last executing test programs: 5.630212433s ago: executing program 1 (id=298): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) 5.629942553s ago: executing program 1 (id=299): r0 = creat(0x0, 0xecf86c37d53049cc) write$binfmt_script(r0, &(0x7f0000000240)={'#! ', '', [], 0xa, "aa7a91a5d45a1cb7ce91ad8503734bcacdab7d154cf0a5f2720f24a08c3eaec836e531b0894f34f4abc777c48e0417cb5996d93cea42aac5"}, 0x3c) close(r0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 5.629546353s ago: executing program 1 (id=300): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000200)=ANY=[@ANYRESDEC], 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x343040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0xfea9) syz_usb_control_io$printer(r0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000f00)='.\x00', &(0x7f0000000f40), 0x89, &(0x7f0000000180)=ANY=[@ANYBLOB='appraisE_type=imasig,\x00']) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="400f02"], 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) accept(r4, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r2, @ANYRES32=r1, @ANYRES64=r0], 0x34}, 0x1, 0x0, 0x0, 0x20005005}, 0x24000084) syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000038c0)={0x44, &(0x7f0000003680)=ANY=[@ANYBLOB="19"], 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="208401000000827dc9d7619150b809133f42d156e4fe286521b57cc4f695d4b7ecc7e45e0cad73589528ef82f70d65119d444e11e4751d0bcb7004eea6a628217776c505e107043a414c4d35443074fa5005a08d835925115d59a26be5ed74ef1d3c6813d6d6341886ffdfe2e05f788412c84a11"], 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/pids.max\x00', 0xc8442, 0x11) write$cgroup_subtree(r5, &(0x7f0000000640)=ANY=[@ANYBLOB="2d637075208ea9339df6c17eef211ec5d69fcb7121db3a23ff668e7ebc7d2a994384a70b3111131b9c34401d86e79d09fcf4c117af27ea21b8c279c9bd085009389f28b3549f9856adfeef1988ba45cee571b3d8f2d6c2284f94b8c06b180b94afc86d046eb3f745b48994d7e7b9c2047ba389979fa56f7c266757c023913a7b7a46538e4ba4ccaf3ea6cbecce28477285c5182676b6a8807a6c13804041ebac85262374ba9987420226e21d2cf6045eeedc9e07c6c8d0a68b668c80d72fa2b5"], 0x5) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000500), r6) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000400), r3) sendmsg$SMC_PNETID_FLUSH(r6, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0, @ANYRES16=r7, @ANYBLOB="00012dbd7000fddbdf25040000000900030073797a30000000000900010073797a3000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000801}, 0x1) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x140841, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0x8, 0x8, "000000000000000000000042d8663000"}) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) 3.518299605s ago: executing program 0 (id=333): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000580)="580000001500192340a34b80040d8c562d11820fffff5bab4e21000000005dfb75b90f6a0325010ebc00b2b09b34bd0000000000008007f0fffeffe809005300fff5dd0000001000010008100000e1b5051a14b3d15b5325db2e080000008607e2aa2d0982", 0x65}], 0x1) getpid() 3.460237117s ago: executing program 0 (id=334): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) 3.459963446s ago: executing program 0 (id=335): r0 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@init_itable}, {@noinit_itable}]}, 0x2f, 0x4bd, &(0x7f00000006c0)="$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") dup3(r0, r0, 0x80000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x442, 0x0) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000000)={0x3, 0x3, 0x2, 0x8e91}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f0000000080)={[{@bh}, {@inlinecrypt}, {@nombcache}]}, 0xff, 0x568, &(0x7f0000001440)="$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") open(0x0, 0x14927e, 0x78) syz_usb_connect$midi(0x1, 0x3e, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x4752, 0x11, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2c, 0x1, 0x1, 0xfe, 0x10, 0x81, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x0, 0x6, [], [{{0x9, 0x5, 0xa, 0xb, 0x40, 0xf, 0xd7, 0x2, {0x4}}}, {{0x9, 0x5, 0xe, 0x2, 0x7ff, 0x6d, 0x72, 0x4, {0x4}}}]}}}}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 3.264608091s ago: executing program 2 (id=339): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x17, 0x5c}, [@ldst={0x6, 0x0, 0x5, 0x7}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) clock_nanosleep(0x4, 0x1, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f00000000c0)) 3.254287222s ago: executing program 2 (id=340): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) (async) r1 = socket$inet6(0xa, 0x3, 0x8) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000100)={r1, &(0x7f0000000000)='\'!,-$,\x00', 0x2500, &(0x7f0000000040)={@align, {0xe, 0x6, 0x0, 0x6}}, 0x4, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r3) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x38, r4, 0x1, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048044}, 0x404c094) (async, rerun: 32) preadv(r2, &(0x7f0000000640)=[{&(0x7f0000000140)=""/252, 0xfc}, {&(0x7f0000000240)=""/197, 0xc5}, {&(0x7f0000000340)=""/68, 0x44}, {&(0x7f00000003c0)=""/72, 0x48}, {&(0x7f0000000440)=""/10, 0xa}, {&(0x7f0000000480)=""/180, 0xb4}, {&(0x7f0000000540)=""/224, 0xe0}], 0x7, 0x7ff, 0x0) (async, rerun: 32) sendto$inet6(r1, 0x0, 0x0, 0x20000001, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x112, r0, 0xfffff000) 3.196263243s ago: executing program 2 (id=341): socket$inet6_tcp(0xa, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000540)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x249}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000480)=""/149, 0x95}], 0x1) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000734000/0x400000)=nil) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) bind$inet6(r2, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @empty, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20080058) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000800000/0x800000)=nil, 0x800000}) 3.066857806s ago: executing program 4 (id=342): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x1, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x2000, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x2000, 0x2000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x800, 0x1, 0x0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x1, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x81000fff, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14"], 0x7c}}, 0x0) 2.800327482s ago: executing program 4 (id=343): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1724000021200000240012800c0001006d6163766c616e0014000280080003000300000008"], 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000002) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c0009"], 0x4c}}, 0x4000040) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="130000001000000008"], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32=r2], 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r1, &(0x7f0000000100), 0x0}, 0x20) 2.759087453s ago: executing program 4 (id=344): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r2, r1, 0x25, 0x0, @val=@tcx}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x12, 0x4, 0x8, 0x1}, 0x50) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[], 0x0) 2.758918473s ago: executing program 4 (id=345): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000440)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd26, 0x25dfdbfb, {0xa, 0x80, 0x80}, [@RTA_PRIORITY={0x8, 0x6, 0xfff}]}, 0x24}}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@ipv6_newrule={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000006112c000000000009502000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 2.674217945s ago: executing program 4 (id=346): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) 2.673940975s ago: executing program 4 (id=347): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1724000021200000240012800c0001006d6163766c616e0014000280080003000300000008"], 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000002) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c0009"], 0x4c}}, 0x4000040) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="130000001000000008"], 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES32=r3], 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r2, &(0x7f0000000100), 0x0}, 0x20) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793f10d10501200002000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000240)={0x20, 0x13, 0x1, "90"}, 0x0, 0x0}) syz_usb_control_io$rtl8150(r4, 0x0, 0x0) socket(0xa, 0x3, 0xff) 2.673384325s ago: executing program 3 (id=350): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x64000600) ioctl$KVM_IRQFD(r1, 0x4020ae76, 0x0) 2.624350146s ago: executing program 3 (id=351): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000080)={{0x2, 0x4e22, @multicast1}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14, {0x2, 0x4e20, @private}, 'syz_tun\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x4, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x200000dd}, 0x20040858) 2.615048857s ago: executing program 1 (id=352): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000140)={0x6, 0x5, 0xfffffffb, 0x3, 0xd, "4e51d01d5236922570b08e53c9119bbedc290f"}) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0f00000004000000080000000800180000000000", @ANYRES32, @ANYBLOB="ec09ffff00009c0eaa00"/25, @ANYRES32=0x0, @ANYRES32], 0x50) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000180), 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000240)=0x4) 2.326853954s ago: executing program 2 (id=353): prlimit64(0x0, 0xe, &(0x7f00000008c0)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./control\x00', 0x210000, &(0x7f0000000900)={[{@commit={'commit', 0x3d, 0xff2}}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@bh}, {@norecovery}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r2 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) utimensat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="b30fd05342a10c74b80d4993097201", @ANYRESOCT=r5, @ANYRES16=r2, @ANYRESOCT=r3, @ANYRESHEX=r1, @ANYRES64=0x0], 0x4, 0x37a, &(0x7f0000000340)="$eJzs3c9rHFUcAPBv1+ZHo+nmIIKK+KgXvSxJ/AcapAUxoMSuVA/C1Gx0yTQbdpbIFtHevPp3FI/eBPEfyEHv3rzl4rGH0pHsZPOr20Bpskv184HlfXfe+w5v9s0O7zJ8927/dHdzo2hsZL2oXU9Ri4jaw4iFQVS5dNDWBvF0HHc/3qvf/uutTz//4qOV1dUbayndXLn1/nJK6erbv3373c/Xfu+9/NkvV3+did2FL/f+Wf5797Xd1/ce3/qmXaR2kbY6vZSlO51OL7uTt9J6u9hspPRJ3sqKVmpvFa3uif6NvLO93U/Z1vr83Ha3VRQp2+qnzVY/9Tqp1+2n7OusvZUajUaanwuerlrT5oO1tWylOjJ7xujr45kUF6LbXcn213vmiZ7mg4lMCACYqOfd/0+f6/5/Kuz/x+n4/p//qv39//TB//ck+38AAAAAAAAAAAAAAHgRPCzLelmW9WFbDl8SPvg+4elxwZ5Y/1OfSc+Pi3Xsxb3ZiPzHneZOs2qr/pWNaEcerViMejzafywMVfHND1dvLKaBhZi/+8Mg/9ofEc2XTuYvRT0WRucvVfnpMD/226mYO56/HPV4dXT+8sj86Xj3nWP5jajHn19FJ/JYHzzejvK/X0rpg49XT+XPDMYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8P/QSENvRlX3fqcZcSV2Dur3N44GLJysj1/lH9bXX4x6PBpdn39xZH3+y/HG5cleOwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMFf17m1met7rjCoY1/wdHpofB07MuVcPvn+q6EmOcc563aud1wsdlWV7UVGfHu5TPE0xFnLWC5cFd8qxnPryvD4+8EhFnZM1ExOR/jXMKamdd6bMG438WAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKQdFf0e3T877gkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEUX/3maW563uBQaTvkYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAXyb8BAAD//5FhDMQ=") write(0xffffffffffffffff, &(0x7f0000004200)='t', 0x1) socket(0x400000000010, 0x3, 0xffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) readv(r6, 0x0, 0x0) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000800)=0x80) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000140)=0x7f) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x4, 0x0, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40d0}, 0x24040844) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), 0xffffffffffffffff) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x1f, &(0x7f0000000740)={&(0x7f0000000840)=ANY=[@ANYRESDEC=r8, @ANYRES16=r9, @ANYBLOB="01f5252beb00fcdbdf250300000088"], 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x24004000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan3\x00'}) 590.048436ms ago: executing program 1 (id=354): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1724000021200000240012800c0001006d6163766c616e0014000280080003000300000008"], 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000002) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c0009"], 0x4c}}, 0x4000040) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="130000001000000008"], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32=r2], 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r1, &(0x7f0000000100), 0x0}, 0x20) 589.768306ms ago: executing program 3 (id=355): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000e40)="74836a608a879c0f4933e2980e3c27227b44c5f674d374f685a7252ac48df7cbdb6cb4b24ef98291b83a501c8237790fe9dd1ab86749497a19e5823d8a30793254456ddc653c653fa808d834a5eb7d4d59ffb92952f1066a00bce07815b7b6d48a1722932d00dbdee09c36353b3109cdf5e573402fe43eed02728bedac7695eecc6592553d856ef5c81f3ac1aae42258794c093e644c10232030162346daaed7eb5035eeedc50977abe7153d2a693ed4a3808361052bbbd83cdd05d314de0d22a343bc438fb7d6cf3e96986d06662f1005a21a1a92a75cc0b9e59032f9cdeccd2d0ce9961ac063991b8adade53529e42a66e71cfe2898c62fea7a35048348ed3c1558f7dccf1d57ec1e04dce785f2b7d53a725bee3285c34c39c4bcfc7e78de0e2056ee113473335dff60475785116916d1f140a093a98912ab97185763da02e09aff786dabac1ecb508f44c729831afccd8127a432236ca799e232e24d6a432401121373560729431c07d280d5ddca29f8b090ba9fb342c0472dd41254696804d890335594dc908892b5b4141817d074e3d18f60fcc88a09d01167ebc34abe1fa88ad479b255fed991086555f6715611b75281c919e08295d7dce5a94354de0d3f9ab6a0ca20a76060b23caf7c18bf50d5cc1035f292394bf1be8640588918f692827dfdc1e4095c2b468a80b722b69e350e66c88c222bf1c357b3867d162e5e1d90777223b7dac6b9bd8fca2ee2019dbe35f7eb9f4562dd0d761adf16f1c2659aea0fe284602a4c188fae98d28f6bbe8c9928ecaa3ab282e4eb4480f8d26b1e38df368d808dc037350d13fd898638c1ffb13005709a6340fa4dec43307c7a53236399d02e03280fe5b37326b4bf920770607950aa957f73b56eb42b50428b80f533d57042b8cec67548f60789e557f5e68426b7ea3c7e2ed0c68e571bbb4d14dbb1a7e32750c30a97535bc6a398204e0b4b20038a2905fa97a899c0c153b9f783e08561d6d7ce9c593b20a8c9d0342c64639db4e4a900de891f9cf418caf585a9fb1fe88cd1febb3fadc934827e10adc73668c2bec4161c6d9d8af83b94916ba183fd4319139cea73173a5a2a5a50665643a0ca3de14b989706eecdbb010c45c9826ef368fc494c468446813208021c973c933a58507bc8a51baf3b77af624c8d15fad4e2d3cc7b2092c089baed0cd1f545cd6f1646bdaab17a11a74666c24e2af78dff22c8767155c7257235e851a4d57f51cc65e14f51c4a2afe1af92cdc25e5e71bdd3dde36ed40cb6393cc9696d7235e47929dbdb6a5d9d9059e19cd5e2e55ee1c25408f7deae259db7da26b81aa60365da1694085cfcda459930e6cc31501ece761aa36c12027a297f9e8b7da2b8149b251519a805ba3d5d850221e50ccc97b93281753193943d23b50be93fe957395c0ca116ebcedca7998c7f408dc938aba02b18ad9da724c2e3716981a658ce235d1723aba974c768c07dbef8678ff11cf46afae541ac5ac3a65ae67a51d201d9c8619592484afadcd4af0a4b0ea4af052a551e61bca70f2fac665e2e4d974ae3ee76f71ed58fc2e4194d9fd94b1a627cc7e116f11d67683144308947f4707422d31d4485a573e760963c74085dec9ed551d63c802d57e1633b82711b514a5b873b2be89660d84a188dbf1b97d7a23cb8b364f6ea031077718b19d01a6ed5942564525cb749e21c9a68ce245489db7e4fd383ed3e93ee006ff10a58c2fe3c91d97f790b8a271180c69589c21a0c72e68d84eddde3e01d5eb034e77a5a27cb80e34fa36f0fa4125a22944f60590e1b9b0f1c836d64217322286e3d24af8e991458af3a542ea8354fbe83a4d513893a39539523eef23802bff8019a5de324cbf39ec1e913fbb3cacbf7c7cf15ebfffbdd11c24543845d87e8b401671d2ae8d5db07d7e929248e1a348a17d80aff99ef1b3836f79a93f958a70d4e33a7f04fa15e1336f5c26289b46e470eff41958dce02e3163c199dd1ec083df1c8447624e529320fba36b848d27390aeb331d357de60465c2e0fb501916b1aa238ac1869dce80a17d9bba484c48a8928c170925889cd2224872ad328afb9321c9eb676096f5ad01c39652c906880b04190ad16855c9b03875356fef8fb2e470fc2432b878ea8daf6beb9b94e4dbaef0a1674403d1d2a72b593ac56de5237e7da7e662863b41f00e9332775c11e4d67c19f23e0d0eea7d2cec9ddb030baaf793e223052c6315ed478aa4d8707f2400d7d03bc32fff163acc1536e459f4807efacd3a855c55725392e635c3f432a2f724080a7aae411718b32f096c6dba2ed280b8169b1486812685f6aa34418b0b1777afd3c0f8030be528e31db140ee48814a1f56993678f97cb54abde61d8dcc8ecdcfc13531ac3fa53972e2be36f47f22ff6fce17f6a92c24ecd533ce544d47584683211e732dc49bffb3ecac90becf5dec9a2197512dcaca04f791cc04710105f7e80a704629834bca658c9928471cbcc32b2abfe50e0d3d63f7fe9b7c74313abf62b6a2addb4476c3ffd98ccc9c5bf3608da20d315d1428ed5025af648eafc90b5fec2fff3e1f3e284c661bb53c17e3e722a62122d62b8274bda4404d1b17144f2f04c3cc5bccee3b2568e2da456a284e4f76de40e70d4a34020530257e96a9c2f1d2ca661605641bc9bd78da275529dbf65203633f86a20b5971f3efc1b5160dcd0a4f2eb81bba79c3e6ceb46c8b8b301d8e050cb73df803b922d9edecadc4fd3c7d1598f44a16a0098202be9c180ca53fa26fc28f5dbd23cb052a9fda3d219f7f1fc8b5e85db094657f7263dfbe1b3c80022518890ff80b5bd91547d7a3404ce0b37974315cfc2dc6906eebc5f5e0227c2f6cbf98bda4466dd11026508026a8f7485f3ccb1273ff43f24fb49325db5e4a243d3f7c5ce6f35eb922d81544ed807897c896ce2f36705ffd58396022d093f6c74cc5f5eb2102bf9f2f213e471cfdf1f30f76ec8764f7a92d94cf00ff88107462bc3cb6e87c5926c0fdc6b5f45bcab6937ab0128f39a46fc8721548fd1451a9535905a70613f74d401989bffed243cd3560114ebcb38ea93474fe9ab948f930d236b244a562451d9c564dd86d635c6ce0bd0522f10a0d399e7bcd6e6ba89138c2da6b0b47dcfdd6cc773561943d15afb950b1d9a710ec2c3772e4ceacbddab61a344e360ee2a63e99c0fe6ef635cb0f40fa29246e37db290c1a038f59ee5fa379eaf26ead1146eaacaefbb753c3b0e3b16118ff3df617292c0705a6727f96770e3f0869effe493311469dfceb6c5f7f68976a04175b99df0b4ae0a8723188a210e9f66098332e022b02ca3a651ab99d660d764940b6868e59c7773efb0b4827b0d91d8429ea5bf545aa08013abfeac6160f97802cab7b32b38d9922a954e96cc4c5d7c43a7c89ca1e2d00c51208733dd8539724e62f5f5e69f556a1a3e5f4e9ee57363dd0317132e9829015ae0878fdf49e917f32e088ad00779cb801bcb2d34b21a5126d260c126ac3fa64182e9a640228f1707063a5bb4ea79f8b8b703367b31d8f387cb2695d1f27349ae5ba8ae40649ec6af188a68c0c4e2c8af927535a154db2661c71f0fd02fa07b154572addb912df3c844e1bc9ed6b4b14c4f802525374f075bc61c11c53cce143c812ffb53fc32766198464c8a574255b1727ec61a5812079fc23b773f4532284e9bf113c1b841b525dc6f9be7017c7bf1b8896e90925a633ee8724579f7f18f765a4029186eda52ff8292e4d44fa3d2edc99090e03568bf466200a35548ca3de102acd80355a9407fbabdb8722588d2396a5ff3b899e488346e9eeff8e8b349dbea0d6e8f86543bea1c8db9ec7b882909ebf7cdab930547afb8b0748abc72c9013cb72464dfb33354b1295d584800cf87869d7edbd07d0f88468b1e6d5d8679d5dce3d68c7c46b4cec0a5b9ed21ec1ede3deeb5c1bb98d92cd36a643e35a279aed569334181a70a37029ab8e79d0697359e58fecb7241e26188125e84123cde051d9a8bca2044e9786a88ef88e379a8e00a2c91ae98efa3649c0c2fe88a4e31c91e3372d5ccea58eb1d74cc48ef8e37b7248628b270df2c864a4b1a66d6ccf1b83cb6c484a2224e42905b0505fa5268a77fb1b10d08f57952e415c3f94e2f6299a3b1972a66e5aa34f000016803534160f99ccdd6a2cbb2c3b29ad078aec93f33d4f436549ffe88939cc7747c605c930a906c787c115ea6da9fcbd2148cfbabd4f88", 