last executing test programs: 13.05046292s ago: executing program 2 (id=277): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@inlinecrypt}, {@grpid}, {@noauto_da_alloc}, {@nouid32}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") unshare(0x64000600) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}, [@ldst={0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80ffffff}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) 12.801857475s ago: executing program 0 (id=279): r0 = fsopen(&(0x7f00000000c0)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xa0, 0x2, 0x1, 0x801, 0x0, 0x0, {0x3, 0x0, 0xa}, [@CTA_TUPLE_REPLY={0x34, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0xc82, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x1000000000) ioctl$sock_bt_hci(r4, 0x400448dd, &(0x7f0000000040)) syz_usb_connect(0x5, 0x0, 0x0, &(0x7f0000000b40)={0x0, 0x0, 0x1f, &(0x7f0000000940)={0x5, 0xf, 0x1f, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0xe, 0x1}, @ssp_cap={0x10, 0x10, 0xa, 0xf2, 0x1, 0x8, 0xf0f, 0x6, [0x1fe0000]}]}}) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000800) fsmount(r0, 0x0, 0x0) 11.332731908s ago: executing program 4 (id=280): r0 = fsopen(&(0x7f00000000c0)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xa0, 0x2, 0x1, 0x801, 0x0, 0x0, {0x3, 0x0, 0xa}, [@CTA_TUPLE_REPLY={0x34, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0xc82, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x1000000000) ioctl$sock_bt_hci(r4, 0x400448dd, &(0x7f0000000040)) syz_usb_connect(0x5, 0x0, 0x0, &(0x7f0000000b40)={0x0, 0x0, 0x1f, &(0x7f0000000940)={0x5, 0xf, 0x1f, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0xe, 0x1}, @ssp_cap={0x10, 0x10, 0xa, 0xf2, 0x1, 0x8, 0xf0f, 0x6, [0x1fe0000]}]}}) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000800) fsmount(r0, 0x0, 0x0) 11.092176444s ago: executing program 2 (id=281): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0c00000004000000040000000700000000000000", @ANYRES32=r3, @ANYBLOB="ffffffff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4}, 0x0, 0x0}, 0x20) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000140)={r4, 0x58, &(0x7f00000000c0)}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) syz_ublk_setup_queues(r6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x84000001, 0x2, 0xfffefffc}}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000040)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x8002000000000001, 0x1, 0x1000000000000c5, 0x0, 0x2, 0xfffffffffffff801, 0x4, 0xfffffffffffffffc, 0xe}) 10.056123726s ago: executing program 2 (id=283): r0 = fsopen(&(0x7f00000000c0)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xa0, 0x2, 0x1, 0x801, 0x0, 0x0, {0x3, 0x0, 0xa}, [@CTA_TUPLE_REPLY={0x34, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0xc82, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x1000000000) ioctl$sock_bt_hci(r5, 0x400448dd, &(0x7f0000000040)) syz_usb_connect(0x5, 0x0, 0x0, &(0x7f0000000b40)={0x0, 0x0, 0x1f, &(0x7f0000000940)={0x5, 0xf, 0x1f, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0xe, 0x1}, @ssp_cap={0x10, 0x10, 0xa, 0xf2, 0x1, 0x8, 0xf0f, 0x6, [0x1fe0000]}]}}) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x48, 0x64, 0xf31, 0xfffffffb, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xfff3, 0xffff}, {0xfff2, 0x1b}}, [@filter_kind_options=@f_flower={{0xfffffffffffffe5e}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @mcast2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4010}, 0x0) fsmount(r0, 0x0, 0x0) 9.624285916s ago: executing program 3 (id=286): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000480)={0x0, 0x0, 0x1}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000380)={0x73622a85, 0xa}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f00000001c0)=0xe8) r6 = getgid() syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x828088, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=r5, @ANYBLOB=',group_id=', @ANYRESDEC=r6, @ANYBLOB=',max_read=0x0000000000000a7H,blksize=0x0000000000008a00,dont_hash,smackfstransmute=/dev/kvm\x00,\x00'], 0x1, 0x0, &(0x7f00000004c0)="0b3be061d8f08188f6e27f3b6be218ba6ea4ccb0cd9d25e258972f4ebaf92652683971f5db1fa1e9e19cf8dd2de9130d4f2baae7983c2585ee037c0f8f54edd9f7a087fc7021ea4c9ba8979dee7f514d62b3046ab225f53b921336e2986fcc43367dc02cd573022171d84e798ae7b7f043768460c8de0b027f61f70d825b8957452ee755b9adb014a3a785611117c75d289b5b4c07bfd5cb108d0a3570b9379279c55b896a6dbb5721aac87fe14d4f91153c9f") ioctl$KVM_RUN(r2, 0xae80, 0x0) 9.477346369s ago: executing program 3 (id=287): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0x3, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) syz_ublk_setup_queues(0xffffffffffffffff, r4, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1000000, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x4000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x8c, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2, 0x1, 0x9d7c}}], 0x1, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 8.960512141s ago: executing program 0 (id=288): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'netdevsim0\x00', 0x5005}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x1d8, 0xc8, 0x8, 0x1d8, 0x5803, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0, @mcast1, [0xffffff00, 0xff, 0xff], [0x0, 0xff000000, 0xff], 'pimreg\x00', 'wlan0\x00', {}, {}, 0x2c, 0x1, 0x1, 0x51}, 0x0, 0x190, 0x1d8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x8, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3274e082555f6722282f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5000000000800", 0x1, 0x1, {0xfffffffffffffffe}}}, @common=@inet=@ecn={{0x28}, {0x1, 0x11, 0x8, 0x6}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x5, 0x0, 0x3, 'pptp\x00', {0x100000000}}}}, {{@ipv6={@remote, @mcast1, [0xff000000, 0x100000100], [], 'macvtap0\x00', 'macsec0\x00', {}, {}, 0x87}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0xffffffff, 0x0, 'netbios-ns\x00', 'syz0\x00', {0xd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) socket$pptp(0x18, 0x1, 0x2) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) syz_open_dev$tty1(0xc, 0x4, 0x4) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x83) creat(&(0x7f0000000040)='./file1\x00', 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r5, 0x800c6613, &(0x7f0000000080)=@v1={0x0, @aes128, 0x4, @desc4}) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040']) 8.328904625s ago: executing program 3 (id=290): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$eJzs3c1rO0UYwPEnaZImKW1yEEVBOtiLXpY2ehaDtCAELG0jtoKwbTcasiYlG6oRse3Jq3j3JHgovVnwUND+A71404sI3noRPFhBXdm3ZPPWl5g0/trvB0omM/PszmQn5dm0m718+/MPKiVLK+kNiSaVRERErkSyEpVAxH+MuuWEhB3KSzO///j8+mYx6VWolfzGyzml1Nz8dx9+kvK7nU3LRfbdy99yv148ffHs5T8b75ctVbZUtdZQutqu/dzQt01D7ZatiqbUqmnolqHKVcuoe+3f+Nsxa3t7TaVXd2fTe3XDspRebaqK0VSNmmrUm0p/Ty9XlaZpajYtuEnxeG1Nzw8ZvDPiwWBM6vW8PiUiqZ6W4vFEBgQAACaqO/+POin9MPn/lswVCstryunczv9PXjhvzLx1Oufn/2eJfvn/Kz952+rI/53TiXb+X/POD0o35/9fyh3y/96M6HEZOv/PjmEwGM58oqcq0vHMyf/T/vvXdfTOyaJbIP8HAAAAAAAAAAAAAAAAAAAAAOBJcGXbGdu2M8Fj8NO+hMB/jgdp0PGfFpGkc/Rtjv9Dtr65JUn3wj3nGJuf7Rf3i96j3+FcREwx/ra7OWsjuPJIObLyvXngxx/sF6fclnxJyk68LElGsu56CsXb9sobheUl5fHjW5cppcPxOcnIU+H4b93V6cTnOuP9/SfkxYVQvCYZ+WFHamLKrhvZ3v+nS0q9/mahKz7l9hORX+79oAAAAAAAMGKaaul7/q5pg9q9bxnJl9yPiQxZlIz81f/8frHv+Xks81xs0rMHAAAAAOBxsJofV3SJGnW3YJr9CikZ2DSCQqyjJi4ifTsnumri1215KjTD244nId4dTP7rvL4KXtW7RAX/SOEMvNXk31FFhhtPMH+3JhJrNf1513lFDsVdAIfhpqjcIjzWPfh5p0L17bwwcDtH/kRaNcHHRokBr7Os9m4nes1KiPfU2JHhFsAzX3z9x+jeIK+e+ivgo5s7H5mGfSC3OShdBWcXvU3xsf/iAQAAAHDv2kl/UPNauDl8I5HwzXL4yz0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAACM0lq/06ypMeo4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/8W/AQAA//9/d/Qh") syz_mount_image$fuse(0x0, &(0x7f0000000a80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x846048, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x4f, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0xb, 0x42, 0x40, 0x42}, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2c, r6, 0x1, 0x70bd2b, 0x25dfdbff, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8081}, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={r4, &(0x7f0000000100)="b3", 0x0}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd7000fedbdf251200000018000180140002007465616d5f736c6176655f30000000000800070002000000080009000000000008000800"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x44) r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x1a1) fdatasync(r8) syz_usb_connect$uac2(0x5, 0x98, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100300000010351212824000010203010902860003010d5003080b00010108209809040000000101200009240106000626006e0c24030301010503"], &(0x7f00000000c0)={0xfffffdd8, 0x0, 0x0, 0x0, 0x0, [{0x0, &(0x7f0000000080)=@lang_id={0x0, 0x3, 0x41b}}]}) 8.281616876s ago: executing program 4 (id=291): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r1, r3, 0x16, 0x0, @void}, 0x10) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000000)=0x6, 0x1) (fail_nth: 2) 7.846855846s ago: executing program 4 (id=292): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000000)='./file0\x00', 0x3010050, &(0x7f0000000100)=ANY=[], 0xfe, 0x150e, &(0x7f0000000ec0)="$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") syz_emit_ethernet(0x36, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0) symlinkat(&(0x7f0000000e00)='./cgroup.cpu/cpuset.cpus\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file3\x00', &(0x7f0000000080)={0x8080, 0x0, 0x30}, 0x18) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000140)=""/130, 0x82, 0x2000, &(0x7f00000002c0)={0x11, 0x11, 0x0, 0x1, 0xf, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x4, 0x0, &(0x7f0000000140)) mkdir(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x2) 7.825799096s ago: executing program 0 (id=293): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@inlinecrypt}, {@grpid}, {@noauto_da_alloc}, {@nouid32}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") unshare(0x64000600) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}, [@ldst={0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80ffffff}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) 6.535117415s ago: executing program 1 (id=294): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r1, r3, 0x16, 0x0, @void}, 0x10) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000000)=0x6, 0x1) 6.509941985s ago: executing program 2 (id=295): syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x1014096, &(0x7f0000000440)=ANY=[@ANYBLOB="811ae6afcff150e3eeb339ac351ecf60f7e6be8fce1931e4009b80af2b052cf5ba1a5570116b126fbbbf8e42b6c265176146b11a40e5a27fd085664e18fa0379d02972c31bf72164c4772ff3a692c726c745989244ab989107ce99cc82595280896a0931a2fa79aa546b81d393d4f59bedcb50c349c0870e877cf6007b1d283f34c40c0f721fbce011f9a75ea026b9822be19d027901fbe603922bb967c38452f9970b107cfe77b9d6d26331d644aabd706401a355735851fb549b7810eb2a4b23cc1b9216cdc7e5a4"], 0x81, 0x105fa, &(0x7f0000010f40)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa10000000000000707000000ffffffb702000008000000b70300000000002885000000500000008510000001000000950000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x98, &(0x7f00000001c0)=""/152, 0x0, 0xa}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x84042, 0x1fb) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={0x0, @initdev, @empty}, &(0x7f0000000140)=0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000080)={0x0, 0xffff, 0x0, 0x0, 0x0}) sched_setscheduler(r3, 0x1, &(0x7f0000000000)=0x8) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r2, 0x40786e88, &(0x7f0000000e40)={{&(0x7f0000000ac0)=[{0x6, 0x3, 0x7fffffff, {0x57, 0xffffffffffffffc0}, 0x4, 0x5, 0x40}, {0x6, 0xffffffffffffffff, 0xffffffffffffffff, {0x8000000000000001, 0x800}, 0x9, 0x7f9b7b53, 0x7}, {0x0, 0x3, 0x8, {0x7, 0xe0e8}, 0x6, 0x4, 0x8}, {0xa6, 0x9, 0xfffffffffffffffb, {0x0, 0x401}, 0x1, 0x1, 0x8}, {0xf, 0x60000, 0xffff, {0x9, 0x59}, 0x20e8, 0x1, 0x5}, {0x0, 0x382cf3eb, 0x7, {0x5, 0xf}, 0x9, 0x3, 0x6}, {0x7, 0x8c8, 0x43, {0x9, 0x4}, 0x1, 0x480000000000000, 0x10001}, {0xffffffffffffffff, 0x3, 0xc28, {0x8000000000000000, 0x6}, 0x0, 0x9, 0xffffffff}, {0x10001, 0x8000000000000001, 0x7, {0x1, 0x5}, 0xa, 0x7f, 0x60}, {0xa, 0x6, 0x8000000000000001, {0x6, 0x3}, 0x9, 0xffffffffffffffff, 0xfffffffa}], 0xa, 0x40, 0x4, 0x7}, {&(0x7f0000000d40)=[{0xffff, 0x3}, {0x8, 0x4}, {0x0, 0x7fff}], 0x3, 0x10, 0xfff, 0x5}, {&(0x7f0000000d80)=[0x9, 0x8, 0x9, 0xfffffffffffffffb, 0x9, 0xffffffffffffff3e], 0x6, 0x8, 0xbd, 0x4}, {&(0x7f0000000dc0)=[{0x401, 0x4, 0xb, 0x4, 0x4}], 0x1, 0x28, 0xe, 0x1}, {&(0x7f0000000e00)=[0x2], 0x1, 0x8, 0x8, 0x6}}) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000280)={[{@dioread_nolock}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@delalloc}]}, 0xff, 0x4ce, &(0x7f0000000b00)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xfffffffffffffffd}, 0x0) setitimer(0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000a80), 0xfd, 0x506, &(0x7f0000001400)="$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") sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x190, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x4e24, 0xffff}, {@in6=@private0, 0x4d4, 0x32}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x2566}, 0x0, 0x1000, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth={0x58, 0x1, {{'xcbc(aes)\x00'}, 0x80, "8d78aa7d25e76d00000000694ce75661"}}]}, 0x190}, 0x1, 0x0, 0x0, 0x40}, 0x40082) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r0, r1, 0x25, 0x0, @val=@kprobe_multi=@syms={0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000180)=']:&*,\x00'], 0x0, 0x7}}, 0x30) r7 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r7, 0x2007ffc) sendfile(r7, r7, 0x0, 0x800000009) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), r0) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4451bbb7ff268c8f}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r8, 0x10, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x4010) 6.382859349s ago: executing program 1 (id=296): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000980)={0x14, &(0x7f0000000840)={0x20, 0x24, 0x4a, {0x4a, 0x8, "dba06d639f6b6ed342e6e5762c082263719da834e1270ef0a73aacd70616c99a9a7890bf9ed596ef299e763f84ed7aee2209b7074e90b5c9e0be1905e0aee3a1461040b30542bf39"}}, 0x0}, &(0x7f0000000b00)={0x1c, &(0x7f0000000a00)={0x20, 0x13, 0x79, "0c5172a9badaf402a8c3ae008f5a3ec8f7604cc91d20f40c8b3ad1e6405ae469459701415a95565a24644aa481f7ad09b9a45a5b5aa0b77da10b2a55333ab1afe0ea798ce9cac8c21b07f279b79dc6dd29528ceeba569e56da90fec30717b4c32c0c25b135aae44269f7884f123705eec73b2a2d902a47e830"}, 0x0, 0x0}) syz_usb_ep_write(r0, 0x81, 0xbb, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x58, 0x10, 0x401, 0xfffffffe, 0x4, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b872, 0xc574450d1af3b5bc}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_STATE={0x5}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0xc8d0) syz_open_dev$loop(&(0x7f0000000080), 0xdf2f, 0x40) 6.180091753s ago: executing program 0 (id=297): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r6 = dup(r4) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="000000000000bbbb04bbbbbb88a8c00081000000080045f5002800680000aa069078ac1414aaac1414144e224e29", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000990780076"], 0x3e) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000140)='\\\\@[*#)\x00', 0xfffffffffffffffe) openat$rtc(0xffffff9c, &(0x7f0000000080), 0xa200, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r2, 0x4) 5.86025406s ago: executing program 4 (id=298): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r6 = dup(r4) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="000000000000bbbb04bbbbbb88a8c00081000000080045f5002800680000aa069078ac1414aaac1414144e224e29", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000990780076"], 0x3e) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000140)='\\\\@[*#)\x00', 0xfffffffffffffffe) openat$rtc(0xffffff9c, &(0x7f0000000080), 0xa200, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r2, 0x4) 3.846039465s ago: executing program 3 (id=299): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r6 = dup(r4) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="000000000000bbbb04bbbbbb88a8c00081000000080045f5002800680000aa069078ac1414aaac1414144e224e29", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000990780076"], 0x3e) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getrlimit(0x14, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff}) recvmmsg(r7, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r2, 0x4) 3.442670564s ago: executing program 0 (id=300): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0x3, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) syz_ublk_setup_queues(0xffffffffffffffff, r4, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1000000, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x4000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x8c, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2, 0x1, 0x9d7c}}], 0x1, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 2.749940279s ago: executing program 3 (id=301): r0 = fsopen(&(0x7f00000000c0)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xa0, 0x2, 0x1, 0x801, 0x0, 0x0, {0x3, 0x0, 0xa}, [@CTA_TUPLE_REPLY={0x34, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x80}, 0x8000) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0xc82, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x1000000000) ioctl$sock_bt_hci(r3, 0x400448dd, &(0x7f0000000040)) 2.749646759s ago: executing program 2 (id=302): r0 = fsopen(&(0x7f00000000c0)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xa0, 0x2, 0x1, 0x801, 0x0, 0x0, {0x3, 0x0, 0xa}, [@CTA_TUPLE_REPLY={0x34, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x80}, 0x8000) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0xc82, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x1000000000) ioctl$sock_bt_hci(r3, 0x400448dd, &(0x7f0000000040)) 2.73182829s ago: executing program 4 (id=303): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'netdevsim0\x00', 0x5005}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x1d8, 0xc8, 0x8, 0x1d8, 0x5803, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0, @mcast1, [0xffffff00, 0xff, 0xff], [0x0, 0xff000000, 0xff], 'pimreg\x00', 'wlan0\x00', {}, {}, 0x2c, 0x1, 0x1, 0x51}, 0x0, 0x190, 0x1d8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x8, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3274e082555f6722282f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5000000000800", 0x1, 0x1, {0xfffffffffffffffe}}}, @common=@inet=@ecn={{0x28}, {0x1, 0x11, 0x8, 0x6}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x5, 0x0, 0x3, 'pptp\x00', {0x100000000}}}}, {{@ipv6={@remote, @mcast1, [0xff000000, 0x100000100], [], 'macvtap0\x00', 'macsec0\x00', {}, {}, 0x87}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0xffffffff, 0x0, 'netbios-ns\x00', 