last executing test programs: 5.906511509s ago: executing program 1 (id=337): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="150000001000000008"], 0x50) io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) bind$inet6(r2, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @empty, 0x5}, 0x1c) setsockopt$inet6_buf(r2, 0x29, 0x31, &(0x7f0000000280)="b745", 0x2) sendmmsg$inet6(r2, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}], 0x1, 0x20080058) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000080)={[{@grpjquota}, {@grpjquota}, {@quota}], [{@context={'context', 0x3d, 'root'}}, {@subj_user={'subj_user', 0x3d, 'usrquota'}}, {@dont_measure}, {@subj_user={'subj_user', 0x3d, '/dev/loop'}}, {@context={'context', 0x3d, 'root'}}]}, 0x1, 0x4ec, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet_udp(0x2, 0x2, 0x0) write$tun(0xffffffffffffffff, &(0x7f00000003c0)={@void, @val={0x1, 0x3, 0x1c, 0x10, 0x14, 0x6}, @ipv4=@tcp={{0x8, 0x4, 0x1, 0x8, 0x34, 0x68, 0x0, 0x7f, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@rr={0x7, 0xb, 0x6, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}]}}, {{0x4e21, 0x4e21, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}}}}, 0x3e) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100090808004149004001040800", 0x58}], 0x1) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000003800b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x77) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYRES32=r6], 0x20) 5.416524511s ago: executing program 0 (id=338): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3e) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000240)) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) keyctl$read(0xb, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0xd81a2403c050e352, 0x72, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0xe41, 0x5050, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x80, 0x0, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xd4, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x6, 0x4, 0x8, {0x7, 0x25, 0x1, 0xc, 0x7, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x0, 0x79, 0xd5, {0x7, 0x25, 0x1, 0x0, 0xf1, 0xd}}}}}}}}]}}, 0x0) syz_usb_connect(0x0, 0x164, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007af28810d30b550506b641a2b037bbf49f46cc5c00"/39, @ANYRES16=0x0], 0x0) 5.356147363s ago: executing program 2 (id=339): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) io_setup(0x8, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x5, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x8ef7, 0x8, 0x0, 0x6, 0xf5, 0x5, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x5, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0x8, 0x4, 0x2, 0x0, 0x8, 0x1009, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x27, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0xffffffff, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0xb, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3, 0x1000, 0x2, 0xe, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x7, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0xb, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x40, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x9, 0x4, 0xe47, 0x4, 0x0, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) readv(r0, &(0x7f00000005c0)=[{0x0}, {&(0x7f00000003c0)=""/138, 0x8a}], 0x2) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$RTC_ALM_READ(r2, 0x80247008, &(0x7f0000000000)) 5.064053451s ago: executing program 1 (id=340): r0 = socket$nl_route(0x10, 0x3, 0x0) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) gettid() mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uac1.usb0/c_chmask\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/uac1.usb0\x00') write(r3, &(0x7f0000000040)="6075ac", 0x3) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) 5.06371658s ago: executing program 1 (id=341): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0xa4, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_EXPECT_MASTER={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x98}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_MASK={0x10, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x89}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x21}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0xa4}}, 0x4) 5.044780571s ago: executing program 1 (id=342): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x400000, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000180)={0x15, 0x2b, 0x9, 0x1a, 0x2, 0xa, 0x1, 0xf2, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100c005, &(0x7f0000000000), 0x26, 0x758, &(0x7f0000000ac0)="$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") chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x86400, 0x109) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000002140)={[0xffffffeffffffff5]}, 0x8, 0x0) poll(&(0x7f00000001c0)=[{r2, 0x400}], 0x1, 0x6) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f00000006c0)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.913357095s ago: executing program 1 (id=343): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) flistxattr(r1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000040)={[{@debug}, {@jqfmt_vfsv0}, {@inlinecrypt}, {@errors_remount}, {@test_dummy_encryption_v1}, {@norecovery}, {@delalloc}, {@nogrpid}, {@minixdf}]}, 0x1, 0xbdb, &(0x7f0000000380)="$eJzs3M1rHOcZAPBnRqsP23JXLqXUvVilFBtK17KLTG0KtYtLLz0U2mvBQl4ZofUHkoorWdBV8g+EJP9ALjkkJsGH+OxLArnmkjjXmBwCJihWAiEkCrMfkiztSpa1q1Hk3w9ezfsxM+/zaKSdeWF3A3hhDWc/0ojjEXEliSg2+tOI6KvVBiKq9f2WlxbGv1laGE9iZeVfXyaRRMSTpYXx5rmSxvZIozEQER/9NYmfv7x53pm5+amxSqU83Wifnr1+6/TM3PwfJq+PXStfK984c+5Po2dHz42cH+1Yrt9+dvH+17/5++fV7976/u5Xr72ZxMUYbIytz6OR9a4Nx/Dq72S9QkSMdeD8+0FPI5/1eSaFbQ5KuxwUAABtpeue4X4ZxeiJtYe3Yrz/ca7BAQAAAB2x0hOxAgAAABxwifU/AAAAHHDN9wE8WVoYb5Z835Gwtx5fioihev7LjVIfKUS1th2I3og4/CSJ9R9rTeqH7dpwRDz69Py7WYkWn0PutupiRPyq1fVPavkPNT4JvTH/NCJGOjD/8Ib2Tyn/ix2YP+/8AXgxPbhUv5Ftvv+lq88/0eL+V2hx73oeed//ms9/y5ue/9by72nz/PfPZ5zjTiFutxvL8v/z/b+90yzZ/Nl2V0ntwOPFiF8XWuWfrOaftMn/yjbnTqJ+iuIPt8vt9sk7/5U3Ik5G6/ybkq2/n+j0xGSlPFL/2XKOxQ9H3243f975Z9f/cJv8t7j+A1nfrafO1P5Lff5z+fK9TZ2N3bfPP/2iL/l3rdbX6Pnf2Ozs9JmIvuQfm/vPbp1vc5/mObL8T/126///Vn//2WtCtfG3kaWy2Nhm7Zc2zPmXu3feaxdPc/2X5/W/uvPrX+t75Rnn+N0Hr57a2Nf8fq3169+sZPM/SuprYQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABoSiNiMJK0FBFJrZ6mpVLEkYj4RRxOKzdnZn8/cfO/N65mYxFD0ZtOTFbKIxFRrLeTrH2mVl9rn93Q/mNEHIuI14uHau3S+M3K1byTBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNWRiBiMJC1FRBoRy8U0LZXyjgoAAADouKG8AwAAAAC6zvofAAAADj7rfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrs2IkHD5OIqF44VCuZvsZYb66RAd2W5h0AkJuevAMAclPIOwAgNztc43tcgAMo2WZ8oGVv9urR35V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANifTh5/8DCJiOqFQ7WS6WuM9bY84sQeRgd0U5p3AEBuerYaLOxdHMDee+5/8aOdjQPYe63X+MCLJNlmfGBtn+rTI/1diwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/WewVpK0FBFprZ6mpVLE0YgYit5kYrJSHomIn0XEJ8Xe/qzdn3fQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdNzM3PzUWKVSnn6eSrK7w1VU2lX+vz/C2NtKUqsM5B1GvZL3KxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHmYmZufGqtUytMzeUcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5G1mbn5qrFIpTz9D5d5Odl5XyTtHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADy82MAAAD//1sCDDY=") chdir(&(0x7f0000000140)='./file0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84042, 0x1fa) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000004, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x60) write$P9_RLERROR(r5, &(0x7f0000000000)=ANY=[], 0x11) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) write$P9_RUNLINKAT(r4, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) ioctl$BTRFS_IOC_DEFRAG(r4, 0x50009402, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000010027bd700402d4df2500000000", @ANYRES32=r3, @ANYRESHEX=r3], 0x44}}, 0x20088883) 4.867285285s ago: executing program 4 (id=344): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_io_uring_setup(0x943, &(0x7f00000002c0)={0x0, 0xd075, 0x0, 0x1, 0x2b3}, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000440)=[r0, r0], 0x2) syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f0000000180)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00, @ANYBLOB=',dmask=00000000000000000000007,uid=', @ANYRESHEX=0x0, @ANYBLOB=',iocharset=macromanian,iocharset=cp775,namecase=1,gid=', @ANYRESHEX=0x0, @ANYBLOB=',namecase=1,umask=00000000000000000000165,errors=continue,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c646f6e740502cc52b1ca5f6d6561737572652c657569643ec062c95ddb1ddf7803fd148671ea1a693a86da7c6205d03cf2e55641cc7614fca8f8790f24991f1f827734e1db4403be300d1bc67e2c303e4ac00643ebb572c3d4b1d7536b90a8d72b5c407c78c009daab5fcb54dd76f7e0b594272cf7f3c7be5d", @ANYBLOB="abb5976c2b78da5111db26996161b75414550a8c4b4ff488588b99c77b341d8bf10bc70bc63d3ad8646cbe3fb8f2c0fff90b2692f25eb44af72dd382febcf9b21db6b62d0d4c54d6e02a25ad24fe0e03e8ce40674e0ee7bb44c387ead24f7bf8e6f5b7618aa29dabffcedefa810d204ab1d328ce5ab6795e0b661c9c6dfb13a95ea6bce11b1bb09a0c5f61ecac1ba71ab762addb66e57d70b75b757e14ccc7a8d1e4", @ANYBLOB=',fsmagic=0xffffffffffffff9e,\x00'], 0x1, 0x1535, &(0x7f0000001380)="$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") creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 4.69013948s ago: executing program 4 (id=345): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x204858, &(0x7f00000002c0)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5f97722752a98440a5725268a242c0263564f968d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de293ee375647f886a5310889982079aa7b1fb4eefe7f768eec58b19cf50faa8af129503175f4262df73df51d3641ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000bb10541149fc9f7f374f57b07713ef5870a5f62357be114a4d8e925becf2d6eafbbd2ba7a07fec3414361d551da0464ce8c1e21ba3debd6b839e3c7545e08c343dd9566721b848b22eaad7d3b4f7e756373917e426f0f9fb64550639f4fc6195c7e9e25295d7cdf0531e8f7d67ff11fc61d80c6f36a81f2263e6b4b846d802f37eb1dba973d1b61945e708827c01ac28e70d5d9e26bf9752d5829bbfc48c045e151e13c4c41fe54f930521693955c554f1ff94bab2ab7fe9605bfaec155ae25380ab217d2f11d7f4bfda07c5d645c891d310567761", @ANYRES32, @ANYRES32, @ANYRES8, @ANYRES32], 0x1, 0x347, &(0x7f0000001840)="$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") r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syslog(0x3, &(0x7f0000000d40)=""/153, 0x99) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) splice(r1, 0x0, r3, 0x0, 0x7, 0x0) shutdown(r2, 0x1) 4.503293585s ago: executing program 2 (id=346): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x48, &(0x7f0000000400)=0x7ff, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r1, 0x3, 0x1) getdents64(r1, 0x0, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000000080)) syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f0000000000)='./bus\x00', 0x90800, &(0x7f0000000100)={[{@grpquota}, {@quota}, {@discard}, {@nobarrier}, {@jqfmt_vfsold}, {@lazytime}, {@noblock_validity}, {@prjquota}]}, 0xff, 0x501, &(0x7f0000000e80)="$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") r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_GET_TSC_KHZ_vm(0xffffffffffffffff, 0xaea3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xc1a702, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0x40086610, &(0x7f00000004c0)={@id={0x2, 0x0, @b}}) ioctl$TCSETS(r3, 0x5402, 0x0) 4.369116118s ago: executing program 3 (id=348): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r1) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bind$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f00000001c0)={0x28, 0x0, 0x8703268b, @local}, 0x10) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r7, &(0x7f0000000040)=ANY=[], 0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000173c8ca19a151c7b"], 0x50) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x8, &(0x7f0000000600), 0x5, 0x51e, &(0x7f0000000640)="$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") r8 = syz_open_procfs(0x0, &(0x7f0000000080)='net/fib_trie\x00') read$FUSE(r8, &(0x7f0000005900)={0x2020}, 0x2020) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000480)={[{@grpquota}, {@bsdgroups}, {@quota}]}, 0x1, 0x506, &(0x7f0000001d00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x800c4, 0x0) 4.326469039s ago: executing program 4 (id=349): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0xfffffffe) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, 0x0, 0x0) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000580)="b60c5cdb42ced9ad862e687a9e21ee2a6ffc2dfbb4f6e67ff9a4a64db2750cb9806f34f1a5765925076a7815f15d70104afa7803b60abdd9f31d2eb87cc31334cc6537e03c76194ecfba64111a9758f20a14a4c8e468e93c55f2ef3c8fdd0746672d2eaba284c87fa4efc58cdfaa", 0x6e}], 0x1) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000017c0)=""/110, 0x6e}], 0x1}, 0x8000000}], 0x1, 0x0, 0x0) 2.595964913s ago: executing program 4 (id=350): socket$inet_tcp(0x2, 0x1, 0x0) epoll_create1(0x0) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x10, &(0x7f0000000100)={[{@i_version}, {@noauto_da_alloc}, {@oldalloc}]}, 0x1, 0x3f7, &(0x7f0000003080)="$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") ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x300, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x4, 0x1001000000, 0x0, 0x10043, 0x2000001, 0x3, 0x2004cb, 0x0, 0x1000007, 0xd2, 0x2, 0xeef, 0x3, 0x0, 0x7], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0xeeee0000, 0xb, 0x8, 0xb, 0xe4, 0x40, 0x0, 0x20, 0x2e, 0x80}, {0x5000, 0x4000, 0x3, 0x0, 0x42, 0x5, 0x5, 0x0, 0x5, 0x5, 0xfc, 0x89}, {0x6000, 0x1, 0x0, 0x5, 0x3, 0x7, 0x1, 0x7, 0x9b, 0xa4, 0x5, 0x5}, {0x1, 0x25000, 0xd, 0x9, 0x4, 0x42, 0xb, 0xff, 0x6, 0x7, 0xe}, {0x4, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0x9, 0x83, 0xf7, 0x83}, {0x1000, 0xc000, 0x4, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0xf, 0x1, 0x7}, {0x5000, 0x1, 0xe, 0x5, 0xe1, 0x15, 0x7, 0x3, 0x7, 0x81, 0x40, 0x70}, {0xd000, 0x4000, 0xd, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0x4c, 0xb0, 0x9}, {0x8000000, 0x30}, {0x8000000, 0x7}, 0x80010000, 0x0, 0x0, 0x402105, 0xb, 0x1500, 0x3000, [0x9, 0x0, 0x5, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.399651859s ago: executing program 0 (id=351): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x3, [@struct={0xf, 0x1, 0x0, 0x4, 0x0, 0x400, [{0x8, 0x4, 0x2}]}, @func={0x2, 0x0, 0x0, 0xc, 0x1}, @enum={0xd, 0x2, 0x0, 0x6, 0x4, [{0xf, 0x9}, {0xb, 0x6}]}, @float={0x8, 0x0, 0x0, 0x10, 0x10}, @volatile={0xa, 0x0, 0x0, 0x9, 0x4}]}, {0x0, [0x20]}}, &(0x7f0000000380)=""/222, 0x73, 0xde, 0x1, 0xe}, 0x28) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x1}, 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0xc08, 0x3, 0x440, 0x0, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0x0, 'bridge0\x00', 'pimreg1\x00', {}, {0xff}, 0x5c, 0x3, 0x41}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {0x0, 0x0, 0x0, 0x5d}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {0x4}, {}, {0xfffc}, {0x0, 0x0, 0x0, 0x10001}, {}, {}, {0x0, 0x0, 0x8}, {0x0, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x2}, {0x5}, {}, {0x4, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {0xcd2e}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {0x400}, {}, {0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0xfd}, {}, {}, {0x3}]}}, @common=@inet=@socket3={{0x28}, 0x7}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4a0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)=@generic={&(0x7f0000000040)='./file0\x00', r0}, 0x18) r2 = openat$kvm(0x0, &(0x7f0000000000), 0x200, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000005c0)=0x5) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c0000001a00010000000000000000000201000008000200"], 0x1c}}, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xde) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x25, &(0x7f00000000c0)={0x1}) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)={0x1}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x2}) fcntl$lock(r6, 0x26, &(0x7f0000000300)={0x1, 0x0, 0x1, 0xffffffffffffffff}) fcntl$lock(r6, 0x25, &(0x7f0000000140)={0x0, 0x0, 0x9, 0x17}) close_range(r3, 0xffffffffffffffff, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r7 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r7, &(0x7f0000000180)={0x0, &(0x7f00000002c0)=[@enable_nested={0x12c, 0x18}, @code={0xa, 0x7d, {"66460f388122460f01f866baf80cb8c2ba8883b866bafc0c66b86a3b66efb805000000b97b0000000f01d90f78dbc48269a8f7c4e1adecdac744240200000000c7442406000000000f011424b940020000b8bd000000ba000000000c3065660f38818515640000f32e0f01df"}}], 0x95}) 2.273850252s ago: executing program 3 (id=352): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) gettid() mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uac1.usb0/c_chmask\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/uac1.usb0\x00') write(r2, &(0x7f0000000040)="6075ac", 0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2.240716163s ago: executing program 4 (id=353): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file1\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f00000017c0)="$eJzs3c9vFFUcAPDvzG5LKWgX40GMCTUeIDFsW0BB4gE8Gg8mkqAnXPuDNCxgaE0sIbHcTLyowZMnT2qiR6+GGPXkweiJ/8CQEFP4A2pmdras7W5LYcuQ9vNJZve9eSzvO02++9503nQC2LFGs5c0Yn9EfJ5EjBT704gYzEtDEYutf3dv6dpktiWxvPzOv0kkEXF36dpk+/9Kivc92Us1/2T89UvEM5W1/c4tXL3QaDanrxT1sfmLH47NLVw9PHuxcX76/PSlI6+OH5147diJV47d/9DQox3rwvH0sz/ffOO7G+e+/uPHEy98msSp2Fu0dR5Hv4zG6MrPpFM1It7rd2clqRTH0+04AQB48qQdc7j9MRKVvNQyEvXZUoMDAAAA+uKTiFgGAAAAtrnE+T8AAABsc+11AHeXrk22t3JXJACPy53TEVFr5X/7/v5WSzUW8/ehGIiI4XtJx51Brfu9a33ofzQifvjq+IFsiy26Dx/obvF6RDzXbfxP8vyvFX90Y3X+pxEx3of+R1fV5T88Pt3yv3VesHH+n+pD//IfAAAAAAAA+ufm6daF/LXX/9OV9T/R5fpfpcu1u4ex8fW/9HYfugG6uHM64vWOZ/vc68j/Qq1S1J7K1wMMJDOzzenxiHg6Ig7FwK6sPrFOH9/+dPLvXm2d6/+yLeu/vRawiON2ddf/PzPVmG88yjEDLXeuRzxf7Zb/ycr4n/RY//v2A/bx29mfZ3q1bZz/wFZZ/ibiYNfx//4T3ZL1n883ls8HxtqzgrXOvvjr9736l/9Qnmz8H14//2tJ5/M65zbfx/jw4fO92h52/j+YnMmfKjpY7Pu4MT9/ZSJiMHlr7f4jm48ZtqN2PrTzJcv/Qy91P/9fb/6fJdn7xbdEGhGN4j2rf7Cqz13nfv+iVzzGfyhPlv9Tmxr/N1/48t2lM736f7Dx/1g+ph8q9vj9H6zvQRO07DgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgSZJGxN5I0vpKOU3r9Yg9EfFsDKfNy3PzL89c/ujSVNYWUYuBdGa2OT0eESOtepLVJ/Ly/fqRVfWjEbEvIm6M7M7r9cnLzamyDx4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAVeyJibyRpPSLSvJym9Xqr7Z+RsqMDAAAA+qZWdgAAAADAlnP+DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAj2nfg5q0kIhZP7s63zGDRNlBqZMBWS8sOAChNpewAgNJUyw4AKI1zfCDZoH2oZ4sZBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBOcnD/zVtJRCye3J1vmcGibaDUyICtlpYdAFCaStkBAKWplh0AUBrn+ECyQftQzxYzCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICdZG7h6oVGszl9RWHdQjUinoAwFBQeU6HsbyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2s/8CAAD//yT3/f8=") r0 = creat(&(0x7f0000000000)='./bus\x00', 0x15) io_setup(0x202, &(0x7f0000000200)=0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e21, 0x800, @dev={0xfe, 0x80, '\x00', 0x13}, 0x2}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x0) unshare(0x2020600) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r2, &(0x7f0000000000)={0x24, @long}, 0x8) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x70000}]) 2.167820455s ago: executing program 3 (id=354): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xc}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x48}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x18, 0x69, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8100}}, 0x18}}, 0x0) (async) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) write$UHID_INPUT(r3, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000040)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b8377a000000d80f300f300fc79d53bf00000f0057000f01c3", 0x61}], 0x1, 0x14, 0x0, 0x0) (async) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f00000001c0)={"879862f1b643b3ed0c655d724876d98e58758000f3b9ae36e400c5bda6c53d9c9cc9e753c7c59a0b8ef38561aed8817b8b6a7ce37f99c54b27164492e5d599b7020327998f1d0e9ab9ca7d40f154ecde247b2568ea6e458f53faec416d2169d22d3daa0f9bf6f90b8e374bec396dc2b60c596312dbeede336bebc9b4fa21f2a042dc47e39a820aff92b2352c148a9fde39f685405ed0ca712ba9253ec7bddd2900459455ac9da0fe5c7285050880ccda54c864abb8cb94fc9d372053a833b59b809c25639a34525221ee980c3357225e02281ff1f2088c0d4a1f07a65484cc26eded503c52c3f07eb18c954107ba97793fb5b0b4a43cde44be334996b59234fcf7663c0a59d0af1484efdb8e364abfb1ee277771c198777e1fffb8bb0ad5e6146bd8fe200f0dd271602c49dd517e5225e413e2908534edd88a557a4303ade836a09940d312ef694f173fb21f7e307ffbfa0000000000000064abf270c97901b86c17635fd7afee11a76453f9e8c873eac8e4fef5f3b494c4fb6bd391fa571d48a1021fd57a12c2dc8f7e633aa7eae4bdb56e0a699ae13cd03ac272b6af2f60fced115f4709202046ea7f60f9b1b37660c4049ddda94302509e777a3d53b7cafd1f5476e0aa21e54cf38a84254f7feeb1c1ab22c83e7532d9601f5819d8511cd36bf0716430583f608a9998172d1881dcead5f0f4ff9587880901fe5fed010a2439ebd846f1d4b03b7c7b39fbea9fc74f488c2dad37738560a60f2918dc2feb1d9aec4b9c6a617059e4ad9313a121f2784ad5ad35a52832a2c4c832c23d23a41091c6a65889547e3c9b6aab293648abb72d703e3a5408e04ab39f75891c2425fde67ea31bd4544f7ad8734e590f22811823df2db6ff4d53476e092fd0764849e07b983fd09bdae938d1855082608dbc5ff71d51cace1a4e0957a516195178b6ace5eb203816d15d00f08431e0840a62439c4ee87a9d6230bec445a4ef20853db951630a8e8ffba1a8099c45fc4a9bc9fd6c3506b9ddf5435769b4b36850819634bfc0ba87fda98b09828d9e6ad2bc02da6afc58624609a76ea3cc5953267ffe73c5485125c0b6ad1e00a5b5142c014d1e06ad37296ce5dbf663692bb06ce79450a9148661aa405d225dcb9b9b8c6df52d7d5c04007e9b9775f4947fef91050000000000000062a6799f41ea2b8cd73e7ee4775ed889074b0c74ef3e2ece5040216536d75946102967c71069123bd9567560224c85b42d52fd86d8f9d5bde1327926b945b6ac4bc9fd86777f44e91d15c751b584482d4b579b5c9b01000000bd37abd08621336e83c0e4a43621c0fc9a00"}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x9, 0x0, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r5) setsockopt$netlink_NETLINK_PKTINFO(r5, 0x10e, 0x3, &(0x7f00000005c0)=0x3ff, 0x4) mount$bpf(0x0, &(0x7f0000000ac0)='.