0xbba}], 0x1}}], 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10004, &(0x7f00000000c0), 0x0, 0x4c0, &(0x7f0000000540)="$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") bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="050000000a0000000a0000000902000040"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000180), 0x3ff, r1}, 0x38) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000000)=0x8, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e22, 0x5, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x6}, 0xfffffc43) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1000800, &(0x7f0000005a00)=ANY=[@ANYBLOB="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"], 0x2, 0x5537, &(0x7f0000005c80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x18b341, 0x84) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000080)={0x6, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x0, 'lc\x00', 0x1, 0x0, 0x5a}, 0x2c) getxattr(&(0x7f0000000040)='./file1\x00', &(0x7f0000000100)=@known='system.advise\x00', 0x0, 0x0) 565.918247ms ago: executing program 0 (id=356): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000380)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}, {@norecovery}, {}, {@dioread_nolock}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) r1 = socket(0x1, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000380)={'tunl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x7800, 0x7800, 0x1, 0x8, {{0x5, 0x4, 0x3, 0x9, 0x14, 0x67, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}, @local}}}}) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000602, 0xee00, &(0x7f00000005c0)={0x61ca, 0x5, 0x1, 0x8}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="b40200000000000063110800000000001d00000000000000950074000000000032efd8f33292ebe326b9c4f15c6196f8f5249f0c9f384f768d3514e9c82186f1c8251e5894e203673c37f506db8721140607e61901e37b18f0178aa31ada1c23562b09ab90a9ffe8be2ea41aba7f80339fb4e848aa7bb0316e1ca26b9472b5c3f6ffe49ce2fdbe1f69fea64fde034452e3b44efd20fe8651eea6e26f2dc36f1ed03d25924505a409fb068d910b736fd899ab32ddf1bb75c6e362feeb4e7f03fbcb9f65f9bb71bd56dee8c3ad949af934cfab781141ead56ff5285b70af298c42e8104de5"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x21) r3 = socket$netlink(0x10, 0x3, 0x5) r4 = getpid() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') mmap(&(0x7f00003be000/0x1000)=nil, 0x1000, 0x1000002, 0x50, r2, 0xf6d8a000) getdents64(r5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="180000000000000000000000feffffff850000002300000085000000230000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x18000000000002a0, 0x14, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f086dd", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x23, &(0x7f0000000080)=0x1) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000200), 0x8) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x6, &(0x7f0000000040)) nanosleep(0x0, 0x0) sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) ptrace$PTRACE_GETSIGMASK(0x420a, r4, 0x8, &(0x7f0000000000)) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000580)="580000001500192340a34b80040d8c560a11820fffff5bab4e21000000005dfb75b90f6a0325010ebc00b2b09b34bd0000000000008007f0fffeffe809005300fff5dd0000001000010008100000e1b5051a14b3d15b5325db2e080000008607e2aa2d0982", 0x65}], 0x1) getpid() 556.396987ms ago: executing program 1 (id=357): syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0xb0, 0x3000000, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 278.169683ms ago: executing program 2 (id=358): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) 277.781723ms ago: executing program 2 (id=359): bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x71) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001300)=@mangle={'mangle\x00', 0x10, 0x6, 0x5b8, 0x0, 0x410, 0x0, 0x2f8, 0x2f8, 0x640, 0x640, 0x640, 0x640, 0x640, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0xfff7, 0x4}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv6=@mcast1}}}, {{@ipv6={@private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1\x00', 'ip6gretap0\x00', {}, {}, 0x0, 0x2}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@eui64={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv4=@multicast1}}}, {{@ipv6={@mcast1, @mcast2, [], [], 'wg1\x00', 'vxcan1\x00', {0xff}, {}, 0x2c}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast2, @ipv6=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x618) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fchdir(r1) sched_setaffinity(0x0, 0x0, 0x0) r2 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) readv(r4, &(0x7f0000001840)=[{&(0x7f00000001c0)=""/255, 0xff}], 0x1) fcntl$setsig(r3, 0xa, 0x12) dup2(r3, r4) fcntl$setown(r4, 0x8, r2) r5 = gettid() tkill(r5, 0x13) 198.633936ms ago: executing program 0 (id=360): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000240)={0x6, 'veth1_macvtap\x00', {0x9}, 0xa41}) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) r1 = epoll_create1(0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000040), 0x1, 0x44a, &(0x7f0000000880)="$eJzs281vG0UbAPBn10n6vv1KKOWjpUCgQkR8JE1aoAcuIJA4FIEEh3IMTlpVdRvUBIlWFQ0IlQsSqgRnxBGJv4AbFwSckLjCHVWqoJcWTkG73m1t106b1rFD/ftJm8x4x555PDve2R07gIE1nv1JIrZGxG8RMVrPNhcYr/+7evls9e/LZ6tJrKy89WeSl7ty+Wy1LFo+b0uRmUgj0k+SopJmi6fPHJ+t1eZPFfmppRPvTS2ePvPssROzR+ePzp+cOXjwwP7pF56fea4rcWZxXdn94cKeXa+9c+H16uEL7/70bdbercX+xji6ZTwL/K+VXOu+J7pdWZ9ta0gnQ31sCGtSiYisu4bz8T8albjeeaPx6sd9bRywrrJz06bOu5dXgLtYEv1uAdAf5Yk+u/4ttx5NPTaESy/VL4CyuK8WW33PUKRFmeGW69tuGo+Iw8v/fJVtsU73IQAAGn1W/fJQPNNu/pfG/Q3lthdrKGMRcU9E7IiIeyNiZ0TcF5GXfSAiHlxj/a1LQzfOf9KLtxXYLcrmfy8Wa1vN879y9hdjlSK3LY9/ODlyrDa/r3hPJmJ4U5afXqWO71/59fNO+xrnf9mW1V/OBYt2XBxquUE3N7s0m09Ku+DSRxG7h9rFn1xbCUgiYldE7F7bS28vE8ee+mZPp0I3j38VXVhnWvk64sl6/y9HS/ylZPX1yan/RW1+31R5VNzo51/Ov9mp/juKvwuy/t/cfPy3FhlLGtdrF9dex/nfP+14TXO7x/9I8nbeLyPFYx/MLi2dmo4YSQ7l+abHZ64/t8yX5bP4J/a2H/87iudk9TwUEdlB/HBEPBIRjxZtfywiHo+IvavE/+PLnfdthP6fa/v5d+34b+n/tScqx3/4rlP9t9b/B/LURPFI/vl3E7fawDt57wAAAOC/Is2/A5+kk9fSaTo5Wf8O/87YnNYWFpeePrLw/sm5+nflx2I4Le90jTbcD51OlotXrOdninvF5f79xX3jLyr/z/OT1YXaXJ9jh0G3pcP4z/xR6XfrgHXXbh1tZqQPDQF6rnX8p83Zc2/0sjFAT/m9Ngyum4z/tFftAHrP+R8GV7vxf64lby0A7k7O/zC4jH8YXMY/DC7jHwbSnfyuX2KQE5FuiGZIrFOi359MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3fFvAAAA//+uEO7O") mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x8c}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r3 = socket(0x10, 0x803, 0x0) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r2, 0x8040942d, &(0x7f0000000000)) r6 = syz_clone3(&(0x7f0000000500)={0x30c000, 0x0, 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, 0x0}, 0x58) kcmp$KCMP_EPOLL_TFD(r6, 0x0, 0x7, 0xffffffffffffffff, 0x0) write$selinux_load(r4, &(0x7f0000000000)=ANY=[], 0xffaf) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000040)=0x4112, 0x4) sendmmsg$inet(r7, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) sendto(r3, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) chdir(&(0x7f0000000180)='./file0\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file7\x00', 0x1c4) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0xd) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xa0028010}) r8 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, &(0x7f00000006c0)=ANY=[@ANYBLOB="00000000000000000a00040000000000ff010000000000000000000000000001000000000000e58900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bfdb0000000000000000000000000000f7d032bb7c4fcdb98fdd3d240030899617"], 0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1}, 0x4) 81.328638ms ago: executing program 3 (id=361): r0 = socket$inet6(0xa, 0x1, 0x57) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x89b0, &(0x7f00000000c0)={'vlan0\x00', @random='\x00\x00\x00\x00\x00 '}) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000200)='hybla', 0x5) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f00000002c0)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r1, 0x40086e81, &(0x7f00000001c0)=0x9) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) sendto$inet(r2, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a128ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x2}) recvfrom$inet(r2, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, 0x8010, r0, 0x24bfe000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r7, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000100)={0xa4, r8, 0x1, 0x4, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x86, 0xe, [@random={0x11, 0x80, "596b54cf55dcba2a2bba4a30b0fb459ecf1d9d6c05367a1e0feca845d8e763e5baf26308460a7b5756d72d3a9bb19878f95485bbb285aa662b6568c264ada7c7fad92d35ca2d23782ddd49a55a0e6f44cb8da51205e76147a091fe5196a25c11d8d78404ca6d30c1cbaa306b5a9e4291a3d29dd91205a2f1648a5e64e76451f1"}]}]}, 0xa4}}, 0x10) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1200000006000000040000000400000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000000000002", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r10}, &(0x7f0000000040), &(0x7f0000000140)=r9}, 0x20) 421.99µs ago: executing program 3 (id=362): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) unshare(0x64000600) ioctl$KVM_IRQFD(r1, 0x4020ae76, 0x0) 140.96µs ago: executing program 0 (id=363): open(&(0x7f0000000300)='./file0\x00', 0x10002, 0xa0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x3, &(0x7f0000000240)=0x20207) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = socket$inet6_udplite(0xa, 0x2, 0x11) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, 0x0, r4, 0x0, 0xf, 0x8) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$binfmt_script(r6, &(0x7f0000000800)={'#! ', './file0'}, 0xb) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x140000, 0x3ff, 0x6, 0x4280, r4, 0x5, '\x00', 0x0, r3, 0x0, 0x2, 0x2, 0xc}, 0x50) read$FUSE(r3, &(0x7f000000a580)={0x2020}, 0x2020) tee(r5, r4, 0x800009, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) 0s ago: executing program 3 (id=364): open(&(0x7f0000000300)='./file0\x00', 0x1d3642, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xb9) sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x11) gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x3, 0x4, @thr={&(0x7f0000000340)="232dc690f50d6d8a8d401cc20b242af17c041ea0ae017304ae8c21ff12e4c91e3f62a5235c727f3662e2ed2cd60271c585e4ab52d706972c54d4ccc0c8df74f3b67bd6c902da4235962bb4bcac4c6083e1", &(0x7f0000000600)="a0881ec65ce592c50a673473a891173b943a7575d0e634d92f429ca69500053a8294d3bd0ea6a3defa3d2524c3744ad7fab0cbb545f000cedbf3de326d084b31db47d32c533ce2537b951e62f099f8dbf07741192b18a55fe3d9f634e94b4edd95627fb789c350c13cb3355cdc418a23008b242420ec524498db737d55cdb014903f66f82bb1a5786e95a41dfe7c580e597c226157ace8c297f62f5e236e4376663bb1fe7a849f"}}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x74}]}) r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r2, 0x5) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, 0x0, r4, 0x0, 0xf, 0x8) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$binfmt_script(r5, &(0x7f0000000800)={'#! ', './file0'}, 0xb) open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) r6 = inotify_init1(0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="b8000000190001000000000000000300e00000020000000000000000000000000000000000000000000000000000003bbcd68600000000000a00200000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, 0x4004) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000800000000000000000000000000000a00000087"], 0xb8}}, 0x2c000010) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000200000000000000001000000000000000000000000000000500000000000000fbffffffffffffff00000000000000000000000000004000000000000000000200002000000000000200"/112], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) inotify_add_watch(r6, &(0x7f0000000100)='./file1\x00', 0xe20000e1) read$FUSE(r3, &(0x7f000000a580)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): quota options ignored when QUOTA feature is enabled [ 26.475971][ T356] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.11: iget: bad i_size value: 38620345925642 [ 26.523086][ T60] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 64, setting to 8 [ 26.574708][ T60] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xE is Bulk; changing to Interrupt [ 26.588311][ T60] usb 1-1: string descriptor 0 read error: -22 [ 26.594831][ T60] usb 1-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 26.603993][ T60] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.616513][ T336] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 26.624273][ T336] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 26.633640][ T356] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.11: couldn't read orphan inode 15 (err -117) [ 26.652104][ T28] audit: type=1400 audit(1786189264.677:135): avc: denied { create } for pid=351 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 26.754943][ T358] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 26.845377][ T356] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 27.046791][ T28] audit: type=1400 audit(1786189264.677:136): avc: denied { write } for pid=351 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 27.066997][ T28] audit: type=1400 audit(1786189264.687:137): avc: denied { map_read map_write } for pid=351 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 27.083372][ T358] EXT4-fs error (device loop3): ext4_search_dir:1549: inode #2: block 16: comm syz.3.12: bad entry in directory: inode out of bounds - offset=60, inode=32767, rec_len=16, size=1024 fake=0 [ 27.086533][ T28] audit: type=1400 audit(1786189264.687:138): avc: denied { perfmon } for pid=351 comm="syz.1.9" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 27.190437][ T304] usb 1-1: USB disconnect, device number 2 [ 27.201548][ T290] EXT4-fs (loop3): unmounting filesystem. [ 27.227416][ T28] audit: type=1400 audit(1786189265.357:139): avc: denied { mount } for pid=368 comm="syz.3.13" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 27.261462][ T28] audit: type=1400 audit(1786189265.387:140): avc: denied { prog_run } for pid=368 comm="syz.3.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 27.288655][ T369] loop3: detected capacity change from 0 to 1024 [ 27.301268][ T369] EXT4-fs: Ignoring removed nomblk_io_submit option [ 27.311234][ T28] audit: type=1400 audit(1786189265.387:141): avc: denied { search } for pid=368 comm="syz.3.13" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 27.390566][ T369] EXT4-fs (loop3): unable to read superblock [ 27.396834][ T28] audit: type=1400 audit(1786189265.387:142): avc: denied { write } for pid=368 comm="syz.3.13" name="enable" dev="tracefs" ino=2337 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 27.419391][ T28] audit: type=1400 audit(1786189265.387:143): avc: denied { open } for pid=368 comm="syz.3.13" path="/3/my_tracefs/events/task/task_rename/enable" dev="tracefs" ino=2337 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 27.490852][ T367] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 27.787589][ T379] loop4: detected capacity change from 0 to 16 [ 27.807105][ T379] erofs: Unknown parameter '0x0000000000000003' [ 29.169105][ T378] loop1: detected capacity change from 0 to 512 [ 29.624584][ T375] netlink: 20 bytes leftover after parsing attributes in process `syz.4.15'. [ 29.713815][ T291] EXT4-fs (loop2): unmounting filesystem. [ 29.722914][ T289] EXT4-fs (loop0): unmounting filesystem. [ 29.729576][ T369] loop3: detected capacity change from 0 to 512 [ 29.735997][ T378] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 33619980: comm syz.1.14: invalid block [ 29.751067][ T378] EXT4-fs (loop1): Remounting filesystem read-only [ 29.757949][ T378] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:477: comm syz.1.14: Invalid block bitmap block 0 in block_group 0 [ 29.772276][ T378] EXT4-fs (loop1): Remounting filesystem read-only [ 29.778822][ T378] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 29.788140][ T378] EXT4-fs (loop1): Remounting filesystem read-only [ 29.795453][ T378] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz.1.14: attempt to clear invalid blocks 983261 len 1 [ 29.809564][ T378] EXT4-fs (loop1): Remounting filesystem read-only [ 29.816143][ T378] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.14: invalid indirect mapped block 2683928664 (level 0) [ 29.830428][ T378] EXT4-fs (loop1): Remounting filesystem read-only [ 29.837027][ T378] EXT4-fs error (device loop1): __ext4_get_inode_loc:4522: comm syz.1.14: Invalid inode table block 0 in block_group 0 [ 29.850862][ T378] EXT4-fs (loop1): Remounting filesystem read-only [ 29.857404][ T378] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 29.867120][ T378] EXT4-fs (loop1): Remounting filesystem read-only [ 29.869690][ T387] loop2: detected capacity change from 0 to 512 [ 29.873682][ T378] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 29.884864][ T390] process 'syz.0.16' launched './file0' with NULL argv: empty string added [ 29.897272][ T378] EXT4-fs (loop1): Remounting filesystem read-only [ 29.903932][ T378] EXT4-fs error (device loop1): __ext4_get_inode_loc:4522: comm syz.1.14: Invalid inode table block 0 in block_group 0 [ 29.906571][ T369] EXT4-fs error (device loop3): ext4_acquire_dquot:6828: comm syz.3.13: Failed to acquire dquot type 0 [ 29.928857][ T378] EXT4-fs (loop1): Remounting filesystem read-only [ 29.935544][ T378] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5954: Corrupt filesystem [ 29.945837][ T378] EXT4-fs (loop1): Remounting filesystem read-only [ 29.952603][ T378] EXT4-fs error (device loop1): ext4_truncate:4327: inode #13: comm syz.1.14: mark_inode_dirty error [ 29.964009][ T378] EXT4-fs (loop1): Remounting filesystem read-only [ 29.970552][ T378] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 29.979770][ T378] EXT4-fs (loop1): Remounting filesystem read-only [ 29.982001][ T369] EXT4-fs error (device loop3): ext4_acquire_dquot:6828: comm syz.3.13: Failed to acquire dquot type 0 [ 29.986511][ T378] EXT4-fs error (device loop1): __ext4_get_inode_loc:4522: comm syz.1.14: Invalid inode table block 0 in block_group 0 [ 30.010997][ T378] EXT4-fs (loop1): Remounting filesystem read-only [ 30.017661][ T378] EXT4-fs (loop1): 1 truncate cleaned up [ 30.018257][ T369] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.13: bg 0: block 64: padding at end of block bitmap is not set [ 30.023465][ T378] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 30.050688][ T378] EXT4-fs (loop1): unmounting filesystem. [ 30.067678][ T387] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 30.081296][ T382] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 30.089167][ T387] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.100714][ T369] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 30.217111][ T369] EXT4-fs error (device loop3): ext4_acquire_dquot:6828: comm syz.3.13: Failed to acquire dquot type 0 [ 30.241135][ T369] EXT4-fs (loop3): 1 orphan inode deleted [ 30.245191][ T387] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #15: comm syz.2.17: corrupted xattr block 33 [ 30.257076][ T369] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 30.259027][ T387] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 30.267739][ T369] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 30.278008][ T387] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #15: comm syz.2.17: corrupted xattr block 33 [ 30.364678][ T382] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 30.375678][ T387] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 30.381893][ T382] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 30.387717][ T290] EXT4-fs (loop3): unmounting filesystem. [ 30.396082][ T382] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 30.402696][ T387] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #15: comm syz.2.17: corrupted xattr block 33 [ 30.421991][ T382] usb 5-1: SerialNumber: syz [ 30.458884][ T387] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 30.468135][ T387] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #15: comm syz.2.17: corrupted xattr block 33 [ 30.490600][ T387] fscrypt (loop2, inode 15): Error -117 getting encryption context [ 30.552131][ T411] Zero length message leads to an empty skb [ 30.572212][ T411] 9pnet_virtio: no channels available for device 127.0.0.1 [ 30.946941][ T409] loop3: detected capacity change from 0 to 131072 [ 30.963235][ T409] F2FS-fs (loop3): invalid crc value [ 30.991499][ T409] F2FS-fs (loop3): Mismatch valid blocks 5 vs. 0 [ 31.001236][ T409] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) [ 31.010892][ T367] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 31.050589][ T382] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 31.216632][ T367] usb 3-1: unable to get BOS descriptor or descriptor too short [ 31.228809][ T420] loop0: detected capacity change from 0 to 512 [ 31.231761][ T367] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 64, setting to 8 [ 31.259709][ T367] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xE is Bulk; changing to Interrupt [ 31.302885][ T367] usb 3-1: string descriptor 0 read error: -22 [ 31.310680][ T367] usb 3-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 31.321024][ T420] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 31.353575][ T420] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.364059][ T367] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.388106][ T401] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 31.420230][ T401] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 31.435732][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 31.435748][ T28] audit: type=1400 audit(1786189269.567:171): avc: denied { write } for pid=406 comm="syz.3.22" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 31.485394][ T433] capability: warning: `syz.3.22' uses deprecated v2 capabilities in a way that may be insecure [ 31.495461][ T420] EXT4-fs error (device loop0): ext4_xattr_block_get:543: inode #15: comm syz.0.24: corrupted xattr block 33 [ 31.500749][ T382] usb 5-1: USB disconnect, device number 2 [ 31.520643][ T420] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 31.528664][ T382] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 31.530613][ T28] audit: type=1400 audit(1786189269.567:172): avc: denied { search } for pid=430 comm="sed" name="resolv.conf" dev="tmpfs" ino=494 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.562374][ T420] EXT4-fs error (device loop0): ext4_xattr_block_get:543: inode #15: comm syz.0.24: corrupted xattr block 33 [ 31.575833][ T420] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 31.586666][ T420] EXT4-fs error (device loop0): ext4_xattr_block_get:543: inode #15: comm syz.0.24: corrupted xattr block 33 [ 31.608391][ T28] audit: type=1400 audit(1786189269.607:173): avc: denied { getattr } for pid=417 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=494 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.637983][ T420] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 31.652240][ T420] EXT4-fs error (device loop0): ext4_xattr_block_get:543: inode #15: comm syz.0.24: corrupted xattr block 33 [ 31.664423][ T28] audit: type=1400 audit(1786189269.607:174): avc: denied { write } for pid=417 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=493 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.687692][ T420] fscrypt (loop0, inode 15): Error -117 getting encryption context [ 31.696097][ T28] audit: type=1400 audit(1786189269.607:175): avc: denied { add_name } for pid=417 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.729419][ T28] audit: type=1400 audit(1786189269.607:176): avc: denied { create } for pid=417 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 31.775910][ T28] audit: type=1400 audit(1786189269.607:177): avc: denied { write } for pid=417 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.usb0.link" dev="tmpfs" ino=843 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 31.809208][ T28] audit: type=1400 audit(1786189269.607:178): avc: denied { append } for pid=417 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" dev="tmpfs" ino=843 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 31.833525][ T28] audit: type=1400 audit(1786189269.677:179): avc: denied { remove_name } for pid=434 comm="rm" name="resolv.conf.usb0.link" dev="tmpfs" ino=843 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.849147][ T60] usb 3-1: USB disconnect, device number 3 [ 31.857693][ T367] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 31.873675][ T28] audit: type=1400 audit(1786189269.677:180): avc: denied { unlink } for pid=434 comm="rm" name="resolv.conf.usb0.link" dev="tmpfs" ino=843 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 32.044757][ T462] loop4: detected capacity change from 0 to 512 [ 32.070417][ T462] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.27: inode has both inline data and extents flags [ 32.091595][ T462] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.27: couldn't read orphan inode 15 (err -117) [ 32.103993][ T367] usb 1-1: unable to get BOS descriptor or descriptor too short [ 32.110997][ T462] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 32.114519][ T367] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 64, setting to 8 [ 32.151485][ T367] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xE is Bulk; changing to Interrupt [ 32.165193][ T367] usb 1-1: string descriptor 0 read error: -22 [ 32.165266][ T462] ======================================================= [ 32.165266][ T462] WARNING: The mand mount option has been deprecated and [ 32.165266][ T462] and is ignored by this kernel. Remove the mand [ 32.165266][ T462] option from the mount to silence this warning. [ 32.165266][ T462] ======================================================= [ 32.171822][ T367] usb 1-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 32.215796][ T367] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.224258][ T462] overlayfs: failed to resolve './file1/file0': -2 [ 32.230963][ T435] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 32.238119][ T435] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 32.282358][ T466] loop3: detected capacity change from 0 to 128 [ 32.322918][ T466] syz.3.28: attempt to access beyond end of device [ 32.322918][ T466] loop3: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 32.350249][ T466] syz.3.28: attempt to access beyond end of device [ 32.350249][ T466] loop3: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 32.372095][ T291] EXT4-fs (loop2): unmounting filesystem. [ 32.378182][ T466] syz.3.28: attempt to access beyond end of device [ 32.378182][ T466] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 32.400399][ T466] syz.3.28: attempt to access beyond end of device [ 32.400399][ T466] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 32.414055][ T468] syz.3.28: attempt to access beyond end of device [ 32.414055][ T468] loop3: rw=0, sector=150, nr_sectors = 1 limit=128 [ 32.427706][ T466] syz.3.28: attempt to access beyond end of device [ 32.427706][ T466] loop3: rw=0, sector=145, nr_sectors = 1 limit=128 [ 32.442577][ T466] Buffer I/O error on dev loop3, logical block 145, async page read [ 32.451027][ T466] syz.3.28: attempt to access beyond end of device [ 32.451027][ T466] loop3: rw=0, sector=146, nr_sectors = 1 limit=128 [ 32.464123][ T466] Buffer I/O error on dev loop3, logical block 146, async page read [ 32.472254][ T466] syz.3.28: attempt to access beyond end of device [ 32.472254][ T466] loop3: rw=0, sector=147, nr_sectors = 1 limit=128 [ 32.503005][ T466] Buffer I/O error on dev loop3, logical block 147, async page read [ 32.512604][ T466] syz.3.28: attempt to access beyond end of device [ 32.512604][ T466] loop3: rw=0, sector=148, nr_sectors = 1 limit=128 [ 32.526640][ T466] Buffer I/O error on dev loop3, logical block 148, async page read [ 32.534772][ T466] syz.3.28: attempt to access beyond end of device [ 32.534772][ T466] loop3: rw=0, sector=149, nr_sectors = 1 limit=128 [ 32.549214][ T466] Buffer I/O error on dev loop3, logical block 149, async page read [ 32.549380][ T471] pci 0000:00:05.0: [1ae0:a002] type 00 class 0x030000 [ 32.557361][ T466] Buffer I/O error on dev loop3, logical block 150, async page read [ 32.572541][ T466] Buffer I/O error on dev loop3, logical block 151, async page read [ 32.577968][ T60] usb 1-1: USB disconnect, device number 3 [ 32.580889][ T466] Buffer I/O error on dev loop3, logical block 152, async page read [ 32.619190][ T466] Buffer I/O error on dev loop3, logical block 145, async page read [ 32.641079][ T466] Buffer I/O error on dev loop3, logical block 146, async page read [ 32.641545][ T288] EXT4-fs (loop4): unmounting filesystem. [ 32.653644][ T471] pci 0000:00:05.0: BAR 0 [mem 0xfe000000-0xfe7fffff] [ 32.880872][ T382] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 32.915755][ T471] pci 0000:00:05.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 32.928059][ T471] pci 0000:00:05.0: vgaarb: setting as boot VGA device [ 32.934935][ T471] pci 0000:00:05.0: vgaarb: bridge control possible [ 32.941555][ T471] pci 0000:00:05.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 32.957795][ T471] pci 0000:00:05.0: BAR 0 [mem 0xc0000000-0xc07fffff]: assigned [ 33.081992][ T382] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.096508][ T382] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.119595][ T289] EXT4-fs (loop0): unmounting filesystem. [ 33.125455][ T382] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 33.140861][ T382] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 33.142059][ T367] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 33.167949][ T367] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 33.170841][ T382] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.219809][ T382] usb 2-1: config 0 descriptor?? [ 33.259309][ T485] loop3: detected capacity change from 0 to 512 [ 33.362431][ T485] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 33.371576][ T485] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.435598][ T485] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.34: corrupted xattr block 33 [ 33.447497][ T485] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 33.456569][ T485] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.34: corrupted xattr block 33 [ 33.468480][ T485] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 33.477587][ T485] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.34: corrupted xattr block 33 [ 33.489500][ T485] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 33.498829][ T367] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 33.501320][ T485] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.34: corrupted xattr block 33 [ 33.520455][ T493] Invalid ELF header type: 3 != 1 [ 33.523054][ T485] fscrypt (loop3, inode 15): Error -117 getting encryption context [ 33.662401][ T382] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 33.670360][ T382] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 33.678255][ T382] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 33.683334][ T367] usb 1-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 33.685950][ T382] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 33.700842][ T367] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.702457][ T382] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 33.710093][ T367] usb 1-1: Product: syz [ 33.710111][ T367] usb 1-1: Manufacturer: syz [ 33.710123][ T367] usb 1-1: SerialNumber: syz [ 33.717959][ T382] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 33.738661][ T382] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 33.746406][ T382] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 33.746422][ T367] usb 1-1: config 0 descriptor?? [ 33.754095][ T382] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 33.762866][ T367] hub 1-1:0.0: bad descriptor, ignoring hub [ 33.766666][ T382] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 33.779737][ T367] hub: probe of 1-1:0.0 failed with error -5 [ 33.781382][ T382] plantronics 0003:047F:FFFF.0002: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 33.790839][ T19] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 33.925952][ T471] loop1: detected capacity change from 0 to 256 [ 33.955632][ T471] FAT-fs (loop1): Directory bread(block 64) failed [ 33.962382][ T471] FAT-fs (loop1): Directory bread(block 65) failed [ 33.969011][ T471] FAT-fs (loop1): Directory bread(block 66) failed [ 33.976069][ T471] FAT-fs (loop1): Directory bread(block 67) failed [ 33.983495][ T471] FAT-fs (loop1): Directory bread(block 68) failed [ 33.990185][ T471] FAT-fs (loop1): Directory bread(block 69) failed [ 33.997115][ T471] FAT-fs (loop1): Directory bread(block 70) failed [ 34.002227][ T19] usb 4-1: unable to get BOS descriptor or descriptor too short [ 34.003976][ T471] FAT-fs (loop1): Directory bread(block 71) failed [ 34.018359][ T471] FAT-fs (loop1): Directory bread(block 72) failed [ 34.021580][ T19] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 64, setting to 8 [ 34.025157][ T471] FAT-fs (loop1): Directory bread(block 73) failed [ 34.052666][ T19] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xE is Bulk; changing to Interrupt [ 34.068718][ T19] usb 4-1: string descriptor 0 read error: -22 [ 34.076207][ T19] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 34.087223][ T19] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.098566][ T494] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 34.105938][ T494] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 34.264537][ T60] usb 2-1: USB disconnect, device number 2 [ 34.564713][ T382] usb 4-1: USB disconnect, device number 2 [ 34.596149][ T506] device syzkaller0 entered promiscuous mode [ 34.930861][ T367] usb 1-1: reset high-speed USB device number 4 using dummy_hcd [ 34.945797][ T519] loop1: detected capacity change from 0 to 256 [ 34.952548][ T519] exfat: Deprecated parameter 'namecase' [ 34.964529][ T519] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f41, chksum : 0x01284b2f, utbl_chksum : 0xe619d30d) [ 34.995549][ T521] loop1: detected capacity change from 0 to 512 [ 35.012885][ T521] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 35.022488][ T521] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.076828][ T521] EXT4-fs error (device loop1): ext4_xattr_block_get:543: inode #15: comm syz.1.43: corrupted xattr block 33 [ 35.091287][ T521] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 35.106480][ T521] EXT4-fs error (device loop1): ext4_xattr_block_get:543: inode #15: comm syz.1.43: corrupted xattr block 33 [ 35.119479][ T290] EXT4-fs (loop3): unmounting filesystem. [ 35.125544][ T521] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 35.134976][ T521] EXT4-fs error (device loop1): ext4_xattr_block_get:543: inode #15: comm syz.1.43: corrupted xattr block 33 [ 35.149171][ T521] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 35.159040][ T521] EXT4-fs error (device loop1): ext4_xattr_block_get:543: inode #15: comm syz.1.43: corrupted xattr block 33 [ 35.176573][ T521] fscrypt (loop1, inode 15): Error -117 getting encryption context [ 35.257564][ T527] loop3: detected capacity change from 0 to 40427 [ 35.268545][ T527] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 35.275679][ T527] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 35.287045][ T527] F2FS-fs (loop3): invalid crc value [ 35.294007][ T527] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 35.332441][ T527] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 35.343670][ T527] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 35.410848][ T60] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 35.440937][ T367] usb 1-1: USB disconnect, device number 4 [ 35.602273][ T60] usb 2-1: unable to get BOS descriptor or descriptor too short [ 35.611025][ T60] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 64, setting to 8 [ 35.623402][ T537] xt_hashlimit: size too large, truncated to 1048576 [ 35.631268][ T60] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xE is Bulk; changing to Interrupt [ 35.650896][ T304] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 35.653880][ T60] usb 2-1: string descriptor 0 read error: -22 [ 35.675056][ T60] usb 2-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 35.690827][ T60] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.713338][ T525] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 35.720686][ T525] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 35.837026][ T304] usb 5-1: config 1 has an invalid descriptor of length 19, skipping remainder of the config [ 35.844280][ T542] loop0: detected capacity change from 0 to 512 [ 35.853189][ T304] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 35.865310][ T544] loop3: detected capacity change from 0 to 512 [ 35.865618][ T542] EXT4-fs: Ignoring removed nomblk_io_submit option [ 35.889177][ T542] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 35.893417][ T304] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 35.910537][ T542] EXT4-fs (loop0): 1 truncate cleaned up [ 35.919314][ T304] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 35.919923][ T542] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 35.970364][ T304] usb 5-1: SerialNumber: syz [ 35.974446][ T60] usb 2-1: USB disconnect, device number 3 [ 35.976616][ T544] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 35.992330][ T289] EXT4-fs (loop0): unmounting filesystem. [ 36.001158][ T544] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.140957][ T544] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.47: corrupted xattr block 33 [ 36.153044][ T544] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 36.162211][ T544] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.47: corrupted xattr block 33 [ 36.174702][ T544] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 36.184040][ T544] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.47: corrupted xattr block 33 [ 36.196927][ T544] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 36.206481][ T544] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.47: corrupted xattr block 33 [ 36.238895][ T544] fscrypt (loop3, inode 15): Error -117 getting encryption context [ 36.434902][ T544] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.47: corrupted xattr block 33 [ 36.554158][ T544] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 36.565528][ T28] kauditd_printk_skb: 63 callbacks suppressed [ 36.565551][ T28] audit: type=1400 audit(1786189274.707:244): avc: denied { setopt } for pid=552 comm="syz.2.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 36.615742][ T544] EXT4-fs error (device loop3): ext4_xattr_block_find:1826: inode #15: comm syz.3.47: corrupted xattr block 33 [ 36.629598][ T28] audit: type=1400 audit(1786189274.727:245): avc: denied { write } for pid=552 comm="syz.2.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 36.650569][ T28] audit: type=1400 audit(1786189274.737:246): avc: denied { bind } for pid=552 comm="syz.2.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 36.724065][ T28] audit: type=1400 audit(1786189274.737:247): avc: denied { name_bind } for pid=552 comm="syz.2.50" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 36.817835][ T290] EXT4-fs (loop3): unmounting filesystem. [ 36.824391][ T28] audit: type=1400 audit(1786189274.737:248): avc: denied { node_bind } for pid=552 comm="syz.2.50" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 37.201091][ T304] usb 5-1: 0:2 : does not exist [ 37.206540][ T28] audit: type=1400 audit(1786189274.747:249): avc: denied { read } for pid=552 comm="syz.2.50" lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 37.234778][ T554] loop2: detected capacity change from 0 to 1024 [ 37.258293][ T304] usb 5-1: unit 95 not found! [ 37.281281][ T554] EXT4-fs: Ignoring removed mblk_io_submit option [ 37.288349][ T28] audit: type=1400 audit(1786189274.747:250): avc: denied { setattr } for pid=543 comm="syz.3.47" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 37.313418][ T560] loop4: detected capacity change from 0 to 1024 [ 37.313696][ T554] EXT4-fs (loop2): invalid inodes per group: 0 [ 37.313696][ T554] [ 37.328551][ T560] EXT4-fs: Ignoring removed i_version option [ 37.339218][ T304] usb 5-1: USB disconnect, device number 3 [ 37.351594][ T560] EXT4-fs (loop4): Test dummy encryption mode enabled [ 37.360679][ T287] EXT4-fs (loop1): unmounting filesystem. [ 37.378061][ T560] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6000c01c, mo2=0102] [ 37.388183][ T560] System zones: 0-1, 3-36 [ 37.395076][ T560] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 37.474203][ T560] fscrypt: AES-256-XTS using blk-crypto-fallback [ 37.516956][ T288] EXT4-fs (loop4): unmounting filesystem. [ 37.530861][ T382] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 37.539542][ T28] audit: type=1400 audit(1786189275.667:251): avc: denied { create } for pid=568 comm="syz.2.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 37.559209][ T28] audit: type=1400 audit(1786189275.667:252): avc: denied { bind } for pid=568 comm="syz.2.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 37.578676][ T388] udevd[388]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 37.610917][ T28] audit: type=1400 audit(1786189275.667:253): avc: denied { listen } for pid=568 comm="syz.2.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 37.633800][ T579] netem: change failed [ 37.772376][ T382] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 37.786304][ T382] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 37.795480][ T382] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 37.804111][ T382] usb 4-1: SerialNumber: syz [ 38.153616][ T585] netlink: 140 bytes leftover after parsing attributes in process `syz.0.59'. [ 38.164758][ T585] loop0: detected capacity change from 0 to 256 [ 38.173291][ T585] netlink: 20 bytes leftover after parsing attributes in process `syz.0.59'. [ 38.183088][ T585] netlink: 'syz.0.59': attribute type 1 has an invalid length. [ 38.191344][ T585] netlink: 8 bytes leftover after parsing attributes in process `syz.0.59'. [ 38.373238][ T594] loop2: detected capacity change from 0 to 512 [ 38.414180][ T382] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 38.431659][ T594] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 38.441343][ T594] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.542695][ T609] loop0: detected capacity change from 0 to 512 [ 38.908739][ T620] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #15: comm syz.2.62: corrupted xattr block 33 [ 38.960990][ T382] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 39.061731][ T620] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 39.073925][ T620] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #15: comm syz.2.62: corrupted xattr block 33 [ 39.101158][ T620] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 39.115910][ T620] EXT4-fs error (device loop2): ext4_xattr_block_find:1826: inode #15: comm syz.2.62: corrupted xattr block 33 [ 39.212007][ T382] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 39.220351][ T382] usb 5-1: config 0 has no interface number 0 [ 39.228601][ T291] EXT4-fs (loop2): unmounting filesystem. [ 39.236476][ T382] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 39.246296][ T382] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.254414][ T382] usb 5-1: Product: syz [ 39.258704][ T382] usb 5-1: Manufacturer: syz [ 39.264313][ T382] usb 5-1: SerialNumber: syz [ 39.270110][ T60] usb 4-1: USB disconnect, device number 3 [ 39.276427][ T60] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device [ 39.286433][ T382] usb 5-1: config 0 descriptor?? [ 39.425266][ T385] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 39.696590][ T671] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 40.699696][ T601] set_capacity_and_notify: 2 callbacks suppressed [ 40.699716][ T601] loop4: detected capacity change from 0 to 2048 [ 40.754005][ T676] loop2: detected capacity change from 0 to 512 [ 40.810144][ T601] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 40.866177][ T601] EXT4-fs (loop4): shut down requested (2) [ 40.874622][ T676] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 40.881836][ T601] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 40.888283][ T676] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.901046][ T601] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 40.974260][ T694] loop1: detected capacity change from 0 to 512 [ 41.006125][ T694] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 41.015256][ T694] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.144313][ T694] EXT4-fs error (device loop1): ext4_xattr_block_get:543: inode #15: comm syz.1.74: corrupted xattr block 33 [ 41.157056][ T694] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 41.166189][ T694] EXT4-fs error (device loop1): ext4_xattr_block_get:543: inode #15: comm syz.1.74: corrupted xattr block 33 [ 41.178160][ T694] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 41.187332][ T694] EXT4-fs error (device loop1): ext4_xattr_block_get:543: inode #15: comm syz.1.74: corrupted xattr block 33 [ 41.199187][ T694] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 41.208333][ T694] EXT4-fs error (device loop1): ext4_xattr_block_get:543: inode #15: comm syz.1.74: corrupted xattr block 33 [ 41.221131][ T694] fscrypt (loop1, inode 15): Error -117 getting encryption context [ 41.310885][ T673] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 41.405141][ T304] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 41.470849][ T635] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 41.494259][ T673] usb 3-1: unable to get BOS descriptor or descriptor too short [ 41.508517][ T673] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 64, setting to 8 [ 41.522013][ T673] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xE is Bulk; changing to Interrupt [ 41.534243][ T673] usb 3-1: string descriptor 0 read error: -22 [ 41.540699][ T673] usb 3-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 41.560863][ T673] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.570013][ T676] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 41.577814][ T676] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 41.590890][ T304] usb 1-1: Using ep0 maxpacket: 32 [ 41.602711][ T304] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 41.611399][ T304] usb 1-1: config 0 has no interface number 0 [ 41.619199][ T304] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 41.628503][ T304] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.636639][ T304] usb 1-1: Product: syz [ 41.641203][ T304] usb 1-1: Manufacturer: syz [ 41.645829][ T304] usb 1-1: SerialNumber: syz [ 41.651622][ T304] usb 1-1: config 0 descriptor?? [ 41.652338][ T635] usb 2-1: unable to get BOS descriptor or descriptor too short [ 41.657687][ T304] smsc95xx v2.0.0 [ 41.666466][ T635] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 64, setting to 8 [ 41.678977][ T635] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xE is Bulk; changing to Interrupt [ 41.691996][ T635] usb 2-1: string descriptor 0 read error: -22 [ 41.698212][ T635] usb 2-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 41.707338][ T635] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.716384][ T707] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 41.723785][ T707] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 41.951167][ T19] usb 2-1: USB disconnect, device number 4 [ 41.968252][ T382] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 41.978607][ T382] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 41.988357][ T382] asix: probe of 5-1:0.251 failed with error -5 [ 41.996206][ T382] usb 5-1: USB disconnect, device number 4 [ 42.002627][ T288] EXT4-fs (loop4): unmounting filesystem. [ 42.050982][ T720] loop4: detected capacity change from 0 to 512 [ 42.072271][ T720] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 42.082452][ T720] EXT4-fs (loop4): unmounting filesystem. [ 42.115396][ T720] loop4: detected capacity change from 0 to 512 [ 42.128673][ T720] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 42.136742][ T720] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002] [ 42.145802][ T720] EXT4-fs (loop4): orphan cleanup on readonly fs [ 42.152766][ T720] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #13: comm syz.4.81: iget: bad i_size value: 12154761577498 [ 42.165788][ T720] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.81: couldn't read orphan inode 13 (err -117) [ 42.177773][ T720] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 42.192861][ T720] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 42.201035][ T720] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002] [ 42.214591][ T288] EXT4-fs (loop4): unmounting filesystem. [ 42.257130][ T726] loop3: detected capacity change from 0 to 512 [ 42.268821][ T704] loop0: detected capacity change from 0 to 1024 [ 42.281678][ T704] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 42.298487][ T726] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 42.313710][ T19] usb 3-1: USB disconnect, device number 4 [ 42.341992][ T726] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.381194][ T291] EXT4-fs (loop2): unmounting filesystem. [ 42.440195][ T704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.456156][ T704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.512594][ T726] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.83: corrupted xattr block 33 [ 42.524562][ T726] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 42.533885][ T726] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.83: corrupted xattr block 33 [ 42.546995][ T726] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 42.561924][ T726] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.83: corrupted xattr block 33 [ 42.574375][ T726] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 42.583501][ T726] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.83: corrupted xattr block 33 [ 42.595784][ T726] fscrypt (loop3, inode 15): Error -117 getting encryption context [ 42.613478][ T736] loop2: detected capacity change from 0 to 512 [ 42.621560][ T736] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 42.650405][ T287] EXT4-fs (loop1): unmounting filesystem. [ 42.670471][ T737] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.83: corrupted xattr block 33 [ 42.683515][ T737] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 42.697680][ T737] EXT4-fs error (device loop3): ext4_xattr_block_find:1826: inode #15: comm syz.3.83: corrupted xattr block 33 [ 43.665278][ T304] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 43.677334][ T304] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 43.689586][ T304] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 43.700673][ T304] smsc95xx: probe of 1-1:0.67 failed with error -71 [ 43.708379][ T304] usb 1-1: USB disconnect, device number 5 [ 43.805229][ T290] EXT4-fs (loop3): unmounting filesystem. [ 44.130918][ T635] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 44.231002][ T304] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 44.296975][ T289] EXT4-fs (loop0): unmounting filesystem. [ 44.311024][ T635] usb 4-1: Using ep0 maxpacket: 16 [ 44.319506][ T635] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 44.328895][ T635] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.341090][ T635] usb 4-1: config 0 descriptor?? [ 44.348381][ T635] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 44.356211][ T768] loop0: detected capacity change from 0 to 512 [ 44.374651][ T768] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 44.383753][ T768] EXT4-fs (loop0): unmounting filesystem. [ 44.431925][ T304] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 44.440168][ T304] usb 3-1: config 0 has no interface number 0 [ 44.441625][ T768] loop0: detected capacity change from 0 to 512 [ 44.448237][ T304] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 44.462025][ T304] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.470105][ T304] usb 3-1: Product: syz [ 44.474454][ T304] usb 3-1: Manufacturer: syz [ 44.479119][ T304] usb 3-1: SerialNumber: syz [ 44.485181][ T304] usb 3-1: config 0 descriptor?? [ 44.490941][ T768] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 44.499465][ T768] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002] [ 44.508019][ T768] EXT4-fs (loop0): orphan cleanup on readonly fs [ 44.514476][ T768] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #13: comm syz.0.93: iget: bad i_size value: 12154761577498 [ 44.527229][ T768] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.93: couldn't read orphan inode 13 (err -117) [ 44.539106][ T768] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 44.547853][ T635] usb 4-1: Detected FT232B [ 44.557557][ T768] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 44.565669][ T768] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002] [ 44.580390][ T289] EXT4-fs (loop0): unmounting filesystem. [ 44.608413][ T772] EXT4-fs: Ignoring removed mblk_io_submit option [ 44.616480][ T772] EXT4-fs (loop0): Test dummy encryption mode enabled [ 44.626483][ T772] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 44.658567][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 44.658602][ T28] audit: type=1400 audit(1786189282.787:266): avc: denied { write } for pid=771 comm="syz.0.95" name="igmp" dev="proc" ino=4026532577 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 44.756770][ T775] EXT4-fs: Ignoring removed bh option [ 44.770911][ T775] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 44.783679][ T635] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 