'syz0\x00', {0xd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) socket$pptp(0x18, 0x1, 0x2) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) syz_open_dev$tty1(0xc, 0x4, 0x4) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x83) creat(&(0x7f0000000040)='./file1\x00', 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r5, 0x800c6613, &(0x7f0000000080)=@v1={0x0, @aes128, 0x4, @desc4}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040']) 2.603773862s ago: executing program 1 (id=304): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r6 = dup(r4) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="000000000000bbbb04bbbbbb88a8c00081000000080045f5002800680000aa069078ac1414aaac1414144e224e29", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000990780076"], 0x3e) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000140)='\\\\@[*#)\x00', 0xfffffffffffffffe) openat$rtc(0xffffff9c, &(0x7f0000000080), 0xa200, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r2, 0x4) 1.988364976s ago: executing program 0 (id=305): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000340)=ANY=[@ANYBLOB="0014af"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@random="d100", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x0, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x4, 0x0, @void}}}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26}, 0x94) socket$netlink(0x10, 0x3, 0xa) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000580)={0x8, {"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", 0x1000}}, 0x1006) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) syz_emit_ethernet(0x32, &(0x7f0000000300)=ANY=[@ANYBLOB="0180c2000002bbbbbbbbbbbb0800450000240000005d2a0128664b2ded00000000000000000000109078e2060000000000002b4c7478e3417983a83161fc812dfc81872b21f2b6358e94dacd5af4e1770fe52a890246b84b3f8f184315645992d8497fe5ea39408dec2fbd68e605aa54a131175d07e0d0f6afd3421474bc1faec195efe87ad7239d16819a84841cea0df2cfa0c898313b0ebf23bdee20ae398f8f27110e3284e686183d2880693ba3aed2b5eca120a54ec0911e10265365f1601c64585d4897c55996b081e14f418397cdac1c5ac60f7ee91a5af44150fb55db7c5482caf6de34978264da2bde038753378ca2c28d8e"], 0x0) 1.81156447s ago: executing program 4 (id=306): r0 = fsopen(&(0x7f00000000c0)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xa0, 0x2, 0x1, 0x801, 0x0, 0x0, {0x3, 0x0, 0xa}, [@CTA_TUPLE_REPLY={0x34, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0xc82, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x1000000000) ioctl$sock_bt_hci(r5, 0x400448dd, &(0x7f0000000040)) syz_usb_connect(0x5, 0x0, 0x0, &(0x7f0000000b40)={0x0, 0x0, 0x1f, &(0x7f0000000940)={0x5, 0xf, 0x1f, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0xe, 0x1}, @ssp_cap={0x10, 0x10, 0xa, 0xf2, 0x1, 0x8, 0xf0f, 0x6, [0x1fe0000]}]}}) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000800) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x48, 0x64, 0xf31, 0xfffffffb, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xfff3, 0xffff}, {0xfff2, 0x1b}}, [@filter_kind_options=@f_flower={{0xfffffffffffffe5e}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @mcast2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4010}, 0x0) fsmount(r0, 0x0, 0x0) 1.185448214s ago: executing program 1 (id=307): vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000240)}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setxattr$incfs_metadata(&(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000840), 0x0, 0xffffffffffffffb9, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x1, 0x6000, 0x2000, &(0x7f0000fa3000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r1, 0xc018aec0, &(0x7f00000000c0)={0x1}) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000400)={[{@nobh}, {@nombcache}, {@resuid}, {@usrjquota}, {@data_err_ignore}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}, {@lazytime}]}, 0x1, 0x48f, &(0x7f0000000a00)="$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") 1.034951208s ago: executing program 1 (id=308): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000000)='./file0\x00', 0x3010050, &(0x7f0000000100)=ANY=[], 0xfe, 0x150e, &(0x7f0000000ec0)="$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") syz_emit_ethernet(0x36, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0) symlinkat(&(0x7f0000000e00)='./cgroup.cpu/cpuset.cpus\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file3\x00', &(0x7f0000000080)={0x8080, 0x0, 0x30}, 0x18) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000140)=""/130, 0x82, 0x2000, &(0x7f00000002c0)={0x11, 0x11, 0x0, 0x1, 0xf, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x4, 0x0, &(0x7f0000000140)) mkdir(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x2) 117.736848ms ago: executing program 2 (id=309): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$eJzs3c1rO0UYwPEnaZImKW1yEEVBOtiLXpY2ehaDtCAELG0jtoKwbTcasiYlG6oRse3Jq3j3JHgovVnwUND+A71404sI3noRPFhBXdm3ZPPWl5g0/trvB0omM/PszmQn5dm0m718+/MPKiVLK+kNiSaVRERErkSyEpVAxH+MuuWEhB3KSzO///j8+mYx6VWolfzGyzml1Nz8dx9+kvK7nU3LRfbdy99yv148ffHs5T8b75ctVbZUtdZQutqu/dzQt01D7ZatiqbUqmnolqHKVcuoe+3f+Nsxa3t7TaVXd2fTe3XDspRebaqK0VSNmmrUm0p/Ty9XlaZpajYtuEnxeG1Nzw8ZvDPiwWBM6vW8PiUiqZ6W4vFEBgQAACaqO/+POin9MPn/lswVCstryunczv9PXjhvzLx1Oufn/2eJfvn/Kz952+rI/53TiXb+X/POD0o35/9fyh3y/96M6HEZOv/PjmEwGM58oqcq0vHMyf/T/vvXdfTOyaJbIP8HAAAAAAAAAAAAAAAAAAAAAOBJcGXbGdu2M8Fj8NO+hMB/jgdp0PGfFpGkc/Rtjv9Dtr65JUn3wj3nGJuf7Rf3i96j3+FcREwx/ra7OWsjuPJIObLyvXngxx/sF6fclnxJyk68LElGsu56CsXb9sobheUl5fHjW5cppcPxOcnIU+H4b93V6cTnOuP9/SfkxYVQvCYZ+WFHamLKrhvZ3v+nS0q9/mahKz7l9hORX+79oAAAAAAAMGKaaul7/q5pg9q9bxnJl9yPiQxZlIz81f/8frHv+Xks81xs0rMHAAAAAOBxsJofV3SJGnW3YJr9CikZ2DSCQqyjJi4ifTsnumri1215KjTD244nId4dTP7rvL4KXtW7RAX/SOEMvNXk31FFhhtPMH+3JhJrNf1513lFDsVdAIfhpqjcIjzWPfh5p0L17bwwcDtH/kRaNcHHRokBr7Os9m4nes1KiPfU2JHhFsAzX3z9x+jeIK+e+ivgo5s7H5mGfSC3OShdBWcXvU3xsf/iAQAAAHDv2kl/UPNauDl8I5HwzXL4yz0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAACM0lq/06ypMeo4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/8W/AQAA//9/d/Qh") syz_mount_image$fuse(0x0, &(0x7f0000000a80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x846048, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x4f, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0xb, 0x42, 0x40, 0x42}, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2c, r6, 0x1, 0x70bd2b, 0x25dfdbff, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8081}, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={r4, &(0x7f0000000100)="b3", 0x0}, 0x20) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002bbd7000fedbdf251200000018000180140002007465616d5f736c6176655f30000000000800070002000000080009000000000008000800"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x44) r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x1a1) fdatasync(r8) syz_usb_connect$uac2(0x5, 0x98, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100300000010351212824000010203010902860003010d5003080b00010108209809040000000101200009240106000626006e0c24030301010503"], &(0x7f00000000c0)={0xfffffdd8, 0x0, 0x0, 0x0, 0x0, [{0x0, &(0x7f0000000080)=@lang_id={0x0, 0x3, 0x41b}}]}) 12.52405ms ago: executing program 3 (id=310): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'netdevsim0\x00', 0x5005}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x1d8, 0xc8, 0x8, 0x1d8, 0x5803, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0, @mcast1, [0xffffff00, 0xff, 0xff], [0x0, 0xff000000, 0xff], 'pimreg\x00', 'wlan0\x00', {}, {}, 0x2c, 0x1, 0x1, 0x51}, 0x0, 0x190, 0x1d8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x8, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3274e082555f6722282f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5000000000800", 0x1, 0x1, {0xfffffffffffffffe}}}, @common=@inet=@ecn={{0x28}, {0x1, 0x11, 0x8, 0x6}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x5, 0x0, 0x3, 'pptp\x00', {0x100000000}}}}, {{@ipv6={@remote, @mcast1, [0xff000000, 0x100000100], [], 'macvtap0\x00', 'macsec0\x00', {}, {}, 0x87}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0xffffffff, 0x0, 'netbios-ns\x00', 'syz0\x00', {0xd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) socket$pptp(0x18, 0x1, 0x2) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) syz_open_dev$tty1(0xc, 0x4, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x83) creat(&(0x7f0000000040)='./file1\x00', 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r5, 0x800c6613, &(0x7f0000000080)=@v1={0x0, @aes128, 0x4, @desc4}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040']) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="020304000100090104006bd648c6000c2f01fe80000000000000000000000000002eff020000000000000000000000000001"], 0x1043) 0s ago: executing program 1 (id=311): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000a80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x846048, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x4f, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0xb, 0x42, 0x40, 0x42}, 0x48) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2c, r5, 0x1, 0x70bd2b, 0x25dfdbff, {0x1a}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8081}, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={r4, &(0x7f0000000100)="b3", 0x0}, 0x20) kernel console output (not intermixed with test programs): ] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 47.150279][ T417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23'. [ 47.160259][ T311] usb 3-1: Can't set UAC3 power state to 1 for id 10 [ 47.177363][ T311] usb 3-1: selecting invalid altsetting 0 [ 47.184230][ T357] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 47.195670][ T311] usb 3-1: selecting invalid altsetting 0 [ 47.220130][ T311] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 47.238884][ T311] usb 3-1: USB disconnect, device number 2 [ 47.287207][ T357] cp2112 0003:10C4:EA90.0001: Part Number: 0x00 Device Version: 0x00 [ 47.298726][ T397] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 47.498645][ T326] udevd[326]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 47.516439][ T426] loop4: detected capacity change from 0 to 128 [ 47.525691][ T357] cp2112 0003:10C4:EA90.0001: error requesting SMBus config [ 47.533710][ T357] cp2112: probe of 0003:10C4:EA90.0001 failed with error -71 [ 47.556719][ T19] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 47.573363][ T357] usb 4-1: USB disconnect, device number 2 [ 47.664199][ T429] fido_id[429]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 47.698342][ T289] EXT4-fs (loop2): unmounting filesystem. [ 50.699138][ T435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.26'. [ 50.974341][ T19] usb 1-1: device descriptor read/all, error -71 [ 50.994953][ T288] EXT4-fs (loop0): unmounting filesystem. [ 51.556702][ T436] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 51.746663][ T436] usb 5-1: Using ep0 maxpacket: 32 [ 51.754206][ T436] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 51.805025][ T436] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 51.852842][ T436] usb 5-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 51.910285][ T436] usb 5-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 52.359437][ T436] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 52.420216][ T436] usb 5-1: config 1 interface 1 has no altsetting 0 [ 52.454606][ T436] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 52.496909][ T436] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.534586][ T436] usb 5-1: Product: syz [ 52.555162][ T436] usb 5-1: Manufacturer: syz [ 52.559875][ T311] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 52.568028][ T357] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 52.569884][ T436] usb 5-1: SerialNumber: syz [ 52.681620][ T444] loop1: detected capacity change from 0 to 131072 [ 52.691655][ T444] F2FS-fs (loop1): Invalid log sectorsize (0) [ 52.698137][ T444] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 52.716792][ T444] F2FS-fs (loop1): Unrecognized mount option "P95`澏1" or missing value [ 52.736909][ T454] loop0: detected capacity change from 0 to 4096 [ 52.802637][ T357] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.813960][ T311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.828621][ T436] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 52.839435][ T436] snd-usb-audio: probe of 5-1:1.1 failed with error -22 [ 52.865335][ T439] udevd[439]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 52.881450][ T311] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 52.891064][ T357] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 52.903042][ T454] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 52.910993][ T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.911278][ T357] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.929055][ T311] usb 3-1: config 0 descriptor?? [ 53.002623][ T458] loop1: detected capacity change from 0 to 512 [ 53.100599][ T460] 9pnet_fd: Insufficient options for proto=fd [ 53.155703][ T458] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -6 [ 53.260124][ T357] usb 4-1: config 0 descriptor?? [ 53.267118][ T454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.32'. [ 53.276837][ T450] loop4: detected capacity change from 0 to 128 [ 53.291821][ T450] EXT4-fs: Ignoring removed orlov option [ 53.312780][ T450] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 53.321862][ T450] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.344001][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 53.344015][ T28] audit: type=1400 audit(1783417479.997:142): avc: denied { read } for pid=449 comm="syz.4.31" name="file1" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 53.376194][ T6] usb 5-1: USB disconnect, device number 2 [ 53.537223][ T28] audit: type=1400 audit(1783417480.197:143): avc: denied { read write } for pid=465 comm="syz.1.33" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 53.560652][ T28] audit: type=1400 audit(1783417480.197:144): avc: denied { open } for pid=465 comm="syz.1.33" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 53.583885][ T28] audit: type=1400 audit(1783417480.197:145): avc: denied { mounton } for pid=465 comm="syz.1.33" path="/6/file0" dev="tmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 53.608364][ T28] audit: type=1400 audit(1783417480.237:146): avc: denied { name_bind } for pid=465 comm="syz.1.33" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 53.629963][ T28] audit: type=1400 audit(1783417480.237:147): avc: denied { node_bind } for pid=465 comm="syz.1.33" saddr=224.0.0.2 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 53.651910][ T28] audit: type=1400 audit(1783417480.267:148): avc: denied { create } for pid=465 comm="syz.1.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 53.663519][ T311] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 53.672442][ T28] audit: type=1400 audit(1783417480.267:149): avc: denied { create } for pid=465 comm="syz.1.33" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 53.702186][ T357] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 53.713820][ T311] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0002/input/input4 [ 53.726507][ T357] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0003/input/input5 [ 53.806655][ T19] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 53.816802][ T28] audit: type=1400 audit(1783417480.477:150): avc: denied { read } for pid=87 comm="acpid" name="event3" dev="devtmpfs" ino=639 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 53.822477][ T311] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 53.840038][ T28] audit: type=1400 audit(1783417480.477:151): avc: denied { open } for pid=87 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=639 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 53.891112][ T357] keytouch 0003:0926:3333.0003: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 53.918222][ T290] EXT4-fs (loop4): unmounting filesystem. [ 54.008101][ T19] usb 1-1: unable to get BOS descriptor or descriptor too short [ 54.023191][ T19] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 54.033713][ T19] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 54.043112][ T19] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 54.054116][ T19] usb 1-1: config 1 interface 1 has no altsetting 0 [ 54.062668][ T19] usb 1-1: string descriptor 0 read error: -22 [ 54.069057][ T19] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 54.078210][ T19] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.206701][ T436] usb 4-1: USB disconnect, device number 3 [ 54.316313][ T313] usb 3-1: USB disconnect, device number 3 [ 54.489371][ T19] usb 1-1: Can't set UAC3 power state to 1 for id 10 [ 54.496255][ T19] usb 1-1: selecting invalid altsetting 0 [ 54.502869][ T19] usb 1-1: selecting invalid altsetting 0 [ 54.514397][ T19] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 54.522923][ T19] usb 1-1: USB disconnect, device number 4 [ 54.727142][ T463] udevd[463]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 54.974908][ T481] loop3: detected capacity change from 0 to 512 [ 55.197467][ T481] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 55.207725][ T481] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.285144][ T288] EXT4-fs (loop0): unmounting filesystem. [ 55.317829][ T487] loop0: detected capacity change from 0 to 128 [ 56.629708][ T287] EXT4-fs (loop3): unmounting filesystem. [ 58.961732][ T313] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 59.086774][ T517] xt_CT: No such helper "netbios-ns" [ 59.111580][ T517] loop4: detected capacity change from 0 to 512 [ 59.121913][ T517] EXT4-fs (loop4): Test dummy encryption mode enabled [ 59.158356][ T313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 59.246047][ T313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 59.326036][ T517] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.42: inode has both inline data and extents flags [ 59.340367][ T517] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.42: couldn't read orphan inode 15 (err -117) [ 59.353325][ T517] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 59.397039][ T517] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #2: comm syz.4.42: directory missing '.' [ 59.418009][ T517] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 59.496820][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 59.508499][ T313] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 59.515847][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.517883][ T313] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.534587][ T313] usb 1-1: config 0 descriptor?? [ 59.569235][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 59.584765][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.602414][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.620029][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.637709][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.654331][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.824626][ T511] loop3: detected capacity change from 0 to 131072 [ 59.846815][ T511] F2FS-fs (loop3): Invalid log sectorsize (0) [ 59.916748][ T511] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 59.925028][ T511] F2FS-fs (loop3): Unrecognized mount option "P95`澏1" or missing value [ 59.970111][ T290] EXT4-fs (loop4): unmounting filesystem. [ 59.973171][ T313] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 59.993139][ T313] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 60.013922][ T313] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 60.184310][ T522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.43'. [ 60.267194][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 60.267213][ T28] audit: type=1400 audit(1783417486.877:159): avc: denied { setcurrent } for pid=523 comm="syz.4.