG2zUx6Yv1GaK3nkAAAAAAAAAAAAAAAAAAAB4RAx1uf4/81df0b0DNl216A4AhZH/UF7yH8pL/kN5yX8or3Xl/9He9wPYesZ/KC/5D+Ul/6G8+urfniy6DwAAAAAAQM/sefbm7ykirr462HhkBvK2/kJ7Bmw2q3ihvNziB8rL0j8or5XO8c0BwOMvrdC+fd2vBAAAAAAAAAAAAAB65cBe1/9DWVWK7gBQmO7X/7szADzuXP8P5eUcH3D9PwAAAAAAAAAAAAA8+uYvXT47VavNXlxvYdvGXq6gsNrCn7ub/2cflf6svRCpBxm3RYWi/zIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAt/wUAAP//rJP1RA==") pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r4, &(0x7f0000000000)='7', 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x6, 0x4, 0x4096, 0x89, 0x0, 0xffffffffffffffff, 0x100000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f0000000100)={0x2, 0x0, [{0xfe, 0x0, 0x6}, {0x4b564d03, 0x0, 0x7}]}) io_getevents(0x0, 0x5, 0x5, &(0x7f0000000500)=[{}, {}, {}, {}, {}], &(0x7f00000005c0)={0x0, 0x3938700}) r6 = dup(r1) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) mkdir(&(0x7f0000000000)='./mytrace\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mytrace\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mytrace/events/xhci-hcd/xhci_address_ctrl_ctx/inject\x00', 0x2, 0x0) write$binfmt_aout(r7, &(0x7f0000000cc0)=ANY=[@ANYBLOB="0b01"], 0xb0a) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000140), 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2df766646e1f29750caff60b3306ca488e8bbf0ce5a9ca", @ANYRESHEX=r6, @ANYBLOB=',\x00']) statfs(&(0x7f00000002c0)='./file0\x00', 0x0) 0s ago: executing program 1 (id=741): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/split_huge_pages\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='/proc/self/cwd/te', 0x11) kernel console output (not intermixed with test programs): T1877] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 126.517949][ T1881] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 126.551355][ T1882] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.408: bg 0: block 401: padding at end of block bitmap is not set [ 126.594498][ T1882] EXT4-fs (loop0): Remounting filesystem read-only [ 126.602340][ T540] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 126.630999][ T540] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 126.661968][ T540] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 126.682061][ T540] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.698882][ T540] usb 2-1: Product: syz [ 126.707387][ T540] usb 2-1: Manufacturer: syz [ 126.717117][ T540] usb 2-1: SerialNumber: syz [ 126.908120][ T663] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 126.935910][ T540] usb 2-1: Unsupported UAC3 BADD profile [ 126.946331][ T540] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 126.969083][ T540] usb 2-1: USB disconnect, device number 20 [ 127.068147][ T663] usb 3-1: device descriptor read/64, error -71 [ 127.286573][ T291] EXT4-fs (loop0): unmounting filesystem. [ 127.312906][ T1887] loop0: detected capacity change from 0 to 512 [ 127.320153][ T1887] EXT4-fs (loop0): Test dummy encryption mode enabled [ 127.338209][ T663] usb 3-1: device descriptor read/64, error -71 [ 127.344350][ T1887] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 127.361729][ T1887] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 127.369431][ T1887] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 127.387057][ T589] hid (null): unknown global tag 0xc [ 127.393862][ T589] hid-generic 0000:0000:0000.0007: unknown global tag 0xc [ 127.408151][ T589] hid-generic 0000:0000:0000.0007: item 0 1 1 12 parsing failed [ 127.416042][ T589] hid-generic: probe of 0000:0000:0000.0007 failed with error -22 [ 127.431900][ T291] EXT4-fs (loop0): unmounting filesystem. [ 127.465086][ T1893] loop0: detected capacity change from 0 to 1024 [ 127.475961][ T1893] EXT4-fs: Ignoring removed orlov option [ 127.573285][ T28] kauditd_printk_skb: 581 callbacks suppressed [ 127.573302][ T28] audit: type=1400 audit(127.539:2471): avc: denied { getopt } for pid=1890 comm="syz.1.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 127.580106][ T1892] loop1: detected capacity change from 0 to 256 [ 127.611906][ T1892] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 127.624847][ T663] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 127.636215][ T396] udevd[396]: symlink '../../loop0' '/dev/disk/by-diskseq/445.tmp-b7:0' failed: Read-only file system [ 127.642120][ T330] udevd[330]: symlink '../../loop1' '/dev/disk/by-diskseq/446.tmp-b7:1' failed: Read-only file system [ 127.659717][ T396] udevd[396]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 127.666394][ T330] udevd[330]: symlink '../../loop1' '/dev/disk/by-uuid/1234-1234.tmp-b7:1' failed: Read-only file system [ 127.694287][ T330] udevd[330]: symlink '../../loop1' '/dev/disk/by-diskseq/446.tmp-b7:1' failed: Read-only file system [ 127.706210][ T330] udevd[330]: symlink '../../loop1' '/dev/disk/by-uuid/1234-1234.tmp-b7:1' failed: Read-only file system [ 127.720097][ T396] udevd[396]: symlink '../../loop0' '/dev/disk/by-diskseq/445.tmp-b7:0' failed: Read-only file system [ 127.749282][ T396] udevd[396]: symlink '../../loop0' '/dev/disk/by-diskseq/445.tmp-b7:0' failed: Read-only file system [ 127.762902][ T1898] loop0: detected capacity change from 0 to 4096 [ 127.781834][ T330] udevd[330]: symlink '../../loop3' '/dev/disk/by-diskseq/440.tmp-b7:3' failed: Read-only file system [ 127.793454][ T1898] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 127.805099][ T396] udevd[396]: symlink '../../loop0' '/dev/disk/by-diskseq/445.tmp-b7:0' failed: Read-only file system [ 127.817313][ T1898] EXT4-fs (loop0): Test dummy encryption mode enabled [ 127.828125][ T663] usb 3-1: device descriptor read/64, error -71 [ 127.835770][ T1898] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 127.847135][ T1898] System zones: 0-5 [ 127.926697][ T1907] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.413: bg 0: block 401: padding at end of block bitmap is not set [ 127.957536][ T1907] EXT4-fs (loop0): Remounting filesystem read-only [ 128.098110][ T663] usb 3-1: device descriptor read/64, error -71 [ 128.218172][ T663] usb usb3-port1: attempt power cycle [ 128.362717][ T1913] EXT4-fs: Ignoring removed orlov option [ 128.375212][ T1913] ext2: Bad value for 'usrjquota' [ 128.763236][ T1931] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.419: bg 0: block 127: padding at end of block bitmap is not set [ 128.778963][ T1931] EXT4-fs (loop1): Remounting filesystem read-only [ 128.786230][ T1931] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #11: comm syz.1.419: iget: bad extra_isize 58 (inode size 256) [ 128.801934][ T1931] EXT4-fs (loop1): Remounting filesystem read-only [ 128.808726][ T1931] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.419: error while reading EA inode 11 err=-117 [ 128.822330][ T1931] EXT4-fs (loop1): Remounting filesystem read-only [ 128.829166][ T1931] EXT4-fs (loop1): 1 orphan inode deleted [ 128.969670][ T663] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 129.019210][ T663] usb 3-1: device descriptor read/8, error -71 [ 129.058210][ T1936] erofs: (device loop3): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 129.069010][ T1936] erofs: (device loop3): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 129.080591][ T1936] erofs: (device loop3): mounted with root inode @ nid 36. [ 129.089360][ T1936] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -7 in[256, 1224] out[115] [ 129.101273][ T1936] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 129.152452][ T1940] EXT4-fs: Ignoring removed orlov option [ 129.179989][ T663] usb 3-1: device descriptor read/8, error -71 [ 129.212226][ T28] audit: type=1400 audit(129.179:2472): avc: denied { block_suspend } for pid=1944 comm="syz.3.424" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 129.304589][ T1948] exfat: Deprecated parameter 'utf8' [ 129.512331][ T1948] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 129.590590][ T1953] device gretap1 entered promiscuous mode [ 129.609013][ T28] audit: type=1400 audit(129.579:2473): avc: denied { ioctl } for pid=1955 comm="syz.4.427" path="socket:[37454]" dev="sockfs" ino=37454 ioctlcmd=0x52d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 129.659699][ T1959] set_capacity_and_notify: 5 callbacks suppressed [ 129.659718][ T1959] loop2: detected capacity change from 0 to 512 [ 129.685442][ T1959] EXT4-fs warning (device loop2): ext4_multi_mount_protect:324: fsck is running on the filesystem [ 129.701806][ T1963] loop4: detected capacity change from 0 to 16 [ 129.708397][ T1959] EXT4-fs warning (device loop2): ext4_multi_mount_protect:324: MMP failure info: last update time: 1669132791, last update node: dvyu; v-desk.muc.corp.google.cÿÿ, last update device: loop14 [ 129.728295][ T540] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 129.736647][ T1963] erofs: (device loop4): mounted with root inode @ nid 36. [ 129.799352][ T1980] loop2: detected capacity change from 0 to 4096 [ 129.806761][ T1980] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 129.815808][ T1980] EXT4-fs (loop2): Test dummy encryption mode enabled [ 129.826342][ T1980] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 129.838324][ T1980] System zones: 0-5 [ 129.844784][ T1982] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 129.876958][ T1822] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 129.887883][ T1822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 129.921410][ T1822] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 129.929884][ T1985] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.431: bg 0: block 401: padding at end of block bitmap is not set [ 129.944560][ T1985] EXT4-fs (loop2): Remounting filesystem read-only [ 129.946461][ T1822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 129.959919][ T540] usb 4-1: config 1 has an invalid interface number: 1 but max is 0 [ 129.974926][ T540] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.982709][ T1822] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 129.993007][ T540] usb 4-1: config 1 has no interface number 0 [ 129.999191][ T540] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 10 [ 130.010564][ T1822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 130.019436][ T540] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 130.031064][ T1822] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 130.040564][ T1822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 130.049643][ T540] usb 4-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice= 0.40 [ 130.066325][ T540] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=2 [ 130.074899][ T540] usb 4-1: Product: syz [ 130.081442][ T540] usb 4-1: Manufacturer: syz [ 130.086151][ T540] usb 4-1: SerialNumber: syz [ 130.199109][ T1987] loop4: detected capacity change from 0 to 16 [ 130.227218][ T1987] erofs: (device loop4): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 130.239122][ T1987] erofs: (device loop4): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 130.251631][ T1987] erofs: (device loop4): mounted with root inode @ nid 36. [ 130.268805][ T1987] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -7 in[256, 1224] out[115] [ 130.280492][ T1987] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 130.311178][ T540] usb 4-1: USB disconnect, device number 16 [ 130.331785][ T1989] SELinux: Context system_u:object_r: is not valid (left unmapped). [ 130.343492][ T28] audit: type=1400 audit(130.309:2474): avc: denied { relabelto } for pid=1988 comm="syz.4.433" name="81" dev="tmpfs" ino=485 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 130.369431][ T28] audit: type=1400 audit(130.339:2475): avc: denied { associate } for pid=1988 comm="syz.4.433" name="81" dev="tmpfs" ino=485 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:" [ 130.433274][ T28] audit: type=1400 audit(130.399:2476): avc: denied { write } for pid=1988 comm="syz.4.433" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 130.483211][ T1993] loop1: detected capacity change from 0 to 1024 [ 130.497842][ T1993] EXT4-fs: Ignoring removed orlov option [ 130.589824][ T1998] loop1: detected capacity change from 0 to 512 [ 130.629295][ T318] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 130.754160][ T2002] ip_tables: iptables: counters copy to user failed while replacing table [ 131.088153][ T540] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 131.165620][ T28] audit: type=1400 audit(131.129:2477): avc: denied { write } for pid=290 comm="syz-executor" name="81" dev="tmpfs" ino=485 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 131.190038][ T28] audit: type=1400 audit(131.129:2478): avc: denied { remove_name } for pid=290 comm="syz-executor" name="binderfs" dev="tmpfs" ino=489 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 131.215298][ T28] audit: type=1400 audit(131.139:2479): avc: denied { rmdir } for pid=290 comm="syz-executor" name="81" dev="tmpfs" ino=485 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 131.249004][ T2025] loop4: detected capacity change from 0 to 512 [ 131.256050][ T2025] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 131.267958][ T2025] EXT4-fs (loop4): 1 truncate cleaned up [ 131.273761][ T540] usb 3-1: device descriptor read/64, error -71 [ 131.281587][ T28] audit: type=1400 audit(131.249:2480): avc: denied { map } for pid=2024 comm="syz.4.441" path="/83/bus/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 131.306138][ T2025] EXT4-fs error (device loop4): ext4_find_dest_de:2115: inode #2: block 13: comm syz.4.441: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 131.326051][ T2025] EXT4-fs (loop4): Remounting filesystem read-only [ 131.586361][ T2030] device vlan2 entered promiscuous mode [ 131.592051][ T2030] device dummy0 entered promiscuous mode [ 131.667881][ T540] usb 3-1: device descriptor read/64, error -71 [ 131.750272][ T2032] loop1: detected capacity change from 0 to 16 [ 131.763920][ T2032] erofs: (device loop1): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 131.774682][ T2032] erofs: (device loop1): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 131.786289][ T2032] erofs: (device loop1): mounted with root inode @ nid 36. [ 131.799685][ T2032] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -7 in[256, 1224] out[115] [ 131.810792][ T2032] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 131.844150][ T2034] loop1: detected capacity change from 0 to 4096 [ 131.851259][ T2034] EXT4-fs: Ignoring removed oldalloc option [ 131.857773][ T2034] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 131.867430][ T2034] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=2816c128, mo2=0003] [ 131.877226][ T2034] System zones: 0-5 [ 131.933828][ T2038] loop3: detected capacity change from 0 to 1024 [ 131.941940][ T2038] EXT4-fs: Ignoring removed orlov option [ 131.948391][ T540] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 132.042887][ T2045] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 132.051727][ T2045] EXT4-fs (loop3): Test dummy encryption mode enabled [ 132.059267][ T2045] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 132.067540][ T2045] System zones: 0-5 [ 132.098123][ T540] usb 3-1: device descriptor read/64, error -71 [ 132.161070][ T2048] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.447: bg 0: block 401: padding at end of block bitmap is not set [ 132.175827][ T2048] EXT4-fs (loop3): Remounting filesystem read-only [ 132.290888][ T2050] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 132.398127][ T540] usb 3-1: device descriptor read/64, error -71 [ 132.518188][ T540] usb usb3-port1: attempt power cycle [ 132.609435][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 132.609450][ T28] audit: type=1400 audit(132.579:2488): avc: denied { sys_module } for pid=2057 comm="syz.4.450" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 132.636775][ T28] audit: type=1400 audit(132.579:2489): avc: denied { module_load } for pid=2057 comm="syz.4.450" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=177 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 132.682757][ T396] udevd[396]: symlink '../../loop1' '/dev/disk/by-diskseq/477.tmp-b7:1' failed: Read-only file system [ 132.707459][ T396] udevd[396]: symlink '../../loop1' '/dev/disk/by-diskseq/477.tmp-b7:1' failed: Read-only file system [ 132.741652][ T396] udevd[396]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 132.765383][ T330] udevd[330]: symlink '../../loop1' '/dev/disk/by-diskseq/484.tmp-b7:1' failed: Read-only file system [ 132.783111][ T2065] EXT4-fs warning (device loop4): ext4_multi_mount_protect:324: fsck is running on the filesystem [ 132.792346][ T396] udevd[396]: symlink '../../loop4' '/dev/disk/by-diskseq/483.tmp-b7:4' failed: Read-only file system [ 132.814870][ T2065] EXT4-fs warning (device loop4): ext4_multi_mount_protect:324: MMP failure info: last update time: 1669132791, last update node: dvyu; v-desk.muc.corp.google.cÿÿ, last update device: loop14 [ 132.837568][ T396] udevd[396]: symlink '../../loop4' '/dev/disk/by-diskseq/483.tmp-b7:4' failed: Read-only file system [ 132.925470][ T396] udevd[396]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 132.939166][ T396] udevd[396]: symlink '../../loop4' '/dev/disk/by-diskseq/485.tmp-b7:4' failed: Read-only file system [ 132.954723][ T396] udevd[396]: symlink '../../loop4' '/dev/disk/by-diskseq/486.tmp-b7:4' failed: Read-only file system [ 132.978244][ T540] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 133.009825][ T540] usb 3-1: device descriptor read/8, error -71 [ 133.044576][ T2070] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 133.179506][ T540] usb 3-1: device descriptor read/8, error -71 [ 133.220391][ T396] udevd[396]: symlink '../../loop4' '/dev/disk/by-diskseq/486.tmp-b7:4' failed: Read-only file system [ 133.468301][ T540] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 133.476384][ T2067] F2FS-fs (loop1): fault_injection options not supported [ 133.515709][ T2067] F2FS-fs (loop1): fault_type options not supported [ 133.525210][ T540] usb 3-1: device descriptor read/8, error -71 [ 133.562540][ T2067] F2FS-fs (loop1): invalid crc value [ 133.596696][ T2067] F2FS-fs (loop1): Found nat_bits in checkpoint [ 133.749505][ T540] usb 3-1: device descriptor read/8, error -71 [ 133.772345][ T2067] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 133.809530][ T2077] binder: BINDER_SET_CONTEXT_MGR already set [ 133.815575][ T2077] binder: 2076:2077 ioctl 4018620d 200000004a80 returned -16 [ 133.878731][ T540] usb usb3-port1: unable to enumerate USB device [ 133.955920][ T2084] erofs: (device loop0): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 133.976893][ T2084] erofs: (device loop0): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 133.989506][ T2084] erofs: (device loop0): mounted with root inode @ nid 36. [ 134.036477][ T2084] FAULT_INJECTION: forcing a failure. [ 134.036477][ T2084] name failslab, interval 1, probability 0, space 0, times 0 [ 134.056530][ T2084] CPU: 0 PID: 2084 Comm: syz.0.458 Not tainted syzkaller #0 [ 134.063911][ T2084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 134.074025][ T2084] Call Trace: [ 134.077338][ T2084] [ 134.080307][ T2084] __dump_stack+0x21/0x24 [ 134.084699][ T2084] dump_stack_lvl+0x110/0x170 [ 134.089462][ T2084] ? __cfi_dump_stack_lvl+0x8/0x8 [ 134.094574][ T2084] ? __kasan_check_write+0x14/0x20 [ 134.099749][ T2084] dump_stack+0x15/0x24 [ 134.103951][ T2084] should_fail_ex+0x3bf/0x510 [ 134.108671][ T2084] ? getname_flags+0xba/0x510 [ 134.113384][ T2084] __should_failslab+0xac/0xf0 [ 134.118196][ T2084] should_failslab+0x9/0x20 [ 134.122732][ T2084] kmem_cache_alloc+0x3b/0x320 [ 134.127538][ T2084] getname_flags+0xba/0x510 [ 134.132075][ T2084] __x64_sys_mkdirat+0x7c/0xa0 [ 134.136886][ T2084] x64_sys_call+0x73d/0x9a0 [ 134.141433][ T2084] do_syscall_64+0x4c/0xa0 [ 134.145902][ T2084] ? clear_bhb_loop+0x30/0x80 [ 134.150607][ T2084] ? clear_bhb_loop+0x30/0x80 [ 134.155316][ T2084] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 134.161243][ T2084] RIP: 0033:0x7f23e5f9cfc7 [ 134.165693][ T2084] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.185333][ T2084] RSP: 002b:00007f23e6e83e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 134.193794][ T2084] RAX: ffffffffffffffda RBX: 00007f23e6e83ee0 RCX: 00007f23e5f9cfc7 [ 134.201804][ T2084] RDX: 00000000000001ff RSI: 00002000000005c0 RDI: 00000000ffffff9c [ 134.209813][ T2084] RBP: 0000200000000b00 R08: 0000200000000140 R09: 0000000000000000 [ 134.217820][ T2084] R10: 0000200000000b00 R11: 0000000000000246 R12: 00002000000005c0 [ 134.225828][ T2084] R13: 00007f23e6e83ea0 R14: 0000000000000000 R15: 0000000000000000 [ 134.233846][ T2084] [ 134.352149][ T540] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 134.416027][ T2067] syz.1.453: attempt to access beyond end of device [ 134.416027][ T2067] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 134.444968][ T2067] syz.1.453: attempt to access beyond end of device [ 134.444968][ T2067] loop1: rw=0, sector=45096, nr_sectors = 8 limit=40427 [ 134.509968][ T2095] exfat: Deprecated parameter 'utf8' [ 134.528976][ T2095] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 134.647045][ T540] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.787354][ T540] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 134.796642][ T540] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 134.818016][ T540] usb 3-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 134.838877][ T540] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.848367][ T540] usb 3-1: Product: syz [ 134.856278][ T540] usb 3-1: Manufacturer: syz [ 134.861467][ T540] usb 3-1: SerialNumber: syz [ 134.871814][ T540] usb 3-1: config 0 descriptor?? [ 134.886516][ T287] syz-executor: attempt to access beyond end of device [ 134.886516][ T287] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 134.980338][ T2099] set_capacity_and_notify: 7 callbacks suppressed [ 134.980356][ T2099] loop3: detected capacity change from 0 to 4096 [ 135.088590][ T2110] loop1: detected capacity change from 0 to 1024 [ 135.107043][ T2110] Quota error (device loop1): do_check_range: Getting block 64 out of range 1-5 [ 135.135580][ T2110] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 135.145348][ T2110] EXT4-fs error (device loop1): ext4_acquire_dquot:6828: comm syz.1.465: Failed to acquire dquot type 0 [ 135.157076][ T2110] EXT4-fs error (device loop1): mb_free_blocks:1839: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 135.164007][ T540] usb 3-1: Found UVC 34.00 device syz (8086:0b5b) [ 135.208310][ T540] usb 3-1: No valid video chain found. [ 135.212406][ T2110] EXT4-fs (loop1): 1 truncate cleaned up [ 135.233207][ T2110] Quota error (device loop1): do_check_range: Getting block 64 out of range 1-5 [ 135.242935][ T2110] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 135.252405][ T2110] EXT4-fs error (device loop1): ext4_acquire_dquot:6828: comm syz.1.465: Failed to acquire dquot type 0 [ 135.264532][ T2118] loop0: detected capacity change from 0 to 128 [ 135.293337][ T28] audit: type=1400 audit(135.259:2490): avc: denied { write } for pid=2116 comm="syz.0.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 135.295282][ T2110] Quota error (device loop1): do_check_range: Getting block 64 out of range 1-5 [ 135.324547][ T2110] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 135.334482][ T2118] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 135.338920][ T2110] EXT4-fs error (device loop1): ext4_acquire_dquot:6828: comm syz.1.465: Failed to acquire dquot type 0 [ 135.343538][ T2118] FAT-fs (loop0): Filesystem has been set read-only [ 135.362141][ T2110] 9pnet_fd: Insufficient options for proto=fd [ 135.383985][ T2134] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 135.392773][ T2072] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 135.414346][ T2079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.421993][ T2135] loop3: detected capacity change from 0 to 512 [ 135.425227][ T2079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.446177][ T540] usb 3-1: USB disconnect, device number 18 [ 135.455064][ T2135] EXT4-fs: Ignoring removed orlov option [ 135.461397][ T2135] ext2: Bad value for 'usrjquota' [ 135.499186][ T318] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 135.548177][ T2072] usb 5-1: device descriptor read/64, error -71 [ 135.576881][ T2143] loop1: detected capacity change from 0 to 1024 [ 135.612060][ T2143] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c01c, mo2=0002] [ 135.628361][ T2143] System zones: 0-1, 3-36 [ 135.646091][ T2143] EXT4-fs error (device loop1): ext4_orphan_get:1431: comm syz.1.470: bad orphan inode 134217728 [ 135.803693][ T28] audit: type=1400 audit(135.769:2491): avc: denied { mounton } for pid=2153 comm="syz.1.473" path="/proc/284/task" dev="proc" ino=38095 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 135.828225][ T2072] usb 5-1: device descriptor read/64, error -71 [ 135.863796][ T2157] netlink: 60 bytes leftover after parsing attributes in process `syz.1.473'. [ 135.873737][ T2157] netlink: 60 bytes leftover after parsing attributes in process `syz.1.473'. [ 136.098133][ T2072] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 136.128140][ T540] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 136.238153][ T1427] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 136.258141][ T2072] usb 5-1: device descriptor read/64, error -71 [ 136.309684][ T540] usb 4-1: not running at top speed; connect to a high speed hub [ 136.326097][ T540] usb 4-1: config 1 has an invalid descriptor of length 216, skipping remainder of the config [ 136.336549][ T540] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 136.345746][ T540] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 136.369466][ T540] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 136.378740][ T540] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.386886][ T540] usb 4-1: Manufacturer: 霹梔⎗䵯Šⱽ氀Ҥ׶䈷顤륳푕䗒ባ薕絺麴ჽ낇ì¨ê³Œæ¶¿æš§é«–麧 [ 136.418112][ T1427] usb 3-1: Using ep0 maxpacket: 32 [ 136.424580][ T1427] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 136.438174][ T1427] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 136.447271][ T1427] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.458847][ T1427] usb 3-1: config 0 descriptor?? [ 136.470982][ T1427] hub 3-1:0.0: bad descriptor, ignoring hub [ 136.476986][ T1427] hub: probe of 3-1:0.0 failed with error -5 [ 136.483625][ T1427] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 136.558138][ T2072] usb 5-1: device descriptor read/64, error -71 [ 136.605371][ T540] cdc_ncm 4-1:1.0: invalid descriptor buffer length [ 136.613088][ T540] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 136.620441][ T540] cdc_ncm 4-1:1.0: bind() failure [ 136.626991][ T540] usb 4-1: USB disconnect, device number 17 [ 136.659443][ T2180] loop1: detected capacity change from 0 to 1024 [ 136.678177][ T2072] usb usb5-port1: attempt power cycle [ 136.692179][ T2180] EXT4-fs error (device loop1): ext4_acquire_dquot:6828: comm syz.1.480: Failed to acquire dquot type 0 [ 136.707262][ T2180] EXT4-fs error (device loop1): mb_free_blocks:1839: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 136.729611][ T2180] EXT4-fs (loop1): 1 truncate cleaned up [ 136.758452][ T2180] EXT4-fs error (device loop1): ext4_acquire_dquot:6828: comm syz.1.480: Failed to acquire dquot type 0 [ 136.787967][ T2180] EXT4-fs error (device loop1): ext4_acquire_dquot:6828: comm syz.1.480: Failed to acquire dquot type 0 [ 136.800683][ T2180] 9pnet_fd: Insufficient options for proto=fd [ 136.858160][ T2183] loop0: detected capacity change from 0 to 40427 [ 136.908666][ T396] I/O error, dev loop0, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 137.108129][ T2072] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 137.134910][ T2206] loop3: detected capacity change from 0 to 1024 [ 137.149398][ T2072] usb 5-1: device descriptor read/8, error -71 [ 137.168791][ T2206] EXT4-fs error (device loop3): ext4_acquire_dquot:6828: comm syz.3.486: Failed to acquire dquot type 0 [ 137.182360][ T2206] EXT4-fs error (device loop3): mb_free_blocks:1839: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 137.199486][ T2206] EXT4-fs (loop3): 1 truncate cleaned up [ 137.244417][ T2206] EXT4-fs error (device loop3): ext4_acquire_dquot:6828: comm syz.3.486: Failed to acquire dquot type 0 [ 137.299156][ T2072] usb 5-1: device descriptor read/8, error -71 [ 137.307197][ T2206] EXT4-fs error (device loop3): ext4_acquire_dquot:6828: comm syz.3.486: Failed to acquire dquot type 0 [ 137.329232][ T2206] 9pnet_fd: Insufficient options for proto=fd [ 137.536962][ T2222] x_tables: duplicate underflow at hook 1 [ 137.563103][ T2224] loop3: detected capacity change from 0 to 1024 [ 137.571558][ T2224] EXT4-fs: Ignoring removed nobh option [ 137.577281][ T2224] EXT4-fs: Ignoring removed orlov option [ 137.578398][ T2072] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 137.629046][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 137.629062][ T28] audit: type=1400 audit(137.599:2499): avc: denied { read write } for pid=2223 comm="syz.3.490" name="file1" dev="overlay" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 137.657644][ T2072] usb 5-1: device descriptor read/8, error -71 [ 137.667668][ T28] audit: type=1400 audit(137.599:2500): avc: denied { open } for pid=2223 comm="syz.3.490" path="/99/file1/file0/file1" dev="overlay" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 137.692329][ T28] audit: type=1400 audit(137.599:2501): avc: denied { setattr } for pid=2223 comm="syz.3.490" name="#21" dev="loop3" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 137.714740][ T28] audit: type=1400 audit(137.599:2502): avc: denied { link } for pid=2223 comm="syz.3.490" name="#21" dev="loop3" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 137.736367][ T28] audit: type=1400 audit(137.599:2503): avc: denied { map } for pid=2223 comm="syz.3.490" path="/99/file1/file0/file1" dev="overlay" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 