44.793511][ T775] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 44.810013][ T635] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 44.826448][ T775] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.96: bg 0: block 248: padding at end of block bitmap is not set [ 44.842225][ T775] Quota error (device loop1): write_blk: dquota write failed [ 44.849852][ T775] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 44.861575][ T775] EXT4-fs error (device loop1): ext4_acquire_dquot:6828: comm syz.1.96: Failed to acquire dquot type 1 [ 44.875117][ T775] EXT4-fs (loop1): 1 truncate cleaned up [ 44.881112][ T775] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 44.982271][ T775] syz.1.96 (775) used greatest stack depth: 21088 bytes left [ 44.995113][ T763] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 45.016624][ T763] EXT4-fs (loop2): shut down requested (2) [ 45.024084][ T287] EXT4-fs (loop1): unmounting filesystem. [ 45.048473][ T763] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 45.050014][ T382] usb 4-1: USB disconnect, device number 4 [ 45.066842][ T382] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 45.081431][ T382] ftdi_sio 4-1:0.0: device disconnected [ 45.124678][ T763] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 45.161183][ T635] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 45.236315][ T787] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 45.245682][ T787] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.343134][ T779] 9pnet_fd: Insufficient options for proto=fd [ 45.370959][ T6] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 45.417948][ T790] EXT4-fs error (device loop4): ext4_xattr_block_get:543: inode #15: comm syz.4.98: corrupted xattr block 33 [ 45.430679][ T790] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 45.440509][ T790] EXT4-fs error (device loop4): ext4_xattr_block_get:543: inode #15: comm syz.4.98: corrupted xattr block 33 [ 45.453013][ T790] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 45.462173][ T790] EXT4-fs error (device loop4): ext4_xattr_block_get:543: inode #15: comm syz.4.98: corrupted xattr block 33 [ 45.474642][ T790] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 45.483938][ T790] EXT4-fs error (device loop4): ext4_xattr_block_get:543: inode #15: comm syz.4.98: corrupted xattr block 33 [ 45.493759][ T787] EXT4-fs error (device loop4): ext4_xattr_block_get:543: inode #15: comm syz.4.98: corrupted xattr block 33 [ 45.508496][ T790] fscrypt (loop4, inode 15): Error -117 getting encryption context [ 45.510829][ T787] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 45.528509][ T787] EXT4-fs error (device loop4): ext4_xattr_block_find:1826: inode #15: comm syz.4.98: corrupted xattr block 33 [ 45.572462][ T6] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 45.599754][ T6] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 45.610294][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 45.619572][ T6] usb 2-1: SerialNumber: syz [ 45.652366][ T288] EXT4-fs (loop4): unmounting filesystem. [ 45.667901][ T792] EXT4-fs: Ignoring removed nomblk_io_submit option [ 45.676098][ T792] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 45.720553][ T792] EXT4-fs (loop3): 1 truncate cleaned up [ 45.723443][ T795] set_capacity_and_notify: 5 callbacks suppressed [ 45.723457][ T795] loop4: detected capacity change from 0 to 512 [ 45.753702][ T792] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 45.812518][ T795] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 45.821881][ T795] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.831940][ T290] EXT4-fs (loop3): unmounting filesystem. [ 46.053711][ T802] EXT4-fs error (device loop4): ext4_xattr_block_get:543: inode #15: comm syz.4.99: corrupted xattr block 33 [ 46.075148][ T802] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 46.084611][ T802] EXT4-fs error (device loop4): ext4_xattr_block_get:543: inode #15: comm syz.4.99: corrupted xattr block 33 [ 46.097125][ T802] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 46.106441][ T802] EXT4-fs error (device loop4): ext4_xattr_block_get:543: inode #15: comm syz.4.99: corrupted xattr block 33 [ 46.118883][ T802] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 46.122361][ T795] EXT4-fs error (device loop4): ext4_xattr_block_get:543: inode #15: comm syz.4.99: corrupted xattr block 33 [ 46.140707][ T795] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 46.145395][ T802] EXT4-fs error (device loop4): ext4_xattr_block_get:543: inode #15: comm syz.4.99: corrupted xattr block 33 [ 46.162056][ T802] fscrypt (loop4, inode 15): Error -117 getting encryption context [ 46.170503][ T795] EXT4-fs error (device loop4): ext4_xattr_block_find:1826: inode #15: comm syz.4.99: corrupted xattr block 33 [ 46.311949][ T6] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 46.351309][ T805] loop3: detected capacity change from 0 to 1024 [ 46.358161][ T805] EXT4-fs: Ignoring removed mblk_io_submit option [ 46.368867][ T805] EXT4-fs (loop3): invalid inodes per group: 0 [ 46.368867][ T805] [ 46.389212][ T288] EXT4-fs (loop4): unmounting filesystem. [ 46.433565][ T812] loop4: detected capacity change from 0 to 512 [ 46.453051][ T812] EXT4-fs: Ignoring removed bh option [ 46.465926][ T812] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 46.503050][ T812] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 46.517805][ T812] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.104: bg 0: block 248: padding at end of block bitmap is not set [ 46.532597][ T812] Quota error (device loop4): write_blk: dquota write failed [ 46.540583][ T812] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 46.550728][ T812] EXT4-fs error (device loop4): ext4_acquire_dquot:6828: comm syz.4.104: Failed to acquire dquot type 1 [ 46.569550][ T812] EXT4-fs (loop4): 1 truncate cleaned up [ 46.575383][ T812] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 46.588870][ T28] audit: type=1400 audit(1786189284.727:267): avc: denied { read write } for pid=810 comm="syz.4.104" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 46.611782][ T28] audit: type=1400 audit(1786189284.727:268): avc: denied { open } for pid=810 comm="syz.4.104" path="/21/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 46.685777][ T39] usb 2-1: USB disconnect, device number 5 [ 46.692173][ T39] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 46.901419][ T6] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 46.917017][ T304] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 46.937716][ T304] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 46.950948][ T24] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 46.952113][ T304] asix: probe of 3-1:0.251 failed with error -5 [ 46.969636][ T304] usb 3-1: USB disconnect, device number 5 [ 46.984067][ T291] EXT4-fs (loop2): unmounting filesystem. [ 47.007667][ T861] loop2: detected capacity change from 0 to 512 [ 47.014439][ T861] EXT4-fs: Ignoring removed bh option [ 47.020610][ T861] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 47.042772][ T861] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 47.057381][ T861] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.108: bg 0: block 248: padding at end of block bitmap is not set [ 47.072367][ T861] Quota error (device loop2): write_blk: dquota write failed [ 47.079803][ T861] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 47.089790][ T861] EXT4-fs error (device loop2): ext4_acquire_dquot:6828: comm syz.2.108: Failed to acquire dquot type 1 [ 47.101963][ T861] EXT4-fs (loop2): 1 truncate cleaned up [ 47.102863][ T6] usb 5-1: unable to get BOS descriptor or descriptor too short [ 47.107647][ T861] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 47.116215][ T6] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 64, setting to 8 [ 47.135124][ T6] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xE is Bulk; changing to Interrupt [ 47.151901][ T24] usb 4-1: config 1 has an invalid descriptor of length 19, skipping remainder of the config [ 47.154763][ T6] usb 5-1: string descriptor 0 read error: -22 [ 47.163100][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 47.168660][ T6] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 47.179259][ T291] EXT4-fs (loop2): unmounting filesystem. [ 47.187075][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.193586][ T24] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 47.209532][ T812] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 47.209566][ T812] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 47.271584][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 47.279966][ T24] usb 4-1: SerialNumber: syz [ 47.290772][ T871] loop2: detected capacity change from 0 to 512 [ 47.312903][ T871] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 47.321936][ T871] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.375079][ T871] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #15: comm syz.2.112: corrupted xattr block 33 [ 47.387318][ T871] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 47.396640][ T871] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #15: comm syz.2.112: corrupted xattr block 33 [ 47.408624][ T871] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 47.417751][ T871] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #15: comm syz.2.112: corrupted xattr block 33 [ 47.430108][ T874] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #15: comm syz.2.112: corrupted xattr block 33 [ 47.430181][ T871] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 47.444868][ T798] usb 5-1: USB disconnect, device number 5 [ 47.451290][ T871] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #15: comm syz.2.112: corrupted xattr block 33 [ 47.468835][ T871] fscrypt (loop2, inode 15): Error -117 getting encryption context [ 47.469909][ T874] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 47.486637][ T874] EXT4-fs error (device loop2): ext4_xattr_block_find:1826: inode #15: comm syz.2.112: corrupted xattr block 33 [ 47.523126][ T24] usb 4-1: 0:2 : does not exist [ 47.528929][ T24] usb 4-1: unit 95 not found! [ 47.528978][ T291] EXT4-fs (loop2): unmounting filesystem. [ 47.537899][ T24] usb 4-1: USB disconnect, device number 5 [ 47.561916][ T876] loop2: detected capacity change from 0 to 1024 [ 47.568731][ T876] EXT4-fs: Ignoring removed i_version option [ 47.575774][ T876] EXT4-fs (loop2): Test dummy encryption mode enabled [ 47.580843][ T60] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 47.588378][ T876] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6000c01c, mo2=0102] [ 47.601137][ T876] System zones: 0-1, 3-36 [ 47.607930][ T635] usb 1-1: unable to get BOS descriptor or descriptor too short [ 47.617147][ T876] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 47.626730][ T635] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 47.636522][ T289] EXT4-fs (loop0): unmounting filesystem. [ 47.644504][ T635] usb 1-1: can't read configurations, error -71 [ 47.686304][ T291] EXT4-fs (loop2): unmounting filesystem. [ 47.770903][ T60] usb 2-1: Using ep0 maxpacket: 16 [ 47.776725][ T388] udevd[388]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 47.777411][ T60] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 47.801675][ T60] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.817477][ T60] usb 2-1: config 0 descriptor?? [ 47.832774][ T60] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 47.891874][ T886] loop0: detected capacity change from 0 to 1024 [ 47.900943][ T886] EXT4-fs: Ignoring removed mblk_io_submit option [ 47.908540][ T886] EXT4-fs (loop0): invalid inodes per group: 0 [ 47.908540][ T886] [ 47.969556][ T288] EXT4-fs (loop4): unmounting filesystem. [ 47.983303][ T10] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-5 [ 47.997674][ T10] EXT4-fs error (device loop4): ext4_release_dquot:6864: comm kworker/u4:1: Failed to release dquot type 1 [ 48.037469][ T60] usb 2-1: Detected FT232B [ 48.086022][ T903] loop4: detected capacity change from 0 to 512 [ 48.109083][ T903] EXT4-fs: Ignoring removed bh option [ 48.134351][ T903] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 48.145047][ T893] device syzkaller0 entered promiscuous mode [ 48.238373][ T60] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 48.249113][ T60] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 48.273131][ T903] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 48.424634][ T903] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.119: bg 0: block 248: padding at end of block bitmap is not set [ 48.531064][ T903] EXT4-fs error (device loop4): ext4_acquire_dquot:6828: comm syz.4.119: Failed to acquire dquot type 1 [ 48.550925][ T635] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 48.565475][ T60] usb 2-1: USB disconnect, device number 6 [ 48.574234][ T60] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 48.594556][ T903] EXT4-fs (loop4): 1 truncate cleaned up [ 48.600289][ T903] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 48.623027][ T60] ftdi_sio 2-1:0.0: device disconnected [ 48.679430][ T915] loop3: detected capacity change from 0 to 512 [ 48.751966][ T635] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 48.766365][ T635] usb 1-1: config 0 has no interface number 0 [ 48.774493][ T915] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 48.783569][ T915] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.784237][ T288] EXT4-fs (loop4): unmounting filesystem. [ 48.807060][ T635] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 48.816166][ T635] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.824957][ T635] usb 1-1: Product: syz [ 48.829922][ T635] usb 1-1: Manufacturer: syz [ 48.834705][ T635] usb 1-1: SerialNumber: syz [ 48.842472][ T635] usb 1-1: config 0 descriptor?? [ 49.052093][ T926] xt_hashlimit: size too large, truncated to 1048576 [ 49.109915][ T931] loop2: detected capacity change from 0 to 512 [ 49.118099][ T931] EXT4-fs: Ignoring removed bh option [ 49.133498][ T931] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 49.153004][ T931] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 49.169516][ T931] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.130: bg 0: block 248: padding at end of block bitmap is not set [ 49.184121][ T304] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 49.192291][ T931] EXT4-fs error (device loop2): ext4_acquire_dquot:6828: comm syz.2.130: Failed to acquire dquot type 1 [ 49.204362][ T931] EXT4-fs (loop2): 1 truncate cleaned up [ 49.210043][ T931] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 49.290561][ T896] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 49.302452][ T896] EXT4-fs (loop0): shut down requested (2) [ 49.308735][ T896] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 49.317665][ T896] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 49.327899][ T635] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 49.338104][ T635] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 49.347905][ T635] asix: probe of 1-1:0.251 failed with error -5 [ 49.355110][ T635] usb 1-1: USB disconnect, device number 7 [ 49.392245][ T304] usb 4-1: unable to get BOS descriptor or descriptor too short [ 49.400672][ T304] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 64, setting to 8 [ 49.411524][ T304] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xE is Bulk; changing to Interrupt [ 49.423823][ T304] usb 4-1: string descriptor 0 read error: -22 [ 49.430080][ T304] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 49.439214][ T304] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.448206][ T915] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 49.455573][ T915] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 49.510921][ T798] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 49.692216][ T798] usb 3-1: unable to get BOS descriptor or descriptor too short [ 49.700554][ T798] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 64, setting to 8 [ 49.711213][ T798] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xE is Bulk; changing to Interrupt [ 49.722968][ T798] usb 3-1: string descriptor 0 read error: -22 [ 49.729150][ T798] usb 3-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 49.738198][ T798] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.747250][ T931] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 49.754480][ T931] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 49.814126][ T944] pci 0000:00:05.0: [1ae0:a002] type 00 class 0x030000 [ 49.846519][ T944] pci 0000:00:05.0: BAR 0 [mem 0xc0000000-0xc07fffff] [ 49.873432][ T289] EXT4-fs (loop0): unmounting filesystem. [ 49.966104][ T6] usb 3-1: USB disconnect, device number 6 [ 50.038680][ T944] pci 0000:00:05.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 50.049589][ T944] pci 0000:00:05.0: vgaarb: setting as boot VGA device [ 50.056538][ T944] pci 0000:00:05.0: vgaarb: bridge control possible [ 50.063130][ T944] pci 0000:00:05.