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 60.277533][ T313] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 60.277561][ T313] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 60.277583][ T313] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 60.277604][ T313] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 60.279919][ T313] cp2112 0003:10C4:EA90.0004: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 60.443928][ T28] audit: type=1401 audit(1783417486.877:160): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 60.444613][ T313] cp2112 0003:10C4:EA90.0004: Part Number: 0x00 Device Version: 0x00 [ 60.461753][ T28] audit: type=1400 audit(1783417486.877:161): avc: denied { connect } for pid=523 comm="syz.4.45" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 60.491401][ T28] audit: type=1400 audit(1783417486.877:162): avc: denied { write } for pid=523 comm="syz.4.45" laddr=172.20.20.10 lport=256 faddr=172.20.20.187 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 60.879452][ T530] loop3: detected capacity change from 0 to 512 [ 61.457332][ T313] cp2112 0003:10C4:EA90.0004: error requesting SMBus config [ 61.564982][ T28] audit: type=1400 audit(1783417487.227:163): avc: denied { create } for pid=523 comm="syz.4.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 61.598578][ T313] cp2112: probe of 0003:10C4:EA90.0004 failed with error -71 [ 61.600343][ T28] audit: type=1400 audit(1783417487.247:164): avc: denied { sys_admin } for pid=523 comm="syz.4.45" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 61.606295][ T530] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 61.641375][ T313] usb 1-1: USB disconnect, device number 5 [ 61.657629][ T437] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 61.664207][ T28] audit: type=1400 audit(1783417488.297:165): avc: denied { setopt } for pid=532 comm="syz.4.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.781951][ T536] fido_id[536]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 62.006678][ T19] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 62.138804][ T545] loop1: detected capacity change from 0 to 128 [ 62.663279][ T19] usb 5-1: Using ep0 maxpacket: 32 [ 64.620092][ T558] xt_CT: No such helper "netbios-ns" [ 64.648712][ T558] loop1: detected capacity change from 0 to 512 [ 64.658277][ T558] EXT4-fs (loop1): Test dummy encryption mode enabled [ 64.890054][ T19] usb 5-1: unable to read config index 0 descriptor/all [ 64.906637][ T19] usb 5-1: can't read configurations, error -71 [ 64.924832][ T564] loop4: detected capacity change from 0 to 128 [ 64.935105][ T558] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.53: inode has both inline data and extents flags [ 64.948475][ T558] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.53: couldn't read orphan inode 15 (err -117) [ 64.960653][ T558] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 64.980059][ T557] EXT4-fs warning (device loop1): ext4_empty_dir:3147: inode #2: comm syz.1.53: directory missing '.' [ 64.993551][ T557] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 65.037781][ T28] audit: type=1401 audit(1783417491.697:166): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 69.126704][ T571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.57'. [ 70.010318][ T286] EXT4-fs (loop1): unmounting filesystem. [ 70.176320][ T584] xt_CT: No such helper "netbios-ns" [ 70.199838][ T584] loop1: detected capacity change from 0 to 512 [ 70.216947][ T584] EXT4-fs (loop1): Test dummy encryption mode enabled [ 70.356785][ T37] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 70.380365][ T584] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.58: inode has both inline data and extents flags [ 70.394223][ T584] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.58: couldn't read orphan inode 15 (err -117) [ 70.406939][ T584] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 70.447192][ T584] EXT4-fs warning (device loop1): ext4_empty_dir:3147: inode #2: comm syz.1.58: directory missing '.' [ 70.468505][ T584] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 70.756651][ T37] usb 3-1: Using ep0 maxpacket: 32 [ 70.763067][ T37] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 70.780790][ T37] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 70.798057][ T37] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 70.816105][ T37] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.831507][ T37] usb 3-1: Product: syz [ 70.836717][ T357] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 70.839865][ T37] usb 3-1: Manufacturer: syz [ 70.856614][ T37] usb 3-1: SerialNumber: syz [ 70.868515][ T37] usb 3-1: config 0 descriptor?? [ 70.992588][ T286] EXT4-fs (loop1): unmounting filesystem. [ 71.024051][ T581] loop4: detected capacity change from 0 to 131072 [ 71.033203][ T595] loop1: detected capacity change from 0 to 128 [ 71.036770][ T357] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 71.067331][ T581] F2FS-fs (loop4): Invalid log sectorsize (0) [ 71.073466][ T581] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 71.093400][ T357] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 71.114193][ T581] F2FS-fs (loop4): Unrecognized mount option "P95`澏1" or missing value [ 71.124441][ T357] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 71.136357][ T357] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.168031][ T357] usb 1-1: config 0 descriptor?? [ 72.167062][ T581] loop4: detected capacity change from 0 to 512 [ 72.173847][ T581] EXT4-fs: Ignoring removed oldalloc option [ 72.226792][ T581] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 72.238741][ T581] EXT4-fs warning (device loop4): ext4_multi_mount_protect:298: Invalid MMP block in superblock [ 72.352820][ T357] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 72.361168][ T357] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 72.368302][ T357] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 72.375354][ T357] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 72.385655][ T357] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 72.393008][ T357] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 72.401046][ T357] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 72.521150][ T606] xt_CT: No such helper "netbios-ns" [ 72.639637][ T606] loop1: detected capacity change from 0 to 512 [ 73.300190][ T607] loop4: detected capacity change from 0 to 512 [ 73.308261][ T606] EXT4-fs (loop1): Test dummy encryption mode enabled [ 73.340149][ T607] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 73.358408][ T606] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.64: inode has both inline data and extents flags [ 73.373203][ T606] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.64: couldn't read orphan inode 15 (err -117) [ 73.386040][ T606] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 73.436718][ T605] EXT4-fs warning (device loop1): ext4_empty_dir:3147: inode #2: comm syz.1.64: directory missing '.' [ 73.450790][ T605] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 73.629670][ T552] usb 3-1: USB disconnect, device number 4 [ 73.649513][ T357] cp2112 0003:10C4:EA90.0005: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 73.677303][ T286] EXT4-fs (loop1): unmounting filesystem. [ 73.685836][ T611] loop2: detected capacity change from 0 to 128 [ 73.732952][ T357] cp2112 0003:10C4:EA90.0005: error requesting version [ 73.746179][ T357] cp2112: probe of 0003:10C4:EA90.0005 failed with error -71 [ 73.753950][ T613] loop1: detected capacity change from 0 to 128 [ 73.771640][ T357] usb 1-1: USB disconnect, device number 6 [ 73.938636][ T617] loop0: detected capacity change from 0 to 128 [ 75.096610][ C0] sched: RT throttling activated [ 75.112049][ T614] fido_id[614]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 78.704106][ T629] xt_CT: No such helper "netbios-ns" [ 78.727216][ T629] loop4: detected capacity change from 0 to 512 [ 78.849118][ T629] EXT4-fs (loop4): Test dummy encryption mode enabled [ 78.950639][ T629] EXT4-fs: failed to create workqueue [ 78.956081][ T629] EXT4-fs (loop4): mount failed [ 83.181293][ T645] xt_CT: No such helper "netbios-ns" [ 83.204860][ T645] loop0: detected capacity change from 0 to 512 [ 83.218322][ T645] EXT4-fs (loop0): Test dummy encryption mode enabled [ 83.454442][ T28] audit: type=1401 audit(1783417510.097:167): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 83.488904][ T645] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.69: inode has both inline data and extents flags [ 83.502531][ T645] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.69: couldn't read orphan inode 15 (err -117) [ 83.515741][ T645] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 83.536661][ T300] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 83.637258][ T660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.73'. [ 83.676494][ T645] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #2: comm syz.0.69: directory missing '.' [ 83.721257][ T642] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 83.916650][ T301] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 83.992536][ T300] usb 5-1: Using ep0 maxpacket: 16 [ 84.001935][ T300] usb 5-1: unable to get BOS descriptor or descriptor too short [ 84.011845][ T300] usb 5-1: config 1 has an invalid descriptor of length 111, skipping remainder of the config [ 84.022743][ T300] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 84.035877][ T300] usb 5-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 84.046672][ T300] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.055155][ T300] usb 5-1: Product: syz [ 84.059715][ T300] usb 5-1: Manufacturer: syz [ 84.064468][ T300] usb 5-1: SerialNumber: syz [ 84.096929][ T642] syz.0.69 (642) used greatest stack depth: 21512 bytes left [ 84.104442][ T301] usb 3-1: Using ep0 maxpacket: 32 [ 84.111676][ T288] EXT4-fs (loop0): unmounting filesystem. [ 84.142107][ T301] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.147997][ T300] usb 5-1: unit 0 not found! [ 84.167008][ T300] usb 5-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to g@b4.vu [ 84.180836][ T300] usb 5-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 84.196652][ T301] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 84.232690][ T300] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 84.275179][ T301] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 84.294508][ T301] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.312925][ T301] usb 3-1: Product: syz [ 84.317796][ T301] usb 3-1: Manufacturer: syz [ 84.322453][ T301] usb 3-1: SerialNumber: syz [ 84.359312][ T438] udevd[438]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 84.376037][ T300] usb 5-1: USB disconnect, device number 5 [ 84.404975][ T28] audit: type=1401 audit(1783417511.057:168): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 84.415716][ T301] usb 3-1: config 0 descriptor?? [ 84.432059][ T669] loop1: detected capacity change from 0 to 128 [ 87.040072][ T313] usb 3-1: USB disconnect, device number 5 [ 87.135364][ T28] audit: type=1400 audit(1783417513.787:169): avc: denied { ioctl } for pid=679 comm="syz.3.84" path="socket:[16216]" dev="sockfs" ino=16216 ioctlcmd=0x48dd scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 87.266170][ T682] xt_CT: No such helper "netbios-ns" [ 87.289731][ T682] loop2: detected capacity change from 0 to 512 [ 87.299479][ T682] EXT4-fs (loop2): Test dummy encryption mode enabled [ 87.406986][ T685] loop4: detected capacity change from 0 to 128 [ 87.423394][ T682] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.83: inode has both inline data and extents flags [ 87.481547][ T682] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.83: couldn't read orphan inode 15 (err -117) [ 87.494294][ T682] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 87.544863][ T682] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #2: comm syz.2.83: directory missing '.' [ 87.565583][ T682] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 87.672200][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 87.713903][ T691] loop1: detected capacity change from 0 to 128 [ 87.720781][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 87.729039][ T357] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 87.774220][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 87.829593][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 87.840626][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 87.849197][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 87.857777][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 87.866137][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 91.877760][ T706] xt_CT: No such helper "netbios-ns" [ 91.905219][ T706] loop0: detected capacity change from 0 to 512 [ 91.918202][ T706] EXT4-fs (loop0): Test dummy encryption mode enabled [ 92.006718][ T335] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 92.092669][ T706] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.88: inode has both inline data and extents flags [ 92.108474][ T706] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.88: couldn't read orphan inode 15 (err -117) [ 92.120572][ T706] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 92.132417][ T706] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #2: comm syz.0.88: directory missing '.' [ 92.176813][ T289] EXT4-fs (loop2): unmounting filesystem. [ 92.257063][ T335] usb 5-1: Using ep0 maxpacket: 16 [ 92.266240][ T335] usb 5-1: unable to get BOS descriptor or descriptor too short [ 92.293225][ T335] usb 5-1: config 1 has an invalid descriptor of length 111, skipping remainder of the config [ 92.303743][ T335] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 92.325046][ T335] usb 5-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 92.344575][ T335] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.433458][ T716] loop3: detected capacity change from 0 to 128 [ 92.440893][ T335] usb 5-1: Product: syz [ 92.445400][ T335] usb 5-1: Manufacturer: syz [ 92.450845][ T335] usb 5-1: SerialNumber: syz [ 92.459560][ T335] usb 5-1: can't set config #1, error -71 [ 92.466160][ T335] usb 5-1: USB disconnect, device number 6 [ 92.519093][ T288] EXT4-fs (loop0): unmounting filesystem. [ 92.546806][ T19] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 92.556850][ T422] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 97.128144][ T19] usb 3-1: device descriptor read/all, error -71 [ 97.135781][ T730] loop2: detected capacity change from 0 to 128 [ 97.201031][ T741] loop0: detected capacity change from 0 to 128 [ 97.327973][ T748] loop4: detected capacity change from 0 to 128 [ 98.413443][ T335] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 100.086607][ T422] usb 2-1: device not accepting address 2, error -71 [ 101.255727][ T19] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 101.303606][ T335] usb 4-1: Using ep0 maxpacket: 32 [ 101.312103][ T757] loop2: detected capacity change from 0 to 128 [ 101.325563][ T759] loop3: detected capacity change from 0 to 128 [ 101.384698][ T335] usb 4-1: device descriptor read/all, error -71 [ 101.788889][ T767] xt_CT: No such helper "netbios-ns" [ 101.798141][ T767] loop4: detected capacity change from 0 to 512 [ 101.805054][ T767] EXT4-fs (loop4): Test dummy encryption mode enabled [ 101.813301][ T765] xt_CT: No such helper "netbios-ns" [ 101.821853][ T765] loop1: detected capacity change from 0 to 512 [ 101.846755][ T765] EXT4-fs (loop1): Test dummy encryption mode enabled [ 101.869286][ T767] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.106: inode has both inline data and extents flags [ 101.882648][ T767] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.106: couldn't read orphan inode 15 (err -117) [ 101.895510][ T767] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 101.904699][ T765] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.105: inode has both inline data and extents flags [ 101.918925][ T765] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.105: couldn't read orphan inode 15 (err -117) [ 101.931075][ T765] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 101.941939][ T767] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #2: comm syz.4.106: directory missing '.' [ 101.956003][ T767] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 101.970757][ T765] EXT4-fs warning (device loop1): ext4_empty_dir:3147: inode #2: comm syz.1.105: directory missing '.' [ 102.117855][ T783] loop3: detected capacity change from 0 to 512 [ 102.180324][ T783] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 102.189370][ T783] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.331334][ T791] xt_CT: No such helper "netbios-ns" [ 102.386980][ T791] loop2: detected capacity change from 0 to 512 [ 102.437515][ T791] EXT4-fs (loop2): Test dummy encryption mode enabled [ 102.560233][ T791] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.109: inode has both inline data and extents flags [ 102.574626][ T791] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.109: couldn't read orphan inode 15 (err -117) [ 102.588039][ T791] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 102.627186][ T791] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #2: comm syz.2.109: directory missing '.' [ 102.649168][ T791] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 102.799084][ T286] EXT4-fs (loop1): unmounting filesystem. [ 102.807720][ T290] EXT4-fs (loop4): unmounting filesystem. [ 102.846071][ T795] loop4: detected capacity change from 0 to 128 [ 102.865486][ T795] EXT4-fs (loop4): Test dummy encryption mode enabled [ 102.878206][ T795] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 102.887373][ T795] ext4 filesystem being mounted at /21/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 102.950398][ T799] xt_CT: No such helper "netbios-ns" [ 102.984566][ T799] loop1: detected capacity change from 0 to 512 [ 102.995199][ T799] EXT4-fs (loop1): Test dummy encryption mode enabled [ 103.012288][ T799] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.110: inode has both inline data and extents flags [ 103.026633][ T799] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.110: couldn't read orphan inode 15 (err -117) [ 103.039373][ T799] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 103.350293][ T799] EXT4-fs warning (device loop1): ext4_empty_dir:3147: inode #2: comm syz.1.110: directory missing '.' [ 103.428252][ T287] EXT4-fs (loop3): unmounting filesystem. [ 103.464972][ T289] EXT4-fs (loop2): unmounting filesystem. [ 103.840212][ T290] EXT4-fs (loop4): unmounting filesystem. [ 103.856888][ T286] EXT4-fs (loop1): unmounting filesystem. [ 103.861632][ T809] loop4: detected capacity change from 0 to 128 [ 103.921216][ T378] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 103.928892][ T335] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 103.945715][ T811] loop1: detected capacity change from 0 to 128 [ 106.996681][ T28] audit: type=1400 audit(1783417533.647:170): avc: denied { create } for pid=805 comm="syz.2.