137.759670][ T28] audit: type=1400 audit(137.629:2504): avc: denied { mounton } for pid=2223 comm="syz.3.490" path="/99/file1/file0/tracing" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 137.764159][ T396] udevd[396]: symlink '../../loop3' '/dev/disk/by-diskseq/511.tmp-b7:3' failed: Read-only file system [ 137.794933][ T396] udevd[396]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system [ 137.819433][ T2072] usb 5-1: device descriptor read/8, error -71 [ 137.861639][ T396] udevd[396]: symlink '../../loop0' '/dev/disk/by-diskseq/508.tmp-b7:0' failed: Read-only file system [ 137.874453][ T2245] loop0: detected capacity change from 0 to 1024 [ 137.883966][ T288] EXT4-fs unmount: 35 callbacks suppressed [ 137.883983][ T288] EXT4-fs (loop3): unmounting filesystem. [ 137.895175][ T2245] Quota error (device loop0): do_check_range: Getting block 64 out of range 1-5 [ 137.905730][ T2245] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 137.915451][ T2245] EXT4-fs error (device loop0): ext4_acquire_dquot:6828: comm syz.0.492: Failed to acquire dquot type 0 [ 137.924253][ T396] udevd[396]: symlink '../../loop0' '/dev/disk/by-diskseq/512.tmp-b7:0' failed: Read-only file system [ 137.928592][ T2245] EXT4-fs error (device loop0): mb_free_blocks:1839: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 137.952555][ T2072] usb usb5-port1: unable to enumerate USB device [ 137.959471][ T330] udevd[330]: symlink '../../loop3' '/dev/disk/by-diskseq/511.tmp-b7:3' failed: Read-only file system [ 137.961926][ T396] udevd[396]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 137.981968][ T2245] EXT4-fs (loop0): 1 truncate cleaned up [ 137.989538][ T330] udevd[330]: symlink '../../loop3' '/dev/disk/by-diskseq/511.tmp-b7:3' failed: Read-only file system [ 137.997265][ T2245] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 138.016352][ T396] udevd[396]: symlink '../../loop0' '/dev/disk/by-diskseq/512.tmp-b7:0' failed: Read-only file system [ 138.035209][ T2245] Quota error (device loop0): do_check_range: Getting block 64 out of range 1-5 [ 138.048187][ T2245] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 138.064494][ T396] udevd[396]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 138.075897][ T2245] EXT4-fs error (device loop0): ext4_acquire_dquot:6828: comm syz.0.492: Failed to acquire dquot type 0 [ 138.092700][ T396] udevd[396]: symlink '../../loop1' '/dev/disk/by-diskseq/507.tmp-b7:1' failed: Read-only file system [ 138.168216][ T2245] EXT4-fs error (device loop0): ext4_acquire_dquot:6828: comm syz.0.492: Failed to acquire dquot type 0 [ 138.196981][ T2245] 9pnet_fd: Insufficient options for proto=fd [ 138.302494][ T2258] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.310113][ T2258] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.317695][ T2258] device bridge_slave_0 entered promiscuous mode [ 138.325380][ T2258] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.332709][ T2258] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.340840][ T291] EXT4-fs (loop0): unmounting filesystem. [ 138.341687][ T2258] device bridge_slave_1 entered promiscuous mode [ 138.431232][ T309] device bridge_slave_1 left promiscuous mode [ 138.437409][ T309] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.444956][ T309] device bridge_slave_0 left promiscuous mode [ 138.451186][ T309] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.459509][ T309] device veth1_macvtap left promiscuous mode [ 138.465825][ T309] device veth0_vlan left promiscuous mode [ 138.478502][ T2269] EXT4-fs: Ignoring removed orlov option [ 138.497094][ T2269] ext2: Bad value for 'usrjquota' [ 138.632110][ T2282] ext4: Unknown parameter 'nouser_xattr' [ 138.704178][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 138.714879][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 138.731437][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 138.739906][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 138.748543][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.755644][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.763224][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 138.771953][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 138.780354][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.787408][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.795146][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 138.805495][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 138.813762][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 138.823297][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 138.831742][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 138.849951][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 138.862742][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 138.871088][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 138.879561][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 138.887648][ T2258] device veth0_vlan entered promiscuous mode [ 138.899951][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 138.909788][ T2258] device veth1_macvtap entered promiscuous mode [ 138.920690][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 138.929301][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 138.943172][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 138.951704][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 139.007947][ T2285] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 139.024483][ T2289] netlink: 'syz.2.504': attribute type 12 has an invalid length. [ 139.063063][ T2285] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 139.099284][ T2298] EXT4-fs error (device loop2): ext4_acquire_dquot:6828: comm syz.2.507: Failed to acquire dquot type 0 [ 139.114196][ T2298] EXT4-fs error (device loop2): mb_free_blocks:1839: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 139.130010][ T2298] EXT4-fs (loop2): 1 truncate cleaned up [ 139.133388][ T589] usb 3-1: USB disconnect, device number 19 [ 139.141617][ T2258] EXT4-fs (loop5): unmounting filesystem. [ 139.144752][ T2298] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 139.181975][ T2298] EXT4-fs error (device loop2): ext4_acquire_dquot:6828: comm syz.2.507: Failed to acquire dquot type 0 [ 139.226850][ T2298] EXT4-fs error (device loop2): ext4_acquire_dquot:6828: comm syz.2.507: Failed to acquire dquot type 0 [ 139.240916][ T2298] 9pnet_fd: Insufficient options for proto=fd [ 139.321121][ T2304] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 139.338252][ T589] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 139.356310][ T289] EXT4-fs (loop2): unmounting filesystem. [ 139.449905][ T2310] FAT-fs (loop2): bogus number of directory entries (65529) [ 139.466199][ T2310] FAT-fs (loop2): Can't find a valid FAT filesystem [ 139.519227][ T2317] tipc: Enabled bearer , priority 0 [ 139.530307][ T589] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.540838][ T589] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 139.549995][ T589] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 139.564915][ T589] usb 5-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 139.574273][ T589] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.582837][ T589] usb 5-1: Product: syz [ 139.587212][ T589] usb 5-1: Manufacturer: syz [ 139.592194][ T589] usb 5-1: SerialNumber: syz [ 139.610662][ T2317] device syzkaller0 entered promiscuous mode [ 139.612923][ T589] usb 5-1: config 0 descriptor?? [ 139.629716][ T2317] tipc: Resetting bearer [ 139.650607][ T309] tipc: Resetting bearer [ 139.660027][ T2319] EXT4-fs (loop1): inodes count not valid: 64 vs 32 [ 139.835839][ T2316] tipc: Resetting bearer [ 139.853569][ T2316] tipc: Disabling bearer [ 139.895411][ T2326] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 139.908983][ T2327] EXT4-fs (loop0): shut down requested (1) [ 139.935105][ T291] EXT4-fs (loop0): unmounting filesystem. [ 140.095304][ T2341] set_capacity_and_notify: 8 callbacks suppressed [ 140.095326][ T2341] loop5: detected capacity change from 0 to 1024 [ 140.130797][ T2341] EXT4-fs error (device loop5): ext4_acquire_dquot:6828: comm syz.5.521: Failed to acquire dquot type 0 [ 140.142567][ T2341] EXT4-fs error (device loop5): mb_free_blocks:1839: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 140.158449][ T2341] EXT4-fs (loop5): 1 truncate cleaned up [ 140.164210][ T2341] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 140.180769][ T2343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.192975][ T2343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.207942][ T2341] EXT4-fs error (device loop5): ext4_acquire_dquot:6828: comm syz.5.521: Failed to acquire dquot type 0 [ 140.222047][ T2341] EXT4-fs error (device loop5): ext4_acquire_dquot:6828: comm syz.5.521: Failed to acquire dquot type 0 [ 140.234174][ T2341] 9pnet_fd: Insufficient options for proto=fd [ 140.306075][ T2258] EXT4-fs (loop5): unmounting filesystem. [ 140.398628][ T2334] loop1: detected capacity change from 0 to 131072 [ 140.408301][ T2334] F2FS-fs (loop1): Invalid log sectorsize (67108873) [ 140.415284][ T2334] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 140.423853][ T2334] F2FS-fs (loop1): invalid crc value [ 140.431180][ T2334] F2FS-fs (loop1): Found nat_bits in checkpoint [ 140.469232][ T2334] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 140.476388][ T2334] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 140.588129][ T2072] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 140.655746][ T2361] loop1: detected capacity change from 0 to 4096 [ 140.662805][ T2361] ext4: Unknown parameter 'nouser_xattr' [ 140.818145][ T2072] usb 6-1: Using ep0 maxpacket: 16 [ 140.824669][ T2072] usb 6-1: config 0 has an invalid interface number: 98 but max is 0 [ 140.833087][ T2072] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.843427][ T2072] usb 6-1: config 0 has no interface number 0 [ 140.849796][ T2072] usb 6-1: config 0 interface 98 altsetting 2 bulk endpoint 0x8 has invalid maxpacket 16 [ 140.859849][ T2072] usb 6-1: config 0 interface 98 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 140.870035][ T2072] usb 6-1: config 0 interface 98 has no altsetting 0 [ 140.878968][ T2072] usb 6-1: New USB device found, idVendor=0846, idProduct=1040, bcdDevice=d0.c9 [ 140.888242][ T2072] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.896418][ T2072] usb 6-1: Product: syz [ 140.900801][ T2072] usb 6-1: Manufacturer: syz [ 140.905581][ T2072] usb 6-1: SerialNumber: syz [ 140.911444][ T2072] usb 6-1: config 0 descriptor?? [ 140.916862][ T2346] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 140.924238][ T2346] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 141.142494][ T2346] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 141.150027][ T2346] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 141.660973][ T2368] loop1: detected capacity change from 0 to 16 [ 141.667865][ T2368] erofs: (device loop1): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 141.679308][ T2368] erofs: (device loop1): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 141.690761][ T2368] erofs: (device loop1): mounted with root inode @ nid 36. [ 142.069636][ T589] usb 5-1: USB disconnect, device number 13 [ 142.160296][ T2072] asix 6-1:0.98 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 142.170568][ T2072] asix: probe of 6-1:0.98 failed with error -71 [ 142.177776][ T2072] usb 6-1: USB disconnect, device number 2 [ 142.428169][ T589] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 142.621118][ T589] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.632092][ T589] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 142.644953][ T589] usb 5-1: config 0 interface 0 has no altsetting 0 [ 142.651603][ T589] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 142.660681][ T589] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.766034][ T2383] loop2: detected capacity change from 0 to 256 [ 143.003967][ T589] usb 5-1: config 0 descriptor?? [ 143.004619][ T2383] exfat: Deprecated parameter 'utf8' [ 143.020643][ T2383] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 143.026485][ T330] udevd[330]: symlink '../../loop5' '/dev/disk/by-diskseq/532.tmp-b7:5' failed: Read-only file system [ 143.049610][ T2387] loop0: detected capacity change from 0 to 512 [ 143.071552][ T396] udevd[396]: symlink '../../loop2' '/dev/disk/by-diskseq/539.tmp-b7:2' failed: Read-only file system [ 143.096881][ T329] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 143.113108][ T329] udevd[329]: symlink '../../loop0' '/dev/disk/by-diskseq/540.tmp-b7:0' failed: Read-only file system [ 143.129486][ T330] udevd[330]: symlink '../../loop0' '/dev/disk/by-diskseq/540.tmp-b7:0' failed: Read-only file system [ 143.145414][ T330] udevd[330]: symlink '../../loop0' '/dev/disk/by-diskseq/540.tmp-b7:0' failed: Read-only file system [ 143.160853][ T330] udevd[330]: symlink '../../loop0' '/dev/disk/by-diskseq/540.tmp-b7:0' failed: Read-only file system [ 143.176158][ T330] udevd[330]: symlink '../../loop0' '/dev/disk/by-diskseq/540.tmp-b7:0' failed: Read-only file system [ 143.196503][ T330] udevd[330]: symlink '../../loop0' '/dev/disk/by-diskseq/541.tmp-b7:0' failed: Read-only file system [ 143.215209][ T396] udevd[396]: symlink '../../loop2' '/dev/disk/by-diskseq/539.tmp-b7:2' failed: Read-only file system [ 143.539874][ T2389] loop5: detected capacity change from 0 to 256 [ 143.546579][ T2389] exfat: Deprecated parameter 'utf8' [ 144.146516][ T2389] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 144.169445][ T2388] FAULT_INJECTION: forcing a failure. [ 144.169445][ T2388] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 144.182645][ T2388] CPU: 1 PID: 2388 Comm: syz.5.531 Not tainted syzkaller #0 [ 144.189965][ T2388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 144.200045][ T2388] Call Trace: [ 144.203346][ T2388] [ 144.206303][ T2388] __dump_stack+0x21/0x24 [ 144.210670][ T2388] dump_stack_lvl+0x110/0x170 [ 144.215381][ T2388] ? __cfi_dump_stack_lvl+0x8/0x8 [ 144.220447][ T2388] ? kasan_check_range+0x5f/0x2a0 [ 144.225512][ T2388] dump_stack+0x15/0x24 [ 144.229726][ T2388] should_fail_ex+0x3bf/0x510 [ 144.234428][ T2388] should_fail+0xb/0x10 [ 144.238609][ T2388] should_fail_usercopy+0x1a/0x20 [ 144.243656][ T2388] _copy_from_user+0x1e/0xc0 [ 144.248279][ T2388] __sys_bpf+0x2a0/0x850 [ 144.252549][ T2388] ? bpf_link_show_fdinfo+0x330/0x330 [ 144.257949][ T2388] ? fpregs_restore_userregs+0x128/0x260 [ 144.263633][ T2388] __x64_sys_bpf+0x7c/0x90 [ 144.268103][ T2388] x64_sys_call+0x488/0x9a0 [ 144.272648][ T2388] do_syscall_64+0x4c/0xa0 [ 144.277101][ T2388] ? clear_bhb_loop+0x30/0x80 [ 144.281809][ T2388] ? clear_bhb_loop+0x30/0x80 [ 144.286518][ T2388] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 144.292435][ T2388] RIP: 0033:0x7fe129b9e159 [ 144.296869][ T2388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.316504][ T2388] RSP: 002b:00007fe12a9b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 144.324951][ T2388] RAX: ffffffffffffffda RBX: 00007fe129e26090 RCX: 00007fe129b9e159 [ 144.332976][ T2388] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005 [ 144.340973][ T2388] RBP: 00007fe12a9b8090 R08: 0000000000000000 R09: 0000000000000000 [ 144.348971][ T2388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.356963][ T2388] R13: 00007fe129e26128 R14: 00007fe129e26090 R15: 00007ffcd6ba88f8 [ 144.364996][ T2388] [ 144.462516][ T330] udevd[330]: symlink '../../loop2' '/dev/disk/by-diskseq/539.tmp-b7:2' failed: Read-only file system [ 145.120565][ T2375] loop4: detected capacity change from 0 to 512 [ 145.154805][ T2375] EXT4-fs: Ignoring removed mblk_io_submit option [ 145.166607][ T589] hid-multitouch 0003:0EEF:72C4.0008: hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.4-1/input0 [ 145.234615][ T2375] EXT4-fs error (device loop4): ext4_iget_extra_inode:4765: inode #15: comm syz.4.527: corrupted in-inode xattr [ 145.272058][ T2407] fuse: Bad value for 'fd' [ 145.314600][ T2375] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.527: couldn't read orphan inode 15 (err -117) [ 145.363884][ T2375] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 145.389306][ T28] kauditd_printk_skb: 1436 callbacks suppressed [ 145.389322][ T28] audit: type=1400 audit(145.359:3927): avc: denied { create } for pid=2374 comm="syz.4.527" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 145.440920][ T540] usb 5-1: USB disconnect, device number 14 [ 145.490997][ T28] audit: type=1400 audit(145.359:3928): avc: denied { create } for pid=2416 comm="syz.1.