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 50.073751][ T944] pci 0000:00:05.0: BAR 0 [mem 0xc0000000-0xc07fffff]: assigned [ 50.171040][ T367] usb 4-1: USB disconnect, device number 6 [ 50.190874][ T798] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 50.200847][ T635] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 50.224162][ T290] EXT4-fs (loop3): unmounting filesystem. [ 50.239497][ T955] EXT4-fs: Ignoring removed bh option [ 50.245548][ T955] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 50.250885][ T60] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 50.272584][ T955] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 50.287565][ T955] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.136: bg 0: block 248: padding at end of block bitmap is not set [ 50.303712][ T955] __quota_error: 4 callbacks suppressed [ 50.303723][ T955] Quota error (device loop3): write_blk: dquota write failed [ 50.316917][ T955] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 50.326787][ T955] EXT4-fs error (device loop3): ext4_acquire_dquot:6828: comm syz.3.136: Failed to acquire dquot type 1 [ 50.338609][ T955] EXT4-fs (loop3): 1 truncate cleaned up [ 50.344379][ T955] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 50.364744][ T290] EXT4-fs (loop3): unmounting filesystem. [ 50.372185][ T798] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.388920][ T635] usb 2-1: config 1 has an invalid descriptor of length 19, skipping remainder of the config [ 50.401154][ T635] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 50.410254][ T798] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.423972][ T798] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 50.437343][ T798] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 50.446622][ T798] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.454745][ T635] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 50.464357][ T635] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 50.473481][ T60] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 50.486694][ T798] usb 5-1: config 0 descriptor?? [ 50.491815][ T635] usb 2-1: SerialNumber: syz [ 50.497464][ T291] EXT4-fs (loop2): unmounting filesystem. [ 50.498685][ T60] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 50.512609][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 50.520825][ T60] usb 1-1: SerialNumber: syz [ 50.526922][ T10] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-5 [ 50.538116][ T10] EXT4-fs error (device loop2): ext4_release_dquot:6864: comm kworker/u4:1: Failed to release dquot type 1 [ 50.605963][ T967] device syzkaller0 entered promiscuous mode [ 50.742907][ T635] usb 2-1: 0:2 : does not exist [ 50.748411][ T635] usb 2-1: unit 95 not found! [ 50.755071][ T635] usb 2-1: USB disconnect, device number 7 [ 50.905423][ T798] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 50.913066][ T798] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 50.920468][ T798] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 50.927927][ T798] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 50.935351][ T798] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 50.942886][ T798] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 50.950490][ T798] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 50.957948][ T798] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 50.965621][ T798] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 50.965991][ T385] udevd[385]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 50.973268][ T798] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 50.998041][ T798] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 51.128193][ T944] set_capacity_and_notify: 2 callbacks suppressed [ 51.128223][ T944] loop4: detected capacity change from 0 to 256 [ 51.146548][ T60] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 51.169666][ T944] FAT-fs (loop4): Directory bread(block 64) failed [ 51.176593][ T944] FAT-fs (loop4): Directory bread(block 65) failed [ 51.183328][ T944] FAT-fs (loop4): Directory bread(block 66) failed [ 51.189903][ T944] FAT-fs (loop4): Directory bread(block 67) failed [ 51.197613][ T944] FAT-fs (loop4): Directory bread(block 68) failed [ 51.204323][ T944] FAT-fs (loop4): Directory bread(block 69) failed [ 51.212603][ T944] FAT-fs (loop4): Directory bread(block 70) failed [ 51.219160][ T944] FAT-fs (loop4): Directory bread(block 71) failed [ 51.226903][ T944] FAT-fs (loop4): Directory bread(block 72) failed [ 51.233553][ T944] FAT-fs (loop4): Directory bread(block 73) failed [ 51.442665][ T997] loop2: detected capacity change from 0 to 512 [ 51.471215][ T997] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 51.480656][ T997] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.511994][ T367] usb 5-1: USB disconnect, device number 6 [ 51.522023][ T1004] loop3: detected capacity change from 0 to 512 [ 51.533778][ T1004] EXT4-fs: Ignoring removed bh option [ 51.536702][ T1006] loop1: detected capacity change from 0 to 512 [ 51.566670][ T6] usb 1-1: USB disconnect, device number 8 [ 51.573450][ T6] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 51.600558][ T1004] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 51.617304][ T997] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #15: comm syz.2.147: corrupted xattr block 33 [ 51.635456][ T997] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 51.650957][ T997] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #15: comm syz.2.147: corrupted xattr block 33 [ 51.671879][ T997] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 51.681477][ T997] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #15: comm syz.2.147: corrupted xattr block 33 [ 51.681679][ T1004] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 51.708062][ T997] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 51.719379][ T997] EXT4-fs error (device loop2): ext4_xattr_block_get:543: inode #15: comm syz.2.147: corrupted xattr block 33 [ 51.731986][ T997] fscrypt (loop2, inode 15): Error -117 getting encryption context [ 51.737707][ T1004] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.148: bg 0: block 248: padding at end of block bitmap is not set [ 51.757868][ T1004] Quota error (device loop3): write_blk: dquota write failed [ 51.765763][ T1004] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 51.780902][ T1004] EXT4-fs error (device loop3): ext4_acquire_dquot:6828: comm syz.3.148: Failed to acquire dquot type 1 [ 51.793547][ T1004] EXT4-fs (loop3): 1 truncate cleaned up [ 51.799827][ T1004] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 51.864243][ T290] EXT4-fs (loop3): unmounting filesystem. [ 51.880417][ T1029] loop3: detected capacity change from 0 to 512 [ 51.943319][ T1034] loop1: detected capacity change from 0 to 16 [ 51.951225][ T1034] erofs: Unknown parameter '0x0000000000000003' [ 52.036555][ T1029] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 52.064831][ T1029] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.445016][ T1029] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.153: corrupted xattr block 33 [ 52.870025][ T1029] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 52.997873][ T1029] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.153: corrupted xattr block 33 [ 53.136463][ T1029] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 53.175665][ T385] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 53.177273][ T304] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 53.221163][ T1029] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.153: corrupted xattr block 33 [ 53.284331][ T1035] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 53.300271][ T1029] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 53.309674][ T1029] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.153: corrupted xattr block 33 [ 53.322107][ T1029] fscrypt (loop3, inode 15): Error -117 getting encryption context [ 53.330304][ T1031] netlink: 20 bytes leftover after parsing attributes in process `syz.1.152'. [ 53.369493][ T1057] Invalid ELF header type: 3 != 1 [ 53.422297][ T304] usb 3-1: unable to get BOS descriptor or descriptor too short [ 53.430847][ T304] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 64, setting to 8 [ 53.441479][ T304] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xE is Bulk; changing to Interrupt [ 53.453802][ T304] usb 3-1: string descriptor 0 read error: -22 [ 53.460113][ T304] usb 3-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 53.469569][ T304] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.492485][ T1035] usb 4-1: unable to get BOS descriptor or descriptor too short [ 53.501194][ T1035] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 64, setting to 8 [ 53.511953][ T1035] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xE is Bulk; changing to Interrupt [ 53.516368][ T1018] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 53.527112][ T1035] usb 4-1: string descriptor 0 read error: -22 [ 53.534902][ T1018] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 53.537168][ T1035] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 53.562045][ T1035] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.571523][ T1042] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 53.578792][ T1042] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 53.674076][ T1067] loop4: detected capacity change from 0 to 512 [ 53.734827][ T1073] loop4: detected capacity change from 0 to 512 [ 53.743352][ T1073] EXT4-fs: Ignoring removed bh option [ 53.749965][ T1073] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 53.777685][ T304] usb 3-1: USB disconnect, device number 7 [ 53.793672][ T6] usb 4-1: USB disconnect, device number 7 [ 53.803676][ T1073] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 53.818568][ T1073] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.164: bg 0: block 248: padding at end of block bitmap is not set [ 53.834431][ T1073] Quota error (device loop4): write_blk: dquota write failed [ 53.842134][ T1073] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 53.850883][ T673] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 53.852403][ T1073] EXT4-fs error (device loop4): ext4_acquire_dquot:6828: comm syz.4.164: Failed to acquire dquot type 1 [ 53.871823][ T1073] EXT4-fs (loop4): 1 truncate cleaned up [ 53.877678][ T1073] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 54.032008][ T673] usb 2-1: config 1 has an invalid descriptor of length 19, skipping remainder of the config [ 54.041112][ T1079] xt_hashlimit: size too large, truncated to 1048576 [ 54.042293][ T673] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 54.059008][ T673] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 54.068370][ T673] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 54.076642][ T673] usb 2-1: SerialNumber: syz [ 54.307258][ T673] usb 2-1: 0:2 : does not exist [ 54.313247][ T673] usb 2-1: unit 95 not found! [ 54.320298][ T673] usb 2-1: USB disconnect, device number 8 [ 54.363361][ T1084] pci 0000:00:05.0: [1ae0:a002] type 00 class 0x030000 [ 54.393368][ T1084] pci 0000:00:05.0: BAR 0 [mem 0xc0000000-0xc07fffff] [ 54.541707][ T388] udevd[388]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 54.552948][ T1084] pci 0000:00:05.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 54.580920][ T1084] pci 0000:00:05.0: pci_fixup_video+0x0/0x310 took 27368 usecs [ 54.601707][ T1084] pci 0000:00:05.0: vgaarb: setting as boot VGA device [ 54.608589][ T1084] pci 0000:00:05.0: vgaarb: bridge control possible [ 54.613454][ T1091] loop0: detected capacity change from 0 to 512 [ 54.615180][ T1084] pci 0000:00:05.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 54.634869][ T1084] pci 0000:00:05.0: BAR 0 [mem 0xc0000000-0xc07fffff]: assigned [ 54.646216][ T1091] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.670726][ T1091] EXT4-fs error (device loop0): ext4_xattr_block_get:543: inode #15: comm syz.0.170: corrupted xattr block 33 [ 54.682872][ T1091] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 54.693059][ T1091] EXT4-fs error (device loop0): ext4_xattr_block_get:543: inode #15: comm syz.0.170: corrupted xattr block 33 [ 54.705239][ T1091] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 54.714528][ T1091] EXT4-fs error (device loop0): ext4_xattr_block_get:543: inode #15: comm syz.0.170: corrupted xattr block 33 [ 54.727035][ T1091] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 54.736523][ T304] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 54.740915][ T1091] EXT4-fs error (device loop0): ext4_xattr_block_get:543: inode #15: comm syz.0.170: corrupted xattr block 33 [ 54.755933][ T1091] fscrypt (loop0, inode 15): Error -117 getting encryption context [ 54.780899][ T1035] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 54.806878][ T1101] loop4: detected capacity change from 0 to 512 [ 54.855133][ T1105] EXT4-fs: Ignoring removed bh option [ 54.884075][ T1105] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 54.902318][ T1105] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 54.917229][ T1105] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.175: bg 0: block 248: padding at end of block bitmap is not set [ 54.934301][ T1105] Quota error (device loop1): write_blk: dquota write failed [ 54.946102][ T304] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.950968][ T1105] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 54.962938][ T304] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.967270][ T1105] EXT4-fs error (device loop1): ext4_acquire_dquot:6828: comm syz.1.175: Failed to acquire dquot type 1 [ 54.976937][ T304] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 54.989425][ T1035] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 55.005735][ T1105] EXT4-fs (loop1): 1 truncate cleaned up [ 55.011097][ T673] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 55.023362][ T304] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 55.024604][ T1035] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 55.051012][ T1035] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.060537][ T1035] usb 3-1: config 0 descriptor?? [ 55.067114][ T304] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.088919][ T304] usb 4-1: config 0 descriptor?? [ 55.252549][ T673] usb 1-1: unable to get BOS descriptor or descriptor too short [ 55.267416][ T673] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 64, setting to 8 [ 55.278444][ T673] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xE is Bulk; changing to Interrupt [ 55.291793][ T673] usb 1-1: string descriptor 0 read error: -22 [ 55.298179][ T673] usb 1-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 55.308296][ T1122] erofs: (device loop4): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 55.318884][ T1122] erofs: (device loop4): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 55.332222][ T1122] erofs: (device loop4): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk! [ 55.343888][ T1122] erofs: (device loop4): mounted with root inode @ nid 36. [ 55.417321][ T673] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.437789][ T1095] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 55.445380][ T1095] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 55.650572][ T304] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 55.658089][ T304] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 55.665747][ T304] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 55.673374][ T304] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 55.680947][ T304] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 55.682164][ T673] usb 1-1: USB disconnect, device number 9 [ 55.688403][ T304] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 55.701803][ T304] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 55.709280][ T304] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 55.716883][ T304] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 55.724553][ T304] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 55.733590][ T304] plantronics 0003:047F:FFFF.0004: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 55.883852][ T1084] FAT-fs (loop3): Directory bread(block 64) failed [ 55.890565][ T1084] FAT-fs (loop3): Directory bread(block 65) failed [ 55.897272][ T1084] FAT-fs (loop3): Directory bread(block 66) failed [ 55.903897][ T1084] FAT-fs (loop3): Directory bread(block 67) failed [ 55.910487][ T1084] FAT-fs (loop3): Directory bread(block 68) failed [ 55.917498][ T1084] FAT-fs (loop3): Directory bread(block 69) failed [ 55.924300][ T1084] FAT-fs (loop3): Directory bread(block 70) failed [ 55.931796][ T1084] FAT-fs (loop3): Directory bread(block 71) failed [ 55.938342][ T1084] FAT-fs (loop3): Directory bread(block 72) failed [ 55.950893][ T1084] FAT-fs (loop3): Directory bread(block 73) failed [ 56.071571][ T28] audit: type=1400 audit(1786189294.207:269): avc: denied { ioctl } for pid=1135 comm="syz.1.187" path="net:[4026532297]" dev="nsfs" ino=4026532297 ioctlcmd=0x587a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 56.163088][ T1144] set_capacity_and_notify: 4 callbacks suppressed [ 56.163101][ T1144] loop1: detected capacity change from 0 to 512 [ 56.176192][ T1144] EXT4-fs: Ignoring removed bh option [ 56.183454][ T6] usb 4-1: USB disconnect, device number 8 [ 56.192136][ T1144] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 56.212599][ T1144] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1087: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 56.228354][ T1144] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.190: bg 0: block 248: padding at end of block bitmap is not set [ 56.243277][ T1144] Quota error (device loop1): write_blk: dquota write failed [ 56.250744][ T1144] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 56.261806][ T1144] EXT4-fs error (device loop1): ext4_acquire_dquot:6828: comm syz.1.190: Failed to acquire dquot type 1 [ 56.279869][ T1144] EXT4-fs (loop1): 1 truncate cleaned up [ 56.318742][ T1150] netlink: 'syz.0.192': attribute type 4 has an invalid length. [ 56.330859][ T304] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 56.478247][ T1155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.487054][ T1155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.495785][ T28] audit: type=1400 audit(1786189294.637:270): avc: denied { create } for pid=1086 comm="syz.2.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 56.502889][ T1155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.168'. [ 56.515177][ T28] audit: type=1400 audit(1786189294.637:271): avc: denied { setopt } for pid=1086 comm="syz.2.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 56.543515][ T28] audit: type=1400 audit(1786189294.637:272): avc: denied { ioctl } for pid=1086 comm="syz.2.168" path="socket:[20272]" dev="sockfs" ino=20272 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 56.568266][ T28] audit: type=1400 audit(1786189294.637:273): avc: denied { bind } for pid=1086 comm="syz.2.