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 107.018363][ T335] usb 3-1: Using ep0 maxpacket: 32 [ 107.026437][ T378] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 107.052720][ T378] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 107.066779][ T378] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 107.481129][ T378] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.497635][ T335] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 107.640845][ T335] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.817444][ T378] usb 4-1: config 0 descriptor?? [ 107.830173][ T335] usb 3-1: config 0 has no interface number 0 [ 107.838033][ T335] usb 3-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 107.863354][ T335] usb 3-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 107.880812][ T335] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 107.891419][ T335] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.901190][ T335] usb 3-1: Product: syz [ 107.905959][ T335] usb 3-1: Manufacturer: syz [ 107.912272][ T335] usb 3-1: SerialNumber: syz [ 107.944272][ T335] usb 3-1: config 0 descriptor?? [ 107.957205][ T335] smsc95xx v2.0.0 [ 107.961084][ T335] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 107.971558][ T335] smsc95xx: probe of 3-1:0.67 failed with error -22 [ 107.999158][ T650] usb 3-1: USB disconnect, device number 8 [ 108.014800][ T378] usbhid 4-1:0.0: can't add hid device: -71 [ 108.025241][ T378] usbhid: probe of 4-1:0.0 failed with error -71 [ 108.032908][ T823] loop2: detected capacity change from 0 to 128 [ 108.062615][ T825] loop0: detected capacity change from 0 to 128 [ 108.158912][ T378] usb 4-1: USB disconnect, device number 6 [ 109.827021][ T834] xt_CT: No such helper "netbios-ns" [ 109.889352][ T834] loop3: detected capacity change from 0 to 512 [ 109.920667][ T834] EXT4-fs (loop3): Test dummy encryption mode enabled [ 110.085217][ T834] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.119: inode has both inline data and extents flags [ 110.100931][ T834] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.119: couldn't read orphan inode 15 (err -117) [ 110.114833][ T834] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 110.277530][ T834] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #2: comm syz.3.119: directory missing '.' [ 110.363533][ T834] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 110.787023][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 110.795261][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 110.815115][ T843] loop4: detected capacity change from 0 to 512 [ 110.835426][ T843] EXT4-fs (loop4): Test dummy encryption mode enabled [ 110.966210][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 110.975657][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 110.985016][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 110.994230][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 111.003075][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 111.011781][ T334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 111.023856][ T287] EXT4-fs (loop3): unmounting filesystem. [ 111.058085][ T843] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.122: inode has both inline data and extents flags [ 111.091159][ T843] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.122: couldn't read orphan inode 15 (err -117) [ 111.277193][ T848] xt_CT: No such helper "netbios-ns" [ 111.318262][ T848] loop2: detected capacity change from 0 to 512 [ 111.337224][ T848] EXT4-fs (loop2): Test dummy encryption mode enabled [ 111.458624][ T848] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.121: inode has both inline data and extents flags [ 111.472936][ T848] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.121: couldn't read orphan inode 15 (err -117) [ 111.486053][ T848] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 111.509656][ T848] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #2: comm syz.2.121: directory missing '.' [ 111.651916][ T843] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 111.719873][ T290] EXT4-fs (loop4): unmounting filesystem. [ 111.799376][ T858] loop4: detected capacity change from 0 to 128 [ 113.725254][ T860] loop3: detected capacity change from 0 to 512 [ 114.365330][ T335] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 114.509808][ T289] EXT4-fs (loop2): unmounting filesystem. [ 114.611842][ T860] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 114.621214][ T860] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.683297][ T865] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=865 comm=syz.2.126 [ 114.746663][ T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 114.848563][ T287] EXT4-fs (loop3): unmounting filesystem. [ 114.854713][ T870] netlink: 24 bytes leftover after parsing attributes in process `syz.2.126'. [ 114.883631][ T872] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=872 comm=syz.3.128 [ 114.905542][ T870] netlink: 36 bytes leftover after parsing attributes in process `syz.2.126'. [ 114.920126][ T331] Bluetooth: hci1: Frame reassembly failed (-84) [ 114.956636][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 114.963476][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 114.971487][ T874] netlink: 24 bytes leftover after parsing attributes in process `syz.3.128'. [ 114.978649][ T24] usb 5-1: config 1 has an invalid descriptor of length 111, skipping remainder of the config [ 114.992931][ T874] netlink: 36 bytes leftover after parsing attributes in process `syz.3.128'. [ 115.006632][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 115.027573][ T24] usb 5-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 115.036816][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.045125][ T24] usb 5-1: Product: syz [ 115.049621][ T24] usb 5-1: Manufacturer: syz [ 115.054319][ T24] usb 5-1: SerialNumber: syz [ 115.126630][ T335] usb 1-1: device not accepting address 8, error -71 [ 115.457069][ T313] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 115.496689][ T335] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 115.637703][ T313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 115.648886][ T313] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 115.660080][ T313] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 115.669200][ T313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.678109][ T313] usb 2-1: config 0 descriptor?? [ 115.686642][ T335] usb 1-1: Using ep0 maxpacket: 32 [ 115.693001][ T335] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 115.701370][ T335] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.711887][ T335] usb 1-1: config 0 has no interface number 0 [ 115.718207][ T335] usb 1-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 115.728434][ T335] usb 1-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 115.743108][ T335] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 115.752387][ T335] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.760439][ T335] usb 1-1: Product: syz [ 115.764664][ T335] usb 1-1: Manufacturer: syz [ 115.769334][ T335] usb 1-1: SerialNumber: syz [ 115.774791][ T335] usb 1-1: config 0 descriptor?? [ 115.780737][ T335] smsc95xx v2.0.0 [ 115.784495][ T335] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 115.794641][ T335] smsc95xx: probe of 1-1:0.67 failed with error -22 [ 116.087244][ T313] usbhid 2-1:0.0: can't add hid device: -71 [ 116.093414][ T313] usbhid: probe of 2-1:0.0 failed with error -71 [ 116.103935][ T313] usb 2-1: USB disconnect, device number 5 [ 116.344786][ T24] usb 5-1: unit 0 not found! [ 116.349743][ T24] usb 5-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to g@b4.vu [ 116.369547][ T24] usb 5-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 116.379467][ T24] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 116.387283][ T24] usb 5-1: USB disconnect, device number 7 [ 116.400637][ T882] loop4: detected capacity change from 0 to 128 [ 116.610106][ T737] udevd[737]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 116.746642][ T865] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 116.777138][ T312] Bluetooth: hci0: Frame reassembly failed (-84) [ 116.793381][ T312] Bluetooth: hci0: Frame reassembly failed (-84) [ 116.976682][ T873] Bluetooth: hci1: command 0x1003 tx timeout [ 117.511150][ T889] xt_CT: No such helper "netbios-ns" [ 117.557437][ T889] loop1: detected capacity change from 0 to 512 [ 117.567253][ T869] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 117.574030][ T889] EXT4-fs (loop1): Test dummy encryption mode enabled [ 117.684145][ T889] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.132: inode has both inline data and extents flags [ 117.698075][ T889] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.132: couldn't read orphan inode 15 (err -117) [ 117.712992][ T889] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 117.753264][ T889] EXT4-fs warning (device loop1): ext4_empty_dir:3147: inode #2: comm syz.1.132: directory missing '.' [ 117.839522][ T422] usb 1-1: USB disconnect, device number 9 [ 117.873251][ T896] loop0: detected capacity change from 0 to 128 [ 118.008622][ T899] xt_CT: No such helper "netbios-ns" [ 118.049068][ T899] loop4: detected capacity change from 0 to 512 [ 120.617495][ T869] Bluetooth: hci0: command 0x0c1a tx timeout [ 120.623889][ T869] Bluetooth: hci0: sending frame failed (-49) [ 120.631382][ T899] EXT4-fs (loop4): Test dummy encryption mode enabled [ 120.638895][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 120.663198][ T286] EXT4-fs (loop1): unmounting filesystem. [ 120.671548][ T872] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 120.751252][ T899] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.133: inode has both inline data and extents flags [ 120.764737][ T899] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.133: couldn't read orphan inode 15 (err -117) [ 120.776935][ T899] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 120.823803][ T897] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #2: comm syz.4.133: directory missing '.' [ 120.879016][ T907] loop0: detected capacity change from 0 to 512 [ 120.894759][ T907] EXT4-fs (loop0): Test dummy encryption mode enabled [ 120.913058][ T907] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.137: inode has both inline data and extents flags [ 120.997909][ T907] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.137: couldn't read orphan inode 15 (err -117) [ 121.010117][ T907] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 121.025517][ T912] loop3: detected capacity change from 0 to 4096 [ 122.700098][ T290] EXT4-fs (loop4): unmounting filesystem. [ 122.743982][ T912] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 122.774342][ T288] EXT4-fs (loop0): unmounting filesystem. [ 122.801051][ T925] loop4: detected capacity change from 0 to 128 [ 123.952643][ T931] loop2: detected capacity change from 0 to 512 [ 124.739757][ T930] xt_CT: No such helper "netbios-ns" [ 125.054639][ T930] loop1: detected capacity change from 0 to 512 [ 125.099506][ T930] EXT4-fs (loop1): Test dummy encryption mode enabled [ 125.136819][ T892] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 125.162987][ T930] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.139: inode has both inline data and extents flags [ 125.177532][ T930] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.139: couldn't read orphan inode 15 (err -117) [ 125.190275][ T930] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 125.292956][ T931] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 125.302100][ T931] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.349532][ T287] EXT4-fs (loop3): unmounting filesystem. [ 125.371811][ T940] loop4: detected capacity change from 0 to 256 [ 125.387645][ T940] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 125.398423][ T940] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 125.416704][ T286] EXT4-fs (loop1): unmounting filesystem. [ 125.441882][ T940] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xc3bd3d8a, utbl_chksum : 0xe619d30d) [ 125.488177][ T28] audit: type=1400 audit(1783417552.127:171): avc: denied { mounton } for pid=941 comm="syz.3.144" path="/proc/83/task" dev="proc" ino=18768 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 125.516215][ T948] loop3: detected capacity change from 0 to 128 [ 125.567301][ T948] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 125.576172][ T948] ext4 filesystem being mounted at /26/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 125.633000][ T933] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 125.657129][ T289] EXT4-fs (loop2): unmounting filesystem. [ 125.672644][ T953] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=953 comm=syz.2.148 [ 125.687504][ T28] audit: type=1400 audit(1783417552.347:172): avc: denied { append } for pid=947 comm="syz.3.147" path="/26/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/memory.events" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 125.742367][ T28] audit: type=1400 audit(1783417552.397:173): avc: denied { map } for pid=947 comm="syz.3.147" path="/26/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/memory.events" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 125.801622][ T630] Bluetooth: hci0: Frame reassembly failed (-84) [ 125.834404][ T933] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 125.877823][ T955] netlink: 24 bytes leftover after parsing attributes in process `syz.2.148'. [ 125.919812][ T933] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 125.958254][ T287] EXT4-fs (loop3): unmounting filesystem. [ 125.978831][ T956] netlink: 36 bytes leftover after parsing attributes in process `syz.2.148'. [ 125.989230][ T933] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 126.112927][ T933] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.125630][ T28] audit: type=1401 audit(1783417552.777:174): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 126.729428][ T933] usb 1-1: config 0 descriptor?? [ 126.738735][ T28] audit: type=1401 audit(1783417553.397:175): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 127.127244][ T933] usb 1-1: can't set config #0, error -71 [ 127.141455][ T933] usb 1-1: USB disconnect, device number 10 [ 128.236666][ T869] Bluetooth: hci0: command 0x1003 tx timeout [ 128.296698][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 128.303368][ T953] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 128.510804][ T980] loop4: detected capacity change from 0 to 128 [ 128.644260][ T984] xt_CT: No such helper "netbios-ns" [ 128.666787][ T984] loop3: detected capacity change from 0 to 512 [ 130.373743][ T933] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 130.381847][ T984] EXT4-fs (loop3): Test dummy encryption mode enabled [ 130.447634][ T984] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.154: inode has both inline data and extents flags [ 130.461540][ T984] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.154: couldn't read orphan inode 15 (err -117) [ 130.474354][ T984] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 130.523415][ T984] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #2: comm syz.3.154: directory missing '.' [ 130.546096][ T984] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 130.606243][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 130.613979][ T630] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 130.639570][ T991] loop1: detected capacity change from 0 to 256 [ 130.647298][ T991] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 130.663718][ T991] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 130.696243][ T991] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xc3bd3d8a, utbl_chksum : 0xe619d30d) [ 130.712563][ T994] loop4: detected capacity change from 0 to 256 [ 130.719839][ T994] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 130.735288][ T994] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 130.745209][ T994] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xc3bd3d8a, utbl_chksum : 0xe619d30d) [ 130.815712][ T997] xt_CT: No such helper "netbios-ns" [ 130.851732][ T997] loop2: detected capacity change from 0 to 512 [ 130.862683][ T997] EXT4-fs (loop2): Test dummy encryption mode enabled [ 130.966079][ T287] EXT4-fs (loop3): unmounting filesystem. [ 131.085478][ T997] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.156: inode has both inline data and extents flags [ 131.098952][ T997] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.156: couldn't read orphan inode 15 (err -117) [ 131.111121][ T997] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 131.224496][ T995] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #2: comm syz.2.156: directory missing '.' [ 131.239002][ T1009] loop3: detected capacity change from 0 to 1024 [ 132.603908][ T1007] xt_CT: No such helper "netbios-ns" [ 132.619710][ T1007] loop0: detected capacity change from 0 to 512 [ 133.206071][ T1007] EXT4-fs (loop0): Test dummy encryption mode enabled [ 133.468474][ T289] EXT4-fs (loop2): unmounting filesystem. [ 133.507590][ T1007] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.159: inode has both inline data and extents flags [ 133.539622][ T1009] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 133.549027][ T1009] FAULT_INJECTION: forcing a failure. [ 133.549027][ T1009] name failslab, interval 1, probability 0, space 0, times 1 [ 133.572256][ T1009] CPU: 0 PID: 1009 Comm: syz.3.160 Not tainted syzkaller #0 [ 133.579595][ T1009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 133.586872][ T1007] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.159: couldn't read orphan inode 15 (err -117) [ 133.589707][ T1009] Call Trace: [ 133.602063][ T1007] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 133.604789][ T1009] [ 133.604799][ T1009] __dump_stack+0x21/0x24 [ 133.621022][ T1009] dump_stack_lvl+0x110/0x170 [ 133.625746][ T1009] ? __cfi_dump_stack_lvl+0x8/0x8 [ 133.630893][ T1009] ? __cfi_vfs_write+0x10/0x10 [ 133.635930][ T1009] dump_stack+0x15/0x24 [ 133.640141][ T1009] should_fail_ex+0x3bf/0x510 [ 133.644874][ T1009] ? getname_flags+0xba/0x510 [ 133.649588][ T1009] __should_failslab+0xac/0xf0 [ 133.654394][ T1009] should_failslab+0x9/0x20 [ 133.658938][ T1009] kmem_cache_alloc+0x3b/0x320 [ 133.663757][ T1009] getname_flags+0xba/0x510 [ 133.668309][ T1009] __x64_sys_renameat2+0xb4/0xf0 [ 133.673290][ T1009] x64_sys_call+0x6b8/0x9a0 [ 133.677830][ T1009] do_syscall_64+0x4c/0xa0 [ 133.682283][ T1009] ? clear_bhb_loop+0x30/0x80 [ 133.686997][ T1009] ? clear_bhb_loop+0x30/0x80 [ 133.691720][ T1009] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 133.697681][ T1009] RIP: 0033:0x7f44b099de59 [ 133.702134][ T1009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.721858][ T1009] RSP: 002b:00007f44b1953028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 133.730375][ T1009] RAX: ffffffffffffffda RBX: 00007f44b0c25fa0 RCX: 00007f44b099de59 [ 133.738383][ T1009] RDX: ffffffffffffff9c RSI: 0000200000000100 RDI: ffffffffffffff9c [ 133.746398][ T1009] RBP: 00007f44b1953090 R08: 0000000000000002 R09: 0000000000000000 [ 133.754417][ T1009] R10: 0000200000001240 R11: 0000000000000246 R12: 0000000000000001 [ 133.762489][ T1009] R13: 00007f44b0c26038 R14: 00007f44b0c25fa0 R15: 00007fff2bf8e238 [ 133.770478][ T1009] [ 133.776473][ T1007] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #2: comm syz.0.159: directory missing '.' [ 133.791993][ T1007] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 133.808497][ T1016] loop2: detected capacity change from 0 to 1024 [ 133.842633][ T1016] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 133.867027][ T287] EXT4-fs (loop3): unmounting filesystem. [ 133.907158][ T28] audit: type=1400 audit(1783417560.567:176): avc: denied { map } for pid=1015 comm="syz.2.161" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=18863 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 133.959137][ T28] audit: type=1400 audit(1783417560.587:177): avc: denied { read write } for pid=1015 comm="syz.2.161" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=18863 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 133.985020][ T28] audit: type=1400 audit(1783417560.597:178): avc: denied { map } for pid=1015 comm="syz.2.161" path="socket:[18864]" dev="sockfs" ino=18864 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 134.009787][ T288] EXT4-fs (loop0): unmounting filesystem. [ 134.015724][ T28] audit: type=1401 audit(1783417560.597:179): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 134.132833][ T464] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 134.134320][ T1025] loop0: detected capacity change from 0 to 128 [ 136.106524][ T464] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 136.106744][ T933] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 136.115643][ T464] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.115665][ T464] usb 5-1: Product: syz [ 136.115680][ T464] usb 5-1: Manufacturer: syz [ 136.221240][ T464] usb 5-1: SerialNumber: syz [ 136.228203][ T289] EXT4-fs (loop2): unmounting filesystem. [ 136.266038][ T1037] loop2: detected capacity change from 0 to 128 [ 136.352070][ T933] usb 1-1: Using ep0 maxpacket: 16 [ 136.359690][ T933] usb 1-1: unable to get BOS descriptor or descriptor too short [ 136.387432][ T933] usb 1-1: config 1 has an invalid descriptor of length 111, skipping remainder of the config [ 136.398038][ T933] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 136.408622][ T933] usb 1-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 136.417883][ T933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.426019][ T933] usb 1-1: Product: syz [ 136.431907][ T933] usb 1-1: Manufacturer: syz [ 136.437378][ T933] usb 1-1: SerialNumber: syz [ 136.506708][ T300] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 136.988418][ T300] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.028838][ T300] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 137.085845][ T300] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.224324][ T300] usb 4-1: config 0 descriptor?? [ 137.448833][ T464] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 137.456660][ T464] usb 5-1: unit 7 not found! [ 137.468232][ T464] usb 5-1: USB disconnect, device number 8 [ 137.516828][ T28] audit: type=1400 audit(1783417564.157:180): avc: denied { write } for pid=1041 comm="syz.4.171" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 137.559672][ T28] audit: type=1400 audit(1783417564.157:181): avc: denied { create } for pid=1041 comm="syz.4.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 137.579508][ T28] audit: type=1400 audit(1783417564.157:182): avc: denied { setopt } for pid=1041 comm="syz.4.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 137.638426][ T300] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor [ 137.648344][ T300] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0006/input/input6 [ 137.687936][ T1051] loop4: detected capacity change from 0 to 128 [ 137.747156][ T743] udevd[743]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 137.775738][ T300] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 138.414648][ T933] usb 1-1: unit 0 not found! [ 138.441182][ T933] usb 1-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to g@b4.vu [ 138.852363][ T1062] loop4: detected capacity change from 0 to 128 [ 138.924616][ T933] usb 1-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 138.933718][ T300] usb 4-1: USB disconnect, device number 8 [ 138.943535][ T933] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 143.872959][ T1071] xt_CT: No such helper "netbios-ns" [ 143.895361][ T1071] loop2: detected capacity change from 0 to 512 [ 143.924965][ T933] usb 1-1: USB disconnect, device number 12 [ 143.954274][ T1071] EXT4-fs (loop2): Test dummy encryption mode enabled [ 143.967975][ T1071] EXT4-fs: failed to create workqueue [ 143.973451][ T1071] EXT4-fs (loop2): mount failed [ 144.075945][ T1075] loop1: detected capacity change from 0 to 128 [ 144.106421][ T1080] loop3: detected capacity change from 0 to 128 [ 144.114664][ T1075] EXT4-fs (loop1): Test dummy encryption mode enabled [ 144.259149][ T1075] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 144.278879][ T1087] loop2: detected capacity change from 0 to 128 [ 144.297039][ T1075] ext4 filesystem being mounted at /37/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 145.435829][ T1089] loop0: detected capacity change from 0 to 512 [ 145.518669][ T737] udevd[737]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 148.064947][ T1089] EXT4-fs: error -4 creating inode table initialization thread [ 148.072789][ T1089] EXT4-fs (loop0): mount failed [ 148.124220][ T1099] loop4: detected capacity change from 0 to 128 [ 148.148717][ T286] EXT4-fs (loop1): unmounting filesystem. [ 148.257817][ T1103] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=1103 comm=syz.1.187 [ 148.286686][ T300] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 148.469828][ T1103] netlink: 24 bytes leftover after parsing attributes in process `syz.1.187'. [ 148.536700][ T300] usb 4-1: Using ep0 maxpacket: 16 [ 148.544351][ T300] usb 4-1: unable to get BOS descriptor or descriptor too short [ 148.658082][ T300] usb 4-1: config 1 has an invalid descriptor of length 111, skipping remainder of the config [ 148.795186][ T300] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 148.848050][ T300] usb 4-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 148.897348][ T300] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.064274][ T300] usb 4-1: Product: syz [ 149.209557][ T1120] loop3: detected capacity change from 0 to 128 [ 149.217691][ T300] usb 4-1: Manufacturer: syz [ 149.232905][ T300] usb 4-1: SerialNumber: syz [ 149.855850][ T300] usb 4-1: can't set config #1, error -71 [ 149.866709][ T300] usb 4-1: USB disconnect, device number 9 [ 151.487642][ T869] Bluetooth: hci0: command 0x1003 tx timeout [ 151.656869][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 151.685729][ T1106] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 151.796204][ T1131] loop0: detected capacity change from 0 to 128 [ 151.925712][ T1134] xt_CT: No such helper "netbios-ns" [ 151.947379][ T1134] loop2: detected capacity change from 0 to 512 [ 153.374279][ T1134] EXT4-fs (loop2): Test dummy encryption mode enabled [ 153.423235][ T1140] loop1: detected capacity change from 0 to 128 [ 153.451893][ T422] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 153.460282][ T1134] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.193: inode has both inline data and extents flags [ 153.474824][ T1134] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.193: couldn't read orphan inode 15 (err -117) [ 153.487368][ T1134] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 153.504705][ T1132] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #2: comm syz.2.193: directory missing '.' [ 153.516665][ T1140] EXT4-fs (loop1): Test dummy encryption mode enabled [ 153.521437][ T1132] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 153.538285][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 153.553722][ T1147] loop0: detected capacity change from 0 to 128 [ 153.561404][ T1140] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 153.572045][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 153.614728][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 153.627396][ T1140] ext4 filesystem being mounted at /40/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 153.658639][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 156.193146][ T289] EXT4-fs (loop2): unmounting filesystem. [ 156.230741][ T286] EXT4-fs (loop1): unmounting filesystem. [ 156.298328][ T28] audit: type=1401 audit(1783417582.957:183): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 156.412767][ T1164] xt_CT: No such helper "netbios-ns" [ 156.988842][ T1164] loop0: detected capacity change from 0 to 512 [ 157.355456][ T1168] xt_CT: No such helper "netbios-ns" [ 157.379509][ T1168] loop4: detected capacity change from 0 to 512 [ 157.389631][ T1168] EXT4-fs (loop4): Test dummy encryption mode enabled [ 157.509836][ T1168] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.202: inode has both inline data and extents flags [ 157.523630][ T1168] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.202: couldn't read orphan inode 15 (err -117) [ 157.538803][ T1168] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 157.578562][ T1168] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #2: comm syz.4.202: directory missing '.' [ 157.599396][ T1168] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 157.704074][ T1164] EXT4-fs (loop0): Test dummy encryption mode enabled [ 157.722546][ T1172] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=1172 comm=syz.2.205 [ 157.754862][ T1164] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.201: inode has both inline data and extents flags [ 157.768225][ T1164] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.201: couldn't read orphan inode 15 (err -117) [ 157.780441][ T1164] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 157.806855][ T1175] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=1175 comm=syz.3.206 [ 157.829563][ T630] Bluetooth: hci0: Frame reassembly failed (-84) [ 157.917642][ T1173] netlink: 24 bytes leftover after parsing attributes in process `syz.2.205'. [ 157.939309][ T1177] netlink: 24 bytes leftover after parsing attributes in process `syz.3.206'. [ 157.956065][ T1173] netlink: 36 bytes leftover after parsing attributes in process `syz.2.205'. [ 157.982603][ T1168] syz.4.202 (1168) used greatest stack depth: 20904 bytes left [ 158.009737][ T290] EXT4-fs (loop4): unmounting filesystem. [ 158.015934][ T288] EXT4-fs (loop0): unmounting filesystem. [ 158.115049][ T1180] loop1: detected capacity change from 0 to 128 [ 158.254483][ T1182] loop4: detected capacity change from 0 to 128 [ 161.587826][ T869] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 161.594356][ T869] Bluetooth: hci0: command 0x1003 tx timeout [ 161.600592][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 162.312433][ T1175] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 162.350082][ T1172] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 162.642645][ T1191] netlink: 68 bytes leftover after parsing attributes in process `syz.3.213'. [ 162.659778][ T1193] loop4: detected capacity change from 0 to 128 [ 162.794240][ T1202] loop1: detected capacity change from 0 to 128 [ 162.900248][ T1206] xt_CT: No such helper "netbios-ns" [ 162.975046][ T1206] loop2: detected capacity change from 0 to 512 [ 163.121715][ T1208] xt_CT: No such helper "netbios-ns" [ 163.272446][ T1208] loop3: detected capacity change from 0 to 512 [ 164.564779][ T1208] EXT4-fs (loop3): Test dummy encryption mode enabled [ 164.572797][ T1206] EXT4-fs (loop2): Test dummy encryption mode enabled [ 164.627000][ T552] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 164.663012][ T1206] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.214: inode has both inline data and extents flags [ 164.676971][ T1208] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.216: inode has both inline data and extents flags [ 164.691007][ T1206] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.214: couldn't read orphan inode 15 (err -117) [ 164.703702][ T1208] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.216: couldn't read orphan inode 15 (err -117) [ 164.716613][ T1208] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 164.735297][ T1206] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 164.752836][ T1203] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #2: comm syz.3.216: directory missing '.' [ 164.758555][ T1206] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #2: comm syz.2.214: directory missing '.' [ 164.777433][ T1203] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 164.795464][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 164.816519][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 164.995543][ T287] EXT4-fs (loop3): unmounting filesystem. [ 164.996697][ T552] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.001752][ T6] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 165.036620][ T552] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 165.045715][ T552] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.073839][ T552] usb 1-1: config 0 descriptor?? [ 165.128468][ T289] EXT4-fs (loop2): unmounting filesystem. [ 165.188375][ T1219] xt_CT: No such helper "netbios-ns" [ 165.210246][ T1219] loop3: detected capacity change from 0 to 512 [ 165.219237][ T1219] EXT4-fs (loop3): Test dummy encryption mode enabled [ 165.413615][ T6] usb 5-1: Using ep0 maxpacket: 16 [ 165.420575][ T1219] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.218: inode has both inline data and extents flags [ 165.421100][ T6] usb 5-1: unable to get BOS descriptor or descriptor too short [ 165.434282][ T1219] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.218: couldn't read orphan inode 15 (err -117) [ 165.455412][ T6] usb 5-1: config 1 has an invalid descriptor of length 111, skipping remainder of the config [ 165.457771][ T1219] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 165.483201][ T1218] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #2: comm syz.3.218: invalid size [ 165.503498][ T6] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 165.515228][ T6] usb 5-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 165.524706][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.533044][ T6] usb 5-1: Product: syz [ 165.537819][ T6] usb 5-1: Manufacturer: syz [ 165.542610][ T6] usb 5-1: SerialNumber: syz [ 165.575157][ T552] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor [ 165.585661][ T552] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0007/input/input7 [ 165.671050][ T552] keytouch 0003:0926:3333.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 165.707172][ T6] usb 5-1: unit 0 not found! [ 165.722343][ T6] usb 5-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to g@b4.vu [ 165.751224][ T1227] loop4: detected capacity change from 0 to 256 [ 165.752086][ T6] usb 5-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 165.770456][ T1227] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 165.784363][ T6] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 165.793696][ T6] usb 5-1: USB disconnect, device number 10 [ 165.801619][ T1227] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 165.809369][ T731] udevd[731]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 165.828429][ T1227] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xc3bd3d8a, utbl_chksum : 0xe619d30d) [ 165.947586][ T627] usb 1-1: USB disconnect, device number 13 [ 165.977090][ T287] EXT4-fs (loop3): unmounting filesystem. [ 166.994610][ T1235] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=1235 comm=syz.0.223 [ 167.027700][ T630] Bluetooth: hci0: Frame reassembly failed (-84) [ 167.057245][ T1240] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=1240 comm=syz.4.225 [ 167.076081][ T331] Bluetooth: hci1: Frame reassembly failed (-84) [ 167.085127][ T1241] netlink: 24 bytes leftover after parsing attributes in process `syz.0.223'. [ 167.128272][ T1242] netlink: 24 bytes leftover after parsing attributes in process `syz.4.225'. [ 167.147479][ T1242] netlink: 36 bytes leftover after parsing attributes in process `syz.4.225'. [ 167.162424][ T28] audit: type=1400 audit(1783417593.817:184): avc: denied { execute } for pid=1243 comm="syz.2.226" path="/42/file1" dev="tmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 167.196598][ T464] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 167.205121][ T1246] loop2: detected capacity change from 0 to 128 [ 168.196187][ T464] usb 4-1: device descriptor read/64, error -71 [ 168.240942][ T1252] loop1: detected capacity change from 0 to 128 [ 168.250718][ T1252] EXT4-fs (loop1): Test dummy encryption mode enabled [ 168.259196][ T1252] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 168.280199][ T1252] ext4 filesystem being mounted at /45/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 168.319327][ T1256] xt_CT: No such helper "netbios-ns" [ 168.336418][ T1256] loop2: detected capacity change from 0 to 512 [ 168.377131][ T1256] EXT4-fs (loop2): Test dummy encryption mode enabled [ 168.390539][ T1256] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.228: inode has both inline data and extents flags [ 168.404510][ T1256] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.228: couldn't read orphan inode 15 (err -117) [ 168.417321][ T1256] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 168.440345][ T1256] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #2: comm syz.2.228: directory missing '.' [ 168.459363][ T1256] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 168.519200][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth7: link becomes ready [ 168.614679][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 168.904506][ T464] usb 4-1: device descriptor read/64, error -71 [ 169.056763][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 169.056762][ T873] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 169.069321][ T1235] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 169.292650][ T1264] xt_CT: No such helper "netbios-ns" [ 169.315365][ T1264] loop3: detected capacity change from 0 to 512 [ 169.324272][ T869] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 169.351786][ T1240] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 169.358307][ T1264] EXT4-fs (loop3): Test dummy encryption mode enabled [ 169.373040][ T286] EXT4-fs (loop1): unmounting filesystem. [ 169.381065][ T289] EXT4-fs (loop2): unmounting filesystem. [ 169.439122][ T1264] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.230: inode has both inline data and extents flags [ 169.453174][ T1264] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.230: couldn't read orphan inode 15 (err -117) [ 169.467197][ T1264] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 169.509738][ T1264] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #2: comm syz.3.230: directory missing '.' [ 169.530949][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 169.599670][ T1267] loop1: detected capacity change from 0 to 256 [ 169.615071][ T1267] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 169.626124][ T1267] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 169.638341][ T1267] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xc3bd3d8a, utbl_chksum : 0xe619d30d) [ 172.895795][ T1273] xt_CT: No such helper "netbios-ns" [ 172.954141][ T1273] loop2: detected capacity change from 0 to 512 [ 173.028719][ T1273] EXT4-fs (loop2): Test dummy encryption mode enabled [ 173.084291][ T1273] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.231: inode has both inline data and extents flags [ 173.097714][ T1273] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.231: couldn't read orphan inode 15 (err -117) [ 173.110189][ T1273] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 173.137912][ T287] EXT4-fs (loop3): unmounting filesystem. [ 173.158834][ T1270] EXT4-fs warning (device loop2): ext4_empty_dir:3147: inode #2: comm syz.2.231: directory missing '.' [ 173.172789][ T1270] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 173.245040][ T28] audit: type=1400 audit(1783417599.897:185): avc: denied { read write } for pid=1279 comm="syz.4.233" name="event0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 173.272482][ T28] audit: type=1400 audit(1783417599.927:186): avc: denied { open } for pid=1279 comm="syz.4.233" path="/dev/input/event0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 173.310461][ T28] audit: type=1400 audit(1783417599.927:187): avc: denied { ioctl } for pid=1279 comm="syz.4.233" path="/dev/input/event0" dev="devtmpfs" ino=260 ioctlcmd=0x4591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 173.339253][ T28] audit: type=1400 audit(1783417599.957:188): avc: denied { read write } for pid=1279 comm="syz.4.233" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 173.364556][ T1285] loop1: detected capacity change from 0 to 1024 [ 173.371470][ T28] audit: type=1400 audit(1783417599.957:189): avc: denied { open } for pid=1279 comm="syz.4.233" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 173.399380][ T28] audit: type=1400 audit(1783417599.957:190): avc: denied { ioctl } for pid=1279 comm="syz.4.233" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 173.461310][ T1288] xt_CT: No such helper "netbios-ns" [ 173.479469][ T28] audit: type=1400 audit(1783417599.967:191): avc: denied { mount } for pid=1279 comm="syz.4.233" name="/" dev="configfs" ino=14774 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 173.526589][ T1288] loop3: detected capacity change from 0 to 512 [ 173.559165][ T1288] EXT4-fs (loop3): Test dummy encryption mode enabled [ 173.611507][ T289] EXT4-fs (loop2): unmounting filesystem. [ 173.675305][ T1288] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.232: inode has both inline data and extents flags [ 173.690193][ T1288] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.232: couldn't read orphan inode 15 (err -117) [ 173.704621][ T1288] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 173.721063][ T1288] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #2: comm syz.3.232: invalid size [ 173.740313][ T1288] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 173.860804][ T422] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 173.871818][ T1291] loop4: detected capacity change from 0 to 128 [ 173.886859][ T1294] loop2: detected capacity change from 0 to 16 [ 173.893867][ T1294] erofs: (device loop2): mounted with root inode @ nid 36. [ 173.913358][ T1285] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 173.924542][ T1294] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 173.961296][ T1294] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851] [ 173.975681][ T286] EXT4-fs (loop1): unmounting filesystem. [ 173.982561][ T1294] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 174.024910][ T28] audit: type=1401 audit(1783417600.677:192): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 174.042681][ T1294] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 174.057504][ T1294] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851] [ 174.084305][ T1294] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 174.094422][ T422] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.150162][ T422] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 174.171716][ T422] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.205525][ T1303] loop2: detected capacity change from 0 to 256 [ 174.208054][ T422] usb 1-1: config 0 descriptor?? [ 174.218716][ T1303] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 174.241644][ T1303] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 174.251018][ T287] EXT4-fs (loop3): unmounting filesystem. [ 174.263163][ T1303] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xc3bd3d8a, utbl_chksum : 0xe619d30d) [ 174.513516][ T1310] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=1310 comm=syz.1.243 [ 174.532731][ T622] Bluetooth: hci0: Frame reassembly failed (-84) [ 176.065950][ T1313] xt_CT: No such helper "netbios-ns" [ 176.081829][ T1313] loop3: detected capacity change from 0 to 512 [ 176.107954][ T1315] netlink: 24 bytes leftover after parsing attributes in process `syz.1.243'. [ 176.147044][ T1313] EXT4-fs (loop3): Test dummy encryption mode enabled [ 176.258903][ T1313] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.242: inode has both inline data and extents flags [ 176.346247][ T1313] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.242: couldn't read orphan inode 15 (err -117) [ 176.358862][ T1313] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 176.375260][ T422] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor [ 176.390457][ T1312] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #2: comm syz.3.242: directory missing '.' [ 176.402718][ T422] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0008/input/input8 [ 176.406520][ T1312] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 176.443057][ T1315] netlink: 36 bytes leftover after parsing attributes in process `syz.1.243'. [ 176.457161][ T1323] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=1323 comm=syz.0.246 [ 176.473483][ T43] Bluetooth: hci1: Frame reassembly failed (-84) [ 176.480103][ T43] Bluetooth: hci1: Frame reassembly failed (-84) [ 176.509057][ T422] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 177.264963][ T1324] xt_CT: No such helper "netbios-ns" [ 177.350447][ T1324] loop4: detected capacity change from 0 to 512 [ 177.387513][ T1326] xt_CT: No such helper "netbios-ns" [ 177.471789][ T1326] loop2: detected capacity change from 0 to 512 [ 177.491530][ T1262] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 177.504675][ T1324] EXT4-fs (loop4): Test dummy encryption mode enabled [ 177.512120][ T1326] EXT4-fs (loop2): Test dummy encryption mode enabled [ 177.647108][ T1329] netlink: 24 bytes leftover after parsing attributes in process `syz.0.246'. [ 177.657284][ T287] EXT4-fs (loop3): unmounting filesystem. [ 177.685007][ T1324] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.244: inode has both inline data and extents flags [ 177.693722][ T1310] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 177.698972][ T1326] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.245: inode has both inline data and extents flags [ 177.717421][ T1324] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.244: couldn't read orphan inode 15 (err -117) [ 177.729963][ T1326] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.245: couldn't read orphan inode 15 (err -117) [ 177.742031][ T1324] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 177.751350][ T1326] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 177.760688][ T1324] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #2: comm syz.4.244: invalid size [ 177.798628][ T1329] netlink: 36 bytes leftover after parsing attributes in process `syz.0.246'. [ 177.807845][ T1325] EXT4-fs error (device loop2): ext4_empty_dir:3136: inode #2: comm syz.2.245: invalid size [ 177.818121][ T1332] loop3: detected capacity change from 0 to 256 [ 177.827097][ T1332] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 177.838510][ T1332] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 177.854244][ T1332] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xc3bd3d8a, utbl_chksum : 0xe619d30d) [ 177.961933][ T290] EXT4-fs (loop4): unmounting filesystem. [ 178.290223][ T289] EXT4-fs (loop2): unmounting filesystem. [ 178.496594][ T869] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 179.019108][ T422] usb 1-1: USB disconnect, device number 14 [ 179.116336][ T1340] loop3: detected capacity change from 0 to 4096 [ 179.148929][ T1335] loop4: detected capacity change from 0 to 131072 [ 179.166607][ T1335] F2FS-fs (loop4): Invalid log sectorsize (0) [ 179.176644][ T1335] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 179.184923][ T1335] F2FS-fs (loop4): Unrecognized mount option "P95`澏1" or missing value [ 179.196047][ T1340] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 179.333110][ T1343] loop4: detected capacity change from 0 to 512 [ 179.356970][ T1343] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 179.456259][ T1323] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 179.606862][ T313] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 179.647451][ T1353] FAULT_INJECTION: forcing a failure. [ 179.647451][ T1353] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 179.660635][ T1353] CPU: 1 PID: 1353 Comm: syz.1.251 Not tainted syzkaller #0 [ 179.667955][ T1353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 179.678074][ T1353] Call Trace: [ 179.681382][ T1353] [ 179.684339][ T1353] __dump_stack+0x21/0x24 [ 179.688736][ T1353] dump_stack_lvl+0x110/0x170 [ 179.693442][ T1353] ? __cfi_dump_stack_lvl+0x8/0x8 [ 179.698498][ T1353] dump_stack+0x15/0x24 [ 179.702683][ T1353] should_fail_ex+0x3bf/0x510 [ 179.707385][ T1353] should_fail+0xb/0x10 [ 179.711563][ T1353] should_fail_usercopy+0x1a/0x20 [ 179.716618][ T1353] _copy_from_user+0x1e/0xc0 [ 179.721239][ T1353] __snd_timer_user_ioctl+0x1621/0x3e10 [ 179.726826][ T1353] ? finish_task_switch+0x16b/0x7c0 [ 179.732060][ T1353] ? switch_mm_irqs_off+0x2f0/0x960 [ 179.737295][ T1353] ? snd_timer_user_fasync+0x60/0x60 [ 179.742606][ T1353] ? ioctl_has_perm+0x3a6/0x4f0 [ 179.747507][ T1353] ? preempt_schedule_irq+0xca/0x120 [ 179.752894][ T1353] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 179.758651][ T1353] ? push_rt_task+0x46f/0x5d0 [ 179.763360][ T1353] ? selinux_file_ioctl+0x3ad/0x4c0 [ 179.768718][ T1353] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 179.774300][ T1353] ? irqentry_exit+0x37/0x40 [ 179.778920][ T1353] ? sysvec_reschedule_ipi+0x78/0x80 [ 179.784275][ T1353] ? __kasan_check_write+0x14/0x20 [ 179.789416][ T1353] ? mutex_lock+0x93/0x1b0 [ 179.793863][ T1353] ? __cfi_mutex_lock+0x10/0x10 [ 179.798762][ T1353] snd_timer_user_ioctl+0x61/0x80 [ 179.803828][ T1353] ? __cfi_snd_timer_user_ioctl+0x10/0x10 [ 179.809583][ T1353] __se_sys_ioctl+0x12f/0x1b0 [ 179.814288][ T1353] __x64_sys_ioctl+0x7b/0x90 [ 179.818912][ T1353] x64_sys_call+0x58b/0x9a0 [ 179.823444][ T1353] do_syscall_64+0x4c/0xa0 [ 179.827919][ T1353] ? clear_bhb_loop+0x30/0x80 [ 179.832628][ T1353] ? clear_bhb_loop+0x30/0x80 [ 179.837415][ T1353] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 179.843347][ T1353] RIP: 0033:0x7f618819de59 [ 179.847792][ T1353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.867610][ T1353] RSP: 002b:00007f61890ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 179.876064][ T1353] RAX: ffffffffffffffda RBX: 00007f6188426180 RCX: 00007f618819de59 [ 179.884069][ T1353] RDX: 0000200000000300 RSI: 0000000040345410 RDI: 000000000000000b [ 179.892074][ T1353] RBP: 00007f61890ea090 R08: 0000000000000000 R09: 0000000000000000 [ 179.900076][ T1353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.908078][ T1353] R13: 00007f6188426218 R14: 00007f6188426180 R15: 00007ffd8e6859a8 [ 179.916174][ T1353] [ 179.920568][ T1354] xt_CT: No such helper "netbios-ns" [ 179.924220][ T1347] loop1: detected capacity change from 0 to 512 [ 179.944409][ T1354] loop4: detected capacity change from 0 to 512 [ 179.955499][ T1354] EXT4-fs (loop4): Test dummy encryption mode enabled [ 180.056010][ T1354] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.252: inode has both inline data and extents flags [ 180.070183][ T1354] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.252: couldn't read orphan inode 15 (err -117) [ 180.082514][ T1354] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 180.110188][ T1354] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 180.165307][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 180.207406][ T1347] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 180.216615][ T1347] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.230824][ T313] usb 4-1: unable to get BOS descriptor or descriptor too short [ 180.241599][ T622] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 180.279079][ T313] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 180.379873][ T286] EXT4-fs (loop1): unmounting filesystem. [ 180.410781][ T1359] loop1: detected capacity change from 0 to 128 [ 180.432307][ T290] EXT4-fs (loop4): unmounting filesystem. [ 180.438223][ T313] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 180.465213][ T1361] loop4: detected capacity change from 0 to 128 [ 180.474976][ T313] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 180.567284][ T313] usb 4-1: config 1 interface 1 has no altsetting 0 [ 180.587659][ T313] usb 4-1: string descriptor 0 read error: -22 [ 180.593918][ T313] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 180.627801][ T313] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.131726][ T1338] loop2: detected capacity change from 0 to 131072 [ 181.828559][ T313] usb 4-1: Can't set UAC3 power state to 1 for id 10 [ 181.835784][ T313] usb 4-1: selecting invalid altsetting 0 [ 181.910544][ T313] usb 4-1: selecting invalid altsetting 0 [ 181.973793][ T1338] F2FS-fs (loop2): Invalid log sectorsize (0) [ 182.094217][ T1338] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 182.102983][ T1338] F2FS-fs (loop2): Unrecognized mount option "P95`澏1" or missing value [ 182.114310][ T313] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 182.131692][ T731] udevd[731]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 182.148859][ T313] usb 4-1: USB disconnect, device number 12 [ 182.276673][ T335] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 182.396755][ T552] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 182.466661][ T335] usb 2-1: Using ep0 maxpacket: 16 [ 182.494860][ T335] usb 2-1: unable to get BOS descriptor or descriptor too short [ 182.592897][ T335] usb 2-1: config 1 has an invalid descriptor of length 111, skipping remainder of the config [ 182.628421][ T552] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.680537][ T287] EXT4-fs (loop3): unmounting filesystem. [ 182.701800][ T552] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 182.736808][ T335] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 182.788804][ T552] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.821341][ T335] usb 2-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 182.888427][ T552] usb 5-1: config 0 descriptor?? [ 182.917574][ T335] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.994812][ T335] usb 2-1: Product: syz [ 183.032235][ T335] usb 2-1: Manufacturer: syz [ 183.073315][ T335] usb 2-1: SerialNumber: syz [ 183.246198][ T1374] xt_CT: No such helper "netbios-ns" [ 183.273604][ T1374] loop3: detected capacity change from 0 to 512 [ 183.283160][ T1374] EXT4-fs (loop3): Test dummy encryption mode enabled [ 183.345316][ T552] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor [ 183.420988][ T552] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0009/input/input9 [ 183.511429][ T1374] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.258: inode has both inline data and extents flags [ 183.527647][ T1374] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.258: couldn't read orphan inode 15 (err -117) [ 183.540483][ T1374] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 183.582059][ T1374] EXT4-fs warning (device loop3): ext4_empty_dir:3147: inode #2: comm syz.3.258: directory missing '.' [ 183.727943][ T1382] xt_CT: No such helper "netbios-ns" [ 183.773949][ T1382] loop2: detected capacity change from 0 to 512 [ 183.788934][ T1382] EXT4-fs (loop2): Test dummy encryption mode enabled [ 183.812503][ T552] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 183.887562][ T1382] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.257: inode has both inline data and extents flags [ 183.901745][ T1382] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.257: couldn't read orphan inode 15 (err -117) [ 183.915516][ T1382] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 184.081892][ T1385] xt_CT: No such helper "netbios-ns" [ 184.100424][ T1385] EXT4-fs (loop0): Test dummy encryption mode enabled [ 184.109172][ T1385] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.259: inode has both inline data and extents flags [ 184.122738][ T1385] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.259: couldn't read orphan inode 15 (err -117) [ 184.148526][ T1385] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 184.161061][ T287] EXT4-fs (loop3): unmounting filesystem. [ 184.169233][ T1384] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #2: comm syz.0.259: directory missing '.' [ 184.181059][ T552] usb 5-1: USB disconnect, device number 11 [ 184.223931][ T1389] set_capacity_and_notify: 1 callbacks suppressed [ 184.223950][ T1389] loop3: detected capacity change from 0 to 128 [ 184.231264][ T1387] fido_id[1387]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 184.362056][ T335] usb 2-1: unit 0 not found! [ 184.367311][ T335] usb 2-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to g@b4.vu [ 184.378275][ T335] usb 2-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 184.388102][ T335] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 184.396307][ T335] usb 2-1: USB disconnect, device number 6 [ 184.974667][ T289] EXT4-fs (loop2): unmounting filesystem. [ 184.993798][ T737] udevd[737]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 185.444493][ T288] EXT4-fs (loop0): unmounting filesystem. [ 185.496298][ T1395] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=1395 comm=syz.1.263 [ 185.525903][ T1394] loop4: detected capacity change from 0 to 4096 [ 185.536761][ T10] Bluetooth: hci0: Frame reassembly failed (-84) [ 185.558421][ T1394] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 185.594485][ T1401] loop3: detected capacity change from 0 to 1024 [ 185.600979][ T1402] netlink: 24 bytes leftover after parsing attributes in process `syz.1.263'. [ 185.642717][ T1403] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=1403 comm=syz.0.262 [ 185.659639][ T1407] netlink: 36 bytes leftover after parsing attributes in process `syz.1.263'. [ 185.676335][ T1401] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 185.704812][ T10] Bluetooth: hci1: Frame reassembly failed (-84) [ 185.712232][ T1401] FAULT_INJECTION: forcing a failure. [ 185.712232][ T1401] name failslab, interval 1, probability 0, space 0, times 0 [ 185.725860][ T1401] CPU: 0 PID: 1401 Comm: syz.3.265 Not tainted syzkaller #0 [ 185.733202][ T1401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 185.743292][ T1401] Call Trace: [ 185.746601][ T1401] [ 185.749553][ T1401] __dump_stack+0x21/0x24 [ 185.753946][ T1401] dump_stack_lvl+0x110/0x170 [ 185.758655][ T1401] ? __cfi_dump_stack_lvl+0x8/0x8 [ 185.763731][ T1401] dump_stack+0x15/0x24 [ 185.767922][ T1401] should_fail_ex+0x3bf/0x510 [ 185.772625][ T1401] ? getname_flags+0xba/0x510 [ 185.777363][ T1401] __should_failslab+0xac/0xf0 [ 185.782177][ T1401] should_failslab+0x9/0x20 [ 185.786704][ T1401] kmem_cache_alloc+0x3b/0x320 [ 185.791508][ T1401] getname_flags+0xba/0x510 [ 185.796052][ T1401] __x64_sys_renameat2+0xc3/0xf0 [ 185.801041][ T1401] x64_sys_call+0x6b8/0x9a0 [ 185.805590][ T1401] do_syscall_64+0x4c/0xa0 [ 185.810065][ T1401] ? clear_bhb_loop+0x30/0x80 [ 185.814798][ T1401] ? clear_bhb_loop+0x30/0x80 [ 185.819528][ T1401] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 185.825999][ T1401] RIP: 0033:0x7f44b099de59 [ 185.830473][ T1401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.850119][ T1401] RSP: 002b:00007f44b1953028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 185.857719][ T1409] netlink: 24 bytes leftover after parsing attributes in process `syz.0.262'. [ 185.858568][ T1401] RAX: ffffffffffffffda RBX: 00007f44b0c25fa0 RCX: 00007f44b099de59 [ 185.875442][ T1401] RDX: ffffffffffffff9c RSI: 0000200000000100 RDI: ffffffffffffff9c [ 185.883456][ T1401] RBP: 00007f44b1953090 R08: 0000000000000002 R09: 0000000000000000 [ 185.891460][ T1401] R10: 0000200000001240 R11: 0000000000000246 R12: 0000000000000001 [ 185.899478][ T1401] R13: 00007f44b0c26038 R14: 00007f44b0c25fa0 R15: 00007fff2bf8e238 [ 185.907573][ T1401] [ 185.915997][ T1409] netlink: 36 bytes leftover after parsing attributes in process `syz.0.262'. [ 185.925971][ T287] EXT4-fs (loop3): unmounting filesystem. [ 185.942454][ T1413] loop3: detected capacity change from 0 to 256 [ 185.950191][ T1413] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 185.963608][ T1413] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 185.974160][ T1413] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xc3bd3d8a, utbl_chksum : 0xe619d30d) [ 185.987238][ T422] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 186.178184][ T422] usb 5-1: unable to get BOS descriptor or descriptor too short [ 187.308384][ T28] audit: type=1401 audit(1783417613.967:193): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 187.316748][ T422] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.335628][ T422] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 187.344691][ T422] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 187.355835][ T422] usb 5-1: config 1 interface 1 has no altsetting 0 [ 187.426703][ T422] usb 5-1: string descriptor 0 read error: -22 [ 187.434142][ T422] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 187.453038][ T422] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.616628][ T868] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 187.706600][ T869] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 187.806585][ T1262] Bluetooth: hci1: command 0x1003 tx timeout [ 188.180875][ T1427] loop3: detected capacity change from 0 to 1024 [ 188.201503][ T422] usb 5-1: Can't set UAC3 power state to 1 for id 10 [ 188.209646][ T422] usb 5-1: selecting invalid altsetting 0 [ 188.215872][ T422] usb 5-1: selecting invalid altsetting 0 [ 188.240811][ T1427] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 188.251672][ T422] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 188.283961][ T737] udevd[737]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 188.301291][ T422] usb 5-1: USB disconnect, device number 12 [ 188.336149][ T28] audit: type=1400 audit(1783417614.987:194): avc: denied { getopt } for pid=1426 comm="syz.3.270" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 188.407346][ T28] audit: type=1400 audit(1783417615.027:195): avc: denied { mounton } for pid=1426 comm="syz.3.270" path="/53/file1/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 188.446830][ T28] audit: type=1400 audit(1783417615.037:196): avc: denied { write } for pid=1426 comm="syz.3.270" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 188.472461][ T28] audit: type=1400 audit(1783417615.037:197): avc: denied { add_name } for pid=1426 comm="syz.3.270" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 188.490160][ T1395] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 188.500217][ T28] audit: type=1400 audit(1783417615.037:198): avc: denied { setattr } for pid=1426 comm="syz.3.270" name="work" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 188.524232][ T290] EXT4-fs (loop4): unmounting filesystem. [ 188.527811][ T28] audit: type=1400 audit(1783417615.037:199): avc: denied { remove_name } for pid=1426 comm="syz.3.270" name="#1" dev="loop3" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 188.552649][ T28] audit: type=1400 audit(1783417615.047:200): avc: denied { rename } for pid=1426 comm="syz.3.270" name="#1" dev="loop3" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 188.553188][ T287] EXT4-fs (loop3): unmounting filesystem. [ 188.583372][ T1403] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 188.600141][ T28] audit: type=1400 audit(1783417615.047:201): avc: denied { unlink } for pid=1426 comm="syz.3.270" name="#1" dev="loop3" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 188.626467][ T1432] loop4: detected capacity change from 0 to 128 [ 188.640352][ T28] audit: type=1400 audit(1783417615.047:202): avc: denied { unlink } for pid=1426 comm="syz.3.270" name="#2" dev="loop3" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 192.016996][ T1443] xt_CT: No such helper "netbios-ns" [ 192.055175][ T1443] loop1: detected capacity change from 0 to 512 [ 192.088657][ T1443] EXT4-fs (loop1): Test dummy encryption mode enabled [ 192.229926][ T1443] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.273: inode has both inline data and extents flags [ 192.244345][ T1443] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.273: couldn't read orphan inode 15 (err -117) [ 192.257931][ T1443] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 192.278835][ T1443] EXT4-fs warning (device loop1): ext4_empty_dir:3147: inode #2: comm syz.1.273: directory missing '.' [ 192.336648][ T552] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 192.474822][ T286] EXT4-fs (loop1): unmounting filesystem. [ 192.509456][ T1453] loop2: detected capacity change from 0 to 1024 [ 192.524257][ T1455] loop1: detected capacity change from 0 to 256 [ 192.534878][ T1455] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 192.540275][ T1453] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 192.561608][ T1455] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 192.567102][ T552] usb 5-1: Using ep0 maxpacket: 16 [ 192.578336][ T1455] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xc3bd3d8a, utbl_chksum : 0xe619d30d) [ 192.592300][ T552] usb 5-1: unable to get BOS descriptor or descriptor too short [ 192.621271][ T300] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 192.752862][ T552] usb 5-1: config 1 has an invalid descriptor of length 111, skipping remainder of the config [ 194.148107][ T1463] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=1463 comm=syz.0.279 [ 194.161825][ T552] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 194.173707][ T300] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.302577][ T300] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 194.394464][ T1468] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=1468 comm=syz.4.280 [ 194.418986][ T552] usb 5-1: string descriptor 0 read error: -71 [ 194.425335][ T552] usb 5-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 194.438351][ T300] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.448518][ T289] EXT4-fs (loop2): unmounting filesystem. [ 194.464101][ T300] usb 4-1: config 0 descriptor?? [ 194.469494][ T552] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.496629][ T552] usb 5-1: can't set config #1, error -71 [ 194.505998][ T552] usb 5-1: USB disconnect, device number 13 [ 194.526681][ T8] Bluetooth: hci0: Frame reassembly failed (-84) [ 194.533156][ T387] Bluetooth: hci1: Frame reassembly failed (-84) [ 194.588340][ T1466] netlink: 24 bytes leftover after parsing attributes in process `syz.0.279'. [ 194.610272][ T1469] netlink: 24 bytes leftover after parsing attributes in process `syz.4.280'. [ 194.778111][ T1477] loop2: detected capacity change from 0 to 512 [ 194.883848][ T300] keytouch 0003:0926:3333.000A: fixing up Keytouch IEC report descriptor [ 194.956766][ T1477] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 194.966300][ T1477] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.022473][ T300] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.000A/input/input10 [ 195.114014][ T300] keytouch 0003:0926:3333.000A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 195.287617][ T300] usb 4-1: USB disconnect, device number 13 [ 195.366294][ T1475] loop1: detected capacity change from 0 to 131072 [ 195.380790][ T1475] F2FS-fs (loop1): Found nat_bits in checkpoint [ 195.439025][ T289] EXT4-fs (loop2): unmounting filesystem. [ 195.449138][ T1475] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 195.459041][ T1486] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=1486 comm=syz.2.283 [ 195.474829][ T8] Bluetooth: hci2: Frame reassembly failed (-84) [ 195.533230][ T1487] netlink: 24 bytes leftover after parsing attributes in process `syz.2.283'. [ 195.546635][ T1487] netlink: 36 bytes leftover after parsing attributes in process `syz.2.283'. [ 195.834926][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 195.834944][ T28] audit: type=1400 audit(1783417622.487:215): avc: denied { create } for pid=1491 comm="syz.3.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 195.861743][ T28] audit: type=1400 audit(1783417622.487:216): avc: denied { write } for pid=1491 comm="syz.3.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 195.882244][ T28] audit: type=1400 audit(1783417622.487:217): avc: denied { mounton } for pid=1491 comm="syz.3.285" path="/56/file0" dev="tmpfs" ino=329 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 195.921694][ T28] audit: type=1400 audit(1783417622.577:218): avc: denied { read write } for pid=1496 comm="syz.3.286" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 195.945396][ T28] audit: type=1400 audit(1783417622.577:219): avc: denied { open } for pid=1496 comm="syz.3.286" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 195.969504][ T28] audit: type=1400 audit(1783417622.577:220): avc: denied { ioctl } for pid=1496 comm="syz.3.286" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 195.995069][ T28] audit: type=1400 audit(1783417622.577:221): avc: denied { set_context_mgr } for pid=1496 comm="syz.3.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 196.496680][ T45] Bluetooth: hci1: command 0x1003 tx timeout [ 196.497126][ T1262] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 196.509085][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 196.509090][ T869] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 196.521541][ T1463] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 196.527745][ T1468] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 196.534008][ T1486] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 196.693000][ T1509] xt_CT: No such helper "netbios-ns" [ 196.712560][ T1509] loop0: detected capacity change from 0 to 512 [ 196.721747][ T1509] EXT4-fs (loop0): Test dummy encryption mode enabled [ 196.777215][ T1509] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.288: inode has both inline data and extents flags [ 196.791144][ T1509] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.288: couldn't read orphan inode 15 (err -117) [ 196.803868][ T1509] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 196.827282][ T1509] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #2: comm syz.0.288: directory missing '.' [ 196.979640][ T1512] xt_CT: No such helper "netbios-ns" [ 197.006821][ T1512] loop1: detected capacity change from 0 to 512 [ 197.016727][ T1512] EXT4-fs (loop1): Test dummy encryption mode enabled [ 197.050176][ T1512] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.289: inode has both inline data and extents flags [ 197.063616][ T1512] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.289: couldn't read orphan inode 15 (err -117) [ 197.076597][ T1512] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 197.269516][ T1515] loop3: detected capacity change from 0 to 128 [ 197.279681][ T1517] FAULT_INJECTION: forcing a failure. [ 197.279681][ T1517] name failslab, interval 1, probability 0, space 0, times 0 [ 197.309452][ T1517] CPU: 0 PID: 1517 Comm: syz.4.291 Not tainted syzkaller #0 [ 197.316818][ T1517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 197.326913][ T1517] Call Trace: [ 197.330221][ T1517] [ 197.333189][ T1517] __dump_stack+0x21/0x24 [ 197.337557][ T1517] dump_stack_lvl+0x110/0x170 [ 197.342275][ T1517] ? __cfi_dump_stack_lvl+0x8/0x8 [ 197.347337][ T1517] ? __kasan_check_write+0x14/0x20 [ 197.352489][ T1517] ? _raw_spin_lock_bh+0x94/0xf0 [ 197.357463][ T1517] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 197.362955][ T1517] dump_stack+0x15/0x24 [ 197.367150][ T1517] should_fail_ex+0x3bf/0x510 [ 197.371863][ T1517] __should_failslab+0xac/0xf0 [ 197.376660][ T1517] should_failslab+0x9/0x20 [ 197.381196][ T1517] __kmem_cache_alloc_node+0x3d/0x2d0 [ 197.386626][ T1517] ? __cgroup_bpf_run_filter_setsockopt+0x8aa/0xa50 [ 197.393348][ T1517] ? __cgroup_bpf_run_filter_setsockopt+0x8aa/0xa50 [ 197.400682][ T1517] __kmalloc+0xa4/0x1e0 [ 197.404898][ T1517] ? release_sock+0x169/0x1c0 [ 197.409621][ T1517] __cgroup_bpf_run_filter_setsockopt+0x8aa/0xa50 [ 197.414560][ T1515] bpf setsockopt: ignoring program buffer with optlen=30428 (max_optlen=4096) [ 197.416080][ T1517] ? selinux_socket_setsockopt+0x282/0x360 [ 197.430766][ T1517] ? __cfi___cgroup_bpf_run_filter_setsockopt+0x10/0x10 [ 197.437750][ T1517] ? security_socket_setsockopt+0x93/0xb0 [ 197.443603][ T1517] __sys_setsockopt+0x47f/0x4e0 [ 197.448490][ T1517] ? __cfi___sys_setsockopt+0x10/0x10 [ 197.453998][ T1517] ? ksys_write+0x1fa/0x260 [ 197.458635][ T1517] ? __cfi_ksys_write+0x10/0x10 [ 197.463516][ T1517] __x64_sys_setsockopt+0xbf/0xd0 [ 197.468578][ T1517] x64_sys_call+0x124/0x9a0 [ 197.473146][ T1517] do_syscall_64+0x4c/0xa0 [ 197.477611][ T1517] ? clear_bhb_loop+0x30/0x80 [ 197.482492][ T1517] ? clear_bhb_loop+0x30/0x80 [ 197.487203][ T1517] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 197.493240][ T1517] RIP: 0033:0x7fd6e599de59 [ 197.497694][ T1517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.517336][ T1517] RSP: 002b:00007fd6e43f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 197.525789][ T1517] RAX: ffffffffffffffda RBX: 00007fd6e5c25fa0 RCX: 00007fd6e599de59 [ 197.533802][ T1517] RDX: 0000000000000009 RSI: 0000000000000112 RDI: 0000000000000004 [ 197.541828][ T1517] RBP: 00007fd6e43f7090 R08: 0000000000000001 R09: 0000000000000000 [ 197.549853][ T1517] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.556810][ T45] Bluetooth: hci2: command 0x1003 tx timeout [ 197.557859][ T1517] R13: 00007fd6e5c26038 R14: 00007fd6e5c25fa0 R15: 00007ffdfd318ce8 [ 197.557882][ T1517] [ 197.646719][ T868] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 197.665215][ T1520] loop4: detected capacity change from 0 to 256 [ 197.724229][ T1520] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 197.884503][ T288] EXT4-fs (loop0): unmounting filesystem. [ 197.936470][ T1520] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 197.997147][ T1520] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xc3bd3d8a, utbl_chksum : 0xe619d30d) [ 198.126681][ T933] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 198.897054][ T933] usb 4-1: Using ep0 maxpacket: 16 [ 198.911895][ T933] usb 4-1: unable to get BOS descriptor or descriptor too short [ 198.958938][ T933] usb 4-1: config 1 has an invalid descriptor of length 111, skipping remainder of the config [ 199.015524][ T286] EXT4-fs (loop1): unmounting filesystem. [ 199.130989][ T933] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 199.141146][ T1529] loop0: detected capacity change from 0 to 1024 [ 199.167670][ T933] usb 4-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 199.206133][ T933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.225358][ T933] usb 4-1: Product: syz [ 199.235024][ T933] usb 4-1: Manufacturer: syz [ 199.245543][ T1529] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 199.254832][ T933] usb 4-1: SerialNumber: syz [ 199.360113][ T288] EXT4-fs (loop0): unmounting filesystem. [ 199.623746][ T552] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 199.850215][ T552] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.878278][ T552] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 199.912780][ T552] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.984898][ T552] usb 2-1: config 0 descriptor?? [ 201.720062][ T933] usb 4-1: unit 0 not found! [ 201.725175][ T933] usb 4-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to g@b4.vu [ 201.768933][ T933] usb 4-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 201.968100][ T552] keytouch 0003:0926:3333.000B: fixing up Keytouch IEC