\x00', &(0x7f0000000b00), 0x400008, &(0x7f00000000c0)={[{@mode={'mode', 0x3d, 0x7}}]}) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) r7 = syz_open_dev$vcsu(&(0x7f0000000100), 0x8, 0x81e00) (async) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x0, 0x47) read$FUSE(r8, &(0x7f0000002680)={0x2020}, 0x2020) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9fab01001800000000008df1d43029000018000000180000000300000000000000000000030000000002000000010000003000"], 0x0, 0x33, 0x0, 0x0, 0x0, 0x10000, @value=r7}, 0x28) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000540)={0xa, 0x4e21, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10}, 0x1c, 0x0}}], 0x1, 0xff00) (async) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r11, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) (async) r12 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r12, &(0x7f0000000540)={&(0x7f00000005c0)={0xa, 0x4e21, 0xffffffff, @ipv4={'\x00', '\xff\xff', @remote}, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="12000000000000001100000067"], 0x25}, 0x4) (async) syz_usb_connect$midi(0x0, 0x3f, &(0x7f00000001c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x499, 0x1054, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x64, 0x70, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x0, 0xf9, [], [{{0x9, 0x5, 0x3, 0x3, 0x20, 0x0, 0x2, 0xf, {0x4}}}, {{0x9, 0x5, 0xb, 0x3, 0x3ff, 0x6, 0x8f, 0x0, {0x5, 0x25, 0x1, 0x1, "eb"}}}]}}}}}]}}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) 2.167609805s ago: executing program 2 (id=355): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain={'key_or_keyring:', r1}) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000780)="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", 0x559, r0) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, r0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 2.060939787s ago: executing program 1 (id=356): syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b01090224"], 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x8782, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r4) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r6, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044051}, 0x40810) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) (async) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r8) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r10, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044051}, 0x40810) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r2, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80000}, 0x4000000) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 2.041489688s ago: executing program 0 (id=357): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2040) syz_fuse_handle_req(r0, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0xfffffffffffffffd, {0x4, 0x3, 0x83, 0x8, 0x7fffffff, 0xc1, {0x9, 0x80000000000, 0x1, 0xfffffffffffffffa, 0x0, 0x3, 0x10, 0x4, 0x0, 0x8000, 0x2, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x27, 0x0, 0x801001a, 0x66d, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x41}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000c280)="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", 0x2000, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)={0x90, 0x0, 0x0, {0x4, 0xffffffffffffffff, 0xb70, 0x7e30, 0xf, 0x3, {0x0, 0xfffffffffffffffc, 0x0, 0x100000000, 0x3, 0x1, 0x2, 0x4, 0x2608636, 0x4000, 0x104, r2, r3}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f00000000c0)='./file0/../file0/file0\x00') 2.036114508s ago: executing program 3 (id=358): r0 = epoll_create(0xc) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)={0x200000, 0x200000, 0xa, 0x0, 0x8}) r1 = gettid() r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000002640)={&(0x7f0000001380)={0x18, r4, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000040) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0xb, 0x4) sendmsg$netlink(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)={0x1c, 0x5e, 0x1, 0x0, 0x0, "", [@typed={0x9, 0x4, 0x0, 0x0, @binary="42f7fb405c"}]}, 0x1c}], 0x1, 0x0, 0x0, 0x4000080}, 0x0) fcntl$lock(r2, 0x6, &(0x7f00000000c0)={0x0, 0x1, 0x6, 0x9, r1}) syz_open_procfs(r1, &(0x7f0000000180)='wchan\x00') fcntl$lock(r0, 0x5, &(0x7f0000000040)={0x1, 0x0, 0xa6, 0x800, r1}) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="07000000040000001020000005"], 0x50) 1.997204149s ago: executing program 2 (id=359): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711817000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.996755579s ago: executing program 0 (id=360): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0xfffffffe) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, 0x0, 0x0) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000580)="b60c5cdb42ced9ad862e687a9e21ee2a6ffc2dfbb4f6e67ff9a4a64db2750cb9806f34f1a5765925076a7815f15d70104afa7803b60abdd9f31d2eb87cc31334cc6537e03c76194ecfba64111a9758f20a14a4c8e468e93c55f2ef3c8fdd0746672d2eaba284c87fa4efc58cdfaa", 0x6e}], 0x1) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000017c0)=""/110, 0x6e}], 0x1}, 0x8000000}], 0x1, 0x0, 0x0) 1.875907202s ago: executing program 3 (id=361): prctl$PR_GET_IO_FLUSHER(0x3a) memfd_create(&(0x7f0000000040)='/dev/sda1\x00', 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = fsopen(&(0x7f0000000440)='ext4\x00', 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000300)='acl\x00\x9a\v\x9e\xd4\x10\x18\xe6\xca\xf1\x0f\xc8H\xc8#A@\x9a\xe4r\x89h8\x1b\xab\x84<\x85\xe5\x88j_<(nW4\xe4\xbb\xe9PF\x1b|\xc4\xa1\xa0\x9e\x81\xa0lZS\'\x8f\x91\xf7\x03\xa2\x8cd\x1f\xd3y\xce\x1asj\x98\xb5\x95\xdf\x915\a\x97=\xa9\xe7A\x12\xc2\xf5_\x11\b\x00\x00\x00\x00\x00\x00\x00\x1c\x1e:^\xdeNT\xe8O\xe8\x1ez\x9e\xc8\x8eo@Ti\xf6\xe5F\x0fv\xf1H\xdf\xf1\xe1\x9en\xc1\xd1\xca\xca\x89\"\xe4\x9c\xe6\xc2\xd8\xaa\xf6\f>\x19\x15t=\x1eXp\xba~\xb8xd>\x92LO\x06\xa3\xfdS\x01\xd1GE\x0f\x98L\x99#\xef5\xed[H\x104\xcd\xe23l\xd1\x9fc5\x87\xb4\xd7\xf6\xecr)\x0f\xc7\xe4\x1d[\x82\xc3\x18\xa4{\xecF\x81\xdb', &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xffffffffffffff9c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x105042, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, 0x0}], 0x1, 0x6d, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x10}, {0xfff1, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@delchain={0x24, 0x66, 0xf31, 0xfffffffb, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xf, 0xfff1}, {0x0, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x3, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x0, 0xfffffffffffffe3f}) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000300)={{0xffffffff, 0x7000, 0xe, 0x4, 0x40, 0xff, 0xa, 0x6, 0x3, 0xd9, 0x24, 0x1}, {0x8080000, 0x3000, 0x91192570d5d7f361, 0xb, 0x6f, 0xc7, 0x4, 0x9, 0x6, 0x8, 0xfd, 0x22}, {0xeeeac006, 0x7000, 0xe, 0x5, 0x0, 0x0, 0x1, 0x4, 0xa3, 0x2, 0x1d, 0x6}, {0x8080000, 0x26000, 0x0, 0x9, 0x62, 0x0, 0x6, 0x4, 0xff, 0x5, 0x4, 0x9}, {0x5d5b6904910cc0bd, 0x9000, 0xb, 0x1, 0x8, 0x71, 0x0, 0x0, 0x4, 0x6, 0x0, 0x6}, {0x58000, 0x54000, 0x9, 0x7f, 0x9, 0x4, 0x9, 0x2, 0x1, 0x9, 0x5, 0xf}, {0x6000, 0x0, 0x4, 0x9, 0x0, 0x5, 0x6, 0xd, 0x10, 0x80, 0xd9, 0xf1}, {0x2, 0x0, 0xb, 0x3, 0x4, 0xb, 0x2, 0x9, 0x3, 0x66, 0xa4, 0xf9}, {0xe000, 0x7a52}, {0x41000, 0x5}, 0xc0000000, 0x0, 0xd000, 0x114, 0x9, 0xc100, 0x50000, [0x9, 0x8, 0x7, 0xd92b]}) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000100)=0x5000) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x10, 0x0, 0x8, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x1}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) write(r9, &(0x7f00000000c0)="2400000058003f0f9c1a8c686f85b3a85c91fddf080001000501db200800028001000000", 0x24) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000100)='./file0\x00', 0x2a00005, &(0x7f0000000080)=ANY=[], 0x0, 0x2b7, &(0x7f0000000580)="$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") sendfile(r1, r1, 0x0, 0xe3aa6e2) 1.875675092s ago: executing program 2 (id=362): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800faff5d00010000000000000000000a00000000000000"], 0x18}}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="000000005994d967ac9d338f09d7e5e64eef7b617f037edfff4b50bef33ba0d0a2d13d0d484ee01551305a4788dfabc55407e6e348429cad9c66da5d82d1", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000300"/28], 0x50) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84042, 0x1fb) write$P9_RUNLINKAT(r1, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42}, 0x10) dup3(0xffffffffffffffff, r3, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCGETLINKNAME(r5, 0x89e0, &(0x7f0000000240)={0x0, 0x1}) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x8) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r8, 0x0, 0xb) splice(r10, 0x0, r9, 0x0, 0x1000, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r12, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) splice(r7, 0x0, r11, 0x0, 0x80, 0x0) munmap(&(0x7f0000000000/0x1000)=nil, 0x1000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000040)=0x7ff, 0x4) 1.834980883s ago: executing program 4 (id=363): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r1) timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bind$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f00000001c0)={0x28, 0x0, 0x8703268b, @local}, 0x10) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) bind$bt_hci(r7, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r7, &(0x7f0000000040)=ANY=[], 0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000173c8ca19a151c7b"], 0x50) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x8, &(0x7f0000000600), 0x5, 0x51e, &(0x7f0000000640)="$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") r8 = syz_open_procfs(0x0, &(0x7f0000000080)='net/fib_trie\x00') read$FUSE(r8, &(0x7f0000005900)={0x2020}, 0x2020) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000480)={[{@grpquota}, {@bsdgroups}, {@quota}]}, 0x1, 0x506, &(0x7f0000001d00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x800c4, 0x0) 85.749818ms ago: executing program 0 (id=364): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) gettid() mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uac1.usb0/c_chmask\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/uac1.usb0\x00') write(r2, &(0x7f0000000040)="6075ac", 0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) 21.806439ms ago: executing program 2 (id=365): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x682, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x41, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4000000}, 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, r7, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000080)="250f300f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130b9070900000f32f2360f217a0fadad", 0x32}], 0x1, 0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write(r3, &(0x7f0000000080)='4', 0x1) 21.576839ms ago: executing program 3 (id=366): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x9, 0x30, 0xe, "", [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x7, 0x1, 0x1, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x270, 0x1, 0x5, 0x1}}}}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x160, 0x0, 0x2, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x81a}}, {0x22, &(0x7f0000000140)=@string={0x22, 0x3, "786e076395502c57496a01b781868d7e8b3b1b52c7838b64aa96681159da7cde"}}]}) 0s ago: executing program 0 (id=367): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x3, [@struct={0xf, 0x1, 0x0, 0x4, 0x0, 0x400, [{0x8, 0x4, 0x2}]}, @func={0x2, 0x0, 0x0, 0xc, 0x1}, @enum={0xd, 0x2, 0x0, 0x6, 0x4, [{0xf, 0x9}, {0xb, 0x6}]}, @float={0x8, 0x0, 0x0, 0x10, 0x10}, @volatile={0xa, 0x0, 0x0, 0x9, 0x4}]}, {0x0, [0x20]}}, &(0x7f0000000380)=""/222, 0x73, 0xde, 0x1, 0xe}, 0x28) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x1}, 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0xc08, 0x3, 0x440, 0x0, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0x0, 'bridge0\x00', 'pimreg1\x00', {}, {0xff}, 0x5c, 0x3, 0x41}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {0x0, 0x0, 0x0, 0x5d}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {0x4}, {}, {0xfffc}, {0x0, 0x0, 0x0, 0x10001}, {}, {}, {0x0, 0x0, 0x8}, {0x0, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x2}, {0x5}, {}, {0x4, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {0xcd2e}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {0x400}, {}, {0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0xfd}, {}, {}, {0x3}]}}, @common=@inet=@socket3={{0x28}, 0x7}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4a0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)=@generic={&(0x7f0000000040)='./file0\x00', r0}, 0x18) r2 = openat$kvm(0x0, &(0x7f0000000000), 0x200, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000005c0)=0x5) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c0000001a00010000000000000000000201000008000200"], 0x1c}}, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xde) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x25, &(0x7f00000000c0)={0x1}) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)={0x1}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x2}) fcntl$lock(r6, 0x26, &(0x7f0000000300)={0x1, 0x0, 0x1, 0xffffffffffffffff}) fcntl$lock(r6, 0x25, &(0x7f0000000140)={0x0, 0x0, 0x9, 0x17}) close_range(r3, 0xffffffffffffffff, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r7 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r7, &(0x7f0000000180)={0x0, &(0x7f00000002c0)=[@enable_nested={0x12c, 0x18}, @code={0xa, 0x7d, {"66460f388122460f01f866baf80cb8c2ba8883b866bafc0c66b86a3b66efb805000000b97b0000000f01d90f78dbc48269a8f7c4e1adecdac744240200000000c7442406000000000f011424b940020000b8bd000000ba000000000c3065660f38818515640000f32e0f01df"}}], 0x95}) kernel console output (not intermixed with test programs): omiscuous mode [ 22.077112][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.084229][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.091834][ T288] device bridge_slave_1 entered promiscuous mode [ 22.136019][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.143546][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.151024][ T287] device bridge_slave_0 entered promiscuous mode [ 22.158880][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.166389][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.174489][ T287] device bridge_slave_1 entered promiscuous mode [ 22.277800][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.285022][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.292777][ T289] device bridge_slave_0 entered promiscuous mode [ 22.301917][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.310670][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.318703][ T289] device bridge_slave_1 entered promiscuous mode [ 22.396660][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.404675][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.412536][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.420458][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.443654][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.451213][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.458872][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.466898][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.477199][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.484420][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.491887][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.499031][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.515056][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.522510][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.530001][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.537256][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.597847][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.606362][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.614530][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.623564][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.632511][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.640050][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.647627][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.655886][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.663461][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.686102][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.694595][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.702685][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.711464][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.721185][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.728895][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.737113][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.745739][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.753237][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.761616][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.770557][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.778323][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.799820][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.808524][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.817523][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.824900][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.832452][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.842885][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.851423][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.859504][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.867971][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.875364][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.897819][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.909138][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 