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 56.587817][ T28] audit: type=1400 audit(1786189294.687:274): avc: denied { append } for pid=1086 comm="syz.2.168" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 56.610752][ T304] usb 5-1: config 1 has an invalid descriptor of length 19, skipping remainder of the config [ 56.621024][ T304] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 56.630744][ T304] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 56.639938][ T304] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 56.648001][ T304] usb 5-1: SerialNumber: syz [ 56.869877][ T304] usb 5-1: 0:2 : does not exist [ 56.877589][ T304] usb 5-1: unit 95 not found! [ 56.892732][ T304] usb 5-1: USB disconnect, device number 7 [ 57.014258][ T1159] loop3: detected capacity change from 0 to 131072 [ 57.021490][ T1159] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0) [ 57.029602][ T1159] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 57.038851][ T1159] F2FS-fs (loop3): invalid crc value [ 57.047045][ T1159] F2FS-fs (loop3): Found nat_bits in checkpoint [ 57.074284][ T1159] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 57.081414][ T1159] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 57.126464][ T1150] syz.0.192 (1150) used greatest stack depth: 20672 bytes left [ 57.162033][ T28] audit: type=1400 audit(1786189295.297:275): avc: denied { read write } for pid=1166 comm="syz.1.196" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 57.189691][ T28] audit: type=1400 audit(1786189295.297:276): avc: denied { open } for pid=1166 comm="syz.1.196" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 57.389685][ T1180] loop0: detected capacity change from 0 to 512 [ 57.490967][ T1035] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 57.674535][ T1035] usb 2-1: Using ep0 maxpacket: 16 [ 57.679459][ T6] usb 3-1: USB disconnect, device number 8 [ 57.684121][ T1035] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 57.696305][ T1035] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.705089][ T1035] usb 2-1: config 0 descriptor?? [ 57.711324][ T1035] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 57.755260][ T1200] FAULT_INJECTION: forcing a failure. [ 57.755260][ T1200] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 57.768492][ T1200] CPU: 1 PID: 1200 Comm: syz.2.207 Not tainted syzkaller #0 [ 57.775782][ T1200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 57.785938][ T1200] Call Trace: [ 57.789215][ T1200] [ 57.792152][ T1200] __dump_stack+0x21/0x24 [ 57.796541][ T1200] dump_stack_lvl+0x110/0x170 [ 57.801258][ T1200] ? __cfi_dump_stack_lvl+0x8/0x8 [ 57.806275][ T1200] ? unwind_get_return_address+0x4d/0x90 [ 57.811925][ T1200] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 57.818196][ T1200] dump_stack+0x15/0x24 [ 57.822440][ T1200] should_fail_ex+0x3bf/0x510 [ 57.827138][ T1200] should_fail+0xb/0x10 [ 57.831290][ T1200] should_fail_usercopy+0x1a/0x20 [ 57.836305][ T1200] _copy_from_user+0x1e/0xc0 [ 57.840904][ T1200] userfaultfd_ioctl+0x7b0/0x4860 [ 57.845951][ T1200] ? __cfi_avc_has_extended_perms+0x10/0x10 [ 57.852020][ T1200] ? __cfi_userfaultfd_ioctl+0x10/0x10 [ 57.857556][ T1200] ? do_vfs_ioctl+0x1b68/0x1cd0 [ 57.862396][ T1200] ? __ia32_compat_sys_ioctl+0x860/0x860 [ 57.868039][ T1200] ? kstrtouint+0x74/0xe0 [ 57.872360][ T1200] ? ioctl_has_perm+0x1b8/0x4f0 [ 57.877209][ T1200] ? ioctl_has_perm+0x3a6/0x4f0 [ 57.882059][ T1200] ? has_cap_mac_admin+0x370/0x370 [ 57.887350][ T1200] ? vfs_write+0xa51/0xd00 [ 57.891763][ T1200] ? selinux_file_ioctl+0x3ad/0x4c0 [ 57.896964][ T1200] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 57.902508][ T1200] ? mutex_unlock+0x8f/0x230 [ 57.907272][ T1200] ? __cfi_mutex_unlock+0x10/0x10 [ 57.912382][ T1200] ? __fget_files+0x2d1/0x330 [ 57.917051][ T1200] ? security_file_ioctl+0x95/0xc0 [ 57.922192][ T1200] ? __cfi_userfaultfd_ioctl+0x10/0x10 [ 57.927659][ T1200] __se_sys_ioctl+0x12f/0x1b0 [ 57.932348][ T1200] __x64_sys_ioctl+0x7b/0x90 [ 57.936936][ T1200] x64_sys_call+0x58b/0x9a0 [ 57.941436][ T1200] do_syscall_64+0x4c/0xa0 [ 57.945870][ T1200] ? clear_bhb_loop+0x30/0x80 [ 57.950588][ T1200] ? clear_bhb_loop+0x30/0x80 [ 57.955272][ T1200] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 57.961159][ T1200] RIP: 0033:0x7f02ee59e0d9 [ 57.965579][ T1200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.985196][ T1200] RSP: 002b:00007f02ef426028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 57.993623][ T1200] RAX: ffffffffffffffda RBX: 00007f02ee826090 RCX: 00007f02ee59e0d9 [ 58.001605][ T1200] RDX: 0000200000000040 RSI: 000000008010aa01 RDI: 0000000000000003 [ 58.009677][ T1200] RBP: 00007f02ef426090 R08: 0000000000000000 R09: 0000000000000000 [ 58.017661][ T1200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.025668][ T1200] R13: 00007f02ee826128 R14: 00007f02ee826090 R15: 00007ffcdfbe4218 [ 58.033691][ T1200] [ 58.037694][ T1035] usb 2-1: Detected FT232B [ 58.242834][ T1035] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 58.250577][ T1035] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 58.381368][ T1215] loop4: detected capacity change from 0 to 512 [ 58.450066][ T1223] FAULT_INJECTION: forcing a failure. [ 58.450066][ T1223] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 58.452332][ T6] usb 2-1: USB disconnect, device number 9 [ 58.470861][ T1223] CPU: 1 PID: 1223 Comm: syz.4.217 Not tainted syzkaller #0 [ 58.476651][ T6] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 58.478181][ T1223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 58.478196][ T1223] Call Trace: [ 58.478202][ T1223] [ 58.489696][ T6] ftdi_sio 2-1:0.0: device disconnected [ 58.497558][ T1223] __dump_stack+0x21/0x24 [ 58.497593][ T1223] dump_stack_lvl+0x110/0x170 [ 58.497615][ T1223] ? __cfi_dump_stack_lvl+0x8/0x8 [ 58.508970][ T1220] loop0: detected capacity change from 0 to 4096 [ 58.509397][ T1223] dump_stack+0x15/0x24 [ 58.533924][ T1223] should_fail_ex+0x3bf/0x510 [ 58.538618][ T1223] should_fail+0xb/0x10 [ 58.542781][ T1223] should_fail_usercopy+0x1a/0x20 [ 58.547809][ T1223] _copy_from_user+0x1e/0xc0 [ 58.552408][ T1223] __sys_bpf+0x2a0/0x850 [ 58.556667][ T1223] ? bpf_link_show_fdinfo+0x330/0x330 [ 58.562148][ T1223] ? __cfi_ksys_write+0x10/0x10 [ 58.567085][ T1223] ? do_user_addr_fault+0x9a5/0x1030 [ 58.572374][ T1223] ? debug_smp_processor_id+0x17/0x20 [ 58.577753][ T1223] __x64_sys_bpf+0x7c/0x90 [ 58.582173][ T1223] x64_sys_call+0x488/0x9a0 [ 58.586697][ T1223] do_syscall_64+0x4c/0xa0 [ 58.591209][ T1223] ? clear_bhb_loop+0x30/0x80 [ 58.595881][ T1223] ? clear_bhb_loop+0x30/0x80 [ 58.600551][ T1223] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 58.606445][ T1223] RIP: 0033:0x7fbfadb9e0d9 [ 58.610860][ T1223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.630467][ T1223] RSP: 002b:00007fbfae9c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 58.638967][ T1223] RAX: ffffffffffffffda RBX: 00007fbfade25fa0 RCX: 00007fbfadb9e0d9 [ 58.647026][ T1223] RDX: 0000000000000050 RSI: 0000200000000400 RDI: 0000000000000000 [ 58.655002][ T1223] RBP: 00007fbfae9c7090 R08: 0000000000000000 R09: 0000000000000000 [ 58.663232][ T1223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.671201][ T1223] R13: 00007fbfade26038 R14: 00007fbfade25fa0 R15: 00007fffbc9093e8 [ 58.679177][ T1223] [ 58.773659][ T1237] loop3: detected capacity change from 0 to 512 [ 58.784907][ T1237] EXT4-fs (loop3): 1 truncate cleaned up [ 58.825354][ T1242] loop0: detected capacity change from 0 to 512 [ 58.880930][ T1242] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.917281][ T1248] loop0: detected capacity change from 0 to 512 [ 60.020863][ T304] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 60.022837][ T1266] loop3: detected capacity change from 0 to 512 [ 60.170831][ T304] usb 3-1: device descriptor read/64, error -71 [ 60.493590][ T1273] loop3: detected capacity change from 0 to 4096 [ 60.501479][ T1273] EXT4-fs: Ignoring removed mblk_io_submit option [ 60.512155][ T1273] EXT4-fs (loop3): Test dummy encryption mode enabled [ 61.390788][ C0] sched: RT throttling activated [ 61.390841][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 61.390858][ T28] audit: type=1400 audit(1786189298.917:285): avc: denied { setattr } for pid=1268 comm="syz.3.233" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 61.419247][ T1272] xt_hashlimit: size too large, truncated to 1048576 [ 61.688842][ T304] usb 3-1: device descriptor read/64, error -71 [ 61.838165][ T1280] syz.3.233 (1280) used greatest stack depth: 20424 bytes left [ 61.894349][ T1288] loop0: detected capacity change from 0 to 512 [ 61.920823][ T28] audit: type=1400 audit(1786189299.917:286): avc: denied { remount } for pid=1282 comm="syz.1.236" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 61.973718][ T1298] loop3: detected capacity change from 0 to 512 [ 61.982805][ T1288] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.002054][ T28] audit: type=1400 audit(1786189300.137:287): avc: denied { ioctl } for pid=1299 comm="syz.4.243" path="socket:[21662]" dev="sockfs" ino=21662 ioctlcmd=0x582a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.027453][ T28] audit: type=1400 audit(1786189300.157:288): avc: denied { read } for pid=1299 comm="syz.4.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 62.061057][ T1288] EXT4-fs error (device loop0): ext4_xattr_block_get:543: inode #15: comm syz.0.237: corrupted xattr block 33 [ 62.073050][ T1288] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 62.082204][ T1288] EXT4-fs error (device loop0): ext4_xattr_block_get:543: inode #15: comm syz.0.237: corrupted xattr block 33 [ 62.100648][ T1288] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 62.111476][ T1288] EXT4-fs error (device loop0): ext4_xattr_block_get:543: inode #15: comm syz.0.237: corrupted xattr block 33 [ 62.128312][ T1288] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 62.137478][ T1288] EXT4-fs error (device loop0): ext4_xattr_block_get:543: inode #15: comm syz.0.237: corrupted xattr block 33 [ 62.153071][ T1288] fscrypt (loop0, inode 15): Error -117 getting encryption context [ 62.185854][ T1312] loop3: detected capacity change from 0 to 512 [ 62.205122][ T1302] xt_hashlimit: size too large, truncated to 1048576 [ 62.210923][ T304] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 62.221791][ T388] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 62.254836][ T28] audit: type=1400 audit(1786189300.387:289): avc: denied { search } for pid=1313 comm="syz.3.249" name="/" dev="configfs" ino=1927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 62.400861][ T798] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 62.410845][ T304] usb 3-1: Using ep0 maxpacket: 16 [ 62.417245][ T304] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 62.426619][ T304] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.441775][ T304] usb 3-1: config 0 descriptor?? [ 62.448523][ T304] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 62.488081][ T1329] xt_hashlimit: size too large, truncated to 1048576 [ 62.592292][ T798] usb 1-1: unable to get BOS descriptor or descriptor too short [ 62.600765][ T798] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 64, setting to 8 [ 62.615191][ T798] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xE is Bulk; changing to Interrupt [ 62.615950][ T28] audit: type=1400 audit(1786189300.747:290): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 62.632811][ T798] usb 1-1: string descriptor 0 read error: -22 [ 62.653600][ T798] usb 1-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 62.653989][ T1333] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 62.663047][ T798] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.674004][ T304] usb 3-1: Detected FT232B [ 62.686368][ T28] audit: type=1400 audit(1786189300.787:291): avc: denied { ioctl } for pid=1332 comm="syz.1.255" path="socket:[20939]" dev="sockfs" ino=20939 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 62.686809][ T1305] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 62.718336][ T1333] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.718505][ T1305] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 62.725592][ T1333] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.769876][ T1335] loop1: detected capacity change from 0 to 512 [ 62.853814][ T304] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 62.864275][ T304] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 62.905627][ T1348] loop1: detected capacity change from 0 to 256 [ 62.913822][ T1348] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 62.929130][ T1348] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 62.947014][ T1348] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 62.964235][ T798] usb 1-1: USB disconnect, device number 10 [ 63.026672][ T1354] loop4: detected capacity change from 0 to 1024 [ 63.033463][ T1354] EXT4-fs: Ignoring removed bh option [ 63.038957][ T1354] EXT4-fs: Ignoring removed bh option [ 63.058073][ T28] audit: type=1400 audit(1786189301.187:292): avc: denied { remount } for pid=1353 comm="syz.4.265" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 63.068587][ T1274] usb 3-1: USB disconnect, device number 10 [ 63.108917][ T1354] EXT4-fs (loop4): re-mounted. Quota mode: none. [ 63.138025][ T1358] xt_nat: multiple ranges no longer supported [ 63.899327][ T28] audit: type=1400 audit(1786189302.027:293): avc: denied { mounton } for pid=1353 comm="syz.4.265" path="/65/control/file0" dev="overlay" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.000108][ T28] audit: type=1400 audit(1786189302.057:294): avc: denied { write } for pid=1353 comm="syz.4.265" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.086010][ T1274] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 64.095862][ T1274] ftdi_sio 3-1:0.0: device disconnected [ 64.141693][ T1386] loop0: detected capacity change from 0 to 512 [ 64.145353][ T1378] xt_hashlimit: size too large, truncated to 1048576 [ 64.177310][ T288] EXT4-fs error (device loop4): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /65/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 64.205065][ T1392] loop1: detected capacity change from 0 to 512 [ 64.214429][ T288] EXT4-fs error (device loop4): ext4_read_inline_dir:1611: inode #12: block 7: comm syz-executor: path /65/control/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 64.246271][ T1392] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.272336][ T1392] EXT4-fs error (device loop1): ext4_xattr_block_get:543: inode #15: comm syz.1.278: corrupted xattr block 33 [ 64.295904][ T1392] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 64.305351][ T1392] EXT4-fs error (device loop1): ext4_xattr_block_get:543: inode #15: comm syz.1.278: corrupted xattr block 33 [ 64.317936][ T1392] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 64.327126][ T1392] EXT4-fs error (device loop1): ext4_xattr_block_get:543: inode #15: comm syz.1.278: corrupted xattr block 33 [ 64.339498][ T1392] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 64.348707][ T1392] EXT4-fs error (device loop1): ext4_xattr_block_get:543: inode #15: comm syz.1.278: corrupted xattr block 33 [ 64.360768][ T1392] fscrypt (loop1, inode 15): Error -117 getting encryption context [ 64.510853][ T304] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 64.543412][ T1404] loop4: detected capacity change from 0 to 1024 [ 64.550166][ T1404] EXT4-fs: Ignoring removed orlov option [ 64.556048][ T1404] EXT4-fs: Ignoring removed orlov option [ 64.561884][ T1404] journal_path: Lookup failure for './file1' [ 64.567957][ T1404] EXT4-fs: error: could not find journal device path [ 64.590914][ T673] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 64.627626][ T1405] loop4: detected capacity change from 0 to 16 [ 64.634381][ T1405] erofs: (device loop4): mounted with root inode @ nid 36. [ 64.646396][ T1405] overlayfs: './file0' not a directory [ 64.690898][ T304] usb 1-1: Using ep0 maxpacket: 16 [ 64.697244][ T304] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 64.706376][ T304] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.715345][ T304] usb 1-1: config 0 descriptor?? [ 64.721336][ T304] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 64.782272][ T673] usb 2-1: unable to get BOS descriptor or descriptor too short [ 64.791045][ T673] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 64, setting to 8 [ 64.801649][ T673] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xE is Bulk; changing to Interrupt [ 64.813626][ T673] usb 2-1: string descriptor 0 read error: -22 [ 64.820097][ T673] usb 2-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 64.829242][ T673] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.842333][ T1399] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 64.849569][ T1399] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 64.921284][ T304] usb 1-1: Detected FT232B [ 64.976119][ T1421] erofs: (device loop3): mounted with root inode @ nid 36. [ 65.060200][ T673] usb 2-1: USB disconnect, device number 10 [ 65.121565][ T304] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 65.129247][ T304] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 65.330449][ T304] usb 1-1: USB disconnect, device number 11 [ 65.337626][ T304] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 65.347198][ T304] ftdi_sio 1-1:0.0: device disconnected [ 65.469510][ T1439] FAULT_INJECTION: forcing a failure. [ 65.469510][ T1439] name failslab, interval 1, probability 0, space 0, times 1 [ 65.482407][ T1439] CPU: 0 PID: 1439 Comm: syz.4.295 Not tainted syzkaller #0 [ 65.489697][ T1439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 65.490838][ T1432] xt_hashlimit: size too large, truncated to 1048576 [ 65.499852][ T1439] Call Trace: [ 65.499861][ T1439] [ 65.499867][ T1439] __dump_stack+0x21/0x24 [ 65.517467][ T1439] dump_stack_lvl+0x110/0x170 [ 65.522171][ T1439] ? __cfi_dump_stack_lvl+0x8/0x8 [ 65.527229][ T1439] dump_stack+0x15/0x24 [ 65.531414][ T1439] should_fail_ex+0x3bf/0x510 [ 65.536112][ T1439] ? __kvm_mmu_topup_memory_cache+0x194/0x490 [ 65.542206][ T1439] __should_failslab+0xac/0xf0 [ 65.546989][ T1439] should_failslab+0x9/0x20 [ 65.551513][ T1439] kmem_cache_alloc+0x3b/0x320 [ 65.556290][ T1439] ? __kvm_mmu_topup_memory_cache+0x194/0x490 [ 65.562379][ T1439] __kvm_mmu_topup_memory_cache+0x194/0x490 [ 65.568297][ T1439] kvm_mmu_topup_memory_cache+0x20/0x30 [ 65.573859][ T1439] kvm_mmu_load+0x99/0x2570 [ 65.578373][ T1439] ? kvm_hv_setup_tsc_page+0x5f2/0xa80 [ 65.583839][ T1439] ? queue_delayed_work_on+0x10d/0x160 [ 65.589314][ T1439] ? kvm_apic_has_interrupt+0x776/0x780 [ 65.594869][ T1439] vcpu_enter_guest+0x4d3b/0x7050 [ 65.599910][ T1439] ? __cfi_avc_has_perm+0x10/0x10 [ 65.604943][ T1439] ? pvclock_gtod_update_fn+0x270/0x270 [ 65.610513][ T1439] ? 