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 145.728492][ T2429] loop0: detected capacity change from 0 to 16 [ 145.735422][ T2429] erofs: (device loop0): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 145.746641][ T2429] erofs: (device loop0): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 145.758405][ T2429] erofs: (device loop0): mounted with root inode @ nid 36. [ 146.028199][ T28] audit: type=1400 audit(145.979:3929): avc: denied { sqpoll } for pid=2428 comm="syz.0.542" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 146.071576][ T2436] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -7 in[256, 1224] out[115] [ 146.082672][ T2436] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 146.094469][ T2436] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -7 in[256, 1224] out[115] [ 146.105410][ T2436] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 146.224884][ T290] EXT4-fs (loop4): unmounting filesystem. [ 146.817820][ T19] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 146.874633][ T28] audit: type=1400 audit(146.809:3930): avc: denied { shutdown } for pid=2440 comm="syz.0.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 147.259856][ T2454] loop4: detected capacity change from 0 to 256 [ 147.266557][ T2454] exfat: Deprecated parameter 'utf8' [ 147.371836][ T2454] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 147.386508][ T2446] FAULT_INJECTION: forcing a failure. [ 147.386508][ T2446] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 147.399653][ T2446] CPU: 0 PID: 2446 Comm: syz.4.546 Not tainted syzkaller #0 [ 147.406968][ T2446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 147.417060][ T2446] Call Trace: [ 147.420365][ T2446] [ 147.423322][ T2446] __dump_stack+0x21/0x24 [ 147.427692][ T2446] dump_stack_lvl+0x110/0x170 [ 147.432416][ T2446] ? __cfi_dump_stack_lvl+0x8/0x8 [ 147.437489][ T2446] ? memcpy+0x56/0x70 [ 147.441508][ T2446] dump_stack+0x15/0x24 [ 147.445714][ T2446] should_fail_ex+0x3bf/0x510 [ 147.450444][ T2446] should_fail+0xb/0x10 [ 147.454637][ T2446] should_fail_usercopy+0x1a/0x20 [ 147.459696][ T2446] strncpy_from_user+0x24/0x2c0 [ 147.464591][ T2446] bpf_prog_load+0x1f1/0x1670 [ 147.469484][ T2446] ? map_freeze+0x3a0/0x3a0 [ 147.474042][ T2446] ? selinux_bpf+0xc7/0xf0 [ 147.478497][ T2446] ? security_bpf+0x93/0xb0 [ 147.483052][ T2446] __sys_bpf+0x57b/0x850 [ 147.487364][ T2446] ? bpf_link_show_fdinfo+0x330/0x330 [ 147.492761][ T2446] ? __cfi_ksys_write+0x10/0x10 [ 147.497620][ T2446] ? debug_smp_processor_id+0x17/0x20 [ 147.503007][ T2446] __x64_sys_bpf+0x7c/0x90 [ 147.507434][ T2446] x64_sys_call+0x488/0x9a0 [ 147.511990][ T2446] do_syscall_64+0x4c/0xa0 [ 147.516442][ T2446] ? clear_bhb_loop+0x30/0x80 [ 147.521147][ T2446] ? clear_bhb_loop+0x30/0x80 [ 147.525841][ T2446] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 147.531760][ T2446] RIP: 0033:0x7f835499e159 [ 147.536205][ T2446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.555845][ T2446] RSP: 002b:00007f835591b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 147.564294][ T2446] RAX: ffffffffffffffda RBX: 00007f8354c26090 RCX: 00007f835499e159 [ 147.572277][ T2446] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005 [ 147.580264][ T2446] RBP: 00007f835591b090 R08: 0000000000000000 R09: 0000000000000000 [ 147.588263][ T2446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.596251][ T2446] R13: 00007f8354c26128 R14: 00007f8354c26090 R15: 00007ffcf034eac8 [ 147.604236][ T2446] [ 147.613924][ T19] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.624194][ T19] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 147.633235][ T19] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 147.647871][ T19] usb 3-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 147.652315][ T2453] loop1: detected capacity change from 0 to 2048 [ 147.657586][ T19] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.671751][ T19] usb 3-1: Product: syz [ 147.676035][ T19] usb 3-1: Manufacturer: syz [ 147.680921][ T19] usb 3-1: SerialNumber: syz [ 147.686610][ T19] usb 3-1: config 0 descriptor?? [ 147.693147][ T2453] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 147.703545][ T28] audit: type=1400 audit(147.669:3931): avc: denied { read } for pid=2447 comm="syz.1.548" path="/105/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 147.704453][ T2453] fs-verity: sha512 using implementation "sha512-avx2" [ 147.784986][ T28] audit: type=1400 audit(147.669:3932): avc: denied { ioctl } for pid=2447 comm="syz.1.548" path="/105/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=18 ioctlcmd=0x6685 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 147.896257][ T19] usb 3-1: Found UVC 34.00 device syz (8086:0b5b) [ 147.897903][ T2460] netlink: 12 bytes leftover after parsing attributes in process `syz.4.550'. [ 147.903090][ T19] usb 3-1: No valid video chain found. [ 148.029661][ T2461] loop4: detected capacity change from 0 to 40427 [ 148.039327][ T287] EXT4-fs (loop1): unmounting filesystem. [ 148.045207][ T2461] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 148.045229][ T2461] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 148.049792][ T2461] F2FS-fs (loop4): invalid crc value [ 148.070406][ T330] udevd[330]: symlink '../../loop1' '/dev/disk/by-diskseq/550.tmp-b7:1' failed: Read-only file system [ 148.089723][ T396] udevd[396]: symlink '../../loop4' '/dev/disk/by-diskseq/552.tmp-b7:4' failed: Read-only file system [ 148.103519][ T2425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.113559][ T2425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.120249][ T330] udevd[330]: symlink '../../loop1' '/dev/disk/by-diskseq/550.tmp-b7:1' failed: Read-only file system [ 148.125024][ T396] udevd[396]: symlink '../../loop4' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:4' failed: Read-only file system [ 148.141269][ T2467] loop1: detected capacity change from 0 to 1024 [ 148.153932][ T2461] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 148.166924][ T540] usb 3-1: USB disconnect, device number 20 [ 148.191912][ T330] udevd[330]: symlink '../../loop1' '/dev/disk/by-diskseq/554.tmp-b7:1' failed: Read-only file system [ 148.205953][ T330] udevd[330]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 148.210135][ T2467] Quota error (device loop1): do_check_range: Getting block 64 out of range 1-5 [ 148.221977][ T2461] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 148.233944][ T2461] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 148.246914][ T2467] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 148.265654][ T396] udevd[396]: symlink '../../loop4' '/dev/disk/by-diskseq/552.tmp-b7:4' failed: Read-only file system [ 148.268222][ T2467] EXT4-fs error (device loop1): ext4_acquire_dquot:6828: comm syz.1.552: Failed to acquire dquot type 0 [ 148.280771][ T396] udevd[396]: symlink '../../loop4' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:4' failed: Read-only file system [ 148.290722][ T2467] EXT4-fs error (device loop1): mb_free_blocks:1839: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 148.321046][ T2467] EXT4-fs (loop1): 1 truncate cleaned up [ 148.326895][ T2467] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 148.346522][ T396] udevd[396]: symlink '../../loop1' '/dev/disk/by-diskseq/554.tmp-b7:1' failed: Read-only file system [ 148.364779][ T396] udevd[396]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 148.387405][ T2477] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 148.391521][ T2467] Quota error (device loop1): do_check_range: Getting block 64 out of range 1-5 [ 148.410193][ T2477] loop5: detected capacity change from 0 to 512 [ 148.426874][ T2477] EXT4-fs: Ignoring removed orlov option [ 148.428299][ T2467] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 148.437842][ T2477] ext2: Bad value for 'usrjquota' [ 148.448215][ T2467] EXT4-fs error (device loop1): ext4_acquire_dquot:6828: comm syz.1.552: Failed to acquire dquot type 0 [ 148.498827][ T2481] FAULT_INJECTION: forcing a failure. [ 148.498827][ T2481] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.513404][ T2479] loop5: detected capacity change from 0 to 4096 [ 148.520524][ T2481] CPU: 1 PID: 2481 Comm: syz.0.555 Not tainted syzkaller #0 [ 148.527861][ T2481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 148.537948][ T2481] Call Trace: [ 148.541264][ T2481] [ 148.544241][ T2481] __dump_stack+0x21/0x24 [ 148.544982][ T2479] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 148.548624][ T2481] dump_stack_lvl+0x110/0x170 [ 148.548662][ T2481] ? __cfi_dump_stack_lvl+0x8/0x8 [ 148.567110][ T2481] ? do_vfs_ioctl+0x1b68/0x1cd0 [ 148.572047][ T2481] dump_stack+0x15/0x24 [ 148.576254][ T2481] should_fail_ex+0x3bf/0x510 [ 148.580977][ T2481] should_fail+0xb/0x10 [ 148.585177][ T2481] should_fail_usercopy+0x1a/0x20 [ 148.586406][ T2479] EXT4-fs (loop5): Test dummy encryption mode enabled [ 148.590254][ T2481] _copy_from_user+0x1e/0xc0 [ 148.590291][ T2481] blkdev_common_ioctl+0x451/0x2010 [ 148.590318][ T2481] ? ioctl_has_perm+0x1b8/0x4f0 [ 148.611757][ T2481] ? blkdev_bszset+0x1f0/0x1f0 [ 148.616554][ T2481] ? has_cap_mac_admin+0x370/0x370 [ 148.621702][ T2481] ? vfs_write+0xa51/0xd00 [ 148.626143][ T2481] ? selinux_file_ioctl+0x3ad/0x4c0 [ 148.631375][ T2481] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 148.636945][ T2481] ? mutex_unlock+0x8f/0x230 [ 148.641553][ T2481] ? __cfi_mutex_unlock+0x10/0x10 [ 148.646595][ T2481] blkdev_ioctl+0x2a5/0x720 [ 148.651126][ T2481] ? __cfi_blkdev_ioctl+0x10/0x10 [ 148.656169][ T2481] ? security_file_ioctl+0x95/0xc0 [ 148.661304][ T2481] ? __cfi_blkdev_ioctl+0x10/0x10 [ 148.666349][ T2481] __se_sys_ioctl+0x12f/0x1b0 [ 148.671054][ T2481] __x64_sys_ioctl+0x7b/0x90 [ 148.675664][ T2481] x64_sys_call+0x58b/0x9a0 [ 148.680194][ T2481] do_syscall_64+0x4c/0xa0 [ 148.684642][ T2481] ? clear_bhb_loop+0x30/0x80 [ 148.689340][ T2481] ? clear_bhb_loop+0x30/0x80 [ 148.694044][ T2481] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 148.699953][ T2481] RIP: 0033:0x7f23e5f9e159 [ 148.704425][ T2481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.724074][ T2481] RSP: 002b:00007f23e6e84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 148.732512][ T2481] RAX: ffffffffffffffda RBX: 00007f23e6225fa0 RCX: 00007f23e5f9e159 [ 148.740507][ T2481] RDX: 0000200000000040 RSI: 00000000401070cd RDI: 0000000000000006 [ 148.748500][ T2481] RBP: 00007f23e6e84090 R08: 0000000000000000 R09: 0000000000000000 [ 148.756489][ T2481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.764485][ T2481] R13: 00007f23e6226038 R14: 00007f23e6225fa0 R15: 00007ffde1314fb8 [ 148.772492][ T2481] [ 148.776372][ T2072] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 148.778916][ T2479] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 148.798217][ T2479] System zones: 0-5 [ 148.808429][ T2479] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 148.843262][ T2486] loop0: detected capacity change from 0 to 256 [ 148.863376][ T2486] exfat: Bad value for 'time_offset' [ 148.876369][ T2467] EXT4-fs error (device loop1): ext4_acquire_dquot:6828: comm syz.1.552: Failed to acquire dquot type 0 [ 148.925563][ T2467] 9pnet_fd: Insufficient options for proto=fd [ 148.999194][ T2072] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 149.010453][ T287] EXT4-fs (loop1): unmounting filesystem. [ 149.016588][ T2494] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.554: bg 0: block 401: padding at end of block bitmap is not set [ 149.035485][ T2072] usb 5-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 149.061072][ T2072] usb 5-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 0.84 [ 149.071980][ T2494] EXT4-fs (loop5): Remounting filesystem read-only [ 149.078729][ T2072] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 149.086854][ T2072] usb 5-1: Product: syz [ 149.099225][ T2072] usb 5-1: SerialNumber: syz [ 149.117360][ T2072] usb 5-1: bad CDC descriptors [ 149.316703][ T589] usb 5-1: USB disconnect, device number 15 [ 149.382012][ T2258] EXT4-fs (loop5): unmounting filesystem. [ 149.404268][ T2509] loop5: detected capacity change from 0 to 512 [ 149.411114][ T2509] EXT4-fs: Ignoring removed orlov option [ 149.416859][ T2509] ext2: Bad value for 'usrjquota' [ 150.208115][ T19] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 150.375431][ T2528] loop4: detected capacity change from 0 to 512 [ 150.383734][ T2528] EXT4-fs: Ignoring removed orlov option [ 150.389699][ T2528] ext2: Bad value for 'usrjquota' [ 150.401353][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 150.401369][ T28] audit: type=1400 audit(150.369:3935): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 150.431616][ T19] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.440550][ T2530] loop4: detected capacity change from 0 to 512 [ 150.442018][ T19] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 150.457414][ T19] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 150.472012][ T19] usb 2-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 150.472037][ T2530] EXT4-fs (loop4): 1 truncate cleaned up [ 150.484176][ T19] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.494976][ T2530] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 150.495015][ T19] usb 2-1: Product: syz [ 150.508303][ T19] usb 2-1: Manufacturer: syz [ 150.512936][ T19] usb 2-1: SerialNumber: syz [ 150.521158][ T19] usb 2-1: config 0 descriptor?? [ 150.749328][ T19] usb 2-1: Found UVC 34.00 device syz (8086:0b5b) [ 150.755818][ T19] usb 2-1: No valid video chain found. [ 150.974690][ T2515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.984547][ T2515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.998627][ T540] usb 2-1: USB disconnect, device number 21 [ 151.068118][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 151.113734][ T2535] loop2: detected capacity change from 0 to 128 [ 151.137434][ T28] audit: type=1400 audit(151.099:3936): avc: denied { mounton } for pid=2534 comm="syz.2.573" path="/113/file0/file0" dev="loop2" ino=1048623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 151.646627][ T290] EXT4-fs (loop4): unmounting filesystem. [ 151.680791][ T2540] loop2: detected capacity change from 0 to 1024 [ 151.699867][ T2540] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 151.998216][ T1427] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 152.034195][ T2549] netlink: 'syz.1.577': attribute type 4 has an invalid length. [ 152.119935][ T2554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.128595][ T2554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.209266][ T2562] loop0: detected capacity change from 0 to 512 [ 152.216725][ T2562] EXT4-fs warning (device loop0): ext4_multi_mount_protect:324: fsck is running on the filesystem [ 152.228007][ T2562] EXT4-fs warning (device loop0): ext4_multi_mount_protect:324: MMP failure info: last update time: 1669132791, last update node: dvyu; v-desk.muc.corp.google.cÿÿ, last update device: loop14 [ 152.248196][ T1427] usb 5-1: unable to get BOS descriptor or descriptor too short [ 152.264109][ T1427] usb 5-1: config 1 has an invalid descriptor of length 98, skipping remainder of the config [ 152.283744][ T1427] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 152.298863][ T1427] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 152.317102][ T1427] usb 5-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 152.328161][ T589] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 152.346157][ T1427] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 152.392729][ T1427] usb 5-1: Product: syz [ 152.397008][ T1427] usb 5-1: Manufacturer: syz [ 152.411134][ T28] audit: type=1400 audit(152.379:3937): avc: denied { mounton } for pid=2539 comm="syz.2.575" path="/114/file1/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 152.412014][ T2564] overlayfs: './bus' not a directory [ 152.782266][ T28] audit: type=1400 audit(152.749:3938): avc: denied { map } for pid=2537 comm="syz.4.574" path="socket:[40406]" dev="sockfs" ino=40406 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 152.857649][ T2574] loop5: detected capacity change from 0 to 512 [ 152.905293][ T28] audit: type=1400 audit(152.779:3939): avc: denied { write } for pid=2537 comm="syz.4.574" path="socket:[40406]" dev="sockfs" ino=40406 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 152.932641][ T2574] EXT4-fs warning (device loop5): ext4_multi_mount_protect:324: fsck is running on the filesystem [ 152.967593][ T2574] EXT4-fs warning (device loop5): ext4_multi_mount_protect:324: MMP failure info: last update time: 1669132791, last update node: dvyu; v-desk.muc.corp.google.cÿÿ, last update device: loop14 [ 153.569282][ T1427] usb 5-1: Found UVC 1.00 device syz (8086:0ad2) [ 153.576218][ T1427] usb 5-1: Failed to query (GET_INFO) UVC control 9 on unit 108: -71 (exp. 1). [ 153.585512][ T1427] usb 5-1: Failed to query (GET_INFO) UVC control 11 on unit 108: -71 (exp. 1). [ 153.594846][ T1427] usb 5-1: Failed to query (GET_INFO) UVC control 13 on unit 108: -71 (exp. 1). [ 153.604377][ T1427] usb 5-1: Failed to query (GET_INFO) UVC control 2 on unit 108: -71 (exp. 1). [ 153.613635][ T1427] usb 5-1: Failed to query (GET_INFO) UVC control 3 on unit 108: -71 (exp. 1). [ 153.625275][ T1427] usb 5-1: Failed to query (GET_INFO) UVC control 6 on unit 108: -71 (exp. 1). [ 153.626377][ T330] udevd[330]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 153.638192][ T589] usb 2-1: device descriptor read/64, error -71 [ 153.650780][ T330] udevd[330]: symlink '../../loop5' '/dev/disk/by-diskseq/574.tmp-b7:5' failed: Read-only file system [ 153.653257][ T1427] usb 5-1: Failed to query (GET_INFO) UVC control 7 on unit 108: -71 (exp. 1). [ 153.672657][ T1427] usb 5-1: Failed to query (GET_INFO) UVC control 8 on unit 108: -71 (exp. 1). [ 153.682290][ T330] udevd[330]: symlink '../../loop5' '/dev/disk/by-diskseq/574.tmp-b7:5' failed: Read-only file system [ 153.682302][ T1427] usb 5-1: Failed to query (GET_INFO) UVC control 10 on unit 108: -71 (exp. 1). [ 153.702911][ T1427] usb 5-1: Failed to query (GET_INFO) UVC control 5 on unit 108: -71 (exp. 1). [ 153.712624][ T1427] usb 5-1: Failed to query (GET_INFO) UVC control 16 on unit 108: -71 (exp. 1). [ 153.723896][ T1427] usb 5-1: Failed to query (GET_INFO) UVC control 13 on unit 108: -71 (exp. 1). [ 153.736870][ T1427] usb 5-1: Failed to query (GET_INFO) UVC control 14 on unit 108: -71 (exp. 1). [ 153.738011][ T289] EXT4-fs (loop2): unmounting filesystem. [ 153.749493][ T1427] usb 5-1: Failed to query (GET_INFO) UVC control 17 on unit 108: -71 (exp. 1). [ 153.761266][ T1427] usb 5-1: No streaming interface found for terminal 2. [ 153.770545][ T1427] usb 5-1: USB disconnect, device number 16 [ 153.804027][ T396] udevd[396]: symlink '../../loop2' '/dev/disk/by-diskseq/571.tmp-b7:2' failed: Read-only file system [ 153.822620][ T396] udevd[396]: symlink '../../loop2' '/dev/disk/by-diskseq/571.tmp-b7:2' failed: Read-only file system [ 153.837653][ T396] udevd[396]: symlink '../../loop2' '/dev/disk/by-diskseq/576.tmp-b7:2' failed: Read-only file system [ 153.867749][ T330] udevd[330]: symlink '../../loop4' '/dev/disk/by-diskseq/569.tmp-b7:4' failed: Read-only file system [ 153.948175][ T2577] loop5: detected capacity change from 0 to 512 [ 153.948182][ T589] usb 2-1: device descriptor read/64, error -71 [ 153.961970][ T2577] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 153.973637][ T2577] EXT4-fs error (device loop5): ext4_orphan_get:1431: comm syz.5.583: bad orphan inode 131083 [ 153.984219][ T2577] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 153.986454][ T396] udevd[396]: symlink '../../loop5' '/dev/disk/by-diskseq/577.tmp-b7:5' failed: Read-only file system [ 154.005510][ T396] udevd[396]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 154.005802][ T2577] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 13: comm syz.5.583: path /newroot/13/file1: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=2, rec_len=65535, size=1024 fake=1 [ 154.038711][ T396] udevd[396]: symlink '../../loop5' '/dev/disk/by-diskseq/577.tmp-b7:5' failed: Read-only file system [ 154.088250][ T307] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 154.218123][ T589] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 154.269292][ T307] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 154.280188][ T1427] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 154.287790][ T307] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 179, changing to 11 [ 154.299577][ T307] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 154.312662][ T307] usb 3-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.00 [ 154.321881][ T307] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.330672][ T307] usb 3-1: config 0 descriptor?? [ 154.368135][ T589] usb 2-1: device descriptor read/64, error -71 [ 154.478149][ T1427] usb 5-1: device descriptor read/64, error -71 [ 154.638146][ T589] usb 2-1: device descriptor read/64, error -71 [ 154.739171][ T307] wacom 0003:056A:00B3.0009: unbalanced collection at end of report description [ 154.748442][ T1427] usb 5-1: device descriptor read/64, error -71 [ 154.754899][ T307] wacom 0003:056A:00B3.0009: parse failed [ 154.760759][ T589] usb usb2-port1: attempt power cycle [ 154.766221][ T307] wacom: probe of 0003:056A:00B3.0009 failed with error -22 [ 154.939754][ T2576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.948394][ T2576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.956675][ T307] usb 3-1: USB disconnect, device number 21 [ 155.028184][ T1427] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 155.093865][ T2590] loop1: detected capacity change from 0 to 512 [ 155.178141][ T1427] usb 5-1: device descriptor read/64, error -71 [ 155.448139][ T1427] usb 5-1: device descriptor read/64, error -71 [ 155.568238][ T1427] usb usb5-port1: attempt power cycle [ 155.581380][ T2601] loop2: detected capacity change from 0 to 512 [ 155.600306][ T2601] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 155.608635][ T589] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 155.637128][ T2601] netlink: 24 bytes leftover after parsing attributes in process `syz.2.588'. [ 155.649654][ T589] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.659863][ T589] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 155.668959][ T589] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 155.683311][ T589] usb 2-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 155.692600][ T589] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.700670][ T589] usb 2-1: Product: syz [ 155.704855][ T589] usb 2-1: Manufacturer: syz [ 155.709574][ T589] usb 2-1: SerialNumber: syz [ 155.714755][ T589] usb 2-1: config 0 descriptor?? [ 155.922445][ T589] usb 2-1: Found UVC 34.00 device syz (8086:0b5b) [ 155.929002][ T589] usb 2-1: No valid video chain found. [ 155.978214][ T1427] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 156.009304][ T1427] usb 5-1: device descriptor read/8, error -71 [ 156.124982][ T2598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.133811][ T2598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.144942][ T2072] usb 2-1: USB disconnect, device number 24 [ 156.159131][ T1427] usb 5-1: device descriptor read/8, error -71 [ 156.336862][ T289] EXT4-fs (loop2): unmounting filesystem. [ 156.365988][ T2607] binder: 2606:2607 ioctl 4018620d 0 returned -22 [ 156.428227][ T1427] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 156.470138][ T1427] usb 5-1: device descriptor read/8, error -71 [ 156.619342][ T1427] usb 5-1: device descriptor read/8, error -71 [ 156.664756][ T2614] loop1: detected capacity change from 0 to 1024 [ 156.671838][ T2614] EXT4-fs: Ignoring removed mblk_io_submit option [ 156.678665][ T2614] EXT4-fs: Ignoring removed oldalloc option [ 156.689760][ T2614] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 156.705785][ T2614] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.593: bg 0: block 112: padding at end of block bitmap is not set [ 156.720477][ T2614] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 156.732929][ T2614] EXT4-fs (loop1): This should not happen!! Data will be lost [ 156.732929][ T2614] [ 156.738808][ T1427] usb usb5-port1: unable to enumerate USB device [ 156.742671][ T2614] EXT4-fs (loop1): Total free blocks count 0 [ 156.781603][ T2614] EXT4-fs (loop1): Free/Dirty block details [ 156.787584][ T2614] EXT4-fs (loop1): free_blocks=0 [ 156.792666][ T2614] EXT4-fs (loop1): dirty_blocks=64 [ 156.797833][ T2614] EXT4-fs (loop1): Block reservation details [ 156.804324][ T2614] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 156.821207][ T2258] EXT4-fs (loop5): unmounting filesystem. [ 156.838799][ T287] EXT4-fs (loop1): unmounting filesystem. [ 156.863668][ T2622] loop5: detected capacity change from 0 to 16 [ 156.887212][ T2622] erofs: (device loop5): mounted with root inode @ nid 36. [ 156.896732][ T2619] sch_fq: defrate 4294964870 ignored. [ 156.917591][ T2622] overlayfs: missing 'lowerdir' [ 156.966888][ T2629] syz.5.597[2629] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 156.967041][ T2629] syz.5.597[2629] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 156.978619][ T1427] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 157.031021][ T2633] netlink: 3568 bytes leftover after parsing attributes in process `syz.5.598'. [ 157.046269][ T28] audit: type=1400 audit(157.010:3940): avc: denied { setopt } for pid=2631 comm="syz.5.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 157.098767][ T2639] loop4: detected capacity change from 0 to 512 [ 157.108934][ T2639] EXT4-fs: Ignoring removed i_version option [ 157.122129][ T2639] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002e01c, mo2=0002] [ 157.139331][ T2639] System zones: 1-12 [ 157.151602][ T2639] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.599: invalid indirect mapped block 8 (level 2) [ 157.165267][ T2639] EXT4-fs (loop4): 1 truncate cleaned up [ 157.171007][ T2639] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 157.199545][ T290] EXT4-fs (loop4): unmounting filesystem. [ 157.215935][ T2645] binder: 2644:2645 ioctl 4018620d 0 returned -22 [ 157.286425][ T2655] loop2: detected capacity change from 0 to 512 [ 157.313752][ T2655] EXT4-fs warning (device loop2): ext4_multi_mount_protect:324: fsck is running on the filesystem [ 157.342504][ T2655] EXT4-fs warning (device loop2): ext4_multi_mount_protect:324: MMP failure info: last update time: 1669132791, last update node: dvyu; v-desk.muc.corp.google.cÿÿ, last update device: loop14 [ 157.342889][ T28] audit: type=1400 audit(157.310:3941): avc: denied { write } for pid=2658 comm="syz.1.608" path="socket:[40722]" dev="sockfs" ino=40722 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 157.385845][ T2660] loop5: detected capacity change from 0 to 4096 [ 157.441843][ T396] I/O error, dev loop5, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 157.523884][ T2660] netlink: 8 bytes leftover after parsing attributes in process `syz.5.609'. [ 157.530840][ T307] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 157.675047][ T2677] binder: 2675:2677 ioctl 4018620d 0 returned -22 [ 157.899029][ T2680] loop5: detected capacity change from 0 to 2048 [ 157.980440][ T2680] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 158.466630][ T2258] EXT4-fs (loop5): unmounting filesystem. [ 158.502330][ T2690] sd 0:0:1:0: PR command failed: 1026 [ 158.507902][ T2690] sd 0:0:1:0: Sense Key : 0x5 [current] [ 158.514223][ T2690] sd 0:0:1:0: ASC=0x20 ASCQ=0x0 [ 158.520685][ T307] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 158.530970][ T307] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 158.540106][ T307] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 158.564058][ T307] usb 1-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 158.573801][ T2692] loop5: detected capacity change from 0 to 512 [ 158.580244][ T307] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.589372][ T307] usb 1-1: Product: syz [ 158.589600][ T2692] EXT4-fs (loop5): Test dummy encryption mode enabled [ 158.593792][ T307] usb 1-1: Manufacturer: syz [ 158.604291][ T2692] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 158.605808][ T307] usb 1-1: SerialNumber: syz [ 158.616954][ T2692] EXT4-fs (loop5): Errors on filesystem, clearing orphan list. [ 