22.919820][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.928483][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.935841][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.944457][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 22.953635][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.962355][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.972262][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.980730][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.989499][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.999022][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.008719][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.018433][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.027174][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.048981][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.057642][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.066204][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.074990][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.083296][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.091434][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.099511][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.110409][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.119395][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.127231][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.136485][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.146032][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.154389][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.162285][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.170068][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.178783][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.187477][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.203643][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.212214][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.224896][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.234355][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.245592][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.261065][ T287] device veth0_vlan entered promiscuous mode [ 23.273647][ T286] device veth0_vlan entered promiscuous mode [ 23.280384][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.289435][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.298898][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.307840][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.316777][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.325488][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.334715][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.346494][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.354328][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.362033][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.369989][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.384254][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.394647][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.408719][ T285] device veth0_vlan entered promiscuous mode [ 23.421387][ T288] device veth0_vlan entered promiscuous mode [ 23.429571][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.437599][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.446618][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.455036][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.464355][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.473405][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.481664][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.490099][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.498560][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.506852][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.515707][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.531484][ T286] device veth1_macvtap entered promiscuous mode [ 23.542861][ T289] device veth0_vlan entered promiscuous mode [ 23.549873][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.558611][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.566819][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.574397][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.583160][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.591700][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.599961][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.610366][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.619873][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.629297][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.639018][ T288] device veth1_macvtap entered promiscuous mode [ 23.647085][ T285] device veth1_macvtap entered promiscuous mode [ 23.658584][ T287] device veth1_macvtap entered promiscuous mode [ 23.667434][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.675537][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.683983][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.692768][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.711845][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.720932][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.730027][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.738839][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.747681][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.756567][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.765527][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.774176][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.795519][ T286] request_module fs-gadgetfs succeeded, but still no fs? [ 23.796613][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.811600][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.820627][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.830656][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.839251][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.848223][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.857171][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.867617][ T289] device veth1_macvtap entered promiscuous mode [ 23.898496][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.910672][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.942233][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.953731][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.962965][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.984759][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.994783][ T320] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.043015][ T320] loop0: detected capacity change from 0 to 512 [ 24.074008][ T320] EXT4-fs (loop0): Ignoring removed oldalloc option [ 24.100806][ T320] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,noauto_da_alloc,oldalloc,,errors=continue. Quota mode: none. [ 24.165290][ T58] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 24.193051][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 24.203101][ T335] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 24.222222][ T340] loop0: detected capacity change from 0 to 512 [ 24.226141][ T335] sch_tbf: burst 7 is lower than device lo mtu (65550) ! [ 24.249263][ T340] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 24.270524][ T340] EXT4-fs error (device loop0): ext4_orphan_get:1432: comm syz.0.9: bad orphan inode 13 [ 24.281023][ T340] ext4_test_bit(bit=12, block=18) = 1 [ 24.287993][ T340] is_bad_inode(inode)=0 [ 24.293250][ T340] NEXT_ORPHAN(inode)=0 [ 24.298373][ T340] max_ino=32 [ 24.301670][ T340] i_nlink=1 [ 24.305004][ T340] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 24.465476][ T20] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 24.545214][ T58] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 24.648201][ T350] loop0: detected capacity change from 0 to 512 [ 24.824526][ T350] EXT4-fs error (device loop0): ext4_quota_enable:6431: comm syz.0.11: Bad quota inum: 12023, type: 1 [ 24.837133][ T350] EXT4-fs warning (device loop0): ext4_enable_quotas:6479: Failed to enable quota tracking (type=1, err=-117, ino=12023). Please run e2fsck to fix. [ 24.854514][ T350] EXT4-fs (loop0): mount failed [ 25.493618][ T58] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 25.557584][ T354] loop0: detected capacity change from 0 to 512 [ 25.576219][ T58] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 25.591657][ T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 25.601030][ T354] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 25.610418][ T58] usb 4-1: SerialNumber: syz [ 25.625230][ T354] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 25.641170][ T354] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 25.662635][ T354] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 25.681417][ T354] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e01c, mo2=0000] [ 25.690347][ T354] EXT4-fs (loop0): failed to initialize system zone (-117) [ 25.698073][ T354] EXT4-fs (loop0): mount failed [ 25.735266][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.755187][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.775192][ T20] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 25.797784][ T20] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 25.807337][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.816868][ T20] usb 3-1: config 0 descriptor?? [ 25.889163][ T348] loop4: detected capacity change from 0 to 131072 [ 25.896562][ T58] usb 4-1: 0:2 : does not exist [ 25.902988][ T58] usb 4-1: USB disconnect, device number 2 [ 25.936753][ T348] F2FS-fs (loop4): Test dummy encryption mode enabled [ 25.947538][ T348] F2FS-fs (loop4): invalid crc value [ 25.958258][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 25.969062][ T358] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 25.978077][ T358] sch_tbf: burst 7 is lower than device lo mtu (65550) ! [ 25.983744][ T348] F2FS-fs (loop4): Found nat_bits in checkpoint [ 25.986748][ T358] fuse: Bad value for 'fd' [ 26.021666][ T348] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 26.049220][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 26.049235][ T30] audit: type=1400 audit(1785997923.686:131): avc: denied { write } for pid=347 comm="syz.4.12" name="/" dev="loop4" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 26.050155][ T348] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 26.055539][ T30] audit: type=1400 audit(1785997923.686:132): avc: denied { add_name } for pid=347 comm="syz.4.12" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 26.105240][ T6] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 26.106514][ T30] audit: type=1400 audit(1785997923.686:133): avc: denied { create } for pid=347 comm="syz.4.12" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 26.134562][ T356] udevd[356]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 26.153265][ T30] audit: type=1400 audit(1785997923.716:134): avc: denied { write open } for pid=347 comm="syz.4.12" path="/2/file0/file0" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 26.181010][ T30] audit: type=1400 audit(1785997923.726:135): avc: denied { ioctl } for pid=347 comm="syz.4.12" path="/2/file0/file0" dev="loop4" ino=10 ioctlcmd=0x5828 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 26.300528][ T30] audit: type=1400 audit(1785997923.936:136): avc: denied { prog_load } for pid=370 comm="syz.4.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 26.321310][ T30] audit: type=1400 audit(1785997923.936:137): avc: denied { bpf } for pid=370 comm="syz.4.16" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 26.325194][ T311] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 26.354349][ T20] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 26.365805][ T20] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 26.366008][ T30] audit: type=1400 audit(1785997924.006:138): avc: denied { create } for pid=370 comm="syz.4.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 26.410204][ T30] audit: type=1400 audit(1785997924.046:139): avc: denied { setopt } for pid=370 comm="syz.4.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 26.441366][ T376] loop3: detected capacity change from 0 to 512 [ 26.506741][ T30] audit: type=1400 audit(1785997924.146:140): avc: denied { perfmon } for pid=370 comm="syz.4.16" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 26.545273][ T6] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 26.557548][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.563584][ T312] usb 3-1: USB disconnect, device number 2 [ 26.569065][ T6] usb 1-1: config 0 descriptor?? [ 26.578256][ T376] EXT4-fs error (device loop3): ext4_acquire_dquot:6227: comm syz.3.18: Failed to acquire dquot type 1 [ 26.590880][ T376] EXT4-fs error (device loop3): ext4_acquire_dquot:6227: comm syz.3.18: Failed to acquire dquot type 1 [ 26.592800][ T382] loop4: detected capacity change from 0 to 16 [ 26.610296][ T376] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.18: bg 0: block 248: padding at end of block bitmap is not set [ 26.626136][ T376] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 26.636884][ T382] ======================================================= [ 26.636884][ T382] WARNING: The mand mount option has been deprecated and [ 26.636884][ T382] and is ignored by this kernel. Remove the mand [ 26.636884][ T382] option from the mount to silence this warning. [ 26.636884][ T382] ======================================================= [ 26.636969][ T376] EXT4-fs error (device loop3): ext4_acquire_dquot:6227: comm syz.3.18: Failed to acquire dquot type 1 [ 26.684804][ T376] EXT4-fs (loop3): 1 orphan inode deleted [ 26.690779][ T376] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 26.702155][ T376] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 26.708151][ T382] erofs: (device loop4): mounted with root inode @ nid 36. [ 26.778035][ T376] EXT4-fs error (device loop3): ext4_map_blocks:632: inode #2: block 3: comm syz.3.18: lblock 0 mapped to illegal pblock 3 (length 1) [ 26.792681][ T376] EXT4-fs warning (device loop3): ext4_empty_dir:3139: inode #2: lblock 0: comm syz.3.18: error -117 reading directory block [ 26.815344][ T311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 26.827799][ T311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 26.829584][ T286] EXT4-fs error (device loop3): __ext4_get_inode_loc:4365: comm syz-executor: Invalid inode table block 34 in block_group 0 [ 26.839635][ T311] usb 2-1: New USB device found, idVendor=0925, idProduct=8066, bcdDevice= 0.00 [ 26.852745][ T286] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5904: Corrupt filesystem [ 26.862037][ T311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.862738][ T311] usb 2-1: config 0 descriptor?? [ 26.882695][ T286] EXT4-fs error (device loop3): ext4_quota_off:6533: inode #4: comm syz-executor: mark_inode_dirty error [ 26.964871][ T387] loop4: detected capacity change from 0 to 128 [ 26.970521][ T389] loop3: detected capacity change from 0 to 16 [ 27.046627][ T389] erofs: (device loop3): mounted with root inode @ nid 36. [ 27.061484][ T49] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -5 in[4096, 0] out[4868] [ 27.104305][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 27.114555][ T393] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 27.126704][ T393] sch_tbf: burst 7 is lower than device lo mtu (65550) ! [ 27.135331][ T393] fuse: Bad value for 'fd' [ 27.135431][ T396] xt_CT: You must specify a L4 protocol and not use inversions on it [ 27.153689][ T398] xt_CT: You must specify a L4 protocol and not use inversions on it [ 27.285175][ T312] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 27.356629][ T311] hid-generic 0003:0925:8066.0002: unbalanced collection at end of report description [ 27.382797][ T311] hid-generic: probe of 0003:0925:8066.0002 failed with error -22 [ 27.675250][ T312] usb 5-1: config 0 has an invalid interface number: 140 but max is 1 [ 27.693981][ T312] usb 5-1: config 0 has an invalid interface number: 133 but max is 1 [ 27.714365][ T312] usb 5-1: config 0 has no interface number 0 [ 27.738346][ T312] usb 5-1: config 0 has no interface number 1 [ 27.751792][ T312] usb 5-1: config 0 interface 140 has no altsetting 0 [ 27.759148][ T312] usb 5-1: config 0 interface 133 has no altsetting 0 [ 27.770991][ T26] usb 2-1: USB disconnect, device number 2 [ 27.781760][ T418] kvm [417]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0xffff [ 27.925484][ T312] usb 5-1: New USB device found, idVendor=174f, idProduct=8a34, bcdDevice=f0.be [ 27.949126][ T312] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.990941][ T312] usb 5-1: Product: syz [ 28.013860][ T312] usb 5-1: Manufacturer: syz [ 28.042779][ T312] usb 5-1: SerialNumber: syz [ 28.109164][ T312] usb 5-1: config 0 descriptor?? [ 28.465212][ T312] usb 5-1: Found UVC 0.00 device syz (174f:8a34) [ 28.480037][ T312] usb 5-1: No valid video chain found. [ 28.518347][ T438] smpboot: CPU 1 is now offline [ 28.545907][ T312] usb 5-1: USB disconnect, device number 2 [ 28.557102][ T311] usb 1-1: USB disconnect, device number 2 [ 28.594124][ T435] loop3: detected capacity change from 0 to 512 [ 28.630019][ T442] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,norecovery,min_batch_time=0x0000000000000001,nombcache,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,usrquota,barrier=0x0000000000000007,barrier=0x00. Quota mode: writeback. [ 28.686686][ T435] EXT4-fs (loop3): Ignoring removed oldalloc option [ 28.718210][ T435] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,noauto_da_alloc,oldalloc,,errors=continue. Quota mode: none. [ 28.755394][ T442] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2809: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 28.769402][ T451] exfat: Deprecated parameter 'namecase' [ 28.790270][ T442] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #11: comm syz.2.37: missing EA_INODE flag [ 28.823023][ T451] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 28.840693][ T442] EXT4-fs (loop2): Remounting filesystem read-only [ 28.857891][ T442] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.37: error while reading EA inode 11 err=-117 [ 28.874391][ T442] EXT4-fs (loop2): Remounting filesystem read-only [ 28.915661][ T442] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #11: comm syz.2.37: missing EA_INODE flag [ 28.931161][ T442] EXT4-fs (loop2): Remounting filesystem read-only [ 