0xffffffffa0000948 [ 65.614678][ T1439] ? is_bpf_text_address+0x177/0x190 [ 65.619983][ T1439] ? kernel_text_address+0xa0/0xd0 [ 65.625113][ T1439] ? __kernel_text_address+0xd/0x30 [ 65.630420][ T1439] ? unwind_get_return_address+0x4d/0x90 [ 65.636071][ T1439] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 65.642324][ T1439] ? arch_stack_walk+0xfc/0x150 [ 65.647195][ T1439] ? stack_trace_save+0xa6/0xf0 [ 65.652059][ T1439] ? vmx_vcpu_pi_load+0x14c/0x840 [ 65.657104][ T1439] ? __cfi_vmx_vcpu_pi_load+0x10/0x10 [ 65.662489][ T1439] ? _parse_integer_limit+0x18e/0x1d0 [ 65.667868][ T1439] ? __asan_set_shadow_00+0xe/0x10 [ 65.672994][ T1439] ? do_vfs_ioctl+0x1b68/0x1cd0 [ 65.677842][ T1439] ? vmx_vcpu_load_vmcs+0x479/0x730 [ 65.683040][ T1439] ? __this_cpu_preempt_check+0x13/0x20 [ 65.688604][ T1439] ? xfd_validate_state+0x70/0x150 [ 65.693724][ T1439] ? fpu_swap_kvm_fpstate+0x81/0x5d0 [ 65.699009][ T1439] ? __local_bh_enable_ip+0x58/0x80 [ 65.704206][ T1439] kvm_arch_vcpu_ioctl_run+0xe6d/0x1f60 [ 65.709758][ T1439] kvm_vcpu_ioctl+0x8ed/0xc00 [ 65.714441][ T1439] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 65.719643][ T1439] ? selinux_file_ioctl+0x3ad/0x4c0 [ 65.724846][ T1439] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 65.730392][ T1439] ? mutex_unlock+0x8f/0x230 [ 65.734983][ T1439] ? __cfi_mutex_unlock+0x10/0x10 [ 65.740010][ T1439] ? __fget_files+0x2d1/0x330 [ 65.744693][ T1439] ? security_file_ioctl+0x95/0xc0 [ 65.749845][ T1439] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 65.755045][ T1439] __se_sys_ioctl+0x12f/0x1b0 [ 65.759746][ T1439] __x64_sys_ioctl+0x7b/0x90 [ 65.764335][ T1439] x64_sys_call+0x58b/0x9a0 [ 65.768840][ T1439] do_syscall_64+0x4c/0xa0 [ 65.773259][ T1439] ? clear_bhb_loop+0x30/0x80 [ 65.777933][ T1439] ? clear_bhb_loop+0x30/0x80 [ 65.782623][ T1439] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 65.788523][ T1439] RIP: 0033:0x7fbfadb9e0d9 [ 65.792933][ T1439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.812552][ T1439] RSP: 002b:00007fbfae9a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 65.820966][ T1439] RAX: ffffffffffffffda RBX: 00007fbfade26090 RCX: 00007fbfadb9e0d9 [ 65.828935][ T1439] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 65.836901][ T1439] RBP: 00007fbfae9a6090 R08: 0000000000000000 R09: 0000000000000000 [ 65.844866][ T1439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.852918][ T1439] R13: 00007fbfade26128 R14: 00007fbfade26090 R15: 00007fffbc9093e8 [ 65.860891][ T1439] [ 65.871954][ T287] EXT4-fs unmount: 22 callbacks suppressed [ 65.871970][ T287] EXT4-fs (loop1): unmounting filesystem. [ 66.184518][ T1466] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 66.202458][ T1466] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.229112][ T1462] Driver unsupported XDP return value 0 on prog (id 25) dev N/A, expect packet loss! [ 66.240995][ T304] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 66.274212][ T1466] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.307: corrupted xattr block 33 [ 66.334123][ T1466] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 66.384718][ T1466] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.307: corrupted xattr block 33 [ 66.400972][ T304] usb 2-1: device descriptor read/64, error -71 [ 66.402848][ T1462] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 66.437513][ T1466] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 66.461400][ T1466] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.307: corrupted xattr block 33 [ 66.474813][ T1466] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 66.480905][ T673] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 66.484500][ T1466] EXT4-fs error (device loop3): ext4_xattr_block_get:543: inode #15: comm syz.3.307: corrupted xattr block 33 [ 66.493336][ T288] EXT4-fs (loop4): unmounting filesystem. [ 66.504309][ T1466] fscrypt (loop3, inode 15): Error -117 getting encryption context [ 66.600882][ T39] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 66.639957][ T1495] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 66.648772][ T1495] EXT4-fs (loop2): Test dummy encryption mode enabled [ 66.656462][ T1495] EXT4-fs (loop2): warning: maximal mount count reached, running e2fsck is recommended [ 66.678351][ T1495] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 66.700832][ T304] usb 2-1: device descriptor read/64, error -71 [ 66.709497][ T1495] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 66.726286][ T291] EXT4-fs (loop2): unmounting filesystem. [ 66.782250][ T39] usb 4-1: unable to get BOS descriptor or descriptor too short [ 66.790687][ T39] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 64, setting to 8 [ 66.801475][ T39] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xE is Bulk; changing to Interrupt [ 66.813514][ T39] usb 4-1: string descriptor 0 read error: -22 [ 66.819884][ T39] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 66.828976][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.837782][ T1482] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 66.845031][ T1482] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 66.970887][ T304] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 67.030859][ T1274] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 67.059219][ T39] usb 4-1: USB disconnect, device number 9 [ 67.120850][ T304] usb 2-1: device descriptor read/64, error -71 [ 67.210881][ T1274] usb 3-1: Using ep0 maxpacket: 16 [ 67.217101][ T1274] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 67.226356][ T1274] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.235327][ T1274] usb 3-1: config 0 descriptor?? [ 67.241961][ T1274] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 67.293103][ T1507] xt_hashlimit: size too large, truncated to 1048576 [ 67.390929][ T304] usb 2-1: device descriptor read/64, error -71 [ 67.441446][ T1274] usb 3-1: Detected FT232B [ 67.510896][ T304] usb usb2-port1: attempt power cycle [ 67.565348][ T290] EXT4-fs (loop3): unmounting filesystem. [ 67.611127][ T1522] set_capacity_and_notify: 7 callbacks suppressed [ 67.611140][ T1522] loop3: detected capacity change from 0 to 512 [ 67.641633][ T1274] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 67.652362][ T1274] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 67.664341][ T1274] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 67.679842][ T1274] usb 3-1: USB disconnect, device number 11 [ 67.704791][ T1524] xt_hashlimit: size too large, truncated to 1048576 [ 67.710132][ T1274] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 67.722618][ T1274] ftdi_sio 3-1:0.0: device disconnected [ 67.940838][ T304] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 67.974416][ T304] usb 2-1: device descriptor read/8, error -71 [ 68.041446][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 68.041479][ T28] audit: type=1400 audit(1786189306.177:310): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 68.094115][ T1546] loop0: detected capacity change from 0 to 512 [ 68.117915][ T1546] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 68.127162][ T1546] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.139709][ T304] usb 2-1: device descriptor read/8, error -71 [ 68.175435][ T1554] loop2: detected capacity change from 0 to 512 [ 68.420856][ T304] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 68.440898][ T39] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 68.452104][ T304] usb 2-1: device descriptor read/8, error -71 [ 68.463009][ T1566] xt_hashlimit: size too large, truncated to 1048576 [ 68.602507][ T304] usb 2-1: device descriptor read/8, error -71 [ 68.622226][ T39] usb 1-1: unable to get BOS descriptor or descriptor too short [ 68.630878][ T39] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 64, setting to 8 [ 68.647322][ T39] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xE is Bulk; changing to Interrupt [ 68.661183][ T39] usb 1-1: string descriptor 0 read error: -22 [ 68.667542][ T39] usb 1-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 68.677241][ T39] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.687148][ T1546] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 68.694517][ T1546] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 68.720916][ T304] usb usb2-port1: unable to enumerate USB device [ 68.847666][ T1590] loop3: detected capacity change from 0 to 512 [ 68.904351][ T39] usb 1-1: USB disconnect, device number 12 [ 69.252136][ T304] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 69.301478][ T1606] loop2: detected capacity change from 0 to 1024 [ 69.309602][ T1606] EXT4-fs: Ignoring removed bh option [ 69.315410][ T1606] EXT4-fs: Ignoring removed bh option [ 69.331728][ T1606] EXT4-fs (loop2): can't mount with commit=4082, fs mounted w/o journal [ 69.411567][ T28] audit: type=1400 audit(1786189307.547:311): avc: denied { remount } for pid=1605 comm="syz.2.353" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 69.440848][ T304] usb 5-1: Using ep0 maxpacket: 16 [ 69.448339][ T304] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 69.457993][ T304] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.469322][ T304] usb 5-1: config 0 descriptor?? [ 69.479041][ T304] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 69.621160][ T1609] loop2: detected capacity change from 0 to 512 [ 69.627851][ T1609] FAT-fs (loop2): Unrecognized mount option "³ÐSB¡ t¸I“ r00000000000000000000005ÿÿ000000000000000000000030xffffffffffffffff" or missing value [ 71.032535][ T304] usb 5-1: Detected FT232B [ 71.033656][ T289] EXT4-fs (loop0): unmounting filesystem. [ 71.042940][ T385] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 71.053098][ T1613] loop3: detected capacity change from 0 to 512 [ 71.074235][ T1613] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 71.080192][ T1618] loop0: detected capacity change from 0 to 1024 [ 71.090359][ T1613] System zones: 0-2, 18-18, 34-35 [ 71.098211][ T1618] EXT4-fs: Ignoring removed bh option [ 71.105745][ T1613] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 71.115577][ T1613] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.144809][ T1618] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 71.162383][ T1618] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 71.185662][ T304] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 71.200838][ T304] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 71.209734][ T28] audit: type=1400 audit(1786189309.337:312): avc: denied { create } for pid=1617 comm="syz.0.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 71.230258][ T304] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 71.249857][ T304] usb 5-1: USB disconnect, device number 9 [ 71.299618][ T304] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 71.321677][ T304] ftdi_sio 5-1:0.0: device disconnected [ 71.394277][ T289] EXT4-fs (loop0): unmounting filesystem. [ 71.418636][ T1630] loop0: detected capacity change from 0 to 512 [ 71.428521][ T1630] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: comm syz.0.360: inode #1: comm syz.0.360: iget: illegal inode # [ 71.442230][ T1630] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.360: error while reading EA inode 1 err=-117 [ 71.455169][ T1630] EXT4-fs (loop0): 1 orphan inode deleted [ 71.461208][ T1630] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 71.481995][ T28] audit: type=1400 audit(1786189309.617:313): avc: denied { load_policy } for pid=1629 comm="syz.0.360" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 71.506417][ T290] EXT4-fs (loop3): unmounting filesystem. [ 71.525698][ T1630] SELinux: failed to load policy [ 71.534696][ T28] audit: type=1400 audit(1786189309.667:314): avc: denied { block_suspend } for pid=1629 comm="syz.0.360" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 71.556963][ T289] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 71.577885][ T28] audit: type=1400 audit(1786189309.707:315): avc: denied { unlink } for pid=289 comm="syz-executor" name="lost+found" dev="loop0" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 [ 71.633650][ T289] ------------[ cut here ]------------ [ 71.639164][ T289] kernel BUG at fs/namei.c:2962! [ 71.644391][ T289] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 71.650476][ T289] CPU: 0 PID: 289 Comm: syz-executor Not tainted syzkaller #0 [ 71.657927][ T289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 71.668068][ T289] RIP: 0010:may_delete+0x727/0x730 [ 71.673440][ T289] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 82 fe ff ff 48 89 df e8 3a e8 f3 ff e9 75 fe ff ff e8 b0 5d ae ff 0f 0b e8 a9 5d ae ff <0f> 0b 0f 1f 80 00 00 00 00 55 48 89 e5 41 56 53 48 89 fb e8 91 5d [ 71.693147][ T289] RSP: 0018:ffffc9000dacfc58 EFLAGS: 00010293 [ 71.695703][ T28] audit: type=1326 audit(1786189309.787:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1637 comm="syz.3.364" exe="/root/ci2-android-6-1/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f428e99e0d9 code=0x0 [ 71.699296][ T289] RAX: ffffffff81c30897 RBX: ffff888132f63660 RCX: ffff88810e296540 [ 71.699313][ T289] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 71.739569][ T289] RBP: ffffc9000dacfcb0 R08: 0000000000000003 R09: 0000000000000004 [ 71.747534][ T289] R10: dffffc0000000000 R11: fffff52001b59f68 R12: 1ffff110265ec6cc [ 71.755504][ T289] R13: 0000000000000001 R14: ffff888132f63360 R15: dffffc0000000000 [ 71.763487][ T289] FS: 000055558ec1f500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 71.772438][ T289] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 71.779056][ T289] CR2: 0000000000000000 CR3: 000000012fc24000 CR4: 00000000003506b0 [ 71.787151][ T289] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 71.790940][ T28] audit: type=1400 audit(1786189309.907:317): avc: denied { setopt } for pid=1642 comm="syz.4.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 71.795161][ T289] DR3: 0000000000000005 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 71.795185][ T289] Call Trace: [ 71.795191][ T289] [ 71.795199][ T289] vfs_rmdir+0x2f/0x4f0 [ 71.817240][ T1643] netlink: 12 bytes leftover after parsing attributes in process `syz.4.366'. [ 71.822951][ T289] ? incfs_kill_sb+0xec/0x210 [ 71.822986][ T289] incfs_kill_sb+0xfe/0x210 [ 71.828841][ T28] audit: type=1400 audit(1786189309.907:318): avc: denied { watch watch_reads } for pid=1637 comm="syz.3.364" path="/89/file1" dev="tmpfs" ino=506 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 71.829215][ T289] deactivate_locked_super+0xb5/0x120 [ 71.834291][ T28] audit: type=1400 audit(1786189309.907:319): avc: denied { write } for pid=1642 comm="syz.4.366" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 71.842215][ T289] deactivate_super+0xaf/0xe0 [ 71.842245][ T289] cleanup_mnt+0x45e/0x4e0 [ 71.842265][ T289] __cleanup_mnt+0x19/0x20 [ 71.912587][ T289] task_work_run+0x1e1/0x250 [ 71.917201][ T289] ? __cfi_task_work_run+0x10/0x10 [ 71.922391][ T289] ? __x64_sys_umount+0x12d/0x170 [ 71.927420][ T289] ? __cfi___x64_sys_umount+0x10/0x10 [ 71.932802][ T289] exit_to_user_mode_loop+0x9b/0xb0 [ 71.938031][ T289] exit_to_user_mode_prepare+0x87/0xd0 [ 71.943520][ T289] syscall_exit_to_user_mode+0x1a/0x30 [ 71.948997][ T289] do_syscall_64+0x58/0xa0 [ 71.953518][ T289] ? clear_bhb_loop+0x30/0x80 [ 71.958193][ T289] ? clear_bhb_loop+0x30/0x80 [ 71.962857][ T289] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 71.968743][ T289] RIP: 0033:0x7f1c1bf9f317 [ 71.973169][ T289] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 71.985112][ T1646] loop1: detected capacity change from 0 to 512 [ 71.992858][ T289] RSP: 002b:00007ffc6e663348 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 71.992886][ T289] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f1c1bf9f317 [ 71.992897][ T289] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc6e663400 [ 71.992909][ T289] RBP: 00007ffc6e663400 R08: 00007ffc6e664400 R09: 00000000ffffffff [ 72.031500][ T289] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc6e6644f0 [ 72.039479][ T289] R13: 00007f1c1c034474 R14: 000000000001174e R15: 00007ffc6e6655c0 [ 72.047460][ T289] [ 72.050473][ T289] Modules linked in: [ 72.054756][ T289] ---[ end trace 0000000000000000 ]--- [ 72.065868][ T289] RIP: 0010:may_delete+0x727/0x730 [ 72.074946][ T289] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 82 fe ff ff 48 89 df e8 3a e8 f3 ff e9 75 fe ff ff e8 b0 5d ae ff 0f 0b e8 a9 5d ae ff <0f> 0b 0f 1f 80 00 00 00 00 55 48 89 e5 41 56 53 48 89 fb e8 91 5d [ 72.094725][ T289] RSP: 0018:ffffc9000dacfc58 EFLAGS: 00010293 [ 72.095975][ T1646] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 72.100874][ T289] RAX: ffffffff81c30897 RBX: ffff888132f63660 RCX: ffff88810e296540 [ 72.110127][ T1646] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.118242][ T289] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 0000000000000000 [ 72.141837][ T289] RBP: ffffc9000dacfcb0 R08: 0000000000000003 R09: 0000000000000004 [ 72.149919][ T289] R10: dffffc0000000000 R11: fffff52001b59f68 R12: 1ffff110265ec6cc [ 72.160763][ T289] R13: 0000000000000001 R14: ffff888132f63360 R15: dffffc0000000000 [ 72.168911][ T289] FS: 000055558ec1f500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 72.178381][ T289] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.185616][ T289] CR2: 0000001b2eb23ffc CR3: 000000012fc24000 CR4: 00000000003506b0 [ 72.193881][ T289] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 72.201923][ T289] DR3: 0000000000000005 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 72.210173][ T289] Kernel panic - not syncing: Fatal exception [ 72.216381][ T289] Kernel Offset: disabled [ 72.220722][ T289] Rebooting in 86400 seconds..