report descriptor [ 201.978107][ T933] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 201.987602][ T552] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.000B/input/input11 [ 201.999169][ T933] usb 4-1: USB disconnect, device number 14 [ 202.299701][ T1549] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=1549 comm=syz.3.301 [ 202.436797][ T1446] Bluetooth: hci0: Frame reassembly failed (-84) [ 202.468793][ T1552] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=1552 comm=syz.2.302 [ 202.793931][ T552] keytouch 0003:0926:3333.000B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 202.812240][ T552] usb 2-1: USB disconnect, device number 7 [ 202.963260][ T1555] fido_id[1555]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 203.031766][ T1561] xt_CT: No such helper "netbios-ns" [ 203.050792][ T1561] loop4: detected capacity change from 0 to 512 [ 203.061569][ T1561] EXT4-fs (loop4): Test dummy encryption mode enabled [ 203.081981][ T731] udevd[731]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 203.260722][ T1561] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.303: inode has both inline data and extents flags [ 203.274778][ T1561] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.303: couldn't read orphan inode 15 (err -117) [ 203.287595][ T1561] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 203.309485][ T1561] EXT4-fs warning (device loop4): ext4_empty_dir:3147: inode #2: comm syz.4.303: directory missing '.' [ 203.729318][ T290] EXT4-fs (loop4): unmounting filesystem. [ 203.764922][ T1568] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=1568 comm=syz.4.306 [ 203.782583][ T8] Bluetooth: hci2: Frame reassembly failed (-84) [ 203.786777][ T552] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 203.791270][ T1568] netlink: 36 bytes leftover after parsing attributes in process `syz.4.306'. [ 203.976615][ T552] usb 1-1: Using ep0 maxpacket: 32 [ 203.987426][ T552] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 203.995543][ T552] usb 1-1: config 0 has no interface number 0 [ 204.016621][ T552] usb 1-1: config 0 interface 67 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 204.038326][ T552] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 204.056803][ T552] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.064836][ T552] usb 1-1: Product: syz [ 204.076675][ T552] usb 1-1: Manufacturer: syz [ 204.081330][ T552] usb 1-1: SerialNumber: syz [ 204.096826][ T552] usb 1-1: config 0 descriptor?? [ 204.107127][ T552] smsc95xx v2.0.0 [ 204.110814][ T552] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 204.136650][ T552] smsc95xx: probe of 1-1:0.67 failed with error -22 [ 204.360014][ T28] audit: type=1400 audit(1783417631.017:222): avc: denied { append } for pid=1569 comm="syz.1.307" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 204.389189][ T1570] loop1: detected capacity change from 0 to 512 [ 204.398640][ T1570] EXT4-fs: Ignoring removed nobh option [ 204.406391][ T1570] EXT4-fs error (device loop1): ext4_iget_extra_inode:4765: inode #15: comm syz.1.307: corrupted in-inode xattr [ 204.418451][ T868] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 204.424980][ T1570] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.307: couldn't read orphan inode 15 (err -117) [ 204.437261][ T1570] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 204.482532][ T286] EXT4-fs (loop1): unmounting filesystem. [ 204.497841][ T1574] loop1: detected capacity change from 0 to 256 [ 204.506303][ T1574] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 204.517199][ T1574] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 204.527882][ T1574] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xc3bd3d8a, utbl_chksum : 0xe619d30d) [ 204.576666][ T868] Bluetooth: hci1: command 0x1003 tx timeout [ 204.582948][ T45] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 205.294236][ T1549] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 205.405342][ T1552] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 205.429250][ T1581] loop2: detected capacity change from 0 to 128 [ 205.549401][ T1585] loop1: detected capacity change from 0 to 128 [ 206.116569][ T1262] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 206.622776][ T1592] xt_CT: No such helper "netbios-ns" [ 206.640131][ T1592] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 206.703543][ T552] ================================================================== [ 206.711691][ T552] BUG: KASAN: use-after-free in enqueue_timer+0xae/0x480 [ 206.718763][ T552] Write of size 8 at addr ffff8881180c0a00 by task kworker/1:7/552 [ 206.726683][ T552] [ 206.729032][ T552] CPU: 1 PID: 552 Comm: kworker/1:7 Not tainted syzkaller #0 [ 206.736515][ T552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 206.746736][ T552] Workqueue: mld mld_ifc_work [ 206.751712][ T552] Call Trace: [ 206.755010][ T552] [ 206.757960][ T552] __dump_stack+0x21/0x24 [ 206.762324][ T552] dump_stack_lvl+0x110/0x170 [ 206.767032][ T552] ? __cfi_dump_stack_lvl+0x8/0x8 [ 206.772089][ T552] ? enqueue_timer+0xae/0x480 [ 206.776797][ T552] print_address_description+0x71/0x200 [ 206.782376][ T552] print_report+0x4a/0x60 [ 206.786731][ T552] kasan_report+0x122/0x150 [ 206.791273][ T552] ? enqueue_timer+0xae/0x480 [ 206.796116][ T552] __asan_report_store8_noabort+0x17/0x20 [ 206.801981][ T552] enqueue_timer+0xae/0x480 [ 206.806527][ T552] ? detach_if_pending+0xf5/0x300 [ 206.811583][ T552] __mod_timer+0x859/0xc00 [ 206.816289][ T552] add_timer+0x68/0x80 [ 206.820386][ T552] __queue_delayed_work+0x173/0x200 [ 206.825619][ T552] mod_delayed_work_on+0x74/0xe0 [ 206.830605][ T552] mld_ifc_work+0xa71/0xc20 [ 206.835225][ T552] process_one_work+0x717/0xc30 [ 206.840108][ T552] worker_thread+0xa4d/0x11d0 [ 206.844831][ T552] kthread+0x281/0x320 [ 206.848936][ T552] ? __cfi_worker_thread+0x10/0x10 [ 206.854075][ T552] ? __cfi_kthread+0x10/0x10 [ 206.858692][ T552] ret_from_fork+0x1f/0x30 [ 206.863179][ T552] [ 206.866237][ T552] [ 206.868565][ T552] Allocated by task 1549: [ 206.872898][ T552] kasan_set_track+0x4b/0x70 [ 206.877504][ T552] kasan_save_alloc_info+0x1f/0x30 [ 206.882633][ T552] __kasan_kmalloc+0x95/0xb0 [ 206.887233][ T552] __kmalloc+0xb4/0x1e0 [ 206.891389][ T552] hci_alloc_dev_priv+0x27/0x1bd0 [ 206.896416][ T552] hci_uart_tty_ioctl+0x3c4/0xa40 [ 206.901457][ T552] tty_ioctl+0x8ef/0xc60 [ 206.905703][ T552] __se_sys_ioctl+0x12f/0x1b0 [ 206.910379][ T552] __x64_sys_ioctl+0x7b/0x90 [ 206.914968][ T552] x64_sys_call+0x58b/0x9a0 [ 206.919500][ T552] do_syscall_64+0x4c/0xa0 [ 206.923921][ T552] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 206.929844][ T552] [ 206.932166][ T552] Freed by task 1548: [ 206.936143][ T552] kasan_set_track+0x4b/0x70 [ 206.940829][ T552] kasan_save_free_info+0x2b/0x40 [ 206.945977][ T552] ____kasan_slab_free+0x132/0x180 [ 206.951116][ T552] __kasan_slab_free+0x11/0x20 [ 206.955894][ T552] slab_free_freelist_hook+0xc2/0x190 [ 206.961265][ T552] __kmem_cache_free+0xb7/0x1b0 [ 206.966206][ T552] kfree+0x6f/0xf0 [ 206.969960][ T552] hci_release_dev+0x12a3/0x13b0 [ 206.974910][ T552] bt_host_release+0x82/0x90 [ 206.979514][ T552] device_release+0xa4/0x1d0 [ 206.984127][ T552] kobject_put+0x19d/0x280 [ 206.988560][ T552] put_device+0x1f/0x30 [ 206.992730][ T552] hci_free_dev+0x1c/0x20 [ 206.997065][ T552] hci_uart_tty_close+0x1a3/0x230 [ 207.002098][ T552] tty_ldisc_kill+0x11b/0x220 [ 207.006774][ T552] tty_ldisc_release+0x1a5/0x200 [ 207.011719][ T552] tty_release_struct+0x29/0xe0 [ 207.016580][ T552] tty_release+0xbb7/0x11d0 [ 207.021090][ T552] __fput+0x1fd/0x8f0 [ 207.025077][ T552] ____fput+0x15/0x20 [ 207.029058][ T552] task_work_run+0x1e1/0x250 [ 207.033648][ T552] exit_to_user_mode_loop+0x9b/0xb0 [ 207.038852][ T552] exit_to_user_mode_prepare+0x87/0xd0 [ 207.044359][ T552] syscall_exit_to_user_mode+0x1a/0x30 [ 207.050002][ T552] do_syscall_64+0x58/0xa0 [ 207.054427][ T552] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 207.060340][ T552] [ 207.062683][ T552] Last potentially related work creation: [ 207.068426][ T552] kasan_save_stack+0x3a/0x60 [ 207.073566][ T552] __kasan_record_aux_stack+0xb6/0xc0 [ 207.078937][ T552] kasan_record_aux_stack_noalloc+0xb/0x10 [ 207.084744][ T552] insert_work+0x51/0x300 [ 207.089072][ T552] __queue_work+0x9d0/0xd50 [ 207.093586][ T552] queue_work_on+0xde/0x150 [ 207.098111][ T552] __hci_cmd_sync_sk+0xaa8/0xd80 [ 207.103085][ T552] hci_cmd_sync_status+0x53/0x120 [ 207.108125][ T552] hci_dev_cmd+0x357/0x740 [ 207.112543][ T552] hci_sock_ioctl+0x41e/0x7f0 [ 207.117251][ T552] sock_do_ioctl+0x114/0x330 [ 207.121917][ T552] sock_ioctl+0x475/0x700 [ 207.126301][ T552] __se_sys_ioctl+0x12f/0x1b0 [ 207.131002][ T552] __x64_sys_ioctl+0x7b/0x90 [ 207.135593][ T552] x64_sys_call+0x58b/0x9a0 [ 207.140134][ T552] do_syscall_64+0x4c/0xa0 [ 207.144641][ T552] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 207.150563][ T552] [ 207.152901][ T552] Second to last potentially related work creation: [ 207.159478][ T552] kasan_save_stack+0x3a/0x60 [ 207.164186][ T552] __kasan_record_aux_stack+0xb6/0xc0 [ 207.169557][ T552] kasan_record_aux_stack_noalloc+0xb/0x10 [ 207.175366][ T552] insert_work+0x51/0x300 [ 207.179695][ T552] __queue_work+0x9d0/0xd50 [ 207.184203][ T552] queue_work_on+0xde/0x150 [ 207.188716][ T552] __hci_cmd_sync_sk+0xaa8/0xd80 [ 207.193680][ T552] hci_cmd_sync_status+0x53/0x120 [ 207.198798][ T552] hci_dev_cmd+0x357/0x740 [ 207.203218][ T552] hci_sock_ioctl+0x41e/0x7f0 [ 207.207909][ T552] sock_do_ioctl+0x114/0x330 [ 207.212527][ T552] sock_ioctl+0x475/0x700 [ 207.216872][ T552] __se_sys_ioctl+0x12f/0x1b0 [ 207.221559][ T552] __x64_sys_ioctl+0x7b/0x90 [ 207.226146][ T552] x64_sys_call+0x58b/0x9a0 [ 207.230685][ T552] do_syscall_64+0x4c/0xa0 [ 207.235122][ T552] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 207.241042][ T552] [ 207.243376][ T552] The buggy address belongs to the object at ffff8881180c0000 [ 207.243376][ T552] which belongs to the cache kmalloc-8k of size 8192 [ 207.257442][ T552] The buggy address is located 2560 bytes inside of [ 207.257442][ T552] 8192-byte region [ffff8881180c0000, ffff8881180c2000) [ 207.270926][ T552] [ 207.273259][ T552] The buggy address belongs to the physical page: [ 207.279701][ T552] page:ffffea0004603000 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8881180c4000 pfn:0x1180c0 [ 207.291244][ T552] head:ffffea0004603000 order:3 compound_mapcount:0 compound_pincount:0 [ 207.299975][ T552] flags: 0x4000000000010200(slab|head|zone=1) [ 207.306080][ T552] raw: 4000000000010200 0000000000000000 dead000000000001 ffff888100043500 [ 207.314672][ T552] raw: ffff8881180c4000 0000000080020001 00000001ffffffff 0000000000000000 [ 207.323250][ T552] page dumped because: kasan: bad access detected [ 207.329693][ T552] page_owner tracks the page as allocated [ 207.335402][ T552] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 417, tgid 416 (syz.0.23), ts 47026037692, free_ts 46928210683 [ 207.357625][ T552] post_alloc_hook+0x1f5/0x210 [ 207.362402][ T552] prep_new_page+0x1c/0x110 [ 207.367081][ T552] get_page_from_freelist+0x2ca9/0x2d20 [ 207.372630][ T552] __alloc_pages+0x1fa/0x610 [ 207.377230][ T552] alloc_slab_page+0x6e/0xf0 [ 207.381853][ T552] new_slab+0x98/0x3e0 [ 207.385920][ T552] ___slab_alloc+0x70f/0xb70 [ 207.390523][ T552] __slab_alloc+0x5e/0xa0 [ 207.394861][ T552] __kmem_cache_alloc_node+0x204/0x2d0 [ 207.400325][ T552] __kmalloc+0xa4/0x1e0 [ 207.404477][ T552] mb_cache_create+0x194/0x5b0 [ 207.409244][ T552] ext4_xattr_create_cache+0x13/0x20 [ 207.414538][ T552] ext4_fill_super+0x5470/0x73e0 [ 207.419484][ T552] get_tree_bdev+0x450/0x6a0 [ 207.424098][ T552] ext4_get_tree+0x1c/0x20 [ 207.428520][ T552] vfs_get_tree+0x9a/0x270 [ 207.432935][ T552] page last free stack trace: [ 207.437600][ T552] free_unref_page_prepare+0x80c/0x820 [ 207.443091][ T552] free_unref_page+0x93/0x530 [ 207.447775][ T552] __free_pages+0x67/0x100 [ 207.452195][ T552] __free_slab+0xc7/0x1a0 [ 207.456543][ T552] __unfreeze_partials+0x15a/0x190 [ 207.461657][ T552] put_cpu_partial+0xa9/0x100 [ 207.466341][ T552] __slab_free+0x1c4/0x280 [ 207.470788][ T552] ___cache_free+0xbf/0xd0 [ 207.475208][ T552] qlist_free_all+0xc6/0x140 [ 207.479914][ T552] kasan_quarantine_reduce+0x14a/0x170 [ 207.485373][ T552] __kasan_slab_alloc+0x24/0x80 [ 207.490224][ T552] slab_post_alloc_hook+0x4f/0x2d0 [ 207.495341][ T552] kmem_cache_alloc+0x166/0x320 [ 207.500196][ T552] getname_flags+0xba/0x510 [ 207.504699][ T552] getname+0x19/0x20 [ 207.508592][ T552] do_sys_openat2+0xeb/0x820 [ 207.513189][ T552] [ 207.515510][ T552] Memory state around the buggy address: [ 207.521308][ T552] ffff8881180c0900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 207.529559][ T552] ffff8881180c0980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 207.537617][ T552] >ffff8881180c0a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 207.545676][ T552] ^ [ 207.549740][ T552] ffff8881180c0a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 207.557798][ T552] ffff8881180c0b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 207.565860][ T552] ================================================================== [ 207.573915][ T552] Disabling lock debugging due to kernel taint [ 207.580441][ C1] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 207.592272][ C1] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 207.602459][ C1] CPU: 1 PID: 552 Comm: kworker/1:7 Tainted: G B syzkaller #0 [ 207.611363][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 207.621455][ C1] Workqueue: mld mld_ifc_work [ 207.626164][ C1] RIP: 0010:__queue_work+0x582/0xd50 [ 207.631472][ C1] Code: b4 00 00 00 e8 7f 4d 29 00 48 bb 00 00 00 00 00 fc ff df 4c 89 ef e8 ed e7 b8 03 4c 8b 65 d0 4c 8b 6d c0 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 00 d8 6e 00 49 8b 3e e8 88 e3 b8 03 [ 207.651354][ C1] RSP: 0018:ffffc900001b0c78 EFLAGS: 00010046 [ 207.657434][ C1] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88811db4bcc0 [ 207.665422][ C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 207.673408][ C1] RBP: ffffc900001b0d08 R08: 0000000000000007 R09: 00000000fffffffb [ 207.681399][ C1] R10: dffffc0000000000 R11: ffffed1023018139 R12: ffff8881180c09c8 [ 207.689386][ C1] R13: ffff888112859c00 R14: 0000000000000000 R15: 000000007fffffff [ 207.697372][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 207.706328][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 207.713127][ C1] CR2: 00007f44b09eb540 CR3: 000000013318a000 CR4: 00000000003506a0 [ 207.721115][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 207.729112][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 207.737102][ C1] Call Trace: [ 207.740408][ C1] [ 207.743274][ C1] delayed_work_timer_fn+0x61/0x80 [ 207.748408][ C1] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 207.754239][ C1] call_timer_fn+0x46/0x2a0 [ 207.758763][ C1] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 207.764591][ C1] __run_timers+0x672/0x9b0 [ 207.769145][ C1] ? calc_index+0x200/0x200 [ 207.773678][ C1] ? asm_common_interrupt+0x27/0x40 [ 207.778904][ C1] run_timer_softirq+0x6a/0xf0 [ 207.783697][ C1] handle_softirqs+0x1d7/0x600 [ 207.788489][ C1] __irq_exit_rcu+0x52/0xf0 [ 207.793018][ C1] irq_exit_rcu+0x9/0x10 [ 207.797279][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 207.803119][ C1] [ 207.806078][ C1] [ 207.809030][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 207.815137][ C1] RIP: 0010:preempt_schedule_irq+0xa5/0x120 [ 207.821063][ C1] Code: 44 24 20 00 02 00 00 43 c6 44 37 04 f8 74 0b 0f 0b 48 f7 03 08 00 00 00 74 4d bf 01 00 00 00 e8 c1 f9 4c fc fb bf 01 00 00 00 46 e5 ff ff fa bf 01 00 00 00 e8 6b fb 4c fc 65 48 8b 1d c3 d4 [ 207.840841][ C1] RSP: 0018:ffffc900101a7ac0 EFLAGS: 00000246 [ 207.846932][ C1] RAX: 1ffff11023b698f1 RBX: ffffc900101a7b98 RCX: ffffffff87b7b100 [ 207.854924][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 207.862954][ C1] RBP: ffffc900101a7b48 R08: ffff88811db4bcc7 R09: 1ffff11023b69798 [ 207.870946][ C1] R10: dffffc0000000000 R11: ffffed1023b69799 R12: 0000000000000000 [ 207.878941][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff92002034f58 [ 207.886956][ C1] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 207.892707][ C1] ? .slowpath+0x9/0x15 [ 207.896886][ C1] raw_irqentry_exit_cond_resched+0x29/0x30 [ 207.902832][ C1] irqentry_exit+0x37/0x40 [ 207.907279][ C1] sysvec_reschedule_ipi+0x78/0x80 [ 207.912422][ C1] asm_sysvec_reschedule_ipi+0x1b/0x20 [ 207.917998][ C1] RIP: 0010:mod_delayed_work_on+0xa1/0xe0 [ 207.923930][ C1] Code: c8 4c 89 f6 48 81 e6 00 02 00 00 31 ff e8 e7 43 29 00 49 81 e6 00 02 00 00 75 07 e8 19 3f 29 00 eb 06 e8 12 3f 29 00 fb 31 ff <89> de e8 28 43 29 00 85 db 0f 95 c0 65 48 8b 0c 25 28 00 00 00 48 [ 207.943575][ C1] RSP: 0018:ffffc900101a7c48 EFLAGS: 00000246 [ 207.949677][ C1] RAX: ffffffff8148251e RBX: 0000000000000000 RCX: ffff88811db4bcc0 [ 207.957672][ C1] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 207.965921][ C1] RBP: ffffc900101a7c88 R08: ffff8881f6f27c77 R09: 1ffff1103ede4f8e [ 207.973913][ C1] R10: dffffc0000000000 R11: ffffed103ede4f8f R12: ffff88810e11f400 [ 207.981922][ C1] R13: 0000000000000008 R14: 0000000000000200 R15: ffff8881312700e0 [ 207.989929][ C1] ? mod_delayed_work_on+0x9e/0xe0 [ 207.995098][ C1] ? mod_delayed_work_on+0x9e/0xe0 [ 208.000235][ C1] mld_ifc_work+0xa71/0xc20 [ 208.004758][ C1] process_one_work+0x717/0xc30 [ 208.009634][ C1] worker_thread+0xa4d/0x11d0 [ 208.014336][ C1] kthread+0x281/0x320 [ 208.018421][ C1] ? __cfi_worker_thread+0x10/0x10 [ 208.023551][ C1] ? __cfi_kthread+0x10/0x10 [ 208.028166][ C1] ret_from_fork+0x1f/0x30 [ 208.032618][ C1] [ 208.035756][ C1] Modules linked in: [ 208.039718][ C1] ---[ end trace 0000000000000000 ]--- [ 208.045209][ C1] RIP: 0010:__queue_work+0x582/0xd50 [ 208.050531][ C1] Code: b4 00 00 00 e8 7f 4d 29 00 48 bb 00 00 00 00 00 fc ff df 4c 89 ef e8 ed e7 b8 03 4c 8b 65 d0 4c 8b 6d c0 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 00 d8 6e 00 49 8b 3e e8 88 e3 b8 03 [ 208.070251][ C1] RSP: 0018:ffffc900001b0c78 EFLAGS: 00010046 [ 208.076379][ C1] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88811db4bcc0 [ 208.084386][ C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 208.092382][ C1] RBP: ffffc900001b0d08 R08: 0000000000000007 R09: 00000000fffffffb [ 208.100371][ C1] R10: dffffc0000000000 R11: ffffed1023018139 R12: ffff8881180c09c8 [ 208.108359][ C1] R13: ffff888112859c00 R14: 0000000000000000 R15: 000000007fffffff [ 208.116354][ C1] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 208.125298][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 208.131896][ C1] CR2: 00007f44b09eb540 CR3: 000000013318a000 CR4: 00000000003506a0 [ 208.139888][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 208.147970][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 208.155974][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 208.163933][ C1] Kernel Offset: disabled [ 208.168270][ C1] Rebooting in 86400 seconds..