28.938397][ T442] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.37: error while reading EA inode 11 err=-117 [ 28.952033][ T442] EXT4-fs (loop2): Remounting filesystem read-only [ 29.344841][ T462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.47'. [ 29.389185][ T466] set_capacity_and_notify: 3 callbacks suppressed [ 29.389197][ T466] loop1: detected capacity change from 0 to 256 [ 29.435184][ T58] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 29.444739][ T466] exfat: Bad value for 'uid' [ 29.585445][ T468] loop0: detected capacity change from 0 to 512 [ 29.605342][ T468] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 29.714792][ T468] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 29.735033][ T468] EXT4-fs (loop0): orphan cleanup on readonly fs [ 29.806284][ T468] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #11: comm syz.0.50: attempt to clear invalid blocks 1024 len 1 [ 29.843560][ T478] loop2: detected capacity change from 0 to 512 [ 29.850441][ T473] loop3: detected capacity change from 0 to 1024 [ 29.862793][ T468] EXT4-fs (loop0): Remounting filesystem read-only [ 29.869850][ T58] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 29.884347][ T473] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 29.895042][ T478] EXT4-fs (loop2): Test dummy encryption mode enabled [ 29.905343][ T468] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.50: bg 0: block 361: padding at end of block bitmap is not set [ 29.921047][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.930712][ T478] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.52: inode #1: comm syz.2.52: iget: illegal inode # [ 29.946165][ T58] usb 5-1: config 0 descriptor?? [ 29.951653][ T468] EXT4-fs (loop0): Remounting filesystem read-only [ 29.958557][ T478] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.52: error while reading EA inode 1 err=-117 [ 29.971426][ T468] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 29.980749][ T478] EXT4-fs (loop2): 1 orphan inode deleted [ 29.988460][ T468] EXT4-fs (loop0): Remounting filesystem read-only [ 29.995024][ T478] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000003,norecovery,noinit_itable,init_itable=0x0000000000000009,minixdf,usrjquota=,debug_want_extra_isize=0x0000000000000006,usrjquota=,test_dummy_encryption=v1,noblock_validity,jqfmt=vfsold,,errors=continue. Quota mode: none. [ 30.033505][ T468] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.50: invalid indirect mapped block 1811939328 (level 0) [ 30.071363][ T468] EXT4-fs (loop0): Remounting filesystem read-only [ 30.082399][ T468] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.50: invalid indirect mapped block 2185560079 (level 1) [ 30.114666][ T478] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 30.131282][ T468] EXT4-fs (loop0): Remounting filesystem read-only [ 30.145243][ T468] EXT4-fs (loop0): 1 truncate cleaned up [ 30.155332][ T468] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,noblock_validity,discard,errors=remount-ro,sb=0x0000000000000009. Quota mode: none. [ 30.321346][ T492] netlink: 20 bytes leftover after parsing attributes in process `syz.0.57'. [ 30.372839][ T494] loop0: detected capacity change from 0 to 128 [ 30.405783][ T494] SELinux: security_context_str_to_sid(staff_u) failed for (dev ?, type ?) errno=-22 [ 30.445758][ T494] EXT4-fs (loop0): Ignoring removed bh option [ 30.455319][ T494] EXT4-fs (loop0): Unrecognized mount option "dont_appraise" or missing value [ 30.465317][ T20] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 30.571097][ T496] loop0: detected capacity change from 0 to 128 [ 30.593103][ T496] EXT4-fs (loop0): Test dummy encryption mode enabled [ 30.615932][ T496] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 30.659493][ T496] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.765323][ T499] xt_CT: You must specify a L4 protocol and not use inversions on it [ 31.175213][ T20] usb 3-1: unable to get BOS descriptor or descriptor too short [ 31.275224][ T20] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 31.305198][ T20] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 31.327461][ T20] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 31.372570][ T20] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 31.397723][ T508] loop0: detected capacity change from 0 to 4096 [ 31.405184][ T58] usb 5-1: Cannot set autoneg [ 31.414008][ T58] MOSCHIP usb-ethernet driver: probe of 5-1:0.0 failed with error -71 [ 31.431369][ T508] EXT4-fs (loop0): Test dummy encryption mode enabled [ 31.449720][ T20] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 31.462559][ T58] usb 5-1: USB disconnect, device number 3 [ 31.478592][ T508] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 31.490727][ T20] usb 3-1: config 1 interface 1 has no altsetting 0 [ 31.507736][ T508] System zones: 0-5 [ 31.525678][ T508] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,noload,inlinecrypt,errors=remount-ro,test_dummy_encryption=v1,norecovery,delalloc,nogrpid,minixdf,. Quota mode: writeback. [ 31.576520][ T30] kauditd_printk_skb: 66 callbacks suppressed [ 31.576530][ T30] audit: type=1400 audit(1785997929.216:201): avc: denied { mmap_zero } for pid=511 comm="syz.3.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 31.638082][ T508] EXT4-fs (loop0): shut down requested (0) [ 31.664712][ T30] audit: type=1400 audit(1785997929.246:202): avc: denied { sys_admin } for pid=511 comm="syz.3.62" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 31.713648][ T30] audit: type=1400 audit(1785997929.296:203): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 31.749791][ T30] audit: type=1400 audit(1785997929.296:204): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.785371][ T20] usb 3-1: string descriptor 0 read error: -22 [ 31.793994][ T30] audit: type=1400 audit(1785997929.296:205): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.820855][ T20] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 31.847116][ T20] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.865048][ T30] audit: type=1400 audit(1785997929.296:206): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 31.930189][ T524] loop0: detected capacity change from 0 to 512 [ 31.948630][ T523] loop4: detected capacity change from 0 to 512 [ 31.955217][ T30] audit: type=1400 audit(1785997929.296:207): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 31.988011][ T30] audit: type=1400 audit(1785997929.296:208): avc: denied { append open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 32.011287][ T30] audit: type=1400 audit(1785997929.296:209): avc: denied { getattr } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 32.037347][ T523] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 32.062018][ T524] FAT-fs (loop0): FAT read failed (blocknr 128) [ 32.070345][ T523] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 32.090202][ T523] EXT4-fs (loop4): orphan cleanup on readonly fs [ 32.102832][ T524] FAT-fs (loop0): FAT read failed (blocknr 128) [ 32.111398][ T528] capability: warning: `syz.1.68' uses deprecated v2 capabilities in a way that may be insecure [ 32.122755][ T523] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.67: attempt to clear invalid blocks 1024 len 1 [ 32.136556][ T368] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 32.152377][ T523] EXT4-fs (loop4): Remounting filesystem read-only [ 32.161965][ T528] FAULT_INJECTION: forcing a failure. [ 32.161965][ T528] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 32.175888][ T523] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.67: bg 0: block 361: padding at end of block bitmap is not set [ 32.200846][ T523] EXT4-fs (loop4): Remounting filesystem read-only [ 32.210882][ T528] CPU: 0 PID: 528 Comm: syz.1.68 Not tainted syzkaller #0 [ 32.218125][ T528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 32.228605][ T528] Call Trace: [ 32.232149][ T528] [ 32.235239][ T528] __dump_stack+0x21/0x30 [ 32.239747][ T528] dump_stack_lvl+0x110/0x170 [ 32.244782][ T528] ? show_regs_print_info+0x20/0x20 [ 32.250344][ T528] ? vfs_write+0xc72/0xfd0 [ 32.254861][ T528] dump_stack+0x15/0x20 [ 32.259020][ T528] should_fail+0x3ab/0x500 [ 32.263629][ T528] should_fail_usercopy+0x1a/0x20 [ 32.268742][ T528] _copy_from_user+0x20/0xd0 [ 32.273544][ T528] __sys_bpf+0x258/0x7d0 [ 32.277898][ T528] ? bpf_link_show_fdinfo+0x330/0x330 [ 32.283349][ T528] ? debug_smp_processor_id+0x17/0x20 [ 32.288806][ T528] __x64_sys_bpf+0x7c/0x90 [ 32.293526][ T528] x64_sys_call+0x4b9/0x9a0 [ 32.298491][ T528] do_syscall_64+0x4c/0xa0 [ 32.303046][ T528] ? clear_bhb_loop+0x50/0xa0 [ 32.307838][ T528] ? clear_bhb_loop+0x50/0xa0 [ 32.312830][ T528] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 32.318972][ T528] RIP: 0033:0x7f8f783fd0d9 [ 32.323696][ T528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.344094][ T528] RSP: 002b:00007f8f76e56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 32.352684][ T528] RAX: ffffffffffffffda RBX: 00007f8f78684fa0 RCX: 00007f8f783fd0d9 [ 32.360642][ T528] RDX: 0000000000000050 RSI: 0000200000000540 RDI: 0000000000000000 [ 32.368926][ T528] RBP: 00007f8f76e56090 R08: 0000000000000000 R09: 0000000000000000 [ 32.377682][ T528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 32.385868][ T528] R13: 00007f8f78685038 R14: 00007f8f78684fa0 R15: 00007ffe390ec2b8 [ 32.394300][ T528] [ 32.405212][ T523] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 32.424259][ T523] EXT4-fs (loop4): Remounting filesystem read-only [ 32.431054][ T523] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.67: invalid indirect mapped block 1811939328 (level 0) [ 32.465344][ T523] EXT4-fs (loop4): Remounting filesystem read-only [ 32.471945][ T523] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.67: invalid indirect mapped block 2185560079 (level 1) [ 32.505311][ T523] EXT4-fs (loop4): Remounting filesystem read-only [ 32.512217][ T523] EXT4-fs (loop4): 1 truncate cleaned up [ 32.522231][ T523] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,noblock_validity,discard,errors=remount-ro,sb=0x0000000000000009. Quota mode: none. [ 32.544902][ T530] loop0: detected capacity change from 0 to 40427 [ 32.565916][ T530] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 32.589894][ T530] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 32.603197][ T530] F2FS-fs (loop0): invalid crc value [ 32.609915][ T530] F2FS-fs (loop0): Found nat_bits in checkpoint [ 32.635326][ T368] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 128 [ 32.652927][ T368] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 32.663815][ T530] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 32.670935][ T530] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 32.686370][ T368] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 32.709170][ T368] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 32.721072][ T30] audit: type=1400 audit(1785997930.356:210): avc: denied { read } for pid=529 comm="syz.0.69" dev="nsfs" ino=4026532483 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 32.745750][ T535] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,mb_optimize_scan=0x0000000000000001,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 32.767920][ T368] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.781948][ T535] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.797562][ T519] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 32.855249][ T20] usb 3-1: cannot get ctl value: req = 0x81, wValue = 0x201, wIndex = 0x200, type = 4 [ 32.875153][ T20] usb 3-1: Warning! Unlikely big volume range (=11853), cval->res is probably wrong. [ 32.914164][ T20] usb 3-1: [2] FU [Speaker Playback Volume] ch = 1, val = -11853/0/1 [ 32.942209][ T368] snd-usb-audio: probe of 4-1:27.0 failed with error -12 [ 32.963256][ T20] usb 3-1: USB disconnect, device number 3 [ 32.970135][ T547] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,mb_optimize_scan=0x0000000000000001,stripe=0x0000000000000005,,errors=continue. Quota mode: writeback. [ 33.032027][ T547] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.078179][ T368] usb 4-1: USB disconnect, device number 3 [ 33.091234][ T547] FAULT_INJECTION: forcing a failure. [ 33.091234][ T547] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 33.137956][ T547] CPU: 0 PID: 547 Comm: syz.4.73 Not tainted syzkaller #0 [ 33.145550][ T547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 33.156022][ T547] Call Trace: [ 33.159413][ T547] [ 33.162356][ T547] __dump_stack+0x21/0x30 [ 33.166846][ T547] dump_stack_lvl+0x110/0x170 [ 33.171790][ T547] ? show_regs_print_info+0x20/0x20 [ 33.177007][ T547] dump_stack+0x15/0x20 [ 33.181312][ T547] should_fail+0x3ab/0x500 [ 33.185987][ T547] should_fail_usercopy+0x1a/0x20 [ 33.191106][ T547] _copy_to_user+0x20/0x90 [ 33.195588][ T547] simple_read_from_buffer+0xe9/0x160 [ 33.200952][ T547] proc_fail_nth_read+0x1a6/0x220 [ 33.206218][ T547] ? proc_fault_inject_write+0x310/0x310 [ 33.212096][ T547] ? security_file_permission+0x83/0xa0 [ 33.218071][ T547] ? proc_fault_inject_write+0x310/0x310 [ 33.223802][ T547] vfs_read+0x28c/0xc20 [ 33.228226][ T547] ? kernel_read+0x1f0/0x1f0 [ 33.232941][ T547] ? __kasan_check_write+0x14/0x20 [ 33.238069][ T547] ? mutex_lock+0x9b/0x1c0 [ 33.242486][ T547] ? wait_for_completion_killable_timeout+0x10/0x10 [ 33.249260][ T547] ? __fget_files+0x2e1/0x340 [ 33.253941][ T547] ? __fdget_pos+0x2d2/0x380 [ 33.258802][ T547] ? ksys_read+0x70/0x260 [ 33.263608][ T547] ksys_read+0x14a/0x260 [ 33.268155][ T547] ? vfs_write+0xfd0/0xfd0 [ 33.272794][ T547] ? debug_smp_processor_id+0x17/0x20 [ 33.278159][ T547] __x64_sys_read+0x7b/0x90 [ 33.282660][ T547] x64_sys_call+0x96d/0x9a0 [ 33.287162][ T547] do_syscall_64+0x4c/0xa0 [ 33.291566][ T547] ? clear_bhb_loop+0x50/0xa0 [ 33.296746][ T547] ? clear_bhb_loop+0x50/0xa0 [ 33.301595][ T547] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 33.307469][ T547] RIP: 0033:0x7f1b354f190e [ 33.311967][ T547] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 33.332119][ T547] RSP: 002b:00007f1b33f89fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 33.341848][ T547] RAX: ffffffffffffffda RBX: 00007f1b33f8a6c0 RCX: 00007f1b354f190e [ 33.349932][ T547] RDX: 000000000000000f RSI: 00007f1b33f8a0a0 RDI: 0000000000000004 [ 33.358036][ T547] RBP: 00007f1b33f8a090 R08: 0000000000000000 R09: 0000000000000000 [ 33.366294][ T547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 33.374557][ T547] R13: 00007f1b357b9038 R14: 00007f1b357b8fa0 R15: 00007ffe1cfec2b8 [ 33.382840][ T547] [ 33.446032][ T557] netlink: 'syz.0.86': attribute type 3 has an invalid length. [ 33.468673][ T561] EXT4-fs (loop4): Ignoring removed oldalloc option [ 33.501758][ T561] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,noauto_da_alloc,oldalloc,,errors=continue. Quota mode: none. [ 33.906614][ T588] tipc: Enabling of bearer rejected, failed to enable media [ 34.070743][ T597] EXT4-fs (loop3): Mount option "nouser_xattr" will be removed by 3.5 [ 34.070743][ T597] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 34.070743][ T597] [ 34.098017][ T599] FAULT_INJECTION: forcing a failure. [ 34.098017][ T599] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 34.111647][ T599] CPU: 0 PID: 599 Comm: syz.2.87 Not tainted syzkaller #0 [ 34.118753][ T599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 34.129023][ T599] Call Trace: [ 34.132423][ T599] [ 34.135556][ T599] __dump_stack+0x21/0x30 [ 34.140407][ T599] dump_stack_lvl+0x110/0x170 [ 34.145066][ T599] ? show_regs_print_info+0x20/0x20 [ 34.150703][ T599] dump_stack+0x15/0x20 [ 34.154859][ T599] should_fail+0x3ab/0x500 [ 34.159526][ T599] should_fail_usercopy+0x1a/0x20 [ 34.164619][ T599] _copy_to_user+0x20/0x90 [ 34.169024][ T599] simple_read_from_buffer+0xe9/0x160 [ 34.174470][ T599] proc_fail_nth_read+0x1a6/0x220 [ 34.179504][ T599] ? proc_fault_inject_write+0x310/0x310 [ 34.185234][ T599] ? security_file_permission+0x83/0xa0 [ 34.191163][ T599] ? proc_fault_inject_write+0x310/0x310 [ 34.197242][ T599] vfs_read+0x28c/0xc20 [ 34.201484][ T599] ? kernel_read+0x1f0/0x1f0 [ 34.206161][ T599] ? __kasan_check_write+0x14/0x20 [ 34.211273][ T599] ? mutex_lock+0x9b/0x1c0 [ 34.215889][ T599] ? wait_for_completion_killable_timeout+0x10/0x10 [ 34.222801][ T599] ? __fget_files+0x2e1/0x340 [ 34.227491][ T599] ? __fdget_pos+0x2d2/0x380 [ 34.232366][ T599] ? ksys_read+0x70/0x260 [ 34.236881][ T599] ksys_read+0x14a/0x260 [ 34.241129][ T599] ? vfs_write+0xfd0/0xfd0 [ 34.245672][ T599] ? debug_smp_processor_id+0x17/0x20 [ 34.251148][ T599] __x64_sys_read+0x7b/0x90 [ 34.255644][ T599] x64_sys_call+0x96d/0x9a0 [ 34.260231][ T599] do_syscall_64+0x4c/0xa0 [ 34.264722][ T599] ? clear_bhb_loop+0x50/0xa0 [ 34.269466][ T599] ? clear_bhb_loop+0x50/0xa0 [ 34.274137][ T599] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 34.280027][ T599] RIP: 0033:0x7f3c2978b90e [ 34.284527][ T599] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 34.304238][ T599] RSP: 002b:00007f3c28223fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 34.312650][ T599] RAX: ffffffffffffffda RBX: 00007f3c282246c0 RCX: 00007f3c2978b90e [ 34.320685][ T599] RDX: 000000000000000f RSI: 00007f3c282240a0 RDI: 0000000000000003 [ 34.329572][ T599] RBP: 00007f3c28224090 R08: 0000000000000000 R09: 0000000000000000 [ 34.337627][ T599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 34.345583][ T599] R13: 00007f3c29a53038 R14: 00007f3c29a52fa0 R15: 00007ffd8cf228a8 [ 34.353552][ T599] [ 34.362333][ T597] EXT4-fs (loop3): Ignoring removed nobh option [ 34.386621][ T597] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 34.425171][ T58] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 34.469787][ T604] set_capacity_and_notify: 5 callbacks suppressed [ 34.469800][ T604] loop1: detected capacity change from 0 to 512 [ 34.514868][ T612] bridge0: port 3(syzkaller0) entered blocking state [ 34.532731][ T612] bridge0: port 3(syzkaller0) entered disabled state [ 34.546898][ T604] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 34.556827][ T612] device syzkaller0 entered promiscuous mode [ 34.563477][ T604] EXT4-fs (loop1): Unrecognized mount option "appraise" or missing value [ 34.573425][ T612] bridge0: port 3(syzkaller0) entered blocking state [ 34.580545][ T612] bridge0: port 3(syzkaller0) entered forwarding state [ 34.592548][ T615] bridge0: port 3(syzkaller0) entered disabled state [ 34.600971][ T615] device syzkaller0 left promiscuous mode [ 34.607212][ T615] bridge0: port 3(syzkaller0) entered disabled state [ 34.678789][ T620] loop3: detected capacity change from 0 to 512 [ 35.327876][ T58] usb 5-1: Using ep0 maxpacket: 32 [ 35.365740][ T620] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 35.384498][ T626] loop1: detected capacity change from 0 to 1024 [ 35.416850][ T626] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 35.489442][ T626] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6002c018, mo2=0102] [ 35.513261][ T626] System zones: 0-1, 3-12 [ 35.525265][ T58] usb 5-1: config 13 has an invalid interface number: 162 but max is 1 [ 35.541865][ T626] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,abort,resuid=0x0000000000000000,user_xattr,discard,max_dir_size_kb=0x00000000000007b1,debug,noinit_itable,nomblk_io_submit,nodelalloc,inode_readahead_blks=0x0000000000040000,,errors=continue. Quota mode: none. [ 35.578206][ T58] usb 5-1: config 13 has