158.627027][ T2692] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 158.630660][ T307] usb 1-1: config 0 descriptor?? [ 158.641557][ T1427] usb 5-1: new low-speed USB device number 22 using dummy_hcd [ 158.644150][ T39] hid (null): unknown global tag 0xc [ 158.655451][ T39] hid-generic 0000:0000:0000.000A: unknown global tag 0xc [ 158.662880][ T39] hid-generic 0000:0000:0000.000A: item 0 1 1 12 parsing failed [ 158.666609][ T396] udevd[396]: symlink '../../loop5' '/dev/disk/by-diskseq/595.tmp-b7:5' failed: Read-only file system [ 158.671163][ T39] hid-generic: probe of 0000:0000:0000.000A failed with error -22 [ 158.686972][ T396] udevd[396]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 158.706361][ T2258] EXT4-fs (loop5): unmounting filesystem. [ 158.712670][ T396] udevd[396]: symlink '../../loop5' '/dev/disk/by-diskseq/595.tmp-b7:5' failed: Read-only file system [ 158.724557][ T396] udevd[396]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 158.739813][ T2695] loop5: detected capacity change from 0 to 16 [ 158.746618][ T2695] erofs: (device loop5): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 158.753547][ T396] udevd[396]: symlink '../../loop5' '/dev/disk/by-diskseq/595.tmp-b7:5' failed: Read-only file system [ 158.759264][ T2695] erofs: (device loop5): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 158.769042][ T24] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 158.787050][ T2695] erofs: (device loop5): mounted with root inode @ nid 36. [ 158.790351][ T396] udevd[396]: symlink '../../loop5' '/dev/disk/by-uuid/72b14b28-1ccd-4731-be5e-c43bd7b347d4.tmp-b7:5' failed: Read-only file system [ 158.813749][ T396] udevd[396]: symlink '../../loop5' '/dev/disk/by-diskseq/595.tmp-b7:5' failed: Read-only file system [ 158.825827][ T396] udevd[396]: symlink '../../loop5' '/dev/disk/by-uuid/72b14b28-1ccd-4731-be5e-c43bd7b347d4.tmp-b7:5' failed: Read-only file system [ 158.828566][ T1427] usb 5-1: Invalid ep0 maxpacket: 64 [ 158.845599][ T1427] usb usb5-port1: attempt power cycle [ 158.851748][ T396] udevd[396]: symlink '../../loop5' '/dev/disk/by-diskseq/597.tmp-b7:5' failed: Read-only file system [ 158.861873][ T307] usb 1-1: Found UVC 34.00 device syz (8086:0b5b) [ 158.869682][ T307] usb 1-1: No valid video chain found. [ 158.875710][ T396] udevd[396]: symlink '../../loop5' '/dev/disk/by-diskseq/597.tmp-b7:5' failed: Read-only file system [ 158.958159][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 158.967224][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.977300][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 158.986597][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.995477][ T24] usb 2-1: config 0 descriptor?? [ 159.001490][ T24] hub 2-1:0.0: bad descriptor, ignoring hub [ 159.007430][ T24] hub: probe of 2-1:0.0 failed with error -5 [ 159.013879][ T24] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 159.065911][ T2647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.074532][ T2647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.085805][ T307] usb 1-1: USB disconnect, device number 9 [ 159.288138][ T1427] usb 5-1: new low-speed USB device number 23 using dummy_hcd [ 159.318500][ T1427] usb 5-1: Invalid ep0 maxpacket: 64 [ 159.468156][ T1427] usb 5-1: new low-speed USB device number 24 using dummy_hcd [ 159.498557][ T1427] usb 5-1: Invalid ep0 maxpacket: 64 [ 159.503937][ T1427] usb usb5-port1: unable to enumerate USB device [ 159.605740][ T2706] loop0: detected capacity change from 0 to 1024 [ 159.617447][ T2706] Quota error (device loop0): do_check_range: Getting block 64 out of range 1-5 [ 159.626954][ T2706] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 159.637424][ T2706] EXT4-fs error (device loop0): ext4_acquire_dquot:6828: comm syz.0.625: Failed to acquire dquot type 0 [ 159.649071][ T2706] EXT4-fs error (device loop0): mb_free_blocks:1839: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 159.664129][ T2706] EXT4-fs (loop0): 1 truncate cleaned up [ 159.670126][ T2706] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 159.686601][ T2706] Quota error (device loop0): do_check_range: Getting block 64 out of range 1-5 [ 159.695944][ T2706] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 159.705415][ T2706] EXT4-fs error (device loop0): ext4_acquire_dquot:6828: comm syz.0.625: Failed to acquire dquot type 0 [ 159.719361][ T2706] Quota error (device loop0): do_check_range: Getting block 64 out of range 1-5 [ 159.728761][ T2706] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 159.738245][ T2706] EXT4-fs error (device loop0): ext4_acquire_dquot:6828: comm syz.0.625: Failed to acquire dquot type 0 [ 159.750513][ T2706] 9pnet_fd: Insufficient options for proto=fd [ 159.794681][ T291] EXT4-fs (loop0): unmounting filesystem. [ 159.819684][ T24] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 159.845932][ T2714] EXT4-fs warning (device loop0): ext4_multi_mount_protect:324: fsck is running on the filesystem [ 159.856741][ T2714] EXT4-fs warning (device loop0): ext4_multi_mount_protect:324: MMP failure info: last update time: 1669132791, last update node: dvyu; v-desk.muc.corp.google.cÿÿ, last update device: loop14 [ 160.092908][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.106711][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 160.117536][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 160.151838][ T24] usb 3-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 160.162595][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.176081][ T24] usb 3-1: Product: syz [ 160.181128][ T24] usb 3-1: Manufacturer: syz [ 160.186285][ T24] usb 3-1: SerialNumber: syz [ 160.238583][ T24] usb 3-1: config 0 descriptor?? [ 161.104661][ T2725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.124041][ T2725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.140245][ T2723] set_capacity_and_notify: 1 callbacks suppressed [ 161.140263][ T2723] loop4: detected capacity change from 0 to 512 [ 161.156538][ T2723] FAT-fs (loop4): error, corrupted file size (i_pos 51, 9216) [ 161.167126][ T2723] netlink: 'syz.4.630': attribute type 32 has an invalid length. [ 161.242421][ T2729] loop0: detected capacity change from 0 to 512 [ 161.250215][ T2729] EXT4-fs (loop0): Test dummy encryption mode enabled [ 161.258322][ T2729] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 161.269710][ T2729] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 161.277475][ T2729] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 161.289683][ T1427] hid (null): unknown global tag 0xc [ 161.295919][ T1427] hid-generic 0000:0000:0000.000B: unknown global tag 0xc [ 161.303303][ T1427] hid-generic 0000:0000:0000.000B: item 0 1 1 12 parsing failed [ 161.311188][ T1427] hid-generic: probe of 0000:0000:0000.000B failed with error -22 [ 161.326606][ T291] EXT4-fs (loop0): unmounting filesystem. [ 161.368545][ T2736] sd 0:0:1:0: PR command failed: 1026 [ 161.374001][ T2736] sd 0:0:1:0: Sense Key : 0x5 [current] [ 161.379943][ T2736] sd 0:0:1:0: ASC=0x20 ASCQ=0x0 [ 161.497962][ T2743] loop1: detected capacity change from 0 to 1024 [ 161.509521][ T2743] Quota error (device loop1): do_check_range: Getting block 64 out of range 1-5 [ 161.518934][ T2743] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 161.529778][ T2743] EXT4-fs error (device loop1): ext4_acquire_dquot:6828: comm syz.1.637: Failed to acquire dquot type 0 [ 161.541538][ T2743] EXT4-fs error (device loop1): mb_free_blocks:1839: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 161.556625][ T2743] EXT4-fs (loop1): 1 truncate cleaned up [ 161.562414][ T2743] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 161.579155][ T2743] EXT4-fs error (device loop1): ext4_acquire_dquot:6828: comm syz.1.637: Failed to acquire dquot type 0 [ 161.598609][ T1427] usb 2-1: USB disconnect, device number 25 [ 161.613034][ T2743] EXT4-fs error (device loop1): ext4_acquire_dquot:6828: comm syz.1.637: Failed to acquire dquot type 0 [ 161.626345][ T2743] 9pnet_fd: Insufficient options for proto=fd [ 161.634333][ T2747] loop0: detected capacity change from 0 to 16 [ 161.644901][ T2747] erofs: (device loop0): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 161.655925][ T2747] erofs: (device loop0): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 161.672603][ T2747] erofs: (device loop0): mounted with root inode @ nid 36. [ 161.680072][ T24] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 161.708204][ T287] EXT4-fs (loop1): unmounting filesystem. [ 161.781992][ T2757] loop1: detected capacity change from 0 to 512 [ 161.791890][ T2757] EXT4-fs (loop1): Test dummy encryption mode enabled [ 161.799303][ T2757] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 161.809412][ T2757] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 161.817112][ T2757] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 161.835903][ T287] EXT4-fs (loop1): unmounting filesystem. [ 161.869266][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.879513][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 161.888769][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 161.909311][ T24] usb 5-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 161.918572][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.926666][ T24] usb 5-1: Product: syz [ 161.931236][ T24] usb 5-1: Manufacturer: syz [ 161.935917][ T24] usb 5-1: SerialNumber: syz [ 161.942018][ T24] usb 5-1: config 0 descriptor?? [ 161.978128][ T1427] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 162.084713][ T2763] FAULT_INJECTION: forcing a failure. [ 162.084713][ T2763] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 162.098200][ T2763] CPU: 1 PID: 2763 Comm: syz.5.644 Not tainted syzkaller #0 [ 162.105531][ T2763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 162.115638][ T2763] Call Trace: [ 162.118953][ T2763] [ 162.121915][ T2763] __dump_stack+0x21/0x24 [ 162.126289][ T2763] dump_stack_lvl+0x110/0x170 [ 162.130981][ T2763] ? __cfi_dump_stack_lvl+0x8/0x8 [ 162.136038][ T2763] ? do_sys_openat2+0x15e/0x820 [ 162.140918][ T2763] ? x64_sys_call+0x783/0x9a0 [ 162.145601][ T2763] ? do_syscall_64+0x4c/0xa0 [ 162.150214][ T2763] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 162.156324][ T2763] dump_stack+0x15/0x24 [ 162.160513][ T2763] should_fail_ex+0x3bf/0x510 [ 162.165212][ T2763] should_fail_alloc_page+0x61/0x90 [ 162.170431][ T2763] prepare_alloc_pages+0x131/0x570 [ 162.175653][ T2763] ? __alloc_pages_bulk+0x9d0/0x9d0 [ 162.180877][ T2763] ? __kasan_check_write+0x14/0x20 [ 162.186012][ T2763] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 162.191504][ T2763] __alloc_pages+0x15b/0x610 [ 162.196124][ T2763] ? __cfi___alloc_pages+0x10/0x10 [ 162.201283][ T2763] ? __cfi_avc_has_perm+0x10/0x10 [ 162.206327][ T2763] ? xas_start+0x324/0x3e0 [ 162.210763][ T2763] ? xas_load+0x394/0x3c0 [ 162.215110][ T2763] __folio_alloc+0x12/0x40 [ 162.219553][ T2763] __filemap_get_folio+0x6fe/0xa70 [ 162.224683][ T2763] ? __cfi___filemap_get_folio+0x10/0x10 [ 162.230331][ T2763] ? unwind_get_return_address+0x4d/0x90 [ 162.235999][ T2763] pagecache_get_page+0x2b/0x110 [ 162.240981][ T2763] grab_cache_page_write_begin+0x43/0x60 [ 162.246639][ T2763] block_write_begin+0x32/0x110 [ 162.251512][ T2763] ? __cfi_blkdev_get_block+0x10/0x10 [ 162.256900][ T2763] blkdev_write_begin+0x34/0x40 [ 162.261772][ T2763] generic_perform_write+0x32d/0x740 [ 162.267166][ T2763] ? __kasan_check_write+0x14/0x20 [ 162.272295][ T2763] ? __cfi_generic_perform_write+0x10/0x10 [ 162.278121][ T2763] ? down_read+0xa6/0xf0 [ 162.282380][ T2763] ? __cfi_down_read+0x10/0x10 [ 162.287170][ T2763] ? memset+0x35/0x40 [ 162.291165][ T2763] blkdev_write_iter+0x49b/0x6b0 [ 162.296120][ T2763] ? __cfi_blkdev_write_iter+0x10/0x10 [ 162.301600][ T2763] ? fsnotify_perm+0x67/0x5b0 [ 162.306298][ T2763] ? security_file_permission+0x8a/0xb0 [ 162.311870][ T2763] vfs_write+0x5ef/0xd00 [ 162.316136][ T2763] ? __cfi_vfs_write+0x10/0x10 [ 162.320922][ T2763] ? __fget_files+0x2d1/0x330 [ 162.325662][ T2763] ? __fdget+0x19c/0x220 [ 162.329959][ T2763] ? __x64_sys_pwrite64+0xf3/0x220 [ 162.335100][ T2763] __x64_sys_pwrite64+0x194/0x220 [ 162.340157][ T2763] ? __cfi___x64_sys_pwrite64+0x10/0x10 [ 162.345744][ T2763] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 162.351832][ T2763] x64_sys_call+0x36/0x9a0 [ 162.356284][ T2763] do_syscall_64+0x4c/0xa0 [ 162.360738][ T2763] ? clear_bhb_loop+0x30/0x80 [ 162.365448][ T2763] ? clear_bhb_loop+0x30/0x80 [ 162.370153][ T2763] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 162.376070][ T2763] RIP: 0033:0x7fe129b9e159 [ 162.380505][ T2763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.400133][ T2763] RSP: 002b:00007fe12a9d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 162.408576][ T2763] RAX: ffffffffffffffda RBX: 00007fe129e25fa0 RCX: 00007fe129b9e159 [ 162.416615][ T2763] RDX: 00000000fffffdd8 RSI: 0000200000001000 RDI: 0000000000000004 [ 162.424603][ T2763] RBP: 00007fe12a9d9090 R08: 0000000000000000 R09: 0000000000000000 [ 162.432590][ T2763] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 162.440587][ T2763] R13: 00007fe129e26038 R14: 00007fe129e25fa0 R15: 00007ffcd6ba88f8 [ 162.448593][ T2763] [ 162.454277][ T24] usb 5-1: Found UVC 34.00 device syz (8086:0b5b) [ 162.463550][ T24] usb 5-1: No valid video chain found. [ 162.480377][ T1427] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.503920][ T1427] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 162.538586][ T1427] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 162.564016][ T1427] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 162.587761][ T1427] usb 1-1: SerialNumber: syz [ 162.603185][ T307] usb 3-1: USB disconnect, device number 22 [ 162.615258][ T1427] usb 1-1: bad CDC descriptors [ 162.655086][ T2740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.666119][ T2740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.689956][ T24] usb 5-1: USB disconnect, device number 25 [ 162.752664][ T2767] loop1: detected capacity change from 0 to 40427 [ 162.777087][ T2767] F2FS-fs (loop1): invalid crc value [ 162.793500][ T2767] F2FS-fs (loop1): Found nat_bits in checkpoint [ 162.823266][ T2749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.832624][ T2749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.842060][ T39] usb 1-1: USB disconnect, device number 10 [ 162.842089][ T2767] F2FS-fs (loop1): Start checkpoint disabled! [ 162.855756][ T2767] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 162.863383][ T2767] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 162.877572][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 162.877588][ T28] audit: type=1400 audit(162.840:3942): avc: denied { append } for pid=2766 comm="syz.1.645" path="/125/file1/io.stat" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 163.028099][ T307] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 163.212873][ T307] usb 3-1: Using ep0 maxpacket: 32 [ 163.215795][ T24] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 163.238008][ T2787] loop4: detected capacity change from 0 to 1024 [ 163.245535][ T307] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.255382][ T307] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 163.264511][ T307] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.275343][ T307] usb 3-1: config 0 descriptor?? [ 163.280490][ T2787] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5 [ 163.286020][ T307] hub 3-1:0.0: bad descriptor, ignoring hub [ 163.291997][ T2787] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 163.295873][ T307] hub: probe of 3-1:0.0 failed with error -5 [ 163.305927][ T2787] EXT4-fs error (device loop4): ext4_acquire_dquot:6828: comm syz.4.651: Failed to acquire dquot type 0 [ 163.311861][ T307] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 163.326211][ T2787] EXT4-fs error (device loop4): mb_free_blocks:1839: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 163.346722][ T2787] EXT4-fs (loop4): 1 truncate cleaned up [ 163.352651][ T2787] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 163.377271][ T2791] loop5: detected capacity change from 0 to 256 [ 163.385991][ T2791] exfat: Deprecated parameter 'utf8' [ 163.402045][ T2791] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 163.440843][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 163.453223][ T24] usb 2-1: config 1 has an invalid descriptor of length 157, skipping remainder of the config [ 163.477196][ T24] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 163.653389][ T2787] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5 [ 163.667541][ T2787] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 163.671987][ T318] udevd[318]: symlink '../../loop4' '/dev/disk/by-diskseq/614.tmp-b7:4' failed: Read-only file system [ 163.693374][ T24] usb 2-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice= 0.40 [ 163.696811][ T396] udevd[396]: symlink '../../loop5' '/dev/disk/by-diskseq/615.tmp-b7:5' failed: Read-only file system [ 163.708862][ T2787] EXT4-fs error (device loop4): ext4_acquire_dquot:6828: comm syz.4.651: Failed to acquire dquot type 0 [ 163.721793][ T330] udevd[330]: symlink '../../loop0' '/dev/disk/by-diskseq/609.tmp-b7:0' failed: Read-only file system [ 163.726498][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.747637][ T396] udevd[396]: symlink '../../loop5' '/dev/disk/by-uuid/1234-1234.tmp-b7:5' failed: Read-only file system [ 163.756145][ T24] usb 2-1: Product: syz [ 163.769158][ T330] udevd[330]: symlink '../../loop0' '/dev/disk/by-diskseq/609.tmp-b7:0' failed: Read-only file system [ 163.771094][ T24] usb 2-1: Manufacturer: syz [ 163.785129][ T24] usb 2-1: SerialNumber: syz [ 163.786010][ T2797] loop0: detected capacity change from 0 to 512 [ 163.804522][ T2787] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5 [ 163.804594][ T2797] EXT4-fs (loop0): Test dummy encryption mode enabled [ 163.820728][ T2787] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 163.830386][ T2797] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 163.836968][ T396] udevd[396]: symlink '../../loop0' '/dev/disk/by-diskseq/616.tmp-b7:0' failed: Read-only file system [ 163.843045][ T2797] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 163.850739][ T2787] EXT4-fs error (device loop4): ext4_acquire_dquot:6828: comm syz.4.651: Failed to acquire dquot type 0 [ 163.858750][ T2797] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 163.873663][ T396] udevd[396]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 163.892213][ T2795] 9pnet_fd: Insufficient options for proto=fd [ 163.898418][ T2072] hid (null): unknown global tag 0xc [ 163.904982][ T2072] hid-generic 0000:0000:0000.000C: unknown global tag 0xc [ 163.911216][ T396] udevd[396]: symlink '../../loop0' '/dev/disk/by-diskseq/616.tmp-b7:0' failed: Read-only file system [ 163.912467][ T2072] hid-generic 0000:0000:0000.000C: item 0 1 1 12 parsing failed [ 163.931235][ T2072] hid-generic: probe of 0000:0000:0000.000C failed with error -22 [ 163.934726][ T396] udevd[396]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 163.956543][ T291] EXT4-fs (loop0): unmounting filesystem. [ 163.966393][ T396] udevd[396]: symlink '../../loop0' '/dev/disk/by-diskseq/616.tmp-b7:0' failed: Read-only file system [ 163.994080][ T28] audit: type=1400 audit(163.960:3943): avc: denied { ioctl } for pid=2766 comm="syz.1.645" path="socket:[41641]" dev="sockfs" ino=41641 ioctlcmd=0x5518 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 164.026993][ T290] EXT4-fs (loop4): unmounting filesystem. [ 164.047003][ T2804] loop4: detected capacity change from 0 to 512 [ 164.054625][ T2804] EXT4-fs warning (device loop4): ext4_multi_mount_protect:324: fsck is running on the filesystem [ 164.065960][ T2804] EXT4-fs warning (device loop4): ext4_multi_mount_protect:324: MMP failure info: last update time: 1669132791, last update node: dvyu; v-desk.muc.corp.google.cÿÿ, last update device: loop14 [ 164.106487][ T2806] EXT4-fs: Ignoring removed orlov option [ 164.115333][ T396] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 164.119084][ T2806] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 48900)! [ 164.148122][ T2806] EXT4-fs (loop5): group descriptors corrupted! [ 164.313661][ T2809] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 164.530920][ T24] usb 2-1: Invalid descriptor size=97. [ 164.547398][ T24] usb 2-1: Invalid descriptor size=97. [ 164.556291][ T24] usb 2-1: Invalid descriptor size=97. [ 164.565722][ T24] usb 2-1: USB disconnect, device number 26 [ 164.661499][ T308] kworker/u4:3: attempt to access beyond end of device [ 164.661499][ T308] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 165.278153][ T2072] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 165.318524][ T28] audit: type=1400 audit(165.290:3944): avc: denied { map } for pid=2824 comm="syz.4.662" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 165.367847][ T2829] erofs: (device loop4): mounted with root inode @ nid 36. [ 165.376814][ T28] audit: type=1400 audit(165.340:3945): avc: denied { associate } for pid=2828 comm="syz.4.664" name="memory.stat" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 165.459264][ T2072] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.469565][ T2072] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 165.478892][ T2072] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 165.495557][ T2072] usb 2-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 165.504987][ T2072] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.513225][ T2072] usb 2-1: Product: syz [ 165.517531][ T2072] usb 2-1: Manufacturer: syz [ 165.522431][ T2072] usb 2-1: SerialNumber: syz [ 165.535136][ T2072] usb 2-1: config 0 descriptor?? [ 165.729314][ T396] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 165.752940][ T2072] usb 2-1: Found UVC 34.00 device syz (8086:0b5b) [ 165.761933][ T2072] usb 2-1: No valid video chain found. [ 165.768803][ T311] usb 3-1: USB disconnect, device number 23 [ 165.779186][ T2837] af_packet: tpacket_rcv: packet too big, clamped from 54 to 4294967286. macoff=82 [ 165.940372][ T2840] erofs: (device loop5): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 165.951316][ T2840] erofs: (device loop5): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 165.966378][ T2840] erofs: (device loop5): mounted with root inode @ nid 36. [ 165.970655][ T2822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.990918][ T2840] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -7 in[256, 1224] out[115] [ 166.002961][ T2840] erofs: (device loop5): z_erofs_read_folio: failed to read, err [-117] [ 166.012179][ T2840] FAULT_INJECTION: forcing a failure. [ 166.012179][ T2840] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.015111][ T2822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.027320][ T2840] CPU: 0 PID: 2840 Comm: syz.5.668 Not tainted syzkaller #0 [ 166.040389][ T2840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 166.050480][ T2840] Call Trace: [ 166.053778][ T2840] [ 166.056732][ T2840] __dump_stack+0x21/0x24 [ 166.061099][ T2840] dump_stack_lvl+0x110/0x170 [ 166.065808][ T2840] ? __cfi_dump_stack_lvl+0x8/0x8 [ 166.070866][ T2840] ? kasan_quarantine_put+0x34/0x190 [ 166.076191][ T2840] dump_stack+0x15/0x24 [ 166.080390][ T2840] should_fail_ex+0x3bf/0x510 [ 166.085099][ T2840] should_fail+0xb/0x10 [ 166.089281][ T2840] should_fail_usercopy+0x1a/0x20 [ 166.094338][ T2840] copy_fpstate_to_sigframe+0x896/0xb30 [ 166.099913][ T2840] ? get_signal+0xac2/0x1700 [ 166.104538][ T2840] ? copy_fpstate_to_sigframe+0x184/0xb30 [ 166.110290][ T2840] ? __cfi_copy_fpstate_to_sigframe+0x10/0x10 [ 166.116419][ T2840] ? __cfi_get_signal+0x10/0x10 [ 166.121302][ T2840] ? force_sig_info_to_task+0x306/0x3b0 [ 166.126881][ T2840] ? fpu__alloc_mathframe+0xb3/0x130 [ 166.132195][ T2840] arch_do_signal_or_restart+0x652/0x11c0 [ 166.137947][ T2840] ? page_fault_oops+0x8b0/0x8b0 [ 166.142913][ T2840] ? down_read_trylock+0x27f/0x660 [ 166.148059][ T2840] ? find_vma+0x89/0xd0 [ 166.152246][ T2840] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 166.158433][ T2840] ? do_user_addr_fault+0xd10/0x1030 [ 166.163758][ T2840] ? __kasan_check_write+0x14/0x20 [ 166.168899][ T2840] exit_to_user_mode_loop+0x7a/0xb0 [ 166.174131][ T2840] exit_to_user_mode_prepare+0x87/0xd0 [ 166.179616][ T2840] irqentry_exit_to_user_mode+0x9/0x10 [ 166.185115][ T2840] irqentry_exit+0x12/0x40 [ 166.189558][ T2840] exc_page_fault+0x5e/0xb0 [ 166.194085][ T2840] asm_exc_page_fault+0x27/0x30 [ 166.198962][ T2840] RIP: 0033:0x7fe129b7cef9 [ 166.203397][ T2840] Code: f8 77 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 89 f8 48 89 fa c5 f9 ef c0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 27 01 00 00 fd 74 0f c5 fd d7 c1 85 c0 74 5b f3 0f bc c0 e9 30 01 00 00 66 [ 166.223044][ T2840] RSP: 002b:00007fe12a9d8e58 EFLAGS: 00010283 [ 166.229136][ T2840] RAX: 0000000000000000 RBX: 00007fe12a9d8ee0 RCX: 0000000000000000 [ 166.237128][ T2840] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000000 [ 166.245118][ T2840] RBP: 0000200000000b00 R08: 0000200000000140 R09: 0000000000000000 [ 166.253114][ T2840] R10: 0000200000000b00 R11: 0000000000000246 R12: 00002000000005c0 [ 166.261277][ T2840] R13: 00007fe12a9d8ea0 R14: 0000000000000000 R15: 0000000000000000 [ 166.269293][ T2840] [ 166.281424][ T2840] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -7 in[256, 1224] out[115] [ 166.292610][ T2840] erofs: (device loop5): z_erofs_read_folio: failed to read, err [-117] [ 166.330249][ T2072] usb 2-1: USB disconnect, device number 27 [ 167.128726][ T2875] set_capacity_and_notify: 4 callbacks suppressed [ 167.128746][ T2875] loop0: detected capacity change from 0 to 4096 [ 167.143527][ T2875] ext4: Unknown parameter 'nouser_xattr' [ 167.218400][ T24] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 167.398301][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 167.405122][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.415859][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 167.425226][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.438148][ T1427] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 167.446080][ T24] usb 3-1: config 0 descriptor?? [ 167.456161][ T24] hub 3-1:0.0: bad descriptor, ignoring hub [ 167.462891][ T24] hub: probe of 3-1:0.0 failed with error -5 [ 167.470394][ T24] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 167.630321][ T1427] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.640969][ T1427] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 167.650081][ T1427] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 167.665643][ T1427] usb 2-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 167.675331][ T1427] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.683628][ T1427] usb 2-1: Product: syz [ 167.688117][ T1427] usb 2-1: Manufacturer: syz [ 167.693078][ T1427] usb 2-1: SerialNumber: syz [ 167.718323][ T1427] usb 2-1: config 0 descriptor?? [ 167.878839][ T28] kauditd_printk_skb: 904 callbacks suppressed [ 167.878885][ T28] audit: type=1326 audit(167.850:4850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2874 comm="syz.0.682" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f23e5f5e98e code=0x7ffc0000 [ 167.912694][ T28] audit: type=1326 audit(167.880:4851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2874 comm="syz.0.682" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f23e5f5e98e code=0x7ffc0000 [ 167.975326][ T2886] loop5: detected capacity change from 0 to 1024 [ 167.993453][ T28] audit: type=1326 audit(167.880:4852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2874 comm="syz.0.682" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f23e5f97ed7 code=0x7ffc0000 [ 168.021088][ T1427] usb 2-1: Found UVC 34.00 device syz (8086:0b5b) [ 168.027595][ T1427] usb 2-1: No valid video chain found. [ 168.033527][ T28] audit: type=1326 audit(167.880:4853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2874 comm="syz.0.682" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f23e5f3f4d9 code=0x7ffc0000 [ 168.069651][ T2886] Quota error (device loop5): do_check_range: Getting block 64 out of range 1-5 [ 168.082491][ T2886] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 168.108243][ T2886] EXT4-fs error (device loop5): ext4_acquire_dquot:6828: comm syz.5.687: Failed to acquire dquot type 0 [ 168.128120][ T28] audit: type=1326 audit(167.880:4854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2874 comm="syz.0.682" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23e5f9e159 code=0x7ffc0000 [ 168.153247][ T2886] EXT4-fs error (device loop5): mb_free_blocks:1839: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 168.188496][ T2886] EXT4-fs (loop5): 1 truncate cleaned up [ 168.194208][ T2886] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 168.208099][ T28] audit: type=1326 audit(167.880:4855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2874 comm="syz.0.682" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f23e5f5e98e code=0x7ffc0000 [ 168.236638][ T2881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.271236][ T2881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.290951][ T2886] Quota error (device loop5): do_check_range: Getting block 64 out of range 1-5 [ 168.309080][ T1427] usb 2-1: USB disconnect, device number 28 [ 168.323103][ T2886] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 168.343300][ T2886] EXT4-fs error (device loop5): ext4_acquire_dquot:6828: comm syz.5.687: Failed to acquire dquot type 0 [ 168.405991][ T2886] EXT4-fs error (device loop5): ext4_acquire_dquot:6828: comm syz.5.687: Failed to acquire dquot type 0 [ 168.426753][ T2886] 9pnet_fd: Insufficient options for proto=fd [ 168.507446][ T2258] EXT4-fs (loop5): unmounting filesystem. [ 168.631976][ T2902] loop5: detected capacity change from 0 to 512 [ 168.639279][ T2902] EXT4-fs (loop5): Test dummy encryption mode enabled [ 168.647274][ T2902] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 168.657552][ T2902] EXT4-fs (loop5): Errors on filesystem, clearing orphan list. [ 168.665401][ T2902] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 168.677784][ T2884] hid (null): unknown global tag 0xc [ 168.684099][ T2884] hid-generic 0000:0000:0000.000D: unknown global tag 0xc [ 168.691331][ T2884] hid-generic 0000:0000:0000.000D: item 0 1 1 12 parsing failed [ 168.699240][ T2884] hid-generic: probe of 0000:0000:0000.000D failed with error -22 [ 168.713703][ T2258] EXT4-fs (loop5): unmounting filesystem. [ 168.817621][ T2909] loop5: detected capacity change from 0 to 512 [ 168.838330][ T2909] EXT4-fs: Ignoring removed i_version option [ 168.844664][ T2909] ext4: Bad value for 'debug_want_extra_isize' [ 168.943663][ T2913] kernel profiling enabled (shift: 9) [ 169.135610][ T1427] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 169.298116][ T1427] usb 6-1: device descriptor read/64, error -71 [ 169.344858][ T2928] netlink: 12 bytes leftover after parsing attributes in process `syz.4.700'. [ 169.578130][ T1427] usb 6-1: device descriptor read/64, error -71 [ 169.848162][ T1427] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 169.998135][ T1427] usb 6-1: device descriptor read/64, error -71 [ 170.078594][ T2072] usb 3-1: USB disconnect, device number 24 [ 170.141582][ T2943] loop2: detected capacity change from 0 to 256 [ 170.150182][ T2943] exfat: Deprecated parameter 'utf8' [ 170.169773][ T2943] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 170.548137][ T1427] usb 6-1: device descriptor read/64, error -71 [ 170.668463][ T1427] usb usb6-port1: attempt power cycle [ 170.895627][ T396] udevd[396]: symlink '../../loop2' '/dev/disk/by-diskseq/640.tmp-b7:2' failed: Read-only file system [ 170.915805][ T396] udevd[396]: symlink '../../loop2' '/dev/disk/by-diskseq/640.tmp-b7:2' failed: Read-only file system [ 170.927398][ T2952] loop2: detected capacity change from 0 to 1024 [ 170.939159][ T2952] EXT4-fs error (device loop2): ext4_acquire_dquot:6828: comm syz.2.710: Failed to acquire dquot type 0 [ 170.943154][ T396] udevd[396]: symlink '../../loop2' '/dev/disk/by-diskseq/641.tmp-b7:2' failed: Read-only file system [ 170.952179][ T2952] EXT4-fs error (device loop2): mb_free_blocks:1839: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 170.964578][ T396] udevd[396]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 170.989117][ T2952] EXT4-fs (loop2): 1 truncate cleaned up [ 170.994831][ T2952] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 171.005690][ T396] udevd[396]: symlink '../../loop2' '/dev/disk/by-diskseq/641.tmp-b7:2' failed: Read-only file system [ 171.017972][ T396] udevd[396]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 171.035802][ T2952] EXT4-fs error (device loop2): ext4_acquire_dquot:6828: comm syz.2.710: Failed to acquire dquot type 0 [ 171.068332][ T2952] EXT4-fs error (device loop2): ext4_acquire_dquot:6828: comm syz.2.710: Failed to acquire dquot type 0 [ 171.079906][ T1427] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 171.088663][ T2952] 9pnet_fd: Insufficient options for proto=fd [ 171.110135][ T1427] usb 6-1: device descriptor read/8, error -71 [ 171.154217][ T289] EXT4-fs (loop2): unmounting filesystem. [ 171.163907][ T396] udevd[396]: symlink '../../loop2' '/dev/disk/by-diskseq/641.tmp-b7:2' failed: Read-only file system [ 171.179280][ T396] udevd[396]: symlink '../../loop2' '/dev/disk/by-diskseq/641.tmp-b7:2' failed: Read-only file system [ 171.259372][ T1427] usb 6-1: device descriptor read/8, error -71 [ 171.448146][ T2072] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 171.528129][ T1427] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 171.559280][ T1427] usb 6-1: device descriptor read/8, error -71 [ 171.633509][ T2072] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.644200][ T2072] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 171.653516][ T2072] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 171.668881][ T2072] usb 3-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 171.678011][ T2072] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.686266][ T2072] usb 3-1: Product: syz [ 171.690652][ T2072] usb 3-1: Manufacturer: syz [ 171.695289][ T2072] usb 3-1: SerialNumber: syz [ 171.701112][ T2072] usb 3-1: config 0 descriptor?? [ 171.716376][ T1427] usb 6-1: device descriptor read/8, error -71 [ 171.835766][ T330] udevd[330]: symlink '../../loop5' '/dev/disk/by-diskseq/638.tmp-b7:5' failed: Read-only file system [ 171.854202][ T1427] usb usb6-port1: unable to enumerate USB device [ 171.866122][ T2982] binder: 2981:2982 ioctl c0306201 0 returned -14 [ 171.887029][ T330] udevd[330]: symlink '../../loop5' '/dev/disk/by-diskseq/638.tmp-b7:5' failed: Read-only file system [ 171.898287][ T24] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 171.909046][ T2072] usb 3-1: Found UVC 34.00 device syz (8086:0b5b) [ 171.917373][ T2984] loop5: detected capacity change from 0 to 512 [ 171.924285][ T2072] usb 3-1: No valid video chain found. [ 171.948506][ T2984] EXT4-fs (loop5): Test dummy encryption mode enabled [ 171.956854][ T2984] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 171.967896][ T2984] EXT4-fs (loop5): Errors on filesystem, clearing orphan list. [ 171.975595][ T2984] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 171.989672][ T2072] hid (null): unknown global tag 0xc [ 171.996704][ T2072] hid-generic 0000:0000:0000.000E: unknown global tag 0xc [ 172.004122][ T2072] hid-generic 0000:0000:0000.000E: item 0 1 1 12 parsing failed [ 172.022281][ T2072] hid-generic: probe of 0000:0000:0000.000E failed with error -22 [ 172.040202][ T2258] EXT4-fs (loop5): unmounting filesystem. [ 172.074950][ T2987] sd 0:0:1:0: PR command failed: 1026 [ 172.080581][ T2987] sd 0:0:1:0: Sense Key : 0x5 [current] [ 172.086341][ T2987] sd 0:0:1:0: ASC=0x20 ASCQ=0x0 [ 172.093693][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 172.118367][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 172.129293][ T2969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.137930][ T2969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.146854][ T24] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 172.167091][ T2989] loop5: detected capacity change from 0 to 16 [ 172.173913][ T24] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 35, changing to 7 [ 172.185509][ T2989] erofs: Unknown parameter '_' [ 172.190890][ T663] usb 3-1: USB disconnect, device number 25 [ 172.198250][ T24] usb 1-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice= 0.40 [ 172.216026][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.224394][ T24] usb 1-1: Product: syz [ 172.236657][ T24] usb 1-1: Manufacturer: syz [ 172.241547][ T24] usb 1-1: SerialNumber: syz [ 172.452025][ T24] usb 1-1: 1:1 : no or invalid class specific endpoint descriptor [ 172.460005][ T24] usb 1-1: 1:1 : sample bitwidth 62 in over sample bytes 2 [ 172.467294][ T24] usb 1-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 172.481758][ T24] usb 1-1: USB disconnect, device number 11 [ 172.691915][ T3008] loop1: detected capacity change from 0 to 256 [ 172.700657][ T3008] exfat: Deprecated parameter 'utf8' [ 172.841563][ T3008] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 172.926714][ T3010] binder: 3009:3010 ioctl c0306201 0 returned -14 [ 172.955919][ T3014] loop2: detected capacity change from 0 to 16 [ 172.965428][ T3014] erofs: (device loop2): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 172.976689][ T3014] erofs: (device loop2): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 172.991768][ T3014] erofs: (device loop2): mounted with root inode @ nid 36. [ 173.037425][ T3021] loop0: detected capacity change from 0 to 512 [ 173.044493][ T3021] ext2: Unknown parameter 'measure' [ 173.052978][ T3023] loop2: detected capacity change from 0 to 1024 [ 173.062396][ T3023] __quota_error: 24 callbacks suppressed [ 173.062413][ T3023] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 173.077797][ T3023] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 173.087397][ T3023] EXT4-fs error (device loop2): ext4_acquire_dquot:6828: comm syz.2.740: Failed to acquire dquot type 0 [ 173.099261][ T3023] EXT4-fs error (device loop2): mb_free_blocks:1839: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 173.114524][ T3023] EXT4-fs (loop2): 1 truncate cleaned up [ 173.120359][ T3023] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 173.167559][ T3023] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 173.176803][ T3023] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 173.186452][ T3023] EXT4-fs error (device loop2): ext4_acquire_dquot:6828: comm syz.2.740: Failed to acquire dquot type 0 [ 173.212883][ T3023] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 173.222081][ T3023] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 173.232026][ T3023] EXT4-fs error (device loop2): ext4_acquire_dquot:6828: comm syz.2.740: Failed to acquire dquot type 0 [ 173.250338][ T3023] 9pnet_fd: Insufficient options for proto=fd [ 173.289741][ T3027] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 173.853302][ T3030] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 173.865092][ T3030] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 173.873539][ T3030] CPU: 1 PID: 3030 Comm: syz.1.741 Not tainted syzkaller #0 [ 173.880859][ T3030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 173.890940][ T3030] RIP: 0010:vsscanf+0x196/0x24b0 [ 173.895931][ T3030] Code: 48 c7 c6 70 13 8e 87 e8 c8 23 7e fc 41 83 fe 25 74 4d 45 85 f6 0f 84 b6 21 00 00 48 ff c3 48 89 5c 24 78 4c 89 f8 48 c1 e8 03 <42> 0f b6 04 28 84 c0 0f 85 4f 1b 00 00 41 0f b6 1f 45 0f b6 f6 44 [ 173.915741][ T3030] RSP: 0018:ffffc9001171f5e0 EFLAGS: 00010246 [ 173.921876][ T3030] RAX: 0000000000000000 RBX: ffffffff85b0dd81 RCX: 0000000000000001 [ 173.929875][ T3030] RDX: ffffffff84f34d48 RSI: ffffffff878e1370 RDI: 0000000000000030 [ 173.937987][ T3030] RBP: ffffc9001171f710 R08: ffff8881139aa880 R09: 0000000000000002 [ 173.945994][ T3030] R10: 0000000000000025 R11: 0000000000000002 R12: ffffffff85b0dd80 [ 173.954007][ T3030] R13: dffffc0000000000 R14: 0000000000000030 R15: 0000000000000000 [ 173.962026][ T3030] FS: 00007f5c27eaf6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 173.970999][ T3030] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 173.977627][ T3030] CR2: 000000110c2ca60d CR3: 00000001335c6000 CR4: 00000000003526a0 [ 173.985639][ T3030] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 173.993651][ T3030] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 174.001648][ T3030] Call Trace: [ 174.004954][ T3030] [ 174.007907][ T3030] ? __kasan_check_read+0x11/0x20 [ 174.012964][ T3030] ? __cfi_vsscanf+0x10/0x10 [ 174.017599][ T3030] sscanf+0xdf/0x130 [ 174.021537][ T3030] ? __cfi_sscanf+0x10/0x10 [ 174.026081][ T3030] ? strsep+0x3a/0x1f0 [ 174.030182][ T3030] ? memcpy+0x56/0x70 [ 174.034199][ T3030] split_huge_pages_write+0x37a/0x10d0 [ 174.039694][ T3030] ? __cfi____update_load_sum+0x10/0x10 [ 174.045281][ T3030] ? __cfi_split_huge_pages_write+0x10/0x10 [ 174.051217][ T3030] ? __cfi___perf_event_task_sched_out+0x10/0x10 [ 174.057583][ T3030] ? _raw_spin_unlock+0x4c/0x70 [ 174.062469][ T3030] ? finish_task_switch+0x16b/0x7c0 [ 174.067711][ T3030] ? switch_mm_irqs_off+0x724/0x960 [ 174.072944][ T3030] ? __kasan_check_write+0x14/0x20 [ 174.078082][ T3030] ? debugfs_file_get+0x362/0x450 [ 174.083151][ T3030] ? __kasan_check_read+0x11/0x20 [ 174.088201][ T3030] ? preempt_schedule+0xbc/0xd0 [ 174.093093][ T3030] ? __cfi_preempt_schedule+0x10/0x10 [ 174.098512][ T3030] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 174.104175][ T3030] full_proxy_write+0x121/0x1d0 [ 174.109056][ T3030] ? __cfi_full_proxy_write+0x10/0x10 [ 174.114459][ T3030] vfs_write+0x3fb/0xd00 [ 174.118741][ T3030] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 174.124512][ T3030] ? __cfi_vfs_write+0x10/0x10 [ 174.129307][ T3030] ? __kasan_check_write+0x14/0x20 [ 174.134447][ T3030] ? mutex_lock+0x93/0x1b0 [ 174.138902][ T3030] ? __cfi_mutex_lock+0x10/0x10 [ 174.143792][ T3030] ? __fdget_pos+0x2cd/0x380 [ 174.148456][ T3030] ? ksys_write+0x70/0x260 [ 174.152912][ T3030] ksys_write+0x14a/0x260 [ 174.157277][ T3030] ? __cfi_ksys_write+0x10/0x10 [ 174.162162][ T3030] ? fpregs_restore_userregs+0x128/0x260 [ 174.167831][ T3030] __x64_sys_write+0x7b/0x90 [ 174.172538][ T3030] x64_sys_call+0x27b/0x9a0 [ 174.177072][ T3030] do_syscall_64+0x4c/0xa0 [ 174.181532][ T3030] ? clear_bhb_loop+0x30/0x80 [ 174.186241][ T3030] ? clear_bhb_loop+0x30/0x80 [ 174.190946][ T3030] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 174.196865][ T3030] RIP: 0033:0x7f5c26f9e159 [ 174.201313][ T3030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.220956][ T3030] RSP: 002b:00007f5c27eaf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 174.229436][ T3030] RAX: ffffffffffffffda RBX: 00007f5c27225fa0 RCX: 00007f5c26f9e159 [ 174.237442][ T3030] RDX: 0000000000000011 RSI: 0000200000000180 RDI: 0000000000000003 [ 174.245449][ T3030] RBP: 00007f5c2703506b R08: 0000000000000000 R09: 0000000000000000 [ 174.253459][ T3030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 174.261476][ T3030] R13: 00007f5c27226038 R14: 00007f5c27225fa0 R15: 00007ffe09ee0888 [ 174.269489][ T3030] [ 174.272552][ T3030] Modules linked in: [ 174.385530][ T3036] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 174.404791][ T3036] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 174.437089][ T3033] netlink: 16 bytes leftover after parsing attributes in process `syz.4.742'. [ 174.448506][ T3030] ---[ end trace 0000000000000000 ]--- [ 174.495496][ T3030] RIP: 0010:vsscanf+0x196/0x24b0 [ 174.500575][ T3030] Code: 48 c7 c6 70 13 8e 87 e8 c8 23 7e fc 41 83 fe 25 74 4d 45 85 f6 0f 84 b6 21 00 00 48 ff c3 48 89 5c 24 78 4c 89 f8 48 c1 e8 03 <42> 0f b6 04 28 84 c0 0f 85 4f 1b 00 00 41 0f b6 1f 45 0f b6 f6 44 [ 174.520264][ T3030] RSP: 0018:ffffc9001171f5e0 EFLAGS: 00010246 [ 174.526380][ T3030] RAX: 0000000000000000 RBX: ffffffff85b0dd81 RCX: 0000000000000001 [ 174.534433][ T3030] RDX: ffffffff84f34d48 RSI: ffffffff878e1370 RDI: 0000000000000030 [ 174.542509][ T3030] RBP: ffffc9001171f710 R08: ffff8881139aa880 R09: 0000000000000002 [ 174.550582][ T3030] R10: 0000000000000025 R11: 0000000000000002 R12: ffffffff85b0dd80 [ 174.558952][ T3030] R13: dffffc0000000000 R14: 0000000000000030 R15: 0000000000000000 [ 174.566976][ T3030] FS: 00007f5c27eaf6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 174.575991][ T3030] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 174.582645][ T3030] CR2: 0000200001000000 CR3: 00000001335c6000 CR4: 00000000003526b0 [ 174.590695][ T3030] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 174.598722][ T3030] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 174.606753][ T3030] Kernel panic - not syncing: Fatal exception [ 174.613416][ T3030] Kernel Offset: disabled [ 174.617759][ T3030] Rebooting in 86400 seconds..