an invalid interface number: 113 but max is 1 [ 35.603496][ T58] usb 5-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 35.644177][ T58] usb 5-1: config 13 has no interface number 0 [ 35.654018][ T635] loop3: detected capacity change from 0 to 512 [ 35.671341][ T58] usb 5-1: config 13 has no interface number 1 [ 35.689506][ T58] usb 5-1: config 13 interface 162 altsetting 8 bulk endpoint 0x7 has invalid maxpacket 8 [ 35.706342][ T635] EXT4-fs (loop3): Ignoring removed oldalloc option [ 35.720645][ T58] usb 5-1: config 13 interface 162 has no altsetting 0 [ 35.733010][ T635] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 35.747550][ T58] usb 5-1: config 13 interface 113 has no altsetting 0 [ 35.823909][ T635] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 35.839151][ T632] loop2: detected capacity change from 0 to 40427 [ 35.864546][ T642] loop1: detected capacity change from 0 to 4096 [ 35.882377][ T632] F2FS-fs (loop2): invalid crc value [ 35.896524][ T635] EXT4-fs (loop3): 1 truncate cleaned up [ 35.903047][ T632] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 35.925274][ T635] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv1,auto_da_alloc=0x0000000000000c90,minixdf,auto_da_alloc,data=journal,lazytime,oldalloc,max_batch_time=0x000000007fffffff,sysvgroups,,errors=continue. Quota mode: none. [ 35.966653][ T642] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 35.983285][ T632] F2FS-fs (loop2): Start checkpoint disabled! [ 35.990285][ T632] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 36.005189][ T58] usb 5-1: string descriptor 0 read error: -22 [ 36.015213][ T58] usb 5-1: New USB device found, idVendor=067b, idProduct=0001, bcdDevice=7d.c7 [ 36.040246][ T632] attempt to access beyond end of device [ 36.040246][ T632] loop2: rw=2049, want=45112, limit=40427 [ 36.065285][ T58] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.079983][ T45] attempt to access beyond end of device [ 36.079983][ T45] loop2: rw=2049, want=40976, limit=40427 [ 36.105254][ T590] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 36.168560][ T58] plusb: probe of 5-1:13.162 failed with error -22 [ 36.187207][ T58] plusb: probe of 5-1:13.113 failed with error -22 [ 36.245170][ T368] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 36.279438][ T660] loop2: detected capacity change from 0 to 512 [ 36.304036][ T665] loop1: detected capacity change from 0 to 256 [ 36.327055][ T660] EXT4-fs (loop2): Ignoring removed oldalloc option [ 36.337031][ T665] exfat: Deprecated parameter 'utf8' [ 36.343470][ T660] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,noauto_da_alloc,oldalloc,,errors=continue. Quota mode: none. [ 36.358682][ T665] exfat: Deprecated parameter 'namecase' [ 36.374516][ T6] usb 5-1: USB disconnect, device number 4 [ 36.382447][ T665] exfat: Deprecated parameter 'namecase' [ 36.406666][ T665] exFAT-fs (loop1): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1189b7a0) [ 36.429487][ T665] exFAT-fs (loop1): invalid boot region [ 36.724806][ T665] exFAT-fs (loop1): failed to recognize exfat type [ 36.853855][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 36.853866][ T30] audit: type=1326 audit(1785997934.486:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=674 comm="syz.2.111" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c297cb0d9 code=0x7ffc0000 [ 36.905247][ T368] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.920112][ T30] audit: type=1326 audit(1785997934.526:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=674 comm="syz.2.111" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7f3c297cb0d9 code=0x7ffc0000 [ 36.948622][ T368] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.991678][ T368] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 37.012420][ T368] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 37.022413][ T30] audit: type=1326 audit(1785997934.526:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=674 comm="syz.2.111" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c297cb0d9 code=0x7ffc0000 [ 37.055133][ T368] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.071032][ T368] usb 1-1: config 0 descriptor?? [ 37.083219][ T30] audit: type=1326 audit(1785997934.526:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=674 comm="syz.2.111" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3c297cb0d9 code=0x7ffc0000 [ 37.141517][ T679] loop4: detected capacity change from 0 to 16 [ 37.176068][ T679] erofs: (device loop4): mounted with root inode @ nid 36. [ 37.186826][ T30] audit: type=1326 audit(1785997934.526:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=674 comm="syz.2.111" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c297cb0d9 code=0x7ffc0000 [ 37.225159][ T20] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 37.239511][ T30] audit: type=1326 audit(1785997934.526:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=674 comm="syz.2.111" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3c2978b90e code=0x7ffc0000 [ 37.275158][ T30] audit: type=1326 audit(1785997934.526:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=674 comm="syz.2.111" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3c297cad6b code=0x7ffc0000 [ 37.308331][ T687] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1014 sclass=netlink_route_socket pid=687 comm=syz.4.116 [ 37.363916][ T693] loop4: detected capacity change from 0 to 512 [ 37.370814][ T311] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 37.385188][ T30] audit: type=1326 audit(1785997934.526:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=674 comm="syz.2.111" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3c297cad6b code=0x7ffc0000 [ 37.430691][ T30] audit: type=1326 audit(1785997934.526:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=674 comm="syz.2.111" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3c297cad6b code=0x7ffc0000 [ 37.465372][ T693] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 37.474042][ T693] EXT4-fs (loop4): orphan cleanup on readonly fs [ 37.485415][ T693] Quota error (device loop4): v2_read_file_info: Free block number too big (0 >= 0). [ 37.505216][ T693] EXT4-fs warning (device loop4): ext4_enable_quotas:6479: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 37.525147][ T20] usb 3-1: device descriptor read/64, error -71 [ 37.531577][ T693] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 37.539229][ T693] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.117: bg 0: block 40: padding at end of block bitmap is not set [ 37.565382][ T693] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 37.575987][ T368] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 37.595031][ T693] EXT4-fs (loop4): 1 truncate cleaned up [ 37.601306][ T368] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 37.614923][ T693] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 37.763876][ T700] xt_CT: You must specify a L4 protocol and not use inversions on it [ 37.775193][ T311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 37.799329][ T311] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 37.815149][ T311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.836581][ T311] usb 4-1: config 0 descriptor?? [ 37.841967][ T644] UDC core: couldn't find an available UDC or it's busy: -16 [ 37.850233][ T644] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 37.935143][ T20] usb 3-1: device descriptor read/64, error -71 [ 37.955870][ T689] F2FS-fs (loop1): Test dummy encryption mode enabled [ 38.002775][ T689] F2FS-fs (loop1): invalid crc value [ 38.014414][ T689] F2FS-fs (loop1): Found nat_bits in checkpoint [ 38.023406][ T705] EXT4-fs (loop4): Ignoring removed oldalloc option [ 38.034474][ T705] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,noauto_da_alloc,oldalloc,,errors=continue. Quota mode: none. [ 38.382326][ T689] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 38.435156][ T20] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 38.445611][ T311] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 38.474277][ T311] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0004/input/input5 [ 38.606790][ T720] EXT4-fs (loop4): Test dummy encryption mode enabled [ 38.624242][ T720] EXT4-fs (loop4): Ignoring removed orlov option [ 38.634961][ T720] EXT4-fs (loop4): mounted filesystem without journal. Opts: nolazytime,debug_want_extra_isize=0x0000000000000010,inlinecrypt,test_dummy_encryption,lazytime,stripe=0x0000000000000000,minixdf,orlov,,errors=continue. Quota mode: writeback. [ 38.675159][ C0] usb 4-1: input irq status -75 received [ 38.735173][ T20] usb 3-1: device descriptor read/64, error -71 [ 38.938354][ T311] keytouch 0003:0926:3333.0004: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 38.988015][ T311] usb 4-1: USB disconnect, device number 4 [ 39.125133][ T20] usb 3-1: device descriptor read/64, error -71 [ 39.175222][ T309] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 39.254292][ T742] syz.4.127 (742): /proc/742/oom_adj is deprecated, please use /proc/742/oom_score_adj instead. [ 39.266213][ T20] usb usb3-port1: attempt power cycle [ 39.385982][ T58] usb 1-1: USB disconnect, device number 3 [ 40.844502][ T750] set_capacity_and_notify: 4 callbacks suppressed [ 40.844515][ T750] loop3: detected capacity change from 0 to 512 [ 40.870988][ T58] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 41.157890][ T309] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 41.169412][ T20] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 41.186927][ T750] EXT4-fs error (device loop3): ext4_quota_enable:6431: comm syz.3.130: Bad quota inum: 12023, type: 1 [ 41.199382][ T750] EXT4-fs warning (device loop3): ext4_enable_quotas:6479: Failed to enable quota tracking (type=1, err=-117, ino=12023). Please run e2fsck to fix. [ 41.214948][ T750] EXT4-fs (loop3): mount failed [ 41.222745][ T761] loop4: detected capacity change from 0 to 1024 [ 41.235361][ T309] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.265264][ T309] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 41.295329][ T309] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 41.312290][ T761] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,resgid=0x0000000000000000,noblock_validity,quota,journal_dev=0x0000000000000008,nouid32,data_err=ignore,noinit_itable,journal_ioprio=0x0000000000000005,,errors=continue. Quota mode: writeback. [ 41.368949][ T750] loop3: detected capacity change from 0 to 512 [ 41.376627][ T761] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.422322][ T750] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,bsdgroups,quota,,errors=continue. Quota mode: writeback. [ 41.436947][ T750] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.449046][ T309] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 41.475505][ T309] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 41.493118][ T309] usb 2-1: Manufacturer: syz [ 41.505614][ T309] usb 2-1: config 0 descriptor?? [ 41.525277][ T58] usb 1-1: device descriptor read/64, error -71 [ 41.640508][ T774] loop4: detected capacity change from 0 to 1024 [ 41.697291][ T774] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 41.697291][ T774] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 41.697291][ T774] [ 41.718337][ T776] loop3: detected capacity change from 0 to 512 [ 41.725515][ T20] usb 3-1: device not accepting address 6, error -71 [ 41.776272][ T774] EXT4-fs (loop4): Ignoring removed nobh option [ 41.787047][ T776] EXT4-fs (loop3): Ignoring removed oldalloc option [ 41.804085][ T774] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 41.840381][ T776] EXT4-fs (loop3): mounted filesystem without journal. Opts: lazytime,acl,oldalloc,delalloc,,errors=continue. Quota mode: writeback. [ 41.925156][ T58] usb 1-1: device descriptor read/64, error -71 [ 41.940652][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 41.940662][ T30] audit: type=1400 audit(1785997939.576:281): avc: denied { map } for pid=779 comm="syz.4.137" path="socket:[18383]" dev="sockfs" ino=18383 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 41.985655][ T309] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 42.014106][ T309] appleir 0003:05AC:8243.0005: No inputs registered, leaving [ 42.028231][ T781] loop4: detected capacity change from 0 to 512 [ 42.068723][ T309] appleir 0003:05AC:8243.0005: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 42.099550][ T781] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,mb_optimize_scan=0x0000000000000001,stripe=0x0000000000000005,,errors=continue. Quota mode: writeback. [ 42.192980][ T781] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.241353][ T798] xt_CT: You must specify a L4 protocol and not use inversions on it [ 42.256396][ T309] usb 2-1: USB disconnect, device number 3 [ 42.335158][ T368] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 42.454471][ T768] loop2: detected capacity change from 0 to 131072 [ 42.504074][ T768] F2FS-fs (loop2): Invalid log sectorsize (0) [ 42.549077][ T768] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 42.594337][ T768] F2FS-fs (loop2): invalid crc value [ 42.605116][ T368] usb 4-1: Using ep0 maxpacket: 8 [ 42.631160][ T768] F2FS-fs (loop2): Found nat_bits in checkpoint [ 42.722032][ T768] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 42.753534][ T768] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 42.775194][ T368] usb 4-1: unable to get BOS descriptor or descriptor too short [ 42.855174][ T368] usb 4-1: config 252 has an invalid interface number: 57 but max is 0 [ 42.865794][ T810] loop1: detected capacity change from 0 to 512 [ 42.873874][ T812] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard1: link becomes ready [ 42.903966][ T368] usb 4-1: config 252 has no interface number 0 [ 42.914125][ T768] netlink: 4 bytes leftover after parsing attributes in process `syz.2.134'. [ 42.944201][ T368] usb 4-1: config 252 interface 57 altsetting 64 bulk endpoint 0x5 has invalid maxpacket 16 [ 42.965810][ T810] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 42.990906][ T368] usb 4-1: config 252 interface 57 altsetting 64 bulk endpoint 0x8 has invalid maxpacket 64 [ 43.045633][ T368] usb 4-1: config 252 interface 57 has no altsetting 0 [ 43.235245][ T368] usb 4-1: New USB device found, idVendor=0421, idProduct=04c9, bcdDevice=e9.22 [ 43.279913][ T368] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.356352][ T368] usb 4-1: Product: syz [ 43.371699][ T368] usb 4-1: Manufacturer: syz [ 43.386470][ T368] usb 4-1: SerialNumber: syz [ 43.396353][ T823] loop2: detected capacity change from 0 to 4096 [ 44.994749][ T826] loop4: detected capacity change from 0 to 2048 [ 45.013827][ T823] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. [ 45.026550][ T368] usb 4-1: can't set config #252, error -71 [ 45.041314][ T368] usb 4-1: USB disconnect, device number 5 [ 45.099218][ T826] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000001,inlinecrypt,resgid=0x0000000000000000,barrier,quota,delalloc,,errors=continue. Quota mode: writeback. [ 45.218403][ T826] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.237566][ T30] audit: type=1400 audit(1785997942.876:282): avc: denied { remount } for pid=837 comm="syz.3.148" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 45.279692][ T849] xt_CT: You must specify a L4 protocol and not use inversions on it [ 45.312713][ T851] Illegal XDP return value 5, expect packet loss! [ 45.341410][ T853] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 45.370958][ T853] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 45.405161][ T309] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 45.421563][ T856] sch_tbf: burst 7 is lower than device lo mtu (65550) ! [ 45.447795][ T30] audit: type=1400 audit(1785997943.086:283): avc: denied { accept } for pid=852 comm="syz.3.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 45.565797][ T30] audit: type=1400 audit(1785997943.166:284): avc: denied { mount } for pid=859 comm="syz.3.156" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 46.089689][ T868] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 46.125151][ T309] usb 3-1: Using ep0 maxpacket: 32 [ 46.180991][ T30] audit: type=1400 audit(1785997943.176:285): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 46.218524][ T826] 8021q: VLANs not supported on lo [ 46.224179][ T826] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.147: bg 0: block 345: padding at end of block bitmap is not set [ 47.855463][ T30] audit: type=1326 audit(1785997943.276:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=864 comm="syz.1.158" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f783fd0d9 code=0x7ffc0000 [ 47.895218][ T309] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 47.946109][ T879] set_capacity_and_notify: 1 callbacks suppressed [ 47.946120][ T879] loop2: detected capacity change from 0 to 512 [ 47.961391][ T309] usb 3-1: can't read configurations, error -71 [ 47.969511][ T826] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 48.006886][ T30] audit: type=1326 audit(1785997943.276:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=864 comm="syz.1.158" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f783fd0d9 code=0x7ffc0000 [ 48.059418][ T883] loop4: detected capacity change from 0 to 512 [ 48.072272][ T879] audit: audit_backlog=65 > audit_backlog_limit=64 [ 48.090299][ T883] EXT4-fs (loop4): Ignoring removed nobh option [ 48.106622][ T879] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 48.121048][ T883] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 48.138434][ T879] audit: backlog limit exceeded [ 48.148308][ T30] audit: type=1326 audit(1785997943.276:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=864 comm="syz.1.158" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f783fd0d9 code=0x7ffc0000 [ 48.177975][ T883] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 48.194966][ T889] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 48.210980][ T883] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 48.226006][ T889] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 48.243596][ T889] sch_tbf: burst 7 is lower than device lo mtu (65550) ! [ 48.254025][ T883] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 48.269426][ T30] audit: type=1326 audit(1785997943.276:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=864 comm="syz.1.158" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f783fd0d9 code=0x7ffc0000 [ 48.301156][ T883] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e040e01c, mo2=0000] [ 48.331531][ T883] EXT4-fs (loop4): failed to initialize system zone (-117) [ 48.371171][ T883] EXT4-fs (loop4): mount failed [ 48.393817][ T30] audit: type=1326 audit(1785997943.276:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=864 comm="syz.1.158" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f8f783fd0d9 code=0x7ffc0000 [ 48.450651][ T887] loop2: detected capacity change from 0 to 40427 [ 48.465576][ T887] F2FS-fs (loop2): invalid crc value [ 48.477051][ T30] audit: type=1400 audit(1785997943.286:291): avc: denied { read write } for pid=865 comm="syz.0.159" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 48.517520][ T883] netlink: 260 bytes leftover after parsing attributes in process `syz.4.164'. [ 48.534820][ T887] F2FS-fs (loop2): Found nat_bits in checkpoint [ 48.553208][ T883] netlink: 104 bytes leftover after parsing attributes in process `syz.4.164'. [ 48.578037][ T887] F2FS-fs (loop2): Start checkpoint disabled! [ 48.590794][ T883] netlink: 16 bytes leftover after parsing attributes in process `syz.4.164'. [ 48.609560][ T30] audit: type=1400 audit(1785997943.286:292): avc: denied { open } for pid=865 comm="syz.0.159" path="/dev/vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 48.661555][ T368] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 48.673735][ T887] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 48.753702][ T901] xt_CT: You must specify a L4 protocol and not use inversions on it [ 48.879037][ T464] attempt to access beyond end of device [ 48.879037][ T464] loop2: rw=1, want=45128, limit=40427 [ 48.894135][ T913] loop1: detected capacity change from 0 to 256 [ 48.973268][ T464] attempt to access beyond end of device [ 48.973268][ T464] loop2: rw=2049, want=45144, limit=40427 [ 49.485433][ T368] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 49.537174][ T923] loop1: detected capacity change from 0 to 256 [ 49.545207][ T368] usb 1-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00 [ 49.581417][ T368] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.630019][ T368] usb 1-1: config 0 descriptor?? [ 49.677827][ T923] netlink: 40 bytes leftover after parsing attributes in process `syz.1.176'. [ 49.697796][ T930] loop2: detected capacity change from 0 to 512 [ 49.736621][ T930] EXT4-fs (loop2): Ignoring removed nobh option [ 49.808914][ T930] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 49.825432][ T933] UDC core: couldn't find an available UDC or it's busy: -16 [ 49.837896][ T921] loop4: detected capacity change from 0 to 40427 [ 49.848269][ T934] UDC core: couldn't find an available UDC or it's busy: -16 [ 49.858173][ T930] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 49.882935][ T921] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 49.907427][ T930] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 49.917620][ T933] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 49.928384][ T921] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 49.956960][ T930] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 49.968303][ T934] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 49.987680][ T921] F2FS-fs (loop4): Found nat_bits in checkpoint [ 50.006799][ T930] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e040e01c, mo2=0000] [ 50.032039][ T930] EXT4-fs (loop2): failed to initialize system zone (-117) [ 50.064954][ T921] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 50.074951][ T930] EXT4-fs (loop2): mount failed [ 50.080394][ T6] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 50.093229][ T921] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 50.125856][ T368] betop 0003:11C2:2208.0006: item fetching failed at offset 5/6 [ 50.141219][ T930] netlink: 260 bytes leftover after parsing attributes in process `syz.2.179'. [ 50.168434][ T368] betop 0003:11C2:2208.0006: parse failed [ 50.194725][ T368] betop: probe of 0003:11C2:2208.0006 failed with error -22 [ 50.455212][ T6] usb 4-1: config 1 interface 0 altsetting 9 endpoint 0x1 is Bulk; changing to Interrupt [ 50.494897][ T6] usb 4-1: config 1 interface 0 altsetting 9 endpoint 0x82 is Bulk; changing to Interrupt [ 50.544991][ T939] loop1: detected capacity change from 0 to 40427 [ 50.553348][ T6] usb 4-1: config 1 interface 0 has no altsetting 0 [ 50.621632][ T939] F2FS-fs (loop1): invalid crc value [ 50.677313][ T939] F2FS-fs (loop1): Found nat_bits in checkpoint [ 50.735132][ T368] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 50.830096][ T939] F2FS-fs (loop1): Start checkpoint disabled! [ 50.881645][ T939] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 51.559298][ T368] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.605576][ T368] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.616294][ T368] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 51.626502][ T368] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.639358][ T368] usb 5-1: config 0 descriptor?? [ 51.646786][ T309] usb 1-1: USB disconnect, device number 6 [ 51.772048][ T45] attempt to access beyond end of device [ 51.772048][ T45] loop1: rw=2049, want=40976, limit=40427 [ 52.136250][ T368] pyra 0003:1E7D:2CF6.0007: unknown main item tag 0x2 [ 52.145560][ T368] pyra 0003:1E7D:2CF6.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 52.159434][ T309] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 52.345221][ T368] pyra 0003:1E7D:2CF6.0007: couldn't init struct pyra_device [ 52.357187][ T368] pyra 0003:1E7D:2CF6.0007: couldn't install mouse [ 52.366505][ T368] pyra: probe of 0003:1E7D:2CF6.0007 failed with error -71 [ 52.385495][ T368] usb 5-1: USB disconnect, device number 5 [ 52.411016][ T965] xt_CT: You must specify a L4 protocol and not use inversions on it [ 52.565299][ T309] usb 1-1: unable to get BOS descriptor or descriptor too short [ 52.645247][ T309] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 52.657771][ T309] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 52.669051][ T309] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 52.688125][ T309] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 52.864543][ T986] loop3: detected capacity change from 0 to 512 [ 52.871702][ T30] kauditd_printk_skb: 152 callbacks suppressed [ 52.871713][ T30] audit: type=1326 audit(1785997950.516:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=957 comm="syz.0.185" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb3fae4ed6b code=0x7ffc0000 [ 52.915505][ T309] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 52.935247][ T309] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.951918][ T990] loop4: detected capacity change from 0 to 512 [ 52.965288][ T6] usb 4-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 52.997221][ T986] EXT4-fs (loop3): Ignoring removed nobh option [ 53.015307][ T990] EXT4-fs (loop4): Ignoring removed oldalloc option [ 53.025423][ T309] usb 1-1: Product: syz [ 53.030201][ T309] usb 1-1: Manufacturer: syz [ 53.036283][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.066500][ T986] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 53.083904][ T990] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,noauto_da_alloc,oldalloc,,errors=continue. Quota mode: none. [ 53.103391][ T309] usb 1-1: SerialNumber: syz [ 53.115265][ T6] usb 4-1: can't set config #1, error -71 [ 53.135540][ T6] usb 4-1: USB disconnect, device number 6 [ 53.146781][ T30] audit: type=1326 audit(1785997950.566:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=957 comm="syz.0.185" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb3fae4ed6b code=0x7ffc0000 [ 53.208275][ T986] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 53.302782][ T986] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 53.343540][ T1007] loop4: detected capacity change from 0 to 512 [ 53.358354][ T30] audit: type=1326 audit(1785997950.786:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=957 comm="syz.0.185" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb3fae4ed6b code=0x7ffc0000 [ 53.433331][ T1009] loop1: detected capacity change from 0 to 512 [ 53.449497][ T986] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 53.461836][ T1007] EXT4-fs (loop4): mb_optimize_scan should be set to 0 or 1. [ 53.479693][ T309] usb 1-1: USB disconnect, device number 7 [ 53.539285][ T986] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e040e01c, mo2=0000] [ 53.553823][ T1009] EXT4-fs (loop1): mounted filesystem without journal. Opts: sysvgroups,usrquota,minixdf,nombcache,,errors=continue. Quota mode: writeback. [ 53.589423][ T30] audit: type=1326 audit(1785997950.786:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=957 comm="syz.0.185" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb3fae4ed6b code=0x7ffc0000 [ 53.665282][ T986] EXT4-fs (loop3): failed to initialize system zone (-117) [ 53.715256][ T986] EXT4-fs (loop3): mount failed [ 53.732138][ T30] audit: type=1326 audit(1785997950.786:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=957 comm="syz.0.185" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb3fae4ed6b code=0x7ffc0000 [ 53.772760][ T1009] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.857877][ T986] netlink: 260 bytes leftover after parsing attributes in process `syz.3.193'. [ 53.910541][ T30] audit: type=1326 audit(1785997950.816:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=957 comm="syz.0.185" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb3fae0f90e code=0x7ffc0000 [ 53.953886][ T1009] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.202: bg 0: block 194: padding at end of block bitmap is not set [ 54.028292][ T986] netlink: 104 bytes leftover after parsing attributes in process `syz.3.193'. [ 55.105128][ C0] sched: RT throttling activated [ 56.008943][ T986] netlink: 16 bytes leftover after parsing attributes in process `syz.3.193'. [ 56.027670][ T1022] loop2: detected capacity change from 0 to 512 [ 56.112236][ T1018] loop4: detected capacity change from 0 to 40427 [ 59.157833][ T30] audit: type=1326 audit(1785997951.036:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=957 comm="syz.0.185" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3fae4f0d9 code=0x7ffc0000 [ 59.209994][ T1031] netlink: 'syz.3.207': attribute type 3 has an invalid length. [ 59.317285][ T1039] loop1: detected capacity change from 0 to 512 [ 59.345154][ T30] audit: type=1326 audit(1785997951.036:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=957 comm="syz.0.185" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3fae4f0d9 code=0x7ffc0000 [ 59.373547][ T1038] loop3: detected capacity change from 0 to 512 [ 59.405836][ T1039] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 59.462817][ T1038] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.207: bg 0: block 5: invalid block bitmap [ 59.485510][ T30] audit: type=1326 audit(1785997951.036:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=957 comm="syz.0.185" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3fae4f0d9 code=0x7ffc0000 [ 59.575146][ T368] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 59.584630][ T1032] loop4: detected capacity change from 0 to 40427 [ 59.592574][ T1038] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 59.612475][ T30] audit: type=1326 audit(1785997951.036:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=957 comm="syz.0.185" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb3fae4f0d9 code=0x7ffc0000 [ 59.647008][ T1032] F2FS-fs (loop4): invalid crc value [ 59.667519][ T1032] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 59.689192][ T1038] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.207: invalid indirect mapped block 3 (level 2) [ 59.752235][ T1032] F2FS-fs (loop4): Start checkpoint disabled! [ 59.766200][ T1038] EXT4-fs (loop3): 1 orphan inode deleted [ 59.774633][ T30] audit: type=1326 audit(1785997951.036:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=957 comm="syz.0.185" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3fae4f0d9 code=0x7ffc0000 [ 59.813857][ T1032] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 59.833555][ T1038] EXT4-fs (loop3): 1 truncate cleaned up [ 59.884188][ T1038] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 59.915207][ T30] audit: type=1326 audit(1785997951.036:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=957 comm="syz.0.185" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3fae4f0d9 code=0x7ffc0000 [ 59.998094][ T1038] Invalid ELF header magic: != ELF [ 60.015557][ T368] usb 1-1: unable to get BOS descriptor or descriptor too short [ 60.045496][ T30] audit: type=1326 audit(1785997951.036:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=957 comm="syz.0.185" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3fae4f0d9 code=0x7ffc0000 [ 60.125270][ T368] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 60.185289][ T30] audit: type=1326 audit(1785997951.036:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=957 comm="syz.0.185" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb3fae4f0d9 code=0x7ffc0000 [ 60.302056][ T464] attempt to access beyond end of device [ 60.302056][ T464] loop4: rw=1, want=79096, limit=40427 [ 60.327433][ T30] audit: type=1326 audit(1785997951.036:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=957 comm="syz.0.185" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3fae4f0d9 code=0x7ffc0000 [ 60.363217][ T368] usb 1-1: New USB device found, idVendor=0763, idProduct=1033, bcdDevice= 0.40 [ 60.390725][ T1033] loop2: detected capacity change from 0 to 131072 [ 60.399190][ T464] attempt to access beyond end of device [ 60.399190][ T464] loop4: rw=2049, want=45104, limit=40427 [ 60.423287][ T368] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.441072][ T1056] loop1: detected capacity change from 0 to 512 [ 60.453385][ T1033] F2FS-fs (loop2): Invalid segment/section count (458783, 24 x 150994945) [ 60.473141][ T368] usb 1-1: Product: syz [ 60.473157][ T368] usb 1-1: Manufacturer: syz [ 60.473166][ T368] usb 1-1: SerialNumber: syz [ 60.515202][ T1033] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 60.515597][ T1033] F2FS-fs (loop2): invalid crc value [ 60.516105][ T30] audit: type=1326 audit(1785997951.036:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=957 comm="syz.0.185" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3fae4f0d9 code=0x7ffc0000 [ 60.544338][ T1033] F2FS-fs (loop2): Found nat_bits in checkpoint [ 60.613009][ T1033] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 60.613027][ T1033] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 60.675049][ T1065] loop4: detected capacity change from 0 to 128 [ 60.696212][ T1033] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=8000000, run fsck to fix. [ 60.732303][ T1065] netlink: 'syz.4.215': attribute type 5 has an invalid length. [ 60.773729][ T1068] xt_CT: You must specify a L4 protocol and not use inversions on it [ 60.960150][ T1072] loop3: detected capacity change from 0 to 512 [ 61.051987][ T1072] EXT4-fs (loop3): Ignoring removed nobh option [ 61.065478][ T1079] UDC core: couldn't find an available UDC or it's busy: -16 [ 61.108577][ T1079] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 61.118994][ T1072] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 61.164895][ T1072] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 61.208049][ T1072] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 61.278785][ T1072] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 61.308626][ T1089] loop2: detected capacity change from 0 to 256 [ 61.330912][ T1072] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e040e01c, mo2=0000] [ 61.342466][ T368] usb 1-1: unit 0 not found! [ 61.348117][ T20] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 61.412660][ T368] usb 1-1: USB disconnect, device number 8 [ 61.433233][ T1094] loop2: detected capacity change from 0 to 512 [ 61.448695][ T1072] EXT4-fs (loop3): failed to initialize system zone (-117) [ 61.484477][ T1094] EXT4-fs (loop2): Ignoring removed oldalloc option [ 61.507709][ T1099] xt_CT: You must specify a L4 protocol and not use inversions on it [ 61.529620][ T1072] EXT4-fs (loop3): mount failed [ 61.538032][ T1094] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,noauto_da_alloc,oldalloc,,errors=continue. Quota mode: none. [ 61.621595][ T1072] netlink: 260 bytes leftover after parsing attributes in process `syz.3.220'. [ 61.645137][ T20] usb 5-1: device descriptor read/64, error -71 [ 61.713937][ T1114] Zero length message leads to an empty skb [ 61.726179][ T1119] loop1: detected capacity change from 0 to 128 [ 61.737592][ T1120] UDC core: couldn't find an available UDC or it's busy: -16 [ 61.767901][ T1120] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 61.797807][ T1119] EXT4-fs (loop1): Test dummy encryption mode enabled [ 61.810295][ T1123] binder: 1122:1123 ioctl 8138ae83 7ff3e103da90 returned -22 [ 61.855054][ T1119] EXT4-fs (loop1): Ignoring removed bh option [ 61.906449][ T1119] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,bh,barrier=0x0000000000000000,nodioread_nolock,,errors=continue. Quota mode: none. [ 61.976637][ T1132] EXT4-fs (loop3): Ignoring removed oldalloc option [ 61.998707][ T1132] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,noauto_da_alloc,oldalloc,,errors=continue. Quota mode: none. [ 62.013347][ T6] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 62.023975][ T1119] ext4 filesystem being mounted at /45/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 62.085186][ T20] usb 5-1: device descriptor read/64, error -71 [ 62.305154][ T6] usb 3-1: device descriptor read/64, error -71 [ 62.365161][ T20] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 62.655182][ T20] usb 5-1: device descriptor read/64, error -71 [ 62.697124][ T1153] EXT4-fs (loop1): Unrecognized mount option "dont_measure" or missing value [ 62.706754][ T6] usb 3-1: device descriptor read/64, error -71 [ 62.792745][ T1156] xt_CT: You must specify a L4 protocol and not use inversions on it [ 62.985257][ T6] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 63.041982][ T1169] syz.3.248 uses obsolete (PF_INET,SOCK_PACKET) [ 63.055220][ T20] usb 5-1: device descriptor read/64, error -71 [ 63.067603][ T1165] EXT4-fs (loop1): Ignoring removed oldalloc option [ 63.080633][ T1165] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,noauto_da_alloc,oldalloc,,errors=continue. Quota mode: none. [ 63.182182][ T1176] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,block_validity,nodioread_nolock,nodelalloc,resuid=0x0000000000000000,errors=remount-ro,. Quota mode: none. [ 63.206412][ T20] usb usb5-port1: attempt power cycle [ 63.267349][ T1176] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.278295][ T6] usb 3-1: device descriptor read/64, error -71 [ 63.307665][ T1191] EXT4-fs (loop1): Ignoring removed oldalloc option [ 63.330014][ T1175] EXT4-fs error (device loop3): ext4_map_blocks:742: inode #15: comm syz.3.251: lblock 0 mapped to illegal pblock 0 (length 1) [ 63.346226][ T1191] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,noauto_da_alloc,oldalloc,,errors=continue. Quota mode: none. [ 63.360989][ T1175] EXT4-fs (loop3): Remounting filesystem read-only [ 63.368002][ T1175] EXT4-fs error (device loop3): ext4_map_blocks:632: inode #15: comm syz.3.251: lblock 0 mapped to illegal pblock 0 (length 1) [ 63.400386][ T1175] EXT4-fs (loop3): Remounting filesystem read-only [ 63.415671][ T1175] EXT4-fs error (device loop3): ext4_map_blocks:632: inode #15: comm syz.3.251: lblock 0 mapped to illegal pblock 0 (length 1) [ 63.465404][ T1175] EXT4-fs (loop3): Remounting filesystem read-only [ 63.475958][ T1196] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 63.505079][ T1175] EXT4-fs error (device loop3): ext4_map_blocks:632: inode #15: comm syz.3.251: lblock 0 mapped to illegal pblock 0 (length 1) [ 63.530380][ T1196] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 63.550913][ T1175] EXT4-fs (loop3): Remounting filesystem read-only [ 63.582613][ T1175] EXT4-fs error (device loop3): ext4_map_blocks:632: inode #15: comm syz.3.251: lblock 0 mapped to illegal pblock 0 (length 1) [ 63.620137][ T1175] EXT4-fs (loop3): Remounting filesystem read-only [ 63.629285][ T20] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 63.663900][ T1200] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 63.678854][ T6] usb 3-1: device descriptor read/64, error -71 [ 63.690771][ T1175] EXT4-fs error (device loop3): ext4_map_blocks:632: inode #15: comm syz.3.251: lblock 0 mapped to illegal pblock 0 (length 1) [ 63.725294][ T1175] EXT4-fs (loop3): Remounting filesystem read-only [ 63.736584][ T1200] ------------[ cut here ]------------ [ 63.755799][ T1200] EA inode 11 i_nlink=0 [ 63.755875][ T1200] WARNING: CPU: 0 PID: 1200 at fs/ext4/xattr.c:1006 ext4_xattr_inode_update_ref+0x4f9/0x560 [ 63.774112][ T1175] EXT4-fs error (device loop3): ext4_map_blocks:632: inode #15: comm syz.3.251: lblock 0 mapped to illegal pblock 0 (length 1) [ 63.805271][ T6] usb usb3-port1: attempt power cycle [ 63.815625][ T1175] EXT4-fs (loop3): Remounting filesystem read-only [ 63.839049][ T1200] Modules linked in: [ 63.845398][ T20] usb 5-1: device descriptor read/8, error -71 [ 63.858346][ T1200] CPU: 0 PID: 1200 Comm: syz.1.259 Not tainted syzkaller #0 [ 63.869930][ T1175] EXT4-fs error (device loop3): ext4_map_blocks:632: inode #15: comm syz.3.251: lblock 0 mapped to illegal pblock 0 (length 1) [ 63.902218][ T1200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 63.928398][ T1175] EXT4-fs (loop3): Remounting filesystem read-only [ 63.946683][ T1200] RIP: 0010:ext4_xattr_inode_update_ref+0x4f9/0x560 [ 63.955884][ T1175] EXT4-fs error (device loop3): ext4_map_blocks:632: inode #15: comm syz.3.251: lblock 0 mapped to illegal pblock 0 (length 1) [ 63.982419][ T1200] Code: 40 4c 89 e0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 e7 e8 fa cd bd ff 49 8b 34 24 48 c7 c7 c0 86 4f 85 44 89 fa e8 d7 45 bf 02 <0f> 0b 49 bd 00 00 00 00 00 fc ff df 4c 8b 74 24 08 4c 8b 64 24 10 [ 64.014763][ T1175] EXT4-fs (loop3): Remounting filesystem read-only [ 64.037210][ T1175] EXT4-fs error (device loop3): ext4_map_blocks:632: inode #15: comm syz.3.251: lblock 0 mapped to illegal pblock 0 (length 1) [ 64.085199][ T20] usb 5-1: device descriptor read/8, error -71 [ 64.122867][ T1200] RSP: 0018:ffffc90001107240 EFLAGS: 00010246 [ 64.137313][ T1175] EXT4-fs (loop3): Remounting filesystem read-only [ 64.150428][ T1200] RAX: bfc43aa8ae7eea00 RBX: ffff888111fa8890 RCX: 0000000000080000 [ 64.173450][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 64.173462][ T30] audit: type=1400 audit(1785997961.806:499): avc: denied { map } for pid=1175 comm="syz.3.251" path="pipe:[502]" dev="pipefs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 64.215147][ T6] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 64.235554][ T1200] RDX: ffffc900023af000 RSI: 000000000000c30a RDI: 000000000000c30b [ 64.279744][ T1200] RBP: ffffc90001107330 R08: ffff8881f7027493 R09: 1ffff1103ee04e92 [ 64.309037][ T1200] R10: dffffc0000000000 R11: ffffed103ee04e93 R12: ffff888111fa8770 [ 64.334936][ T1200] R13: dffffc0000000000 R14: ffff888111fa8730 R15: 0000000000000000 [ 64.361001][ T1200] FS: 00007f8f76e566c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 64.389645][ T1200] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 64.407455][ T1200] CR2: 00007ff3e103dfd0 CR3: 000000011e26a000 CR4: 00000000003506b0 [ 64.418390][ T1198] netlink: 'syz.0.258': attribute type 4 has an invalid length. [ 64.427272][ T6] usb 3-1: device descriptor read/8, error -71 [ 64.436328][ T1198] netlink: 'syz.0.258': attribute type 4 has an invalid length. [ 64.453954][ T1200] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 64.470383][ T1200] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 64.483398][ T1198] syz.0.258 (1198) used greatest stack depth: 20992 bytes left [ 64.496919][ T1200] Call Trace: [ 64.501157][ T1200] [ 64.505741][ T1200] ? ext4_xattr_block_csum+0x590/0x590 [ 64.516372][ T1200] ? __ext4_journal_ensure_credits+0x30/0x470 [ 64.537832][ T1200] ext4_xattr_inode_dec_ref_all+0x94c/0xf90 [ 64.545569][ T58] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 64.568887][ T1200] ? errseq_check+0x41/0x80 [ 64.582715][ T1200] ? ext4_xattr_delete_inode+0xca0/0xca0 [ 64.605405][ T1200] ? __ext4_journal_ensure_credits+0x470/0x470 [ 64.630814][ T1200] ? ext4_get_inode_loc+0x100/0x130 [ 64.662011][ T1219] set_capacity_and_notify: 7 callbacks suppressed [ 64.662025][ T1219] loop4: detected capacity change from 0 to 512 [ 64.683258][ T1200] ext4_xattr_delete_inode+0xada/0xca0 [ 64.715340][ T6] usb 3-1: device descriptor read/8, error -71 [ 64.748676][ T1200] ? ext4_truncate+0xc1b/0x1000 [ 64.756515][ T1219] EXT4-fs (loop4): Ignoring removed oldalloc option [ 64.786107][ T1219] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,noauto_da_alloc,oldalloc,,errors=continue. Quota mode: none. [ 64.802663][ T58] usb 4-1: Using ep0 maxpacket: 16 [ 64.813030][ T1200] ? ext4_expand_extra_isize_ea+0x1940/0x1940 [ 64.827221][ T1200] ext4_evict_inode+0xe0a/0x1420 [ 64.862622][ T1200] ? ext4_inode_is_fast_symlink+0x3a0/0x3a0 [ 64.922641][ T1200] ? _raw_spin_unlock+0x4d/0x70 [ 64.935201][ T58] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 65.377950][ T1200] ? ext4_inode_is_fast_symlink+0x3a0/0x3a0 [ 65.391001][ T58] usb 4-1: config 0 has no interface number 0 [ 65.409092][ T58] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 65.427738][ T1200] evict+0x4b6/0x8b0 [ 65.447619][ T58] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 65.463170][ T1200] ? proc_nr_inodes+0x310/0x310 [ 65.490796][ T58] usb 4-1: config 0 interface 41 has no altsetting 0 [ 65.509562][ T1200] ? _raw_spin_lock+0x94/0xf0 [ 65.553666][ T1200] ? _raw_spin_trylock_bh+0x150/0x150 [ 65.589259][ T1200] ? __kasan_check_write+0x14/0x20 [ 65.615022][ T1200] iput+0x651/0x7e0 [ 65.640750][ T1200] ext4_process_orphan+0x298/0x300 [ 65.665627][ T1200] ext4_orphan_cleanup+0xa0b/0x1120 [ 65.675285][ T58] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 65.702287][ T1236] device bridge_slave_0 left promiscuous mode [ 65.712427][ T58] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.735214][ T1200] ? ext4_orphan_file_block_trigger+0x460/0x460 [ 65.744466][ T1236] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.764170][ T58] usb 4-1: Product: syz [ 65.771206][ T58] usb 4-1: Manufacturer: syz [ 65.776649][ T1200] ? ext4_orphan_del+0xc90/0xc90 [ 65.793667][ T58] usb 4-1: SerialNumber: syz [ 65.799602][ T1200] ? errseq_check_and_advance+0x66/0x130 [ 65.809118][ T58] usb 4-1: config 0 descriptor?? [ 65.826299][ T1236] device bridge_slave_1 left promiscuous mode [ 65.833402][ T1200] ext4_fill_super+0x84ce/0x8bf0 [ 65.839535][ T1212] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 65.865552][ T1236] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.893712][ T1200] ? ext4_mount+0x40/0x40 [ 65.898623][ T1212] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 65.910594][ T1236] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 65.925211][ T1200] ? set_blocksize+0x1e9/0x360 [ 66.000664][ T1200] ? sb_set_blocksize+0xaa/0xf0 [ 66.027364][ T1200] ? ext4_mount+0x40/0x40 [ 66.049968][ T1200] mount_bdev+0x28d/0x3c0 [ 67.081355][ T1212] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 67.100519][ T1246] xt_CT: You must specify a L4 protocol and not use inversions on it [ 67.115187][ T1212] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 67.604401][ T1200] ? ext4_mount+0x40/0x40 [ 67.617323][ T1200] ext4_mount+0x34/0x40 [ 67.626146][ T30] audit: type=1400 audit(1785997965.266:500): avc: denied { setattr } for pid=1211 comm="syz.3.263" name="ptmx" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 67.656863][ T1200] legacy_get_tree+0xed/0x190 [ 67.670902][ T1200] ? ext4_errno_to_code+0x160/0x160 [ 67.685186][ T1200] vfs_get_tree+0x89/0x260 [ 67.698036][ T1234] loop2: detected capacity change from 0 to 131072 [ 67.704792][ T1200] do_new_mount+0x251/0xb40 [ 67.712803][ T30] audit: type=1400 audit(1785997965.356:501): avc: denied { connect } for pid=1211 comm="syz.3.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 67.738711][ T1200] ? security_capable+0x87/0xb0 [ 67.750453][ T1200] path_mount+0x640/0xff0 [ 67.787779][ T1234] F2FS-fs (loop2): invalid crc value [ 67.829780][ T1200] __se_sys_mount+0x320/0x390 [ 67.840895][ T1234] F2FS-fs (loop2): Found nat_bits in checkpoint [ 67.940150][ T1200] ? __x64_sys_mount+0xd0/0xd0 [ 67.970477][ T1200] __x64_sys_mount+0xbf/0xd0 [ 69.099690][ T1234] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 69.115923][ T1200] x64_sys_call+0x6bf/0x9a0 [ 69.564637][ T1265] loop4: detected capacity change from 0 to 512 [ 69.585259][ T58] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 69.616685][ T1234] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 69.626880][ T1265] EXT4-fs error (device loop4): ext4_quota_enable:6431: comm syz.4.276: Bad quota inum: 12023, type: 1 [ 69.642480][ T1265] EXT4-fs warning (device loop4): ext4_enable_quotas:6479: Failed to enable quota tracking (type=1, err=-117, ino=12023). Please run e2fsck to fix. [ 69.659560][ T1265] EXT4-fs (loop4): mount failed [ 69.666336][ T30] audit: type=1400 audit(1785997967.306:502): avc: denied { ioctl } for pid=1270 comm="syz.3.280" path="socket:[20237]" dev="sockfs" ino=20237 ioctlcmd=0x940f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 69.698277][ T1273] loop3: detected capacity change from 0 to 256 [ 69.707245][ T1200] do_syscall_64+0x4c/0xa0 [ 69.715416][ T58] CoreChips: probe of 4-1:0.41 failed with error -71 [ 69.735328][ T1200] ? clear_bhb_loop+0x50/0xa0 [ 69.754458][ T58] usb 4-1: USB disconnect, device number 7 [ 69.773342][ T1265] loop4: detected capacity change from 0 to 512 [ 69.784601][ T1273] FAT-fs (loop3): Unrecognized mount option "0x0000000000000000" or missing value [ 69.826693][ T1265] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,bsdgroups,quota,,errors=continue. Quota mode: writeback. [ 69.842895][ T1265] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.867327][ T1200] ? clear_bhb_loop+0x50/0xa0 [ 69.896301][ T30] audit: type=1400 audit(1785997967.496:503): avc: denied { create } for pid=1259 comm="syz.4.276" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 69.929708][ T1200] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 69.961220][ T1200] RIP: 0033:0x7f8f783fe34a [ 70.055443][ T1200] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.121405][ T30] audit: type=1400 audit(1785997967.496:504): avc: denied { read open } for pid=1259 comm="syz.4.276" path="/54/file1/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 70.239135][ T1289] loop4: detected capacity change from 0 to 512 [ 70.316516][ T1289] SELinux: security_context_str_to_sid(root) failed for (dev ?, type ?) errno=-22 [ 70.335344][ T1200] RSP: 002b:00007f8f76e55e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 70.360914][ T1289] SELinux: duplicate or incompatible mount options [ 70.393133][ T1200] RAX: ffffffffffffffda RBX: 00007f8f76e55ee0 RCX: 00007f8f783fe34a [ 72.114917][ T1200] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007f8f76e55ea0 [ 72.455432][ T1296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.286'. [ 72.474375][ T30] audit: type=1400 audit(1785997970.106:505): avc: denied { ioctl } for pid=1298 comm="syz.3.287" path="socket:[20304]" dev="sockfs" ino=20304 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 72.529860][ T1200] RBP: 0000200000000180 R08: 00007f8f76e55ee0 R09: 0000000000000000 [ 72.663468][ T1310] loop4: detected capacity change from 0 to 2048 [ 72.675614][ T1308] loop3: detected capacity change from 0 to 512 [ 72.686415][ T1200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 72.737459][ T1308] EXT4-fs (loop3): Ignoring removed oldalloc option [ 72.755899][ T1310] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 72.769987][ T1200] R13: 00007f8f76e55ea0 R14: 0000000000000478 R15: 000000000000002c [ 72.779725][ T6] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 72.816762][ T1308] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,noauto_da_alloc,oldalloc,,errors=continue. Quota mode: none. [ 72.839271][ T1200] [ 72.844474][ T1310] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 72.864490][ T1200] ---[ end trace 64cb0b56eef677fd ]--- [ 72.927201][ T1200] EXT4-fs (loop1): 1 orphan inode deleted [ 72.934509][ T1310] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 498 with error 28 [ 72.966535][ T1200] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,dioread_nolock,errors=remount-ro,nouid32,max_dir_size_kb=0x0000000000000004,debug_want_extra_isize=0x0000000000000038,errors=remount-ro,. Quota mode: none. [ 74.092459][ T1310] EXT4-fs (loop4): This should not happen!! Data will be lost [ 74.092459][ T1310] [ 74.117099][ T1310] EXT4-fs (loop4): Total free blocks count 0 [ 74.593086][ T1310] EXT4-fs (loop4): Free/Dirty block details [ 74.604149][ T1331] loop3: detected capacity change from 0 to 512 [ 74.615196][ T6] usb 3-1: device descriptor read/all, error -71 [ 74.626578][ T1310] EXT4-fs (loop4): free_blocks=4096 [ 74.648589][ T1331] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 74.712620][ T368] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 74.729450][ T1310] EXT4-fs (loop4): dirty_blocks=512 [ 74.740736][ T1340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.301'. [ 74.762773][ T1310] EXT4-fs (loop4): Block reservation details [ 74.786699][ T1331] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 74.819483][ T1310] EXT4-fs (loop4): i_reserved_data_blocks=32 [ 74.840746][ T1344] loop2: detected capacity change from 0 to 1024 [ 74.866755][ T1343] loop1: detected capacity change from 0 to 256 [ 74.895539][ T1331] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 not in group (block 0)! [ 74.934131][ T1331] EXT4-fs (loop3): group descriptors corrupted! [ 75.016648][ T1360] loop2: detected capacity change from 0 to 512 [ 75.069573][ T1363] loop1: detected capacity change from 0 to 2048 [ 75.085789][ T1360] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 75.116261][ T1360] EXT4-fs (loop2): orphan cleanup on readonly fs [ 75.137231][ T1360] EXT4-fs error (device loop2): ext4_orphan_get:1432: comm syz.2.310: bad orphan inode 15 [ 75.163647][ T1360] ext4_test_bit(bit=14, block=18) = 1 [ 75.169964][ T1360] is_bad_inode(inode)=0 [ 75.175819][ T1360] NEXT_ORPHAN(inode)=1023 [ 75.180833][ T1360] max_ino=32 [ 75.184908][ T1360] i_nlink=0 [ 75.194480][ T1360] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.310: bg 0: block 161: padding at end of block bitmap is not set [ 75.209762][ T368] usb 5-1: unable to get BOS descriptor or descriptor too short [ 75.222801][ T1363] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 75.247172][ T1379] loop3: detected capacity change from 0 to 256 [ 75.255586][ T1360] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 75.273817][ T1360] EXT4-fs (loop2): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 75.291719][ T368] usb 5-1: not running at top speed; connect to a high speed hub [ 75.300739][ T1363] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.320364][ T1379] netlink: 40 bytes leftover after parsing attributes in process `syz.3.315'. [ 75.366827][ T1363] fs-verity: sha512 using implementation "sha512-avx2" [ 75.395250][ T368] usb 5-1: config 17 has an invalid interface number: 8 but max is 1 [ 75.405258][ T58] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 75.425212][ T368] usb 5-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 75.468110][ T368] usb 5-1: config 17 has no interface number 0 [ 75.516194][ T368] usb 5-1: config 17 interface 8 altsetting 6 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 75.565174][ T368] usb 5-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid maxpacket 255, setting to 64 [ 75.595214][ T368] usb 5-1: config 17 interface 8 has no altsetting 0 [ 75.629776][ T1400] overlayfs: unrecognized mount option "verity=off" or missing value [ 75.645257][ T58] usb 1-1: Using ep0 maxpacket: 32 [ 75.738409][ T30] audit: type=1400 audit(1785997973.376:506): avc: denied { unlink } for pid=1399 comm="syz.2.321" name="#1" dev="tmpfs" ino=332 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 75.775296][ T368] usb 5-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 75.803100][ T368] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.845219][ T368] usb 5-1: can't set config #17, error -71 [ 75.860781][ T368] usb 5-1: USB disconnect, device number 10 [ 75.946666][ T58] usb 1-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice=26.2f [ 75.969708][ T58] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.989876][ T58] usb 1-1: Product: syz [ 76.001791][ T58] usb 1-1: Manufacturer: syz [ 76.013918][ T58] usb 1-1: SerialNumber: syz [ 76.029135][ T58] usb 1-1: config 0 descriptor?? [ 76.191669][ T1393] loop1: detected capacity change from 0 to 131072 [ 76.204608][ T1393] F2FS-fs (loop1): Invalid log sectorsize (67108873) [ 76.221912][ T1393] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 76.231225][ T368] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 76.240308][ T1393] F2FS-fs (loop1): invalid crc value [ 76.247756][ T1393] F2FS-fs (loop1): Found nat_bits in checkpoint [ 76.270414][ T1393] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 76.296144][ T1393] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 76.348009][ T30] audit: type=1400 audit(1785997973.986:507): avc: denied { write } for pid=1390 comm="syz.1.318" path="/65/file1/bus" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 76.397326][ T1393] loop7: detected capacity change from 0 to 16384 [ 76.405558][ T58] ums-onetouch 1-1:0.0: USB Mass Storage device detected [ 76.446935][ T58] usb 1-1: USB disconnect, device number 9 [ 76.500703][ T1425] loop2: detected capacity change from 0 to 256 [ 76.507860][ T368] usb 5-1: Using ep0 maxpacket: 16 [ 76.536381][ T30] audit: type=1400 audit(1785997974.176:508): avc: denied { mounton } for pid=1426 comm="syz.0.328" path="/syzcgroup/cpu/syz0/cgroup.procs" dev="cgroup" ino=161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 76.563953][ T1393] loop_set_status: loop7 () has still dirty pages (nrpages=16) [ 76.579468][ T1425] netlink: 40 bytes leftover after parsing attributes in process `syz.2.327'. [ 76.674754][ T1433] xt_CT: You must specify a L4 protocol and not use inversions on it [ 76.684441][ T368] usb 5-1: unable to get BOS descriptor or descriptor too short [ 76.694547][ T1435] netlink: 72 bytes leftover after parsing attributes in process `syz.0.331'. [ 76.718973][ T30] audit: type=1400 audit(1785997974.356:509): avc: denied { bind } for pid=1434 comm="syz.0.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 76.759971][ T311] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 76.795226][ T368] usb 5-1: config 1 has an invalid interface descriptor of length 7, skipping [ 76.826966][ T368] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 76.865908][ T368] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.913514][ T368] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 76.932576][ T1441] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 77.082578][ T1449] loop1: detected capacity change from 0 to 128 [ 77.105192][ T368] usb 5-1: New USB device found, idVendor=08e4, idProduct=0163, bcdDevice= 0.40 [ 77.136280][ T368] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.151915][ T368] usb 5-1: Product: syz [ 77.157028][ T368] usb 5-1: Manufacturer: syz [ 77.161885][ T368] usb 5-1: SerialNumber: syz [ 77.175239][ T311] usb 4-1: unable to get BOS descriptor or descriptor too short [ 77.231560][ T1458] loop1: detected capacity change from 0 to 512 [ 77.243484][ T1458] SELinux: security_context_str_to_sid(root) failed for (dev ?, type ?) errno=-22 [ 77.253709][ T1458] SELinux: duplicate or incompatible mount options [ 77.265320][ T311] usb 4-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 77.277881][ T311] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 22, changing to 8 [ 77.755614][ T1462] futex_wake_op: syz.0.338 tries to shift op by 144; fix this program [ 77.826453][ T1464] input: syz1 as /devices/virtual/input/input8 [ 77.845255][ T311] usb 4-1: New USB device found, idVendor=0499, idProduct=101a, bcdDevice= 0.40 [ 77.854561][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.863562][ T311] usb 4-1: Product: syz [ 77.868290][ T368] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 77.875614][ T311] usb 4-1: Manufacturer: syz [ 77.880740][ T311] usb 4-1: SerialNumber: syz [ 77.895188][ T368] usb 5-1: 0:2 : does not exist [ 77.915248][ T368] snd-usb-audio: probe of 5-1:1.0 failed with error -71 [ 77.931374][ T368] usb 5-1: USB disconnect, device number 11 [ 78.035159][ T1456] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 78.159393][ T1471] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 78.189956][ T30] audit: type=1400 audit(1785997975.826:510): avc: denied { append } for pid=1470 comm="syz.1.342" name="file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 78.225489][ T311] usb 4-1: USB disconnect, device number 8 [ 78.295155][ T1456] usb 1-1: Using ep0 maxpacket: 16 [ 78.314332][ T1474] exfat: Deprecated parameter 'namecase' [ 78.331923][ T1474] exfat: Deprecated parameter 'namecase' [ 78.349166][ T1474] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 78.362959][ T1456] usb 1-1: too many configurations: 55, using maximum allowed: 8 [ 78.411981][ T1476] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 78.412088][ T30] audit: type=1400 audit(1785997976.046:511): avc: denied { write } for pid=1473 comm="syz.4.344" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 78.454824][ T1476] EXT4-fs (loop1): Test dummy encryption mode enabled [ 78.480760][ T1476] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 78.490817][ T1476] System zones: 0-5 [ 78.494935][ T30] audit: type=1400 audit(1785997976.096:512): avc: denied { add_name } for pid=1473 comm="syz.4.344" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 78.553259][ T1476] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,jqfmt=vfsv0,inlinecrypt,errors=remount-ro,test_dummy_encryption=v1,norecovery,delalloc,nogrpid,minixdf,. Quota mode: writeback. [ 78.573433][ T1456] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 78.589783][ T1481] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 78.607455][ T1456] usb 1-1: can't read configurations, error -61 [ 78.698544][ T30] audit: type=1400 audit(1785997976.096:513): avc: denied { associate } for pid=1473 comm="syz.4.344" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 78.765182][ T1456] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 80.087627][ T30] audit: type=1400 audit(1785997976.106:514): avc: denied { write open } for pid=1473 comm="syz.4.344" path=2F36332FE91F7189591E9233614B2F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 dev="loop4" ino=1048616 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 80.505614][ T1494] set_capacity_and_notify: 5 callbacks suppressed [ 80.505706][ T1494] loop3: detected capacity change from 0 to 512 [ 80.555149][ T1456] usb 1-1: Using ep0 maxpacket: 16 [ 80.572824][ T1494] EXT4-fs error (device loop3): ext4_quota_enable:6431: comm syz.3.348: Bad quota inum: 12023, type: 1 [ 80.586096][ T1494] EXT4-fs warning (device loop3): ext4_enable_quotas:6479: Failed to enable quota tracking (type=1, err=-117, ino=12023). Please run e2fsck to fix. [ 80.602122][ T1494] EXT4-fs (loop3): mount failed [ 80.609009][ T1456] usb 1-1: too many configurations: 55, using maximum allowed: 8 [ 80.620296][ T1498] loop4: detected capacity change from 0 to 512 [ 80.655945][ T1498] EXT4-fs (loop4): Ignoring removed oldalloc option [ 80.669229][ T1494] loop3: detected capacity change from 0 to 512 [ 80.715461][ T1498] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,noauto_da_alloc,oldalloc,,errors=continue. Quota mode: none. [ 80.732145][ T1494] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,bsdgroups,quota,,errors=continue. Quota mode: writeback. [ 80.747941][ T1494] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.785221][ T1456] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 80.819211][ T1508] xt_CT: You must specify a L4 protocol and not use inversions on it [ 80.832693][ T1456] usb 1-1: can't read configurations, error -71 [ 80.854998][ T1456] usb usb1-port1: attempt power cycle [ 80.983667][ T1515] loop4: detected capacity change from 0 to 4096 [ 81.029476][ T1520] process 'syz.2.355' launched './file0' with NULL argv: empty string added [ 81.056920][ T30] audit: type=1400 audit(1785997976.106:515): avc: denied { remove_name } for pid=1473 comm="syz.4.344" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=1048616 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 81.108177][ T1515] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 81.241737][ T30] audit: type=1400 audit(1785997976.106:516): avc: denied { rename } for pid=1473 comm="syz.4.344" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=1048616 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 81.294341][ T30] audit: type=1400 audit(1785997978.566:517): avc: denied { ioctl } for pid=1475 comm="syz.1.343" path="/73/file0/file0/file1" dev="loop1" ino=18 ioctlcmd=0x9402 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 81.367857][ T30] audit: type=1400 audit(1785997978.606:518): avc: denied { write } for pid=1514 comm="syz.3.352" name="functions" dev="configfs" ino=16832 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 81.396561][ T30] audit: type=1400 audit(1785997978.606:519): avc: denied { add_name } for pid=1514 comm="syz.3.352" name="uac1.usb0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 81.420357][ T30] audit: type=1400 audit(1785997978.616:520): avc: denied { create } for pid=1514 comm="syz.3.352" name="uac1.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 81.515241][ T30] audit: type=1400 audit(1785997978.826:521): avc: denied { lock } for pid=1529 comm="syz.3.358" path="socket:[21286]" dev="sockfs" ino=21286 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 81.543016][ T309] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 81.552222][ T30] audit: type=1400 audit(1785997978.876:522): avc: denied { ioctl } for pid=1536 comm="syz.2.362" path="socket:[21332]" dev="sockfs" ino=21332 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 83.062019][ T1546] loop4: detected capacity change from 0 to 512 [ 83.115994][ T1546] EXT4-fs error (device loop4): ext4_quota_enable:6431: comm syz.4.363: Bad quota inum: 12023, type: 1 [ 83.128606][ T1546] EXT4-fs warning (device loop4): ext4_enable_quotas:6479: Failed to enable quota tracking (type=1, err=-117, ino=12023). Please run e2fsck to fix. [ 83.146287][ T1546] EXT4-fs (loop4): mount failed [ 83.179176][ T1546] loop4: detected capacity change from 0 to 512 [ 83.188754][ T1557] xt_CT: You must specify a L4 protocol and not use inversions on it [ 83.661653][ T1559] ================================================================== [ 83.672476][ T1559] BUG: KASAN: use-after-free in unaccount_page_cache_page+0x6f1/0x760 [ 83.684642][ T1559] Read of size 4 at addr ffff888128a98470 by task syz.2.365/1559 [ 83.698277][ T1559] [ 83.701805][ T1559] CPU: 0 PID: 1559 Comm: syz.2.365 Tainted: G W syzkaller #0 [ 83.713500][ T1559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 83.724612][ T1559] Call Trace: [ 83.727979][ T1559] [ 83.731291][ T1559] __dump_stack+0x21/0x30 [ 83.736696][ T1559] dump_stack_lvl+0x110/0x170 [ 83.744697][ T1559] ? show_regs_print_info+0x20/0x20 [ 83.752283][ T1559] ? load_image+0x3f0/0x3f0 [ 83.756980][ T1559] print_address_description+0x7f/0x2c0 [ 83.766398][ T1559] ? unaccount_page_cache_page+0x6f1/0x760 [ 83.774144][ T1559] kasan_report+0x10f/0x150 [ 83.779798][ T1559] ? unaccount_page_cache_page+0x6f1/0x760 [ 83.787888][ T1559] __asan_report_load4_noabort+0x14/0x20 [ 83.795823][ T1559] unaccount_page_cache_page+0x6f1/0x760 [ 83.803533][ T1559] __delete_from_page_cache+0xbe/0x470 [ 83.812484][ T1559] ? __bpf_trace_file_check_and_advance_wb_err+0x30/0x30 [ 83.822158][ T1559] ? __kasan_check_write+0x14/0x20 [ 83.828921][ T1559] ? __kasan_check_read+0x11/0x20 [ 83.835376][ T1559] ? workingset_eviction+0x402/0x9f0 [ 83.843759][ T1559] __remove_mapping+0x601/0x990 [ 83.850459][ T1559] ? jbd2_journal_try_to_free_buffers+0x2c8/0x300 [ 83.858441][ T1559] ? remove_mapping+0xa0/0xa0 [ 83.863685][ T1559] ? __kasan_check_read+0x11/0x20 [ 83.870184][ T1559] shrink_page_list+0x2a24/0x5800 [ 83.876552][ T1559] ? reclaim_clean_pages_from_list+0x7e0/0x7e0 [ 83.885965][ T1559] ? __this_cpu_preempt_check+0x13/0x20 [ 83.893008][ T1559] ? __mod_zone_page_state+0x8e/0xd0 [ 83.899308][ T1559] ? isolate_lru_pages+0xff1/0x11f0 [ 83.908295][ T1559] ? should_run_aging+0x410/0x410 [ 83.915802][ T1559] ? cgroup_rstat_updated+0x30/0x360 [ 83.921687][ T1559] ? _raw_spin_lock_irq+0x95/0xf0 [ 83.927996][ T1559] ? __this_cpu_preempt_check+0x13/0x20 [ 83.933978][ T1559] ? __count_memcg_events+0xad/0x120 [ 83.939926][ T1559] shrink_lruvec+0x1297/0x3a40 [ 83.945412][ T1559] ? down_read_trylock+0x317/0x630 [ 83.951131][ T1559] ? mem_cgroup_shrink_node+0x550/0x550 [ 83.957242][ T1559] ? __kasan_check_write+0x14/0x20 [ 83.963042][ T1559] ? _raw_spin_lock+0x94/0xf0 [ 83.968071][ T1559] ? _raw_spin_trylock_bh+0x150/0x150 [ 83.974617][ T1559] ? cgroup_rstat_flush_locked+0xa29/0xa70 [ 83.981880][ T1559] ? inactive_is_low+0x160/0x2f0 [ 83.987747][ T1559] ? css_next_descendant_pre+0x1e1/0x210 [ 83.994396][ T1559] ? mem_cgroup_iter+0x465/0x6c0 [ 84.000055][ T1559] shrink_node+0x11ee/0x2a40 [ 84.005273][ T1559] ? push_rt_task+0x46f/0x5d0 [ 84.010760][ T1559] ? _raw_spin_unlock+0x4d/0x70 [ 84.016484][ T1559] ? allow_direct_reclaim+0x370/0x370 [ 84.021853][ T1559] ? cgroup_freezing+0x86/0xb0 [ 84.026787][ T1559] do_try_to_free_pages+0x5a7/0x1580 [ 84.032166][ T1559] ? try_to_free_pages+0xc50/0xc50 [ 84.037616][ T1559] ? propagate_protected_usage+0x84/0x250 [ 84.044031][ T1559] try_to_free_mem_cgroup_pages+0x261/0x610 [ 84.050247][ T1559] ? shrink_lruvec+0x3a40/0x3a40 [ 84.055706][ T1559] ? mutex_unlock+0x8f/0x230 [ 84.060834][ T1559] ? __kasan_check_read+0x11/0x20 [ 84.066167][ T1559] ? page_counter_set_max+0x65/0x140 [ 84.071739][ T1559] mem_cgroup_resize_max+0x309/0x3e0 [ 84.077326][ T1559] mem_cgroup_write+0x1ed/0x230 [ 84.082806][ T1559] ? mem_cgroup_reset+0x130/0x130 [ 84.087928][ T1559] ? __kasan_check_write+0x14/0x20 [ 84.093693][ T1559] ? _copy_from_iter+0x4a4/0x10a0 [ 84.099134][ T1559] ? mem_cgroup_reset+0x130/0x130 [ 84.104485][ T1559] cgroup_file_write+0x294/0x560 [ 84.109600][ T1559] ? cgroup_seqfile_stop+0xc0/0xc0 [ 84.114970][ T1559] ? mutex_lock+0x9b/0x1c0 [ 84.120359][ T1559] ? wait_for_completion_killable_timeout+0x10/0x10 [ 84.127390][ T1559] ? __kasan_check_write+0x14/0x20 [ 84.132967][ T1559] ? cgroup_seqfile_stop+0xc0/0xc0 [ 84.138856][ T1559] kernfs_fop_write_iter+0x2bd/0x400 [ 84.144965][ T1559] vfs_write+0x831/0xfd0 [ 84.149626][ T1559] ? file_end_write+0x1b0/0x1b0 [ 84.154567][ T1559] ? wait_for_completion_killable_timeout+0x10/0x10 [ 84.161651][ T1559] ? __fget_files+0x2e1/0x340 [ 84.167253][ T1559] ? __fdget_pos+0x2d2/0x380 [ 84.172529][ T1559] ? ksys_write+0x70/0x260 [ 84.177782][ T1559] ksys_write+0x14a/0x260 [ 84.182594][ T1559] ? __ia32_sys_read+0x90/0x90 [ 84.187807][ T1559] ? __kasan_check_write+0x14/0x20 [ 84.193482][ T1559] ? switch_fpu_return+0x15d/0x2c0 [ 84.198992][ T1559] __x64_sys_write+0x7b/0x90 [ 84.204177][ T1559] x64_sys_call+0x8ef/0x9a0 [ 84.209435][ T1559] do_syscall_64+0x4c/0xa0 [ 84.214938][ T1559] ? clear_bhb_loop+0x50/0xa0 [ 84.220126][ T1559] ? clear_bhb_loop+0x50/0xa0 [ 84.226340][ T1559] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 84.234687][ T1559] RIP: 0033:0x7f3c297cb0d9 [ 84.239708][ T1559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.261013][ T1559] RSP: 002b:00007f3c28203028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 84.270714][ T1559] RAX: ffffffffffffffda RBX: 00007f3c29a53090 RCX: 00007f3c297cb0d9 [ 84.278677][ T1559] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000006 [ 84.286632][ T1559] RBP: 00007f3c29862024 R08: 0000000000000000 R09: 0000000000000000 [ 84.296009][ T1559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.304680][ T1559] R13: 00007f3c29a53128 R14: 00007f3c29a53090 R15: 00007ffd8cf228a8 [ 84.313592][ T1559] [ 84.316699][ T1559] [ 84.319651][ T1559] Allocated by task 1234: [ 84.325217][ T1559] __kasan_kmalloc+0xd4/0x100 [ 84.330914][ T1559] kmem_cache_alloc_trace+0x119/0x270 [ 84.336375][ T1559] alloc_super+0x5e/0x840 [ 84.340918][ T1559] sget+0x1e2/0x4c0 [ 84.345207][ T1559] mount_bdev+0xec/0x3c0 [ 84.349954][ T1559] f2fs_mount+0x34/0x40 [ 84.354362][ T1559] legacy_get_tree+0xed/0x190 [ 84.359134][ T1559] vfs_get_tree+0x89/0x260 [ 84.364532][ T1559] do_new_mount+0x251/0xb40 [ 84.369245][ T1559] path_mount+0x640/0xff0 [ 84.373737][ T1559] __se_sys_mount+0x320/0x390 [ 84.378641][ T1559] __x64_sys_mount+0xbf/0xd0 [ 84.383631][ T1559] x64_sys_call+0x6bf/0x9a0 [ 84.388251][ T1559] do_syscall_64+0x4c/0xa0 [ 84.392672][ T1559] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 84.399593][ T1559] [ 84.401911][ T1559] Freed by task 368: [ 84.406859][ T1559] kasan_set_track+0x4a/0x70 [ 84.412569][ T1559] kasan_set_free_info+0x23/0x40 [ 84.418015][ T1559] ____kasan_slab_free+0x125/0x160 [ 84.423960][ T1559] __kasan_slab_free+0x11/0x20 [ 84.428724][ T1559] slab_free_freelist_hook+0xc2/0x190 [ 84.434612][ T1559] kfree+0xc4/0x270 [ 84.439012][ T1559] destroy_super_work+0x40/0x50 [ 84.443869][ T1559] process_one_work+0x6c8/0xbb0 [ 84.449151][ T1559] worker_thread+0xaa0/0x1250 [ 84.454008][ T1559] kthread+0x3f5/0x4f0 [ 84.458171][ T1559] ret_from_fork+0x1f/0x30 [ 84.462718][ T1559] [ 84.465297][ T1559] Last potentially related work creation: [ 84.471258][ T1559] kasan_save_stack+0x3a/0x60 [ 84.476539][ T1559] __kasan_record_aux_stack+0xd2/0x100 [ 84.481993][ T1559] kasan_record_aux_stack_noalloc+0xb/0x10 [ 84.488139][ T1559] insert_work+0x51/0x310 [ 84.492637][ T1559] __queue_work+0x8e1/0xc60 [ 84.497689][ T1559] queue_work_on+0xde/0x150 [ 84.502408][ T1559] destroy_super_rcu+0xd1/0xe0 [ 84.507164][ T1559] rcu_do_batch+0x4c1/0xbf0 [ 84.512011][ T1559] rcu_core+0x4a3/0xef0 [ 84.516164][ T1559] rcu_core_si+0x9/0x10 [ 84.520454][ T1559] handle_softirqs+0x250/0x560 [ 84.525202][ T1559] run_ksoftirqd+0x28/0x40 [ 84.529609][ T1559] smpboot_thread_fn+0x446/0x880 [ 84.534656][ T1559] kthread+0x3f5/0x4f0 [ 84.538852][ T1559] ret_from_fork+0x1f/0x30 [ 84.543344][ T1559] [ 84.545693][ T1559] Second to last potentially related work creation: [ 84.553757][ T1559] kasan_save_stack+0x3a/0x60 [ 84.558947][ T1559] __kasan_record_aux_stack+0xd2/0x100 [ 84.566787][ T1559] kasan_record_aux_stack_noalloc+0xb/0x10 [ 84.575436][ T1559] call_rcu+0x10b/0xf60 [ 84.579978][ T1559] __put_super+0x26b/0x2d0 [ 84.584974][ T1559] deactivate_locked_super+0xd4/0x100 [ 84.590837][ T1559] mount_bdev+0x2ab/0x3c0 [ 84.595446][ T1559] f2fs_mount+0x34/0x40 [ 84.599724][ T1559] legacy_get_tree+0xed/0x190 [ 84.605044][ T1559] vfs_get_tree+0x89/0x260 [ 84.610428][ T1559] do_new_mount+0x251/0xb40 [ 84.615228][ T1559] path_mount+0x640/0xff0 [ 84.619803][ T1559] __se_sys_mount+0x320/0x390 [ 84.624622][ T1559] __x64_sys_mount+0xbf/0xd0 [ 84.630237][ T1559] x64_sys_call+0x6bf/0x9a0 [ 84.635409][ T1559] do_syscall_64+0x4c/0xa0 [ 84.640074][ T1559] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 84.646152][ T1559] [ 84.648555][ T1559] The buggy address belongs to the object at ffff888128a98000 [ 84.648555][ T1559] which belongs to the cache kmalloc-2k of size 2048 [ 84.663087][ T1559] The buggy address is located 1136 bytes inside of [ 84.663087][ T1559] 2048-byte region [ffff888128a98000, ffff888128a98800) [ 84.677466][ T1559] The buggy address belongs to the page: [ 84.684215][ T1559] page:ffffea0004a2a600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x128a98 [ 84.695109][ T1559] head:ffffea0004a2a600 order:3 compound_mapcount:0 compound_pincount:0 [ 84.703813][ T1559] flags: 0x4000000000010200(slab|head|zone=1) [ 84.709983][ T1559] raw: 4000000000010200 0000000000000000 0000000300000001 ffff888100043200 [ 84.718982][ T1559] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 84.728821][ T1559] page dumped because: kasan: bad access detected [ 84.736266][ T1559] page_owner tracks the page as allocated [ 84.742579][ T1559] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 286, ts 22549897289, free_ts 0 [ 84.761766][ T1559] post_alloc_hook+0x192/0x1b0 [ 84.767107][ T1559] prep_new_page+0x1c/0x110 [ 84.772385][ T1559] get_page_from_freelist+0x2c3a/0x2cd0 [ 84.779034][ T1559] __alloc_pages+0x1a2/0x460 [ 84.784741][ T1559] new_slab+0xa0/0x4d0 [ 84.789311][ T1559] ___slab_alloc+0x3ac/0x840 [ 84.794380][ T1559] __slab_alloc+0x49/0x90 [ 84.798855][ T1559] __kmalloc_track_caller+0x169/0x2c0 [ 84.804641][ T1559] __alloc_skb+0x210/0x730 [ 84.809116][ T1559] inet6_ifinfo_notify+0x6e/0x110 [ 84.815535][ T1559] addrconf_notify+0xadd/0xe00 [ 84.820981][ T1559] raw_notifier_call_chain+0x90/0x100 [ 84.826861][ T1559] __dev_notify_flags+0x2f4/0x5b0 [ 84.832519][ T1559] dev_change_flags+0xe3/0x1a0 [ 84.837930][ T1559] do_setlink+0xc95/0x2970 [ 84.842692][ T1559] rtnl_newlink+0x1598/0x1900 [ 84.847602][ T1559] page_owner free stack trace missing [ 84.853340][ T1559] [ 84.855752][ T1559] Memory state around the buggy address: [ 84.861553][ T1559] ffff888128a98300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 84.869843][ T1559] ffff888128a98380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 84.878019][ T1559] >ffff888128a98400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 84.886850][ T1559] ^ [ 84.895625][ T1559] ffff888128a98480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 84.904025][ T1559] ffff888128a98500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 84.913254][ T1559] ================================================================== [ 84.922710][ T1559] Disabling lock debugging due to kernel taint [ 85.251757][ T1546] EXT4-fs warning (device loop4): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop4. [ 85.360230][ T309] usb 2-1: Using ep0 maxpacket: 8 [ 85.465229][ T1456] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 85.475563][ T309] usb 2-1: device descriptor read/all, error -71 [ 85.486923][ T1559] syz.2.365 (1559) used greatest stack depth: 19880 bytes left [ 85.895391][ T1456] usb 4-1: unable to get BOS descriptor or descriptor too short [ 85.975285][ T1456] usb 4-1: config 1 interface 0 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 624 [ 85.986019][ T1456] usb 4-1: config 1 interface 0 has no altsetting 0 [ 86.145215][ T1456] usb 4-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 86.154653][ T1456] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.163216][ T1456] usb 4-1: Product: syz [ 86.167932][ T1456] usb 4-1: Manufacturer: 湸指傕圬橉뜁蚁纍㮋创菇撋險ᅨ򦙼 [ 86.195358][ T1456] usb 4-1: can't set config #1, error -71 [ 86.203493][ T1456] usb